Nic0las

Tout s'est bien passé! (pas de difficultés de désinstallation et suppression...) Merci!

Dysfonctionnements actuels subsistants: J'ai l'impression que ceux qui restent n'apparaissent que depuis la session qui a eu un problème (avec le problème disque dû à utilisation de MBAM). Tel que: Un nouveau répertoire de fichiers avait été crée quand une partie du disque était devenue illisible, tous les liens ne se seront pas établis... Je compte à présent supprimer cette session vide, et en utiliser une nouvelle. Je pense qu'alors tout devrait marcher. ------ Et merci pour la réponse sur MyWaySA!

Le message d'erreur précis était celui marqué plus bas: "L'assistant d'installation n'a pas pu mettre à jour le composant système MSI." A cela suivait un lien vers le site de Symantec, le tout dans un cadre jaune... ------ Dans mon périple pour tenter de réinstaller, j'ai tenté diverses chose et ai abouti à installer la version d'essai de mon produit Norton, 2 générations plus tard (soit Norton Internet Security 2009). Normalement, la version d'essai dure 15 jours. Mais il m'a affiché à un moment ma clé d'activation de mon logiciel précédent (celui que j'ai désinstallé), et j'ai l'impression que les jours d'abonnement qui me restaient ont été ajoutés... (il m'affiche un total de jours restants à trois chiffres!) Bref, je me demande si cela est bien le cas et non un bug; si cela marche et si les abonnements norton sont effectivement compatibles inter-générations (ce que j'ignore), le problème antivirus est résolu... ------ Pourriez-vous me préciser ce qu'il y a nocif en le programme MyWaySA? (que vous m'aviez demandé de supprimer)

Etat de l'avancement: J'ai le setup! (ouf). Mais il m'embête lors de la réinstallation avec un certain "MSI" qui ne marche pas: "L'assistant d'installation n'a pas pu mettre à jour le composant système MSI." Ce qui bloque le lancement de l'installation.

Je lance HijackThis. Pour ce qui est de Norton, je vois en ce moment-même si c'est possible... Car il me faut retrouver le setup pour le réinstaller (achat en ligne). ÉTAPE 3 Réinstaller les produits Norton Sélectionnez le paragraphe correspondant le mieux à votre cas : * J'ai téléchargé le produit depuis Symantec Store, mais je n'ai plus le fichier d'installation 1 Rendez-vous sur la page Web Statut de la commande de Symantec Store. 2 Entrez votre numéro de commande et votre mot de passe pour vous connecter et vous obtiendrez les informations relatives à votre commande. Si vous ne connaissez pas votre numéro de commande et votre mot de passe, vous pouvez rechercher votre commande en utilisant votre adresse électronique. 3 Dans la zone récapitulative de la commande, cliquez sur Lancer le téléchargement. REMARQUE * Si vous avez acheté votre produit il y a plus de 60 jours, vous pouvez cliquer sur Acheter maintenant pour acheter le service de garantie de téléchargement et pour télécharger le produit de nouveau. * Si vous avez acheté votre produit il y a plus d'un an, vous ne pouvez plus le télécharger. Vous pouvez acheter une nouvelle version de votre produit à prix préférentiel en achetant une mise à niveau. Rendez-vous sur la page Mises à jour et Renouvellements puis choisissez votre produit et sa version pour consulter les options de mise à niveau. Joie. J'ai intérêt à retrouver où j'ai pu l'avoir enregistré, en espérant je l'ai fait...

J'ai lancé RSIT, mais à chaque fois il ne me donne que un rapport LOG, et pas le rapport INFO... Voici tout de même le dernier rapport LOG: Logfile of random's system information tool 1.06 (written by random/random) Run by Gimineh at 2009-05-30 17:33:06 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 22 GB (15%) free of 149 GB Total RAM: 1022 MB (54% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:33:08, on 30/05/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Brmfrmps.exe C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Xfire\Xfire.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Gimineh.ANTOINE\Bureau\RSIT.exe C:\Program Files\Trend Micro\HijackThis\Gimineh.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DR R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.fr/myway R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing) O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.0\NppBho.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O3 - Toolbar: Afficher Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.0\UIBHO.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - S-1-5-18 Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (User 'SYSTEM') O4 - .DEFAULT Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/...can8/oscan8.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://univ-r.u-strasbg.fr/TSWeb/msrdp.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {EB6D7E70-AAA9-40D9-BA05-F214089F2275} (Vitalize Class) - http://www.clickteam.com/vitalize3/vitalize.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{EBE77BBF-3EB3-43C6-8504-EE8278861B09}: NameServer = 194.117.200.10,194.117.200.15 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Groove Games Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Groove Games Shared\Service\ggameslicsvc.exe (file missing) O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe -- End of file - 11711 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\1-Click Maintenance.job C:\WINDOWS\tasks\Norton Internet Security - Analyse système complète - Danielle.job C:\WINDOWS\tasks\Rappel d'abonnement 1 auprès de l'ISP.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}] C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.0\NppBho.dll [2006-09-05 93400] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}] RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-01-12 304736] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}] DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2005-05-31 118844] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 184423] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Sign-in Helper - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-04-17 323904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2009-01-16 737776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {EF99BD32-C1FB-11D2-892F-0090271D4F88} - [] {90222687-F593-4738-B738-FBEE9C7B26DF} - Afficher Norton Toolbar - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.0\UIBHO.dll [2006-09-05 510152] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-05-12 6729728] "IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2005-04-25 139264] "ISUSPM Startup"=C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 221184] "ISUSScheduler"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2004-07-27 81920] "SSBkgdUpdate"=C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2003-10-14 155648] "nwiz"=nwiz.exe /install [] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-05-12 86016] "dla"=C:\WINDOWS\system32\dla\tfswctrl.exe [2005-05-31 122941] "ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2006-09-03 84640] "osCheck"=C:\Program Files\Norton Internet Security\osCheck.exe [2006-09-05 26248] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2005-08-31 98304] "COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2009-05-24 1794320] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE [2003-06-18 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper] C:\WINDOWS\system32\CTHELPER.EXE [2008-06-27 19456] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe [2005-01-27 86016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [2004-03-10 40960] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [2004-03-10 57393] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\qttask.exe [2005-08-31 98304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt] C:\Program Files\Brother\Brmfl04b\BrStDvPt.exe [2004-05-25 49152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMware hqtray] C:\Program Files\VMware\VMware Player\hqtray.exe [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "DisableStatusMessages"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"= "HonorAutoRunSetting"= "NoDriveAutoRun"= "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger 7\msnmsgr.exe"="C:\Program Files\MSN Messenger 7\msnmsgr.exe:*:Enabled:MSN Messenger" "C:\Program Files\EA GAMES\Battlefield 2 Demo\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2 Demo\BF2.exe:*:Enabled:Battlefield 2" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire" "C:\Program Files\Nival Interactive\Blitzkrieg\Run\Game.exe"="C:\Program Files\Nival Interactive\Blitzkrieg\Run\Game.exe:*:Enabled:Game" "C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC" "C:\Program Files\Electronic Arts\Démo de Battlefield 2142\BF2142.exe"="C:\Program Files\Electronic Arts\Démo de Battlefield 2142\BF2142.exe:*:Enabled:Battlefield 2" "C:\Program Files\Warcraft III\war3.exe"="C:\Program Files\Warcraft III\war3.exe:*:Enabled:Warcraft III" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Sierra\FEARCombat\FEARMP.exe"="C:\Program Files\Sierra\FEARCombat\FEARMP.exe:*:Enabled:FEAR Combat" "C:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Gameforge4D\AirRivals_FR\Launcher.atm"="C:\Program Files\Gameforge4D\AirRivals_FR\Launcher.atm:Enabled:GameExe2" "C:\Program Files\Gameforge4D\AirRivals_FR\Res-Voip\SCVoIP.exe"="C:\Program Files\Gameforge4D\AirRivals_FR\Res-Voip\SCVoIP.exe:Enabled:GameVoIP" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e8f88f35-7544-11dd-8241-00123f72ae9e}] shell\AutoRun\command - M:\setup.exe shell\directx\command - M:\DirectX\dxsetup.exe shell\setup\command - M:\setup.exe ======List of files/folders created in the last 1 months====== 2009-05-30 17:04:46 ----D---- C:\Documents and Settings\Gimineh.ANTOINE\Application Data\Xfire 2009-05-27 17:27:04 ----D---- C:\rsit 2009-05-24 21:09:04 ----DC---- C:\Documents and Settings\All Users\Application Data\Comodo 2009-05-24 21:09:00 ----A---- C:\WINDOWS\system32\guard32.dll 2009-05-24 21:08:51 ----D---- C:\Program Files\COMODO 2009-05-23 17:49:19 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Adobe 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Apption Data\You've Got Pictures Screensaver 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Symantec 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Sun 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Jasc Software Inc 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Identities 2009-05-23 14:54:13 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Macromedia 2009-05-23 14:52:37 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Mozilla 2009-05-23 14:51:03 ----SHD---- C:\RECYCLER 2009-05-23 14:31:03 ----A---- C:\WINDOWS\OEWABLog.txt 2009-05-23 14:30:55 ----ASH---- C:\Documents and Settings\Gimineh.ANTOINE\Application Data\desktop.ini 2009-05-23 14:30:53 ----SD---- C:\Documents and Settings\Gimineh.ANTOINE\Application Data\Microsoft 2009-05-23 14:30:53 ----D---- C:\Documents and Settings\Gimineh.ANTOINE\Application Data\Creative 2009-05-23 14:24:29 ----DC---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2009-05-23 14:24:29 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-05-23 13:17:37 ----D---- C:\WINDOWS\temp 2009-05-22 17:27:44 ----A---- C:\WINDOWS\zip.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\SWXCACLS.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\SWSC.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\SWREG.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\sed.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\PEV.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\NIRCMD.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\grep.exe 2009-05-22 12:36:01 ----D---- C:\WINDOWS\ERDNT 2009-05-22 12:33:38 ----D---- C:\Qoobox 2009-05-21 17:08:22 ----D---- C:\Program Files\Uniblue 2009-05-21 17:02:12 ----DC---- C:\Documents and Settings\All Users\Application Data\SecTaskMan 2009-05-21 17:02:09 ----D---- C:\Program Files\Security Task Manager 2009-05-21 16:46:56 ----DC---- C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800} 2009-05-21 16:12:51 ----A---- C:\WINDOWS\ntbtlog.txt 2009-05-21 16:10:13 ----D---- C:\Program Files\Trend Micro 2009-05-21 15:45:57 ----HDC---- C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} 2009-05-21 13:58:32 ----D---- C:\WINDOWS\BDOSCAN8 2009-05-21 12:16:33 ----D---- C:\WINDOWS\system32\ime 2009-05-16 20:46:37 ----D---- C:\Program Files\Fichiers communs\Skype 2009-05-16 20:46:35 ----RD---- C:\Program Files\Skype 2009-04-29 23:19:22 ----A---- C:\WINDOWS\system32\xfcodec.dll ======List of files/folders modified in the last 1 months====== 2009-05-30 17:13:20 ----AD---- C:\Program Files 2009-05-30 17:10:29 ----D---- C:\WINDOWS\Prefetch 2009-05-30 17:10:12 ----D---- C:\Program Files\Mozilla Firefox 2009-05-30 16:01:37 ----SD---- C:\Program Files\Xfire 2009-05-30 13:50:35 ----D---- C:\WINDOWS\system32\CatRoot2 2009-05-30 13:50:24 ----A---- C:\WINDOWS\ModemLog_Conexant D850 56K V.9x DFVc Modem.txt 2009-05-30 12:28:57 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-05-27 22:47:38 ----D---- C:\WINDOWS\Debug 2009-05-26 19:03:04 ----A---- C:\WINDOWS\win.ini 2009-05-24 21:09:00 ----D---- C:\WINDOWS\system32\drivers 2009-05-24 21:09:00 ----D---- C:\WINDOWS\system32 2009-05-24 12:44:53 ----AC---- C:\WINDOWS\WD.INI 2009-05-24 00:02:54 ----D---- C:\WINDOWS\Minidump 2009-05-24 00:02:54 ----D---- C:\WINDOWS 2009-05-23 14:32:17 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft 2009-05-23 14:30:53 ----D---- C:\Documents and Settings 2009-05-23 13:11:51 ----A---- C:\WINDOWS\system.ini 2009-05-23 13:08:18 ----D---- C:\WINDOWS\system32\config 2009-05-23 13:06:04 ----D---- C:\WINDOWS\AppPatch 2009-05-23 13:06:01 ----D---- C:\Program Files\Fichiers communs 2009-05-22 20:08:29 ----D---- C:\WINDOWS\system32\FxsTmp 2009-05-21 22:26:52 ----D---- C:\WINDOWS\Help 2009-05-21 15:53:59 ----RSHD---- C:\WINDOWS\system32\dllcache 2009-05-21 15:25:10 ----SHD---- C:\System Volume Information 2009-05-21 15:25:10 ----D---- C:\WINDOWS\system32\Restore 2009-05-21 14:01:33 ----D---- C:\WINDOWS\security 2009-05-21 13:58:37 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-05-21 13:58:31 ----HD---- C:\WINDOWS\inf 2009-05-20 18:51:27 ----D---- C:\Program Files\Fichiers communs\Symantec Shared 2009-05-20 18:41:21 ----SHD---- C:\WINDOWS\Installer 2009-05-20 18:41:21 ----ADC---- C:\Config.Msi 2009-05-19 23:46:39 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion 2009-05-19 23:46:38 ----D---- C:\Documents and Settings\All Users\Application Data\Trymedia 2009-05-19 23:46:37 ----D---- C:\Documents and Settings\All Users\Application Data\The Game Equation 2009-05-19 23:46:34 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec 2009-05-16 20:46:37 ----D---- C:\Documents and Settings\All Users\Application Data\Skype 2009-05-16 15:34:15 ----D---- C:\Program Files\Common Files 2009-05-10 00:34:27 ----D---- C:\Program Files\Warcraft III 2009-05-07 09:16:29 ----A---- C:\WINDOWS\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968] R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2009-05-24 132640] R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2009-05-24 24096] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys [] R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576] R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720] R1 omci;OMCI WDM Device Driver; C:\WINDOWS\system32\DRIVERS\omci.sys [2002-11-08 17217] R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-11-02 56572] R1 SRTSP;SRTSP; C:\WINDOWS\System32\Drivers\SRTSP.SYS [2007-12-01 279088] R1 SRTSPX;SRTSPX; C:\WINDOWS\System32\Drivers\SRTSPX.SYS [2007-12-01 43696] R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2005-05-13 5627] R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2005-05-13 23545] R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2006-09-02 186048] R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-04-26 278984] R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\system32\drivers\CdaC15BA.SYS [] R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2005-04-21 40544] R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-04-26 25416] R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-09 11043] R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys [] R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2005-05-31 25725] R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2005-05-31 34845] R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2005-05-31 4125] R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2005-05-31 2273] R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2005-05-31 86876] R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2005-05-31 15069] R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2005-05-31 6365] R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2005-05-31 98716] R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2005-05-31 100605] R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 COMMONFX.SYS;COMMONFX.SYS; C:\WINDOWS\System32\drivers\COMMONFX.SYS [2008-06-27 99352] R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\System32\drivers\ctac32k.sys [2008-07-07 511000] R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2008-07-07 532376] R3 CTAUDFX.SYS;CTAUDFX.SYS; C:\WINDOWS\System32\drivers\CTAUDFX.SYS [2008-06-27 555032] R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\System32\drivers\ctprxy2k.sys [2008-07-07 14360] R3 CTSBLFX.SYS;CTSBLFX.SYS; C:\WINDOWS\System32\drivers\CTSBLFX.SYS [2008-06-27 566296] R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\drivers\ctsfm2k.sys [2008-07-07 157208] R3 E100B;Intel® PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-10-14 155648] R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\System32\drivers\emupia2k.sys [2008-07-07 92696] R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\System32\drivers\ha10kx2k.sys [2008-07-07 797720] R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-11-15 25280] R3 hap16v2k;Creative P16V HAL Driver; C:\WINDOWS\System32\drivers\hap16v2k.sys [2008-07-07 162840] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2003-11-17 1042432] R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2003-11-17 212224] R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys [2008-07-28 116736] R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20090520.003\NAVENG.SYS [] R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20090520.003\NAVEX15.SYS [] R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-11-12 2738400] R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2008-07-07 127512] R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2006-09-02 11968] R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS [] R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2006-09-02 144832] R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2006-09-02 39104] R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090519.001\SymIDSCo.sys [] R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2006-09-02 33216] R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2006-09-02 26432] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2003-11-17 680704] S3 ankkga8u;ankkga8u; C:\WINDOWS\system32\drivers\ankkga8u.sys [] S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\System32\Drivers\BrScnUsb.sys [2003-12-19 15263] S3 BrSerIf;Brother MFC Serial Port Interface WDM Driver; C:\WINDOWS\System32\Drivers\BrSerIf.sys [2004-06-12 51712] S3 BrUsbSer;Brother MFC USB Serial WDM Driver; C:\WINDOWS\System32\Drivers\BrUsbSer.sys [2004-01-10 11648] S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys [] S3 catchme;catchme; \??\C:\DOCUME~1\Gimineh\LOCALS~1\Temp\catchme.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 COMMONFX;COMMONFX; C:\WINDOWS\system32\drivers\COMMONFX.SYS [2008-06-27 99352] S3 CTAUDFX;CTAUDFX; C:\WINDOWS\system32\drivers\CTAUDFX.SYS [2008-06-27 555032] S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\System32\drivers\ctdvda2k.sys [2008-07-07 347080] S3 CTERFXFX.SYS;CTERFXFX.SYS; C:\WINDOWS\System32\drivers\CTERFXFX.SYS [2008-06-27 100888] S3 CTERFXFX;CTERFXFX; C:\WINDOWS\system32\drivers\CTERFXFX.SYS [2008-06-27 100888] S3 CTSBLFX;CTSBLFX; C:\WINDOWS\system32\drivers\CTSBLFX.SYS [2008-06-27 566296] S3 hap17v2k;Creative P17V HAL Driver; C:\WINDOWS\system32\drivers\hap17v2k.sys [2008-07-07 189464] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys [] S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 ovt519;Eye Toy; C:\WINDOWS\System32\Drivers\ov519vid.sys [2003-10-15 174530] S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys [] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys [] S3 SRTSPL;SRTSPL; C:\WINDOWS\System32\Drivers\SRTSPL.SYS [2007-12-01 317616] S3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800] S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys [] S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 agp440;Filtre de bus AGP Intel; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368] S4 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928] S4 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752] S4 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008] S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952] S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-14 5504] S4 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960] S4 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 brmfrmps;Brother Popup Suspend service for Resource manager; C:\WINDOWS\system32\Brmfrmps.exe [2003-05-05 65536] R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\system32\drivers\CDAC11BA.EXE [2005-10-23 54784] R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2006-09-03 105632] R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-05-24 692496] R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-13 44032] R2 IAANTMon;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe [2005-04-25 86142] R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120] R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2006-09-08 198336] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-04-10 75064] R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-04-10 189472] R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136] S2 Brother XP spl Service;BrSplService; C:\WINDOWS\system32\brsvc01a.exe [2002-04-12 57344] S2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2006-09-03 84640] S2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2006-09-03 84640] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800] S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-05-12 127042] S2 SymAppCore;Symantec AppCore Service; C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe [2006-09-01 46736] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 comHost;COM Host; C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe [2006-09-03 48272] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864] S3 Groove Games Licensing Service;Groove Games Licensing Service; C:\Program Files\Fichiers communs\Groove Games Shared\Service\ggameslicsvc.exe [] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376] S3 ISPwdSvc;Validation de mot de passe Symantec IS; C:\Program Files\Norton Internet Security\isPwdSvc.exe [2006-09-05 79496] S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2006-09-08 2528960] S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-11-07 1252232] S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880] -----------------EOF-----------------

MyWaySA supprimé. Ah, et j'ai parlé trop vite, Windows Installer cause encore des soucis... (j'ai tenté la désinstallation aussi, et je reçois encore des alertes pour skype sur une session) Le logiciel Norton est bien entendu une version achetée (il ne font pas de logiciels gratuits il me semble). Et j'en ai pour encore plusieurs mois de licence...

Merci pour le courage que tu as dû prendre en main pour lire tout cela! Pour ce qui est des symptômes: - l'antivirus est toujours KO - à présent le logiciel skype ne marche plus non plus (il marchait ce week-end dernier) Quand je le lance, j'ai une fenêtre "windows installer" qui s'ouvre, et qui n'aboutit pas. J'ai alors tenté de réinstaller le logiciel. Mais à nouveau, à l'installation, il y a un souci avec windows installer qui ne fonctionnerait pas! (d'après les alertes reçues) ----- J'ai tenté de désinstaller MyWay Search Assistant. Mais je ne peux pas, à cause de Windows Installer qui fait une alerte... (marche pas) J'ai quand même continué, lancé HijackThis, fait un scan, vu les trois entrées, lancé "Fix Checked". Les 3 entrées ont été supprimées. ----- --> Skype remarche. (plus de problème avec windows installer en ce moment) --> Antivirus toujours amorphe.

Voilà, c'est fait! LOG Logfile of random's system information tool 1.06 (written by random/random) Run by Gimineh at 2009-05-27 17:57:04 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 22 GB (15%) free of 149 GB Total RAM: 1022 MB (54% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:57:37, on 27/05/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\brsvc01a.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\Brmfrmps.exe C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\svchost.exe C:\Documents and Settings\Gimineh.NICO\Bureau\RSIT.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\Gimineh.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DR R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.fr/myway R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.0\NppBho.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O3 - Toolbar: Afficher Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.0\UIBHO.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - S-1-5-18 Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (User 'SYSTEM') O4 - .DEFAULT Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/...can8/oscan8.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://univ-r.u-strasbg.fr/TSWeb/msrdp.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {EB6D7E70-AAA9-40D9-BA05-F214089F2275} (Vitalize Class) - http://www.clickteam.com/vitalize3/vitalize.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{EBE77BBF-3EB3-43C6-8504-EE8278861B09}: NameServer = 194.117.200.10,194.117.200.15 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.23,85.255.112.126 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Groove Games Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Groove Games Shared\Service\ggameslicsvc.exe (file missing) O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe -- End of file - 11789 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\1-Click Maintenance.job C:\WINDOWS\tasks\Norton Internet Security - Analyse système complète - Danielle.job C:\WINDOWS\tasks\Rappel d'abonnement 1 auprès de l'ISP.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}] C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.0\NppBho.dll [2006-09-05 93400] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}] RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-01-12 304736] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D25F921-B9FE-4682-BF72-8AB8210D6D75}] C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll [2005-06-14 86016] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}] DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2005-05-31 118844] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 184423] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Sign-in Helper - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-04-17 323904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2009-01-16 737776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {EF99BD32-C1FB-11D2-892F-0090271D4F88} - [] {90222687-F593-4738-B738-FBEE9C7B26DF} - Afficher Norton Toolbar - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.0\UIBHO.dll [2006-09-05 510152] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-05-12 6729728] "IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2005-04-25 139264] "ISUSPM Startup"=C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 221184] "ISUSScheduler"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2004-07-27 81920] "SSBkgdUpdate"=C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2003-10-14 155648] "nwiz"=nwiz.exe /install [] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-05-12 86016] "dla"=C:\WINDOWS\system32\dla\tfswctrl.exe [2005-05-31 122941] "ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2006-09-03 84640] "osCheck"=C:\Program Files\Norton Internet Security\osCheck.exe [2006-09-05 26248] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2005-08-31 98304] "COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2009-05-24 1794320] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE [2003-06-18 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper] C:\WINDOWS\system32\CTHELPER.EXE [2008-06-27 19456] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe [2005-01-27 86016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher] C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe [2005-02-23 53248] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [2004-03-10 40960] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [2004-03-10 57393] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\qttask.exe [2005-08-31 98304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt] C:\Program Files\Brother\Brmfl04b\BrStDvPt.exe [2004-05-25 49152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMware hqtray] C:\Program Files\VMware\VMware Player\hqtray.exe [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "DisableStatusMessages"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"= "HonorAutoRunSetting"= "NoDriveAutoRun"= "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger 7\msnmsgr.exe"="C:\Program Files\MSN Messenger 7\msnmsgr.exe:*:Enabled:MSN Messenger" "C:\Program Files\EA GAMES\Battlefield 2 Demo\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2 Demo\BF2.exe:*:Enabled:Battlefield 2" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire" "C:\Program Files\Nival Interactive\Blitzkrieg\Run\Game.exe"="C:\Program Files\Nival Interactive\Blitzkrieg\Run\Game.exe:*:Enabled:Game" "C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC" "C:\Program Files\Electronic Arts\Démo de Battlefield 2142\BF2142.exe"="C:\Program Files\Electronic Arts\Démo de Battlefield 2142\BF2142.exe:*:Enabled:Battlefield 2" "C:\Program Files\Warcraft III\war3.exe"="C:\Program Files\Warcraft III\war3.exe:*:Enabled:Warcraft III" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Sierra\FEARCombat\FEARMP.exe"="C:\Program Files\Sierra\FEARCombat\FEARMP.exe:*:Enabled:FEAR Combat" "C:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Gameforge4D\AirRivals_FR\Launcher.atm"="C:\Program Files\Gameforge4D\AirRivals_FR\Launcher.atm:Enabled:GameExe2" "C:\Program Files\Gameforge4D\AirRivals_FR\Res-Voip\SCVoIP.exe"="C:\Program Files\Gameforge4D\AirRivals_FR\Res-Voip\SCVoIP.exe:Enabled:GameVoIP" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" ======List of files/folders created in the last 1 months====== 2009-05-27 17:27:04 ----D---- C:\rsit 2009-05-24 21:09:04 ----DC---- C:\Documents and Settings\All Users\Application Data\Comodo 2009-05-24 21:09:00 ----A---- C:\WINDOWS\system32\guard32.dll 2009-05-24 21:08:51 ----D---- C:\Program Files\COMODO 2009-05-23 17:49:19 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Adobe 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Apption Data\You've Got Pictures Screensaver 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Symantec 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Sun 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Jasc Software Inc 2009-05-23 17:49:17 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Identities 2009-05-23 14:54:13 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Macromedia 2009-05-23 14:52:37 ----D---- C:\Documents and Settings\Gimineh.NICO\Application Data\Mozilla 2009-05-23 14:51:03 ----SHD---- C:\RECYCLER 2009-05-23 14:31:03 ----A---- C:\WINDOWS\OEWABLog.txt 2009-05-23 14:30:55 ----ASH---- C:\Documents and Settings\Gimineh.ANTOINE\Application Data\desktop.ini 2009-05-23 14:30:53 ----SD---- C:\Documents and Settings\Gimineh.ANTOINE\Application Data\Microsoft 2009-05-23 14:30:53 ----D---- C:\Documents and Settings\Gimineh.ANTOINE\Application Data\Creative 2009-05-23 14:24:29 ----DC---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2009-05-23 14:24:29 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-05-23 13:17:37 ----D---- C:\WINDOWS\temp 2009-05-22 17:27:44 ----A---- C:\WINDOWS\zip.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\SWXCACLS.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\SWSC.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\SWREG.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\sed.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\PEV.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\NIRCMD.exe 2009-05-22 17:27:44 ----A---- C:\WINDOWS\grep.exe 2009-05-22 12:36:01 ----D---- C:\WINDOWS\ERDNT 2009-05-22 12:33:38 ----D---- C:\Qoobox 2009-05-21 17:08:22 ----D---- C:\Program Files\Uniblue 2009-05-21 17:02:12 ----DC---- C:\Documents and Settings\All Users\Application Data\SecTaskMan 2009-05-21 17:02:09 ----D---- C:\Program Files\Security Task Manager 2009-05-21 16:46:56 ----DC---- C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800} 2009-05-21 16:12:51 ----A---- C:\WINDOWS\ntbtlog.txt 2009-05-21 16:10:13 ----D---- C:\Program Files\Trend Micro 2009-05-21 15:45:57 ----HDC---- C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} 2009-05-21 13:58:32 ----D---- C:\WINDOWS\BDOSCAN8 2009-05-21 12:16:33 ----D---- C:\WINDOWS\system32\ime 2009-05-16 20:46:37 ----D---- C:\Program Files\Fichiers communs\Skype 2009-05-16 20:46:35 ----RD---- C:\Program Files\Skype 2009-04-29 23:19:22 ----A---- C:\WINDOWS\system32\xfcodec.dll ======List of files/folders modified in the last 1 months====== 2009-05-27 17:26:24 ----D---- C:\Program Files\Mozilla Firefox 2009-05-27 17:25:13 ----D---- C:\WINDOWS\Prefetch 2009-05-27 16:53:09 ----D---- C:\WINDOWS\system32\CatRoot2 2009-05-27 16:52:54 ----A---- C:\WINDOWS\ModemLog_Conexant D850 56K V.9x DFVc Modem.txt 2009-05-27 15:10:15 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-05-26 19:03:04 ----A---- C:\WINDOWS\win.ini 2009-05-24 21:09:00 ----D---- C:\WINDOWS\system32\drivers 2009-05-24 21:09:00 ----D---- C:\WINDOWS\system32 2009-05-24 21:08:51 ----AD---- C:\Program Files 2009-05-24 12:44:53 ----AC---- C:\WINDOWS\WD.INI 2009-05-24 00:02:54 ----D---- C:\WINDOWS 2009-05-23 14:32:17 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft 2009-05-23 14:30:53 ----D---- C:\Documents and Settings 2009-05-23 13:11:51 ----A---- C:\WINDOWS\system.ini 2009-05-23 13:08:18 ----D---- C:\WINDOWS\system32\config 2009-05-23 13:06:04 ----D---- C:\WINDOWS\AppPatch 2009-05-23 13:06:01 ----D---- C:\Program Files\Fichiers communs 2009-05-22 20:08:29 ----D---- C:\WINDOWS\system32\FxsTmp 2009-05-21 22:26:52 ----D---- C:\WINDOWS\Help 2009-05-21 15:53:59 ----RSHD---- C:\WINDOWS\system32\dllcache 2009-05-21 15:25:10 ----SHD---- C:\System Volume Information 2009-05-21 15:25:10 ----D---- C:\WINDOWS\system32\Restore 2009-05-21 14:01:33 ----D---- C:\WINDOWS\security 2009-05-21 13:58:37 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-05-21 13:58:31 ----HD---- C:\WINDOWS\inf 2009-05-21 01:22:11 ----SD---- C:\Program Files\Xfire 2009-05-20 18:51:27 ----D---- C:\Program Files\Fichiers communs\Symantec Shared 2009-05-20 18:41:21 ----SHD---- C:\WINDOWS\Installer 2009-05-20 18:41:21 ----ADC---- C:\Config.Msi 2009-05-19 23:46:39 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion 2009-05-19 23:46:38 ----D---- C:\Documents and Settings\All Users\Application Data\Trymedia 2009-05-19 23:46:34 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec 2009-05-16 20:46:37 ----D---- C:\Documents and Settings\All Users\Application Data\Skype 2009-05-16 15:34:15 ----D---- C:\Program Files\Common Files 2009-05-10 15:02:30 ----D---- C:\WINDOWS\Minidump 2009-05-10 00:34:27 ----D---- C:\Program Files\Warcraft III 2009-05-07 09:16:29 ----A---- C:\WINDOWS\system32\MRT.exe 2009-04-29 03:32:26 ----A---- C:\WINDOWS\system32\CmdLineExt.dll ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968] R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2009-05-24 132640] R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2009-05-24 24096] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys [] R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576] R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720] R1 omci;OMCI WDM Device Driver; C:\WINDOWS\system32\DRIVERS\omci.sys [2002-11-08 17217] R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-11-02 56572] R1 SRTSP;SRTSP; C:\WINDOWS\System32\Drivers\SRTSP.SYS [2007-12-01 279088] R1 SRTSPX;SRTSPX; C:\WINDOWS\System32\Drivers\SRTSPX.SYS [2007-12-01 43696] R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2005-05-13 5627] R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2005-05-13 23545] R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2006-09-02 186048] R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-04-26 278984] R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\system32\drivers\CdaC15BA.SYS [] R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2005-04-21 40544] R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-04-26 25416] R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-09 11043] R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys [] R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2005-05-31 25725] R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2005-05-31 34845] R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2005-05-31 4125] R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2005-05-31 2273] R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2005-05-31 86876] R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2005-05-31 15069] R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2005-05-31 6365] R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2005-05-31 98716] R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2005-05-31 100605] R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 COMMONFX.SYS;COMMONFX.SYS; C:\WINDOWS\System32\drivers\COMMONFX.SYS [2008-06-27 99352] R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\System32\drivers\ctac32k.sys [2008-07-07 511000] R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2008-07-07 532376] R3 CTAUDFX.SYS;CTAUDFX.SYS; C:\WINDOWS\System32\drivers\CTAUDFX.SYS [2008-06-27 555032] R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\System32\drivers\ctprxy2k.sys [2008-07-07 14360] R3 CTSBLFX.SYS;CTSBLFX.SYS; C:\WINDOWS\System32\drivers\CTSBLFX.SYS [2008-06-27 566296] R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\drivers\ctsfm2k.sys [2008-07-07 157208] R3 E100B;Intel® PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-10-14 155648] R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\System32\drivers\emupia2k.sys [2008-07-07 92696] R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\System32\drivers\ha10kx2k.sys [2008-07-07 797720] R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-11-15 25280] R3 hap16v2k;Creative P16V HAL Driver; C:\WINDOWS\System32\drivers\hap16v2k.sys [2008-07-07 162840] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2003-11-17 1042432] R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2003-11-17 212224] R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys [2008-07-28 116736] R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20090520.003\NAVENG.SYS [] R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20090520.003\NAVEX15.SYS [] R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-11-12 2738400] R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2008-07-07 127512] R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2006-09-02 11968] R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS [] R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2006-09-02 144832] R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2006-09-02 39104] R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090519.001\SymIDSCo.sys [] R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2006-09-02 33216] R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2006-09-02 26432] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2003-11-17 680704] S3 aoozbtvw;aoozbtvw; C:\WINDOWS\system32\drivers\aoozbtvw.sys [] S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\System32\Drivers\BrScnUsb.sys [2003-12-19 15263] S3 BrSerIf;Brother MFC Serial Port Interface WDM Driver; C:\WINDOWS\System32\Drivers\BrSerIf.sys [2004-06-12 51712] S3 BrUsbSer;Brother MFC USB Serial WDM Driver; C:\WINDOWS\System32\Drivers\BrUsbSer.sys [2004-01-10 11648] S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys [] S3 catchme;catchme; \??\C:\DOCUME~1\Gimineh\LOCALS~1\Temp\catchme.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 COMMONFX;COMMONFX; C:\WINDOWS\system32\drivers\COMMONFX.SYS [2008-06-27 99352] S3 CTAUDFX;CTAUDFX; C:\WINDOWS\system32\drivers\CTAUDFX.SYS [2008-06-27 555032] S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\System32\drivers\ctdvda2k.sys [2008-07-07 347080] S3 CTERFXFX.SYS;CTERFXFX.SYS; C:\WINDOWS\System32\drivers\CTERFXFX.SYS [2008-06-27 100888] S3 CTERFXFX;CTERFXFX; C:\WINDOWS\system32\drivers\CTERFXFX.SYS [2008-06-27 100888] S3 CTSBLFX;CTSBLFX; C:\WINDOWS\system32\drivers\CTSBLFX.SYS [2008-06-27 566296] S3 hap17v2k;Creative P17V HAL Driver; C:\WINDOWS\system32\drivers\hap17v2k.sys [2008-07-07 189464] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys [] S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 ovt519;Eye Toy; C:\WINDOWS\System32\Drivers\ov519vid.sys [2003-10-15 174530] S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys [] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys [] S3 SRTSPL;SRTSPL; C:\WINDOWS\System32\Drivers\SRTSPL.SYS [2007-12-01 317616] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800] S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys [] S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 agp440;Filtre de bus AGP Intel; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368] S4 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928] S4 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752] S4 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008] S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952] S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-14 5504] S4 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960] S4 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 brmfrmps;Brother Popup Suspend service for Resource manager; C:\WINDOWS\system32\Brmfrmps.exe [2003-05-05 65536] R2 Brother XP spl Service;BrSplService; C:\WINDOWS\system32\brsvc01a.exe [2002-04-12 57344] R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\system32\drivers\CDAC11BA.EXE [2005-10-23 54784] R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2006-09-03 105632] R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-05-24 692496] R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-13 44032] R2 IAANTMon;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe [2005-04-25 86142] R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120] R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2006-09-08 198336] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-04-10 75064] R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-04-10 189472] R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] S2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2006-09-03 84640] S2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2006-09-03 84640] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800] S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-05-12 127042] S2 SymAppCore;Symantec AppCore Service; C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe [2006-09-01 46736] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 comHost;COM Host; C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe [2006-09-03 48272] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864] S3 Groove Games Licensing Service;Groove Games Licensing Service; C:\Program Files\Fichiers communs\Groove Games Shared\Service\ggameslicsvc.exe [] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376] S3 ISPwdSvc;Validation de mot de passe Symantec IS; C:\Program Files\Norton Internet Security\isPwdSvc.exe [2006-09-05 79496] S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2006-09-08 2528960] S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-11-07 1252232] S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2008-06-07 306432] S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136] S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880] -----------------EOF----------------- INFO info.txt logfile of random's system information tool 1.06 2009-05-27 17:57:43 ======Uninstall list====== "Glest 1.2.2"-->"C:\Program Files\Glest_1.2.2\unins000.exe" -->"C:\Program Files\Creative\SBAudigy2ZS\Program\Ctzapxx.EXE" /W /U /S /L:FRN -->C:\PROGRA~1\CLUB-I~1\DRCLUB~1\Uninstall.exe TONLFR -->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205} -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6} -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382} -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629} -->MsiExec /X{45235788-142C-44BE-8A4D-DDE9A84492E5} -->MsiExec.exe /I{8A42F680-2DD6-11D4-9A8C-0040F6982C20} -->MsiExec.exe /I{A2529672-574A-4A99-86A5-C1770A0E31FE} -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{169F8893-C1C5-4847-972C-EA1E008112AC}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{169F8893-C1C5-4847-972C-EA1E008112AC}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{236FADD8-58FD-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{236FADD8-58FD-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDDF96A-BC34-4D72-9ABA-E1FFF0C39977}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-00E018013273}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-00E018013273}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{72A810B1-EE62-455A-A086-E1C9FEDE7F29}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{72A810B1-EE62-455A-A086-E1C9FEDE7F29}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-9C337476D05D}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-9C337476D05D}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9154ED7C-926E-49CC-B677-0CF3C5267457}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9154ED7C-926E-49CC-B677-0CF3C5267457}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A4D2983-4662-4387-BE3D-4CFC2FA9C100}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A4D2983-4662-4387-BE3D-4CFC2FA9C100}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC157741-3285-4D6A-B934-9174587A3493}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC157741-3285-4D6A-B934-9174587A3493}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3549608-69D3-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3549608-69D3-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EE6699B3-E5AD-4E59-8F2B-207DF630670C}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EE6699B3-E5AD-4E59-8F2B-207DF630670C}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD851F7E-F887-405D-9E1C-488811113EF3}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD851F7E-F887-405D-9E1C-488811113EF3}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x40c -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Reader 8.1.4 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003} Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log AirRivals_FR 1.0.0.1-->"C:\Program Files\Gameforge4D\AirRivals_FR\unins000.exe" Anarchy Online Classic Edition-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF443E9E-AF54-42A5-85CE-20B4DEDCAFDA}\setup.exe" -l0x9 UNINSTALL AppCore-->MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe ARTEuro-->MsiExec.exe /I{1D3C662A-F6C6-4767-A788-7AA43A9A1317} Astronoid (remove only)-->"C:\Program Files\Astronoid\uninstall.exe" Autofrag SUMO-->MsiExec.exe /X{4B14A0E6-51D4-11D9-8182-004095301BDA} AV-->MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA} AVG Anti-Rootkit Free-->C:\Program Files\GRISOFT\AVG Anti-Rootkit Free\Uninstall.exe AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe" Battlefield 1942-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}\setup.exe" -l0x40c Battlefield 2 Demo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8BECF123-B0EF-4E51-B7F3-923EFE15CC4A}\setup.exe" -l0x9 -removeonly Battlefield 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x40c -removeonly Beneton Movie GIF 1.1.2-->"C:\Program Files\Beneton Movie GIF\unins000.exe" BF2 Editor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24E85B9C-6E60-4723-89CC-71B66881A020}\setup.exe" -l0x9 -removeonly Blender (remove only)-->"C:\Program Files\Blender Foundation\Blender\uninstall.exe" Blitzkrieg-->C:\PROGRA~1\NIVALI~1\BLITZK~1\UNINST~1\UNWISE.EXE C:\PROGRA~1\NIVALI~1\BLITZK~1\UNINST~1\INSTALL.LOG BroadJump Client Foundation-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\BroadJump\Client Foundation\Uninst.isu" -c"C:\Program Files\BroadJump\Client Foundation\RmvBJCFD.dll" -b"CFD" -h"CFD" -a Brother MFL-Pro Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BA9CAC3-5131-4E59-B2AB-B765E876AAA2}\Setup.exe" -l0x40c Brunin03.dllBrunin03.dll BSPlayer-->"C:\Program Files\Webteh\BSplayer\uninstall.exe" ccCommon-->MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3} CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" Chessmaster 9000-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CD04CDD3-224C-41A4-B835-F263C53B6F92}\setup.exe" -l0x40c -uninst Civilization III Play the World-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E8650C8D-CCB2-496E-816C-ECC54A7EE411}\setup.exe" Civilization III-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}\setup.exe" Classic PhoneTools-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E3436EE2-D5CB-4249-840B-3A0140CC34C3}\setup.exe" -l0x40c ControlPanel Club Internet Service Photos-->C:\PROGRA~1\CLUB-I~1\SERVIC~1\UNWISE.EXE C:\PROGRA~1\CLUB-I~1\SERVIC~1\INSTALL.LOG Command & Conquer 3 Tiberium Wars™ Demo-->MsiExec.exe /I{39F7653F-3E82-4FED-9EE5-6B9253EA57E3} COMODO Internet Security-->C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe -u Conexant D850 56K V.9x DFVc Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1\HXFSETUP.EXE -U -Idel200fk.inf Configurateur Modem-->"C:\Program Files\Club-Internet\Assistance\uninstall.exe" Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe" Correctif pour Windows XP (KB942288-v3)-->"C:\WINDOWS\$NtUninstallKB942288-v3$\spuninst\spuninst.exe" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Creative Audio Console-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x40c /remove Creative MediaSource-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{56F3E1FF-54FE-4384-A153-6CCABA097814}\setup.exe" -l0x40c /remove Cultures - La Decouverte Du Vinland-->C:\WINDOWS\IsUn040c.exe -fC:\PROGRA~1\Cultures\Uninst.isu -cC:\PROGRA~1\Cultures\UninstallCultures.dll Darkstar One Demo-->"C:\Program Files\Darkstar One Demo\unins000.exe" Dell Driver Reset Tool-->MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76} Dell Media Experience-->MsiExec.exe /I{AC0EE5B0-A8FB-4D0A-AF03-2EDC518F841B} Dell Picture Studio v3.0-->MsiExec.exe /I{AF06CAE4-C134-44B1-B699-14FBDB63BD37} Démo de Battlefield 2142-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD347316-609E-4149-983C-84B40338D38A}\setup.exe" -l0x40c -removeonly Démo d'Unreal Tournament 2004-->C:\Program Files\UT2004\System\Setup.exe uninstall "UT2004-Demo" Digital Line Detect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanelAnyText DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC DivX Converter-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN D-Link VGA Webcam-->C:\WINDOWS\CleanDev.exe C:\WINDOWS\ov519.TXT Docteur Club Internet-->C:\WINDOWS\Motive\TONLFR\MCCUninst.exe Eagle Lander-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Eagle Lander\ST6UNST.LOG" Far Cry-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC} /l1036 FEARCombat-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{75E607CF-7BAE-4B88-84B3-97F3DF44BA28}\setup.exe" -l0x9 /zU -removeonly Fraps-->"C:\Program Files\Fraps\uninstall.exe" Freelancer-->"C:\Program Files\Microsoft Games\Freelancer\UNINSTAL.EXE" /runtemp /addremove GameSpy Arcade-->C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG Garena-->C:\Program Files\InstallShield Installation Information\{89C89156-A70F-4C6D-9CAE-2EA71F1396FE}\setup.exe -runfromtemp -l0x0009 -removeonly Google Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly Gunbound-->"C:\Program Files\GOA\unins000.exe" High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Intel Matrix Storage Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\setup.exe" -l040c -INTELUNINST Intel® PROSafe for Wired Connections-->MsiExec.exe /I{36BD0774-6CD6-4FF9-A148-83CA09AC123E} Intel® PROSafe for Wired Connections-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095} Internet Explorer Default Page-->MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395} J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030} J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} Jasc Paint Shop Photo Album 5-->MsiExec.exe /I{4192EAC0-6B36-4723-B216-D0E86E7757AC} Jasc Paint Shop Pro Studio, Dell Editon-->MsiExec.exe /I{78C496B9-5A6B-4692-8C2E-AFFFC34E4961} Java 2 Runtime Environment, SE v1.4.2_03-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030} JkDefrag 3.36-->"C:\Program Files\JkDefrag\unins000.exe" K-Lite Codec Pack 3.2.5 Standard-->"C:\Program Files\K-Lite Codec Pack\unins000.exe" Lanceur Club Internet v6-->"C:\Program Files\Club-Internet\Lanceur\uninstall.exe" Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Little Fighter 2 v1.9-->C:\Program Files\LittleFighter2\LF2_v1.9\Uninstal.exe LiveUpdate 3.1 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U Logiciel des cartes réseau Intel® PRO v9.2.4.11-->C:\Program Files\Intel\DMIX\uninst\DxSetup.exe /x /qr /le C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\PROSetDX\DMIX\\DxUninst.log Lux Delux 5.64-->"C:\Program Files\Lux\unins000.exe" Macromedia Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Master Of Defense 1.67e-->"C:\Program Files\Master Of Defense\unins000.exe" Mes Créations-->"C:\Program Files\Mes Créations\unins000.exe" Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700} Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28} Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659} Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe Microsoft .NET Framework 3.0-->MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003} Microsoft Age of Empires II : The Conquerors Expansion-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTALX.EXE" /runtemp /addremove Microsoft Age of Empires II-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTAL.EXE" /runtemp /uninstall Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F} Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1} Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office Basic Edition 2003-->MsiExec.exe /I{9113040C-6000-11D3-8CFE-0150048383C9} Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9} Microsoft Reader Text-to-Speech pour le français-->MsiExec.exe /X{6F1547AA-8DA7-4FAC-BA11-BE1659E7086E} Microsoft Reader-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B6F7DBE7-2FE2-458F-A738-B10832746036}\Setup.exe" -L0x40c Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual J# 2.0 Redistributable Package-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft Visual J# 2.0 Redistributable Package\install.exe mIRC-->"C:\Program Files\mIRC\mirc.exe" -uninstall Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe" Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Modem Helper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe Moraff's MoreJongg 6.01-->C:\WINDOWS\iun3405.exe C:\Program Files\Moraff\MoreJongg Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSRedist-->MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69} MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC} MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08} MyWay Search Assistant-->MsiExec.exe /X{E7559288-223B-453C-9F06-340E3BE21E39} NetWaiting-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanelAnyText Norton AntiVirus-->MsiExec.exe /X{830D8CBD-C668-49e2-A969-C2C2106332E0} Norton Confidential Browser Component-->MsiExec.exe /I{4843B611-8FCB-4428-8C23-31D0A5EAE164} Norton Confidential Web Protection Component-->MsiExec.exe /I{D353CC51-430D-4C6F-9B7E-52003DA1E05A} Norton Internet Security (Symantec Corporation)-->"C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}_10_0_0_86\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}.exe" /X Norton Internet Security-->MsiExec.exe /I{48185814-A224-447a-81DA-71BD20580E1B} Norton Internet Security-->MsiExec.exe /I{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B} Norton Internet Security-->MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555} Norton Internet Security-->MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43} Norton Protection Center-->MsiExec.exe /I{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8} Notepad++-->C:\Program Files\Notepad++\uninstall.exe NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI NVIDIA GAME System Software 2.8.1-->MsiExec.exe /I{4F0C7CCF-5666-474B-B02E-AC514A95EC93} Nvu 1.0-->"C:\Program Files\Nvu\unins000.exe" Odnis-->C:\WINDOWS\ST5UNST.EXE -n "C:\Program Files\Odnis\ST5UNST.LOG" OpenAL-->"C:\Program Files\OpenAL\OpenALwEAX.exe" /U /S OpenOffice.org 2.0-->MsiExec.exe /I{E2055AB2-D1C7-4147-A384-2B4B1C04282B} PaperPort-->MsiExec.exe /I{A17EABB6-D0C6-44E5-820C-72DC7F495064} PC Inspector smart recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9A87D86-FDFD-418B-BF96-EF09320973B3}\Setup.exe" -l0x40c Philips Firmware Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59C06422-F984-4FEA-A5FF-6B32FFD03254}\Setup.exe" -l0x9 -removeonly PhotoFiltre Studio-->"C:\Program Files\PhotoFiltre Studio\Uninst.exe" PowerDVD 5.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 RF Online Episode 2-->"C:\Program Files\Codemasters\RF Online;\unins000.exe" Riva FLV Encoder 2.0-->"C:\Program Files\Riva\Riva FLV Encoder 2.0\unins000.exe" SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall Sean O'Connor's Windows Games-->"C:\Program Files\Sean O'Connor's Windows Games\unins000.exe" SecondLife (remove only)-->"C:\Program Files\SecondLife\uninst.exe" /P="SecondLife" Security Task Manager 1.7h-->C:\Program Files\Security Task Manager\Uninstal.exe "C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Security Task Manager" Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D} Sonic Audio module-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382} Sonic DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6} Sonic MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29} Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629} Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205} Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E} Sound Blaster Audigy 2 ZS-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E2514D9-DC24-4634-B348-61F3EF0F1628}\setup.exe" -l0x40c SPBBC 32bit-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56} SpeedUpMyPC Trial-->MsiExec.exe /X{A9DFC08E-0256-4F90-A547-FA69A4CB1D3E} SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x040c -removeonly SWAT 4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8} uninstall SymNet-->MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2} TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe" TheTurtle 4.2-->C:\Program Files\TheTurtle\uninst.exe Tiscali Internet-->MsiExec.exe /I{58B2B6D3-E5FF-4D16-87AC-52CC5717C7C6} TmNationsForever-->"C:\Program Files\TmNationsForever\unins000.exe" Toribash 3.32-->"C:\Program Files\Toribash-3.32\unins000.exe" Total Immersion Racing-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C2FE0127-0F86-43C7-824E-AA78E6B5F4F3}\setup.exe" TrackMania Nations ESWC 1.7.9-->"C:\Program Files\TrackMania Nations ESWC\unins000.exe" Tropico 2 : La Baie des Pirates-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1A2000AF-79DE-47FB-8411-BA22F981917F}\setup.exe" -l0x40c Uniblue RegistryBooster 2-->"C:\Program Files\Uniblue\RegistryBooster 2\unins000.exe" Vendetta-->"C:\Program Files\Vendetta\unins000.exe" VIA Register Tool-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Your Company Name\VIA Register Tool\Uninst.isu" VideoLAN VLC media player 0.8.6h-->C:\Program Files\VideoLAN\VLC\uninstall.exe Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u Vitalize!-->C:\Program Files\Fichiers communs\Vitalize\Uninstal.exe Vuze-->C:\Program Files\Vuze\uninstall.exe Warzone 2100-->C:\Program Files\Warzone 2100\uninstall.exe Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333} Windows Defender Signatures-->MsiExec.exe /I{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C} Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91} Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411} Windows Live Sign-in Assistant-->MsiExec.exe /I{F652D238-5F29-42D5-BAF3-0115EF977EC2} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494} Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840} Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836} Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD} Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" WinZip-->C:\PROGRA~1\WinZip\winzip32.exe /uninstall Worms 4 Mayhem Demo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ED340366-F336-420D-8867-88643836D900}\setup.exe" -l0x9 -removeonly Worms 4 Mayhem Online Demo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC51C5A8-4C81-46D1-941C-1B00AC609919}\setup.exe" -l0x9 -removeonly Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe" XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe" ======Security center information====== AV: Norton Internet Security FW: COMODO Firewall FW: Norton Internet Security ======System event log====== Computer Name: NICO Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service LiveUpdate. Record Number: 637 Source Name: Service Control Manager Time Written: 20090429093213.000000+120 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: NICO Event Code: 8033 Message: L'explorateur a forcé une élection sur le réseau \Device\NetBT_Tcpip_{EDFD41B1-9ED2-48F2-8F6B-98A81FB1E8F3} car un maître explorateur a été arrêté. Record Number: 636 Source Name: BROWSER Time Written: 20090429093212.000000+120 Event Type: Informations User: Computer Name: NICO Event Code: 1000 Message: Votre ordinateur a perdu le bail de son adresse IP 5.79.70.20 sur la carte réseau d'adresse réseau 7A79054F4616. Record Number: 635 Source Name: Dhcp Time Written: 20090429093212.000000+120 Event Type: erreur User: Computer Name: NICO Event Code: 1003 Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 7A79054F4616. Il s'est produit l'erreur suivante : Le délai de temporisation de sémaphore a expiré. . Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP). Record Number: 634 Source Name: Dhcp Time Written: 20090429093212.000000+120 Event Type: Avertissement User: Computer Name: NICO Event Code: 7036 Message: Le service LiveUpdate est entré dans l'état : arrêté. Record Number: 633 Source Name: Service Control Manager Time Written: 20090429042757.000000+120 Event Type: Informations User: =====Application event log===== Computer Name: NICO Event Code: 101 Message: Niveau d'information : success LiveUpdate automatique a terminé. Record Number: 29212 Source Name: Automatic LiveUpdate Scheduler Time Written: 20090319090818.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: NICO Event Code: 101 Message: Niveau d'information : success Le Planificateur a lancé LiveUpdate automatique. Record Number: 29211 Source Name: Automatic LiveUpdate Scheduler Time Written: 20090319090740.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: NICO Event Code: 101 Message: Niveau d'information : success Retour à la planification précédente. L'exécution interviendra approximativement à 9:07 AM. Record Number: 29210 Source Name: Automatic LiveUpdate Scheduler Time Written: 20090319090239.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: NICO Event Code: 101 Message: Niveau d'information : success Service démarré. Record Number: 29209 Source Name: Automatic LiveUpdate Scheduler Time Written: 20090319090239.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: NICO Event Code: 105 Message: The service was started. Record Number: 29208 Source Name: Creative Service for CDROM Access Time Written: 20090319090232.000000+060 Event Type: Informations User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\watcom-1.3\binnt;C:\watcom-1.3\binw;C:\Program Files\Intel\DMIX "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel "PROCESSOR_REVISION"=0403 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\ "KMP_DUPLICATE_LIB_OK"=TRUE "WATCOM"=C:\watcom-1.3 -----------------EOF-----------------

Le transfert de fichiers importants est terminé. J'ai aussi tenté à nouveau de lancer le scan de MBAM... Après quelques secondes, à nouveau, le programme plante et (ne réponds pas) s'est affiché sur la fenêtre. Après quoi j'ai arrêté de force l'ordinateur pour que le programme ne poursuive pas... (pas de problème sur le disque cette fois-ci, je suppose que je lui n'en ai pas laissé le temps) Je pense qu'il est nécessaire d'utiliser un autre logiciel. En avez-vous un autre à proposer qui exécute les mêmes actions?

Transferts en cours. --> Utiliserons-nous à nouveau MBAM? --> Les fichiers detls.exe et msds32.exe, étaient t-ils des fichiers utiles modifiés par le trojan, ou des fichiers mis là à mon insu?

La commande Chkdsk que vous avez proposé a été concluante! --> Après quelques 5 heures de travail, les documents sont récupérés! Tout n'est pas à la normale, ma session est encore dans l'état "nouveau utilisateur", vide, mais les fichiers utilisateur de ma précédente session sont disponibles dans l'ancien dossier. (Un nouveau dossier avec "Mes documents", etc, avait été crée lors du problème) ----------- Je dispose d'un disque dur externe que je peux brancher, et sur lequel je pourrais mettre une bonne partie de mes documents. Je ne l'ai néanmoins plus mis en lien depuis que l'infection s'est déclarée, pour éviter que des choses se propagent. Mais mes conseillez-vous de transférer les documents sensibles au cas où quand même? Et les trojans peuvent-ils être du voyage vers le DD externe?

Le pc, et DD interne, ont 4 ans. "Un autre aurait sans doute fait le même effet" --> Le message d'erreur sur fond bleu disait que la panne était probablement due à l'installation d'un nouveau matériel/logiciel. L'ordinateur n'a pas aimé MBAM, mais n'a jamais bronché avec d'autres logiciels de scan jusqu'à présent.

Je viens à l'instant de la faire. (entre les deux messages) J'ai restauré à un point crée hier. Et... le système Restauration du Système me dit que rien n'a pu être restauré. La barre de progression s'est remplie en quelques secondes, aussi. Je suppose que les fichiers à restaurer ne sont plus accessibles... Lors d'un scan d'un fichier, si ce scan a un problème, ce fichier peut-il être altéré dans son écriture sur le disque?

Ok, restauration en lancement. Pour la partie du disque qui a des problèmes, voici le message que je vois: A la suite de quoi j'ai exécuté le CHKDSK via la commande Exécuter. CHKDSK paraissant supprimer des "répertoires" de session devenus inutiles...

Utilisation de MBAM: Mise à jour impossible. Malgré que je sois connecté, le logiciel parait bloqué. J'ai quand même exécuté un scan complet. Et tout se gela, à peine 4000 éléments analysés et ce fut un écran bleu d'erreur qui s'afficha. --> La section de "fichiers utilisateur" de la session que j'utilisais pour faire tourner MBAM (Mes documents, Images, Bureau, etc.) est devenue erronée, illisible. Je me retrouve dans une session vide, avec les joyeux messages à l'utilisateur nouveau qui s'affichent... J'espère que la section en question est récupérable.

Rapport ComboFix ComboFix 09-05-21.01 - Gimineh 23/05/2009 13:04.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1022.417 [GMT 2:00] Lancé depuis: c:\documents and settings\Gimineh\Bureau\Combo-Fixer.exe Commutateurs utilisés :: c:\documents and settings\Gimineh\Bureau\CFScript.txt AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! FILE :: c:\windows\system32\detls.exe c:\windows\system32\msds32.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\detls.exe c:\windows\system32\msds32.exe . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_MS_DLLSVR -------\Service_MS DllSvr ((((((((((((((((((((((((((((( Fichiers créés du 2009-04-23 au 2009-05-23 )))))))))))))))))))))))))))))))))))) . 2009-05-21 15:08 . 2009-05-21 15:08 -------- d-----w c:\documents and settings\Gimineh\Application Data\Uniblue 2009-05-21 15:08 . 2009-05-21 15:08 -------- d-----w c:\program files\Uniblue 2009-05-21 14:46 . 2009-05-21 14:46 -------- dc----w c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800} 2009-05-21 14:10 . 2009-05-21 14:10 -------- d-----w c:\program files\Trend Micro 2009-05-21 13:52 . 2008-04-14 01:57 32128 ----a-w c:\windows\system32\dllcache\wceusbsh.sys 2009-05-21 13:51 . 2001-08-17 19:28 7556 ----a-w c:\windows\system32\dllcache\usroslba.sys 2009-05-21 13:50 . 2004-08-05 11:00 14336 ----a-w c:\windows\system32\dllcache\tsprof.exe 2009-05-21 13:49 . 2004-08-05 11:00 21896 ----a-w c:\windows\system32\dllcache\tdipx.sys 2009-05-21 13:48 . 2001-08-23 15:47 24660 ----a-w c:\windows\system32\dllcache\spxupchk.dll 2009-05-21 13:47 . 2004-08-05 11:00 26112 ----a-w c:\windows\system32\dllcache\sm90w.dll 2009-05-21 13:46 . 2001-08-17 19:53 6912 ----a-w c:\windows\system32\dllcache\seaddsmc.sys 2009-05-21 13:45 . 2009-05-21 13:45 -------- dc-h--w c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} 2009-05-21 13:44 . 2001-08-23 15:47 35328 ----a-w c:\windows\system32\dllcache\psisload.dll 2009-05-21 13:43 . 2001-08-17 18:11 35328 ----a-w c:\windows\system32\dllcache\pcntpci5.sys 2009-05-21 13:42 . 2001-08-17 18:12 27209 ----a-w c:\windows\system32\dllcache\otc06x5.sys 2009-05-21 13:41 . 2001-08-17 19:49 15872 ----a-w c:\windows\system32\dllcache\ne2000.sys 2009-05-21 13:40 . 2008-04-13 18:46 49024 ----a-w c:\windows\system32\dllcache\mstape.sys 2009-05-21 13:39 . 2004-08-03 20:39 20864 ----a-w c:\windows\system32\dllcache\lwadihid.sys 2009-05-21 13:38 . 2001-08-17 20:55 6144 ----a-w c:\windows\system32\dllcache\kbd101b.dll 2009-05-21 13:37 . 2004-08-03 20:29 161020 ----a-w c:\windows\system32\dllcache\i81xnt5.sys 2009-05-21 13:36 . 2001-08-23 15:47 31232 ----a-w c:\windows\system32\dllcache\hpgt42tk.dll 2009-05-21 13:35 . 2004-08-05 11:00 15360 ----a-w c:\windows\system32\dllcache\flattemp.exe 2009-05-21 13:34 . 2001-08-17 19:53 7296 ----a-w c:\windows\system32\dllcache\elmsmc.sys 2009-05-21 13:33 . 2001-08-23 15:09 29691 ----a-w c:\windows\system32\dllcache\dgapci.sys 2009-05-21 13:32 . 2001-08-17 18:13 46108 ----a-w c:\windows\system32\dllcache\cben5.sys 2009-05-21 13:31 . 2004-08-03 20:31 36224 ----a-w c:\windows\system32\dllcache\an983.sys 2009-05-21 11:58 . 2009-05-21 12:00 -------- d-----w c:\windows\BDOSCAN8 2009-05-16 18:47 . 2009-05-16 18:47 56 ---ha-w c:\windows\system32\ezsidmv.dat 2009-05-16 18:47 . 2009-05-21 22:15 -------- d-----w c:\documents and settings\Gimineh\Application Data\skypePM 2009-05-16 18:46 . 2009-05-16 18:46 -------- d-----w c:\program files\Fichiers communs\Skype 2009-05-16 18:46 . 2009-05-16 18:46 -------- d-----r c:\program files\Skype 2009-04-26 20:51 . 2009-04-26 20:51 278984 ----a-w c:\windows\system32\drivers\atksgt.sys 2009-04-26 20:51 . 2009-04-26 20:51 25416 ----a-w c:\windows\system32\drivers\lirsgt.sys 2009-04-24 13:34 . 2004-05-10 10:14 118272 ----a-w c:\windows\system32\SX5363S.DLL 2009-04-24 13:34 . 2009-04-24 13:34 -------- d-----w c:\program files\Gameforge4D . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-22 19:29 . 2006-04-08 22:12 -------- d-----w c:\documents and settings\Gimineh\Application Data\Xfire 2009-05-22 18:08 . 2008-07-04 17:43 7 ----a-w c:\windows\system32\Ftstr.dat 2009-05-22 15:21 . 2009-05-21 15:02 -------- dc----w c:\documents and settings\All Users\Application Data\SecTaskMan 2009-05-22 14:57 . 2009-05-21 15:02 -------- d-----w c:\program files\Security Task Manager 2009-05-22 00:33 . 2006-05-17 18:43 -------- d-----w c:\documents and settings\Gimineh\Application Data\Skype 2009-05-20 23:22 . 2006-03-06 15:59 -------- d-s---w c:\program files\Xfire 2009-05-20 16:51 . 2005-08-31 14:16 -------- d-----w c:\program files\Fichiers communs\Symantec Shared 2009-05-19 21:46 . 2005-12-16 18:39 -------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion 2009-05-19 21:46 . 2006-04-04 18:45 -------- d-----w c:\documents and settings\All Users\Application Data\Trymedia 2009-05-19 21:46 . 2005-08-31 14:16 -------- d-----w c:\documents and settings\All Users\Application Data\Symantec 2009-05-16 18:46 . 2006-03-08 17:24 -------- d-----w c:\documents and settings\All Users\Application Data\Skype 2009-05-16 13:34 . 2005-10-08 21:07 -------- d-----w c:\program files\Common Files 2009-05-13 19:02 . 2005-09-06 20:17 50960 -c--a-w c:\documents and settings\Danielle\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-04-29 01:32 . 2006-09-01 12:48 98304 ----a-w c:\windows\system32\CmdLineExt.dll 2009-04-22 22:02 . 2006-04-08 14:21 50960 -c--a-w c:\documents and settings\Gimineh\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-04-18 21:57 . 2007-06-28 22:46 -------- d-----w c:\program files\Warcraft III 1.21b 2009-04-15 07:04 . 2004-08-20 09:24 86566 ----a-w c:\windows\system32\perfc00C.dat 2009-04-15 07:04 . 2004-08-20 09:24 515042 ----a-w c:\windows\system32\perfh00C.dat 2009-04-11 20:46 . 2008-05-01 19:08 -------- d-----w c:\documents and settings\All Users\Application Data\TrackMania 2009-04-11 16:02 . 2009-04-11 16:02 -------- d-----w c:\program files\MSBuild 2009-04-11 16:01 . 2009-04-11 16:01 123040 ----a-w c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat 2009-04-11 15:49 . 2009-04-11 15:49 -------- d-----w c:\program files\Reference Assemblies 2009-04-11 15:43 . 2009-04-11 15:42 -------- d-----w c:\program files\Microsoft Games for Windows - LIVE 2009-04-11 11:51 . 2009-04-09 16:39 -------- d-----w c:\program files\JkDefrag 2009-04-10 22:04 . 2007-06-28 22:50 229963 -c--a-w c:\windows\War3Unin.dat 2009-04-10 21:15 . 2007-06-28 22:50 2829 -c--a-w c:\windows\War3Unin.pif 2009-04-10 21:15 . 2007-06-28 22:50 139264 ----a-w c:\windows\War3Unin.exe 2009-04-10 14:42 . 2006-09-01 21:56 -------- d-----w c:\program files\Ubisoft 2009-04-10 00:30 . 2007-11-09 19:08 138168 -c--a-w c:\windows\system32\drivers\PnkBstrK.sys 2009-04-10 00:30 . 2007-11-09 19:07 75064 ----a-w c:\windows\system32\PnkBstrA.exe 2009-04-10 00:27 . 2007-11-09 19:08 189472 ----a-w c:\windows\system32\PnkBstrB.exe 2009-04-09 21:11 . 2005-08-31 14:07 -------- d--h--w c:\program files\InstallShield Installation Information 2009-04-09 20:03 . 2006-10-07 14:34 -------- d-----w c:\program files\Electronic Arts 2009-04-09 19:51 . 2009-04-05 11:18 -------- d-----w c:\program files\Data Realms 2009-04-04 22:42 . 2008-01-09 22:03 -------- d-----w c:\program files\OpenAL 2009-03-28 21:32 . 2009-03-28 21:30 -------- d-----w c:\program files\Warcraft III 1.22a 2009-03-21 22:14 . 2009-03-21 22:14 3774 ----a-r c:\documents and settings\Gimineh\Application Data\Microsoft\Installer\{C194D333-B84A-4BB7-B35E-060732D98DC4}\_F9CA2052147BEB87F4CFC0.exe 2009-03-21 22:14 . 2009-03-21 22:14 3774 ----a-r c:\documents and settings\Gimineh\Application Data\Microsoft\Installer\{C194D333-B84A-4BB7-B35E-060732D98DC4}\_CD4B0F1180842A4810A87B.exe 2009-03-21 22:14 . 2009-03-21 22:14 3774 ----a-r c:\documents and settings\Gimineh\Application Data\Microsoft\Installer\{C194D333-B84A-4BB7-B35E-060732D98DC4}\_6FEFF9B68218417F98F549.exe 2009-03-06 14:20 . 2004-08-20 09:24 286720 ----a-w c:\windows\system32\pdh.dll 2009-03-03 00:13 . 2004-08-20 09:24 826368 ----a-w c:\windows\system32\wininet.dll 2008-07-29 16:37 . 2008-07-29 16:37 0 -c--a-w c:\program files\temp01 2006-03-19 13:48 . 2006-03-16 19:45 310 -c--a-w c:\program files\config.log 2006-03-16 19:52 . 2006-03-16 19:46 14 -c--a-w c:\program files\md5.log 2006-03-16 19:51 . 2006-03-16 19:45 44 -c--a-w c:\program files\playerfile.log 2006-03-16 19:48 . 2006-03-16 19:48 733 -c--a-w c:\program files\wad.log 2006-03-16 19:48 . 2006-03-16 19:48 899 -c--a-w c:\program files\textures.log 2006-03-16 19:48 . 2006-03-16 19:48 903 -c--a-w c:\program files\entvars.log 2006-03-16 19:48 . 2006-03-16 19:48 211 -c--a-w c:\program files\position.log 2006-03-16 19:48 . 2006-03-16 19:48 110 -c--a-w c:\program files\skybox.log 2006-03-16 19:48 . 2006-03-16 19:48 0 -c--a-w c:\program files\entvars2.log 2006-03-16 19:48 . 2006-03-16 19:48 0 -c--a-w c:\program files\entity.log 2006-03-16 19:48 . 2006-03-16 19:48 549728 -c--a-w c:\program files\Snip_Light.exe 2006-03-16 19:45 . 2006-03-16 19:45 0 -c--a-w c:\program files\engine.log 2006-03-16 19:45 . 2006-03-16 19:45 388 -c--a-w c:\program files\engine_init.log 2006-03-16 19:45 . 2006-03-16 19:45 3590 -c--a-w c:\program files\glwin_create.log 2006-03-16 19:45 . 2006-03-16 19:45 202 -c--a-w c:\program files\main.log 2006-03-16 19:45 . 2006-03-16 19:45 65 -c--a-w c:\program files\new_engine.log 2005-10-31 21:36 . 2005-10-31 21:36 18837024 -c--a-w c:\program files\Office2003SP1-kb842532-client-enu.exe 2008-06-02 19:37 . 2008-06-02 19:37 48 --sh--w c:\windows\SB6BCE78C.tmp . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-05-11 6729728] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-04-25 139264] "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184] "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 81920] "SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-05-11 86016] "dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-05-31 122941] "ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2006-09-02 84640] "osCheck"="c:\program files\Norton Internet Security\osCheck.exe" [2006-09-05 26248] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-08-31 98304] "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2005-05-11 1519616] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\Gimineh\Menu D‚marrer\Programmes\D‚marrage\ Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-4-29 3145552] c:\documents and settings\Admiona\Menu D‚marrer\Programmes\D‚marrage\ Club Internet.lnk - c:\program files\Club-Internet\Lanceur\lanceur.exe [2007-12-26 5484544] c:\documents and settings\Anrha II\Menu D‚marrer\Programmes\D‚marrage\ Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-4-29 3145552] c:\documents and settings\Gimineh\Menu D‚marrer\Programmes\D‚marrage\ Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-4-29 3145552] c:\documents and settings\Gimineh\Menu D‚marrer\Programmes\D‚marrage\ Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-4-29 3145552] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ 'autocheck autochk *' [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "CTFMON.EXE"=c:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "CTSysVol"=c:\program files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r "ControlCenter2.0"=c:\program files\Brother\ControlCenter2\brctrcen.exe /autorun "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "BJCFD"=c:\program files\BroadJump\Client Foundation\CFD.exe "UpdReg"=c:\windows\UpdReg.EXE "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\MSN Messenger 7\\msnmsgr.exe"= "c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\BF2.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\Xfire\\Xfire.exe"= "c:\\Program Files\\Nival Interactive\\Blitzkrieg\\Run\\Game.exe"= "c:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"= "c:\\Program Files\\Electronic Arts\\Démo de Battlefield 2142\\BF2142.exe"= "c:\\Program Files\\Warcraft III\\war3.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Sierra\\FEARCombat\\FEARMP.exe"= "c:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"= "c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"= "c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe"= "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Program Files\\Microsoft Games\\Dungeon Siege 2\\DungeonSiege2.exe"= "c:\program files\Gameforge4D\AirRivals_FR\Launcher.atm"= c:\program files\Gameforge4D\AirRivals_FR\Launcher.atm:Enabled:GameExe2 "c:\program files\Gameforge4D\AirRivals_FR\Res-Voip\SCVoIP.exe"= c:\program files\Gameforge4D\AirRivals_FR\Res-Voip\SCVoIP.exe:Enabled:GameVoIP "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "6667:TCP"= 6667:TCP:IRC "27900:TCP"= 27900:TCP:Master Server UDP Heartbeat "28900:TCP"= 28900:TCP:Master Server List Request "29900:TCP"= 29900:TCP:GP Connection Manager "29901:TCP"= 29901:TCP:GP Search Manager "13139:TCP"= 13139:TCP:Custom UDP Pings "6500:TCP"= 6500:TCP:default roomquery port R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\COMMONFX.sys [27/06/2008 19:21 99352] R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\CTAUDFX.sys [27/06/2008 19:21 555032] R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\CTSBLFX.sys [27/06/2008 19:21 566296] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [05/03/2009 17:58 101936] S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.sys [27/06/2008 19:21 99352] S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.sys [27/06/2008 19:21 555032] S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\CTERFXFX.sys [27/06/2008 19:21 100888] S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.sys [27/06/2008 19:21 100888] S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.sys [27/06/2008 19:21 566296] S3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;c:\windows\system32\drivers\usb8023.sys [20/08/2004 11:24 12800] --- Autres Services/Pilotes en mémoire --- *NewlyCreated* - COMHOST HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contenu du dossier 'Tâches planifiées' 2009-05-22 c:\windows\Tasks\Norton Internet Security - Analyse système complète - Danielle.job - c:\progra~1\NORTON~1\NORTON~1\Navw32.exe [2006-09-06 21:38] 2005-09-06 c:\windows\Tasks\Rappel d'abonnement 1 auprès de l'ISP.job - c:\windows\system32\OOBE\oobebaln.exe [2004-08-20 02:34] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage mStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/ uInternet Connection Wizard,ShellNext = iexplore IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 Trusted Zone: secuser.com\www TCP: {EBE77BBF-3EB3-43C6-8504-EE8278861B09} = 194.117.200.10,194.117.200.15 DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab FF - ProfilePath - c:\documents and settings\Gimineh\Application Data\Mozilla\Firefox\Profiles\k3hx7rhk.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll ---- PARAMETRES FIREFOX ---- FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: content.max.tokenizing.time - 200000 FF - user.js: content.notify.interval - 100000 FF - user.js: content.switch.threshold - 650000 FF - user.js: nglayout.initialpaint.delay - 300 . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-23 13:11 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_USERS\S-1-5-21-2001226193-1141318510-407013838-1011\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:86,5d,cf,c3,49,41,96,b5,1f,f7,1a,9e,17,e0,77,83,aa,e9,77,09,6b,be,e6, c6,89,5c,bd,ce,20,f4,72,2c,9e,58,3b,bb,44,e7,69,2c,64,75,a1,ff,c8,b5,a6,55,\ "??"=hex:81,c6,b7,51,2c,d3,a9,76,10,71,30,02,4f,4c,18,1c [HKEY_USERS\S-1-5-21-2001226193-1141318510-407013838-1011\Software\SecuROM\License information*] "datasecu"=hex:bc,e9,16,70,b5,79,72,b7,67,3a,b6,22,30,82,15,6c,53,9f,82,55,a8, 6c,a7,de,e6,13,cf,6a,9c,ba,c5,be,73,5d,ce,3d,76,8a,df,1d,50,0e,5a,2e,5e,0e,\ "rkeysecu"=hex:d6,98,87,06,d2,07,51,a8,32,51,6c,a5,8e,84,43,10 . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'explorer.exe'(1656) c:\program files\Xfire\xfire_toucan_36913.dll c:\progra~1\WINDOW~2\wmpband.dll c:\windows\system32\eappprxy.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\brss01a.exe c:\windows\system32\Brmfrmps.exe c:\windows\system32\drivers\CDAC11BA.EXE c:\program files\Fichiers communs\Symantec Shared\ccSvcHst.exe c:\windows\system32\CTSVCCDA.EXE c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe c:\windows\system32\PnkBstrA.exe c:\windows\system32\PnkBstrB.exe c:\progra~1\Symantec\LIVEUP~1\LUCOMS~1.EXE c:\program files\Symantec\LiveUpdate\AUPDATE.EXE c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe . ************************************************************************** . Heure de fin: 2009-05-23 13:17 - La machine a redémarré ComboFix-quarantined-files.txt 2009-05-23 11:17 ComboFix2.txt 2009-05-22 15:49 Avant-CF: 20 118 630 400 octets libres Après-CF: 20 095 078 400 octets libres Current=2 Default=2 Failed=1 LastKnownGood=4 Sets=1,2,3,4 362 --- E O F --- 2009-05-12 21:38

J'ai récupéré: - mon navigateur internet qui fonctionne sans perturbations - la restauration du système Ne marche pas encore: - l'antivirus... Analyse des fichiers msds32.exe et detls.exe: Fichier msds32.exe reçu le 2009.05.22 18:29:48 (UTC) Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.101 2009.05.22 Virus.Win32.Trojan!IK AhnLab-V3 5.0.0.2 2009.05.22 Win-Trojan/OnlineGameHack.167982 AntiVir 7.9.0.168 2009.05.22 - Antiy-AVL 2.0.3.1 2009.05.22 - Authentium 5.1.2.4 2009.05.22 - Avast 4.8.1335.0 2009.05.22 Win32:Trojan-gen {Other} AVG 8.5.0.339 2009.05.22 PSW.OnlineGames.BHCN BitDefender 7.2 2009.05.22 - CAT-QuickHeal 10.00 2009.05.22 - ClamAV 0.94.1 2009.05.22 - Comodo 1157 2009.05.08 TrojWare.Win32.PSW.OnLineGames.NWN DrWeb 5.0.0.12182 2009.05.22 - eSafe 7.0.17.0 2009.05.21 - eTrust-Vet 31.6.6518 2009.05.22 - F-Prot 4.4.4.56 2009.05.22 - Fortinet 3.117.0.0 2009.05.22 - GData 19 2009.05.22 Win32:Trojan-gen {Other} Ikarus T3.1.1.49.0 2009.05.22 Virus.Win32.Trojan K7AntiVirus 7.10.741 2009.05.21 Trojan.Win32.Malware.1 Kaspersky 7.0.0.125 2009.05.22 - McAfee 5623 2009.05.22 - McAfee+Artemis 5623 2009.05.22 Artemis!C0585E59A4F8 McAfee-GW-Edition 6.7.6 2009.05.22 - Microsoft 1.4701 2009.05.22 - NOD32 4098 2009.05.22 Win32/PSW.OnLineGames.NWN Norman 6.01.05 2009.05.22 - nProtect 2009.1.8.0 2009.05.22 - Panda 10.0.0.14 2009.05.22 - PCTools 4.4.2.0 2009.05.21 - Prevx 3.0 2009.05.22 - Rising 21.30.42.00 2009.05.22 - Sophos 4.42.0 2009.05.22 - Symantec 1.4.4.12 2009.05.22 - TheHacker 6.3.4.3.331 2009.05.22 - TrendMicro 8.950.0.1092 2009.05.22 - VBA32 3.12.10.5 2009.05.22 Win32.PSW.OnLineGames.NWN ViRobot 2009.5.22.1747 2009.05.22 - VirusBuster 4.6.5.0 2009.05.22 - Information additionnelle File size: 167989 bytes MD5...: c0585e59a4f8128f0fd4616078b1315d SHA1..: c8d53b720cae699ed18a3d4032e6fc6b8234f690 SHA256: 073d25fccbe365243a63812c28579956bfc58efaabcdf3a1925732d0b324cef9 SHA512: 7f1908fa3bb01a939077ee61b264852f84bf187da3cd53eca7b4fd48369534b8<br>4651d61541a4a903fe0ece118165197544d67b8f64d05c75eeb7ae4c4dde1d1c ssdeep: 1536:uY+l1Go4LQWcmO9MNC+yHowTxHWCP1VboEo0Pa6n:uY+W0Wc99MAfHowNZb<br>oEo0i6n<br> PEiD..: InstallShield 2000 TrID..: File type identification<br>Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%) PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x2340<br>timedatestamp.....: 0x47458e95 (Thu Nov 22 14:13:41 2007)<br>machinetype.......: 0x14c (I386)<br><br>( 6 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x1f580 0x20000 3.36 9339a98f18bac051215034852b8007d4<br>.rdata 0x21000 0x13d5 0x2000 3.38 2d06991018e6887551e7e538e1191a7b<br>.data 0x23000 0x3de4 0x3000 0.56 785925708f679372e46a47eb5e4a7c51<br>.idata 0x27000 0xa73 0x1000 3.22 874594ddff6baa15edc00033356fc0ad<br>.rsrc 0x28000 0x686 0x1000 1.12 a1b54a93145dc658a29ee95239f239af<br>.reloc 0x29000 0xe1f 0x1000 5.53 4ce68fab16fe3ea0d02984eb873022ca<br><br>( 2 imports ) <br>> KERNEL32.dll: GetLastError, GetVersionExA, ResetEvent, FormatMessageA, WaitForSingleObject, CreateEventA, GetCurrentDirectoryA, GetSystemDirectoryA, GetModuleFileNameA, Sleep, LocalFree, OpenProcess, CreateToolhelp32Snapshot, Process32First, CloseHandle, SetEvent, Process32Next, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, GetVersion, ExitProcess, DebugBreak, GetStdHandle, WriteFile, InterlockedDecrement, OutputDebugStringA, GetProcAddress, LoadLibraryA, InterlockedIncrement, IsBadWritePtr, IsBadReadPtr, HeapValidate, WideCharToMultiByte, MultiByteToWideChar, LCMapStringA, LCMapStringW, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetFileType, HeapDestroy, HeapCreate, HeapFree, VirtualFree, RtlUnwind, SetConsoleCtrlHandler, HeapAlloc, HeapReAlloc, VirtualAlloc, GetCPInfo, GetACP, GetOEMCP, GetStringTypeA, GetStringTypeW, SetFilePointer, SetStdHandle, FlushFileBuffers<br>> ADVAPI32.dll: SetServiceStatus, OpenSCManagerA, CreateServiceA, StartServiceA, QueryServiceStatus, StartServiceCtrlDispatcherA, CloseServiceHandle, CreateProcessAsUserA, OpenProcessToken, RegisterServiceCtrlHandlerA<br><br>( 0 exports ) <br> PDFiD.: - RDS...: NSRL Reference Data Set<br>- Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.101 2009.05.22 Virus.Win32.Trojan!IK AhnLab-V3 5.0.0.2 2009.05.22 Win-Trojan/OnlineGameHack.167982 AntiVir 7.9.0.168 2009.05.22 - Antiy-AVL 2.0.3.1 2009.05.22 - Authentium 5.1.2.4 2009.05.22 - Avast 4.8.1335.0 2009.05.22 Win32:Trojan-gen {Other} AVG 8.5.0.339 2009.05.22 PSW.OnlineGames.BHCN BitDefender 7.2 2009.05.22 - CAT-QuickHeal 10.00 2009.05.22 - ClamAV 0.94.1 2009.05.22 - Comodo 1157 2009.05.08 TrojWare.Win32.PSW.OnLineGames.NWN DrWeb 5.0.0.12182 2009.05.22 - eSafe 7.0.17.0 2009.05.21 - eTrust-Vet 31.6.6518 2009.05.22 - F-Prot 4.4.4.56 2009.05.22 - Fortinet 3.117.0.0 2009.05.22 - GData 19 2009.05.22 Win32:Trojan-gen {Other} Ikarus T3.1.1.49.0 2009.05.22 Virus.Win32.Trojan K7AntiVirus 7.10.741 2009.05.21 Trojan.Win32.Malware.1 Kaspersky 7.0.0.125 2009.05.22 - McAfee 5623 2009.05.22 - McAfee+Artemis 5623 2009.05.22 Artemis!C0585E59A4F8 McAfee-GW-Edition 6.7.6 2009.05.22 - Microsoft 1.4701 2009.05.22 - NOD32 4098 2009.05.22 Win32/PSW.OnLineGames.NWN Norman 6.01.05 2009.05.22 - nProtect 2009.1.8.0 2009.05.22 - Panda 10.0.0.14 2009.05.22 - PCTools 4.4.2.0 2009.05.21 - Prevx 3.0 2009.05.22 - Rising 21.30.42.00 2009.05.22 - Sophos 4.42.0 2009.05.22 - Symantec 1.4.4.12 2009.05.22 - TheHacker 6.3.4.3.331 2009.05.22 - TrendMicro 8.950.0.1092 2009.05.22 - VBA32 3.12.10.5 2009.05.22 Win32.PSW.OnLineGames.NWN ViRobot 2009.5.22.1747 2009.05.22 - VirusBuster 4.6.5.0 2009.05.22 - Information additionnelle File size: 167989 bytes MD5...: c0585e59a4f8128f0fd4616078b1315d SHA1..: c8d53b720cae699ed18a3d4032e6fc6b8234f690 SHA256: 073d25fccbe365243a63812c28579956bfc58efaabcdf3a1925732d0b324cef9 SHA512: 7f1908fa3bb01a939077ee61b264852f84bf187da3cd53eca7b4fd48369534b8<br>4651d61541a4a903fe0ece118165197544d67b8f64d05c75eeb7ae4c4dde1d1c ssdeep: 1536:uY+l1Go4LQWcmO9MNC+yHowTxHWCP1VboEo0Pa6n:uY+W0Wc99MAfHowNZb<br>oEo0i6n<br> PEiD..: InstallShield 2000 TrID..: File type identification<br>Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%) PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x2340<br>timedatestamp.....: 0x47458e95 (Thu Nov 22 14:13:41 2007)<br>machinetype.......: 0x14c (I386)<br><br>( 6 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x1f580 0x20000 3.36 9339a98f18bac051215034852b8007d4<br>.rdata 0x21000 0x13d5 0x2000 3.38 2d06991018e6887551e7e538e1191a7b<br>.data 0x23000 0x3de4 0x3000 0.56 785925708f679372e46a47eb5e4a7c51<br>.idata 0x27000 0xa73 0x1000 3.22 874594ddff6baa15edc00033356fc0ad<br>.rsrc 0x28000 0x686 0x1000 1.12 a1b54a93145dc658a29ee95239f239af<br>.reloc 0x29000 0xe1f 0x1000 5.53 4ce68fab16fe3ea0d02984eb873022ca<br><br>( 2 imports ) <br>> KERNEL32.dll: GetLastError, GetVersionExA, ResetEvent, FormatMessageA, WaitForSingleObject, CreateEventA, GetCurrentDirectoryA, GetSystemDirectoryA, GetModuleFileNameA, Sleep, LocalFree, OpenProcess, CreateToolhelp32Snapshot, Process32First, CloseHandle, SetEvent, Process32Next, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, GetVersion, ExitProcess, DebugBreak, GetStdHandle, WriteFile, InterlockedDecrement, OutputDebugStringA, GetProcAddress, LoadLibraryA, InterlockedIncrement, IsBadWritePtr, IsBadReadPtr, HeapValidate, WideCharToMultiByte, MultiByteToWideChar, LCMapStringA, LCMapStringW, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetFileType, HeapDestroy, HeapCreate, HeapFree, VirtualFree, RtlUnwind, SetConsoleCtrlHandler, HeapAlloc, HeapReAlloc, VirtualAlloc, GetCPInfo, GetACP, GetOEMCP, GetStringTypeA, GetStringTypeW, SetFilePointer, SetStdHandle, FlushFileBuffers<br>> ADVAPI32.dll: SetServiceStatus, OpenSCManagerA, CreateServiceA, StartServiceA, QueryServiceStatus, StartServiceCtrlDispatcherA, CloseServiceHandle, CreateProcessAsUserA, OpenProcessToken, RegisterServiceCtrlHandlerA<br><br>( 0 exports ) <br> PDFiD.: - RDS...: NSRL Reference Data Set<br>- Fichier detls.exe reçu le 2009.05.22 18:35:55 (UTC) Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.101 2009.05.22 Trojan.Generic!IK AhnLab-V3 5.0.0.2 2009.05.22 - AntiVir 7.9.0.168 2009.05.22 - Antiy-AVL 2.0.3.1 2009.05.22 - Authentium 5.1.2.4 2009.05.22 - Avast 4.8.1335.0 2009.05.22 - AVG 8.5.0.339 2009.05.22 - BitDefender 7.2 2009.05.22 Trojan.Generic.1267762 CAT-QuickHeal 10.00 2009.05.22 - ClamAV 0.94.1 2009.05.22 - Comodo 1157 2009.05.08 TrojWare.Win32.PSW.OnLineGames.OBD DrWeb 5.0.0.12182 2009.05.22 - eSafe 7.0.17.0 2009.05.21 - eTrust-Vet 31.6.6518 2009.05.22 - F-Prot 4.4.4.56 2009.05.22 - F-Secure 8.0.14470.0 2009.05.22 - Fortinet 3.117.0.0 2009.05.22 PossibleThreat GData 19 2009.05.22 Trojan.Generic.1267762 Ikarus T3.1.1.49.0 2009.05.22 Trojan.Generic K7AntiVirus 7.10.741 2009.05.21 - Kaspersky 7.0.0.125 2009.05.22 - McAfee 5623 2009.05.22 - McAfee+Artemis 5623 2009.05.22 - McAfee-GW-Edition 6.7.6 2009.05.22 - Microsoft 1.4701 2009.05.22 - NOD32 4098 2009.05.22 Win32/PSW.OnLineGames.OBD Norman 6.01.05 2009.05.22 - nProtect 2009.1.8.0 2009.05.22 - Panda 10.0.0.14 2009.05.22 Suspicious file PCTools 4.4.2.0 2009.05.21 - Prevx 3.0 2009.05.22 - Rising 21.30.42.00 2009.05.22 - Sophos 4.42.0 2009.05.22 - Sunbelt 3.2.1858.2 2009.05.22 - Symantec 1.4.4.12 2009.05.22 - TheHacker 6.3.4.3.331 2009.05.22 - TrendMicro 8.950.0.1092 2009.05.22 - VBA32 3.12.10.5 2009.05.22 - ViRobot 2009.5.22.1747 2009.05.22 - VirusBuster 4.6.5.0 2009.05.22 - Information additionnelle File size: 176181 bytes MD5...: a1f8667e7d8936ff7d5f3c58cedad5a5 SHA1..: fcdddca47f6ce7328ba52a787919716fa7276fde SHA256: ce872a3c3d527c1d761101b43c41def27255f12dc8d0c34aa82af7f4645dcd88 SHA512: c62c0eb713975870bb17a95322b8b156af4752063ff450bb40ece90f135afae5<br>419acc969691bc3856a2cf2153793dd3a6b2b8e126ec894b1cb416a2724c27ed ssdeep: 1536:q780YkCmI0jCWClDsecpJx1RZ9ai8HrDwM+1T6rVaFo6XYtoEpKyK:f5kCm<br>HjCWClwLxZZ8HncT6k26ItoEpKJ<br> PEiD..: InstallShield 2000 TrID..: File type identification<br>Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%) PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x3230<br>timedatestamp.....: 0x475cff88 (Mon Dec 10 08:57:44 2007)<br>machinetype.......: 0x14c (I386)<br><br>( 6 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x21a70 0x22000 3.59 cb30df918db38184af1e2db09c0d92d2<br>.rdata 0x23000 0x1550 0x2000 3.57 814d11cb616ec835160d5003486485f6<br>.data 0x25000 0x3704 0x2000 0.73 e185d21138aaed7d103bf00b02022b1c<br>.idata 0x29000 0xcf1 0x1000 3.82 c530ca6a97f35904f9cbadc0ecc75a20<br>.rsrc 0x2a000 0x1236 0x2000 1.58 2ec370d9ca340c883788049e02105258<br>.reloc 0x2c000 0xfca 0x1000 6.00 b71a5a930d15703456989f40251d1024<br><br>( 4 imports ) <br>> KERNEL32.dll: lstrlenA, GetLocalTime, LCMapStringA, ReadFile, SetEndOfFile, GetStringTypeW, GetStringTypeA, MultiByteToWideChar, GetOEMCP, GetACP, GetCPInfo, SetFilePointer, CreateFileA, FlushFileBuffers, SetStdHandle, VirtualAlloc, GetModuleHandleA, HeapAlloc, SetConsoleCtrlHandler, RtlUnwind, VirtualFree, HeapFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, GetEnvironmentStrings, WideCharToMultiByte, FreeEnvironmentStringsW, FreeEnvironmentStringsA, UnhandledExceptionFilter, CloseHandle, GetLastError, LoadLibraryA, GetProcAddress, HeapReAlloc, FreeLibrary, HeapValidate, IsBadReadPtr, ExitProcess, TerminateProcess, GetCurrentProcess, GetStartupInfoA, GetCommandLineA, GetVersion, DebugBreak, GetStdHandle, WriteFile, InterlockedDecrement, OutputDebugStringA, InterlockedIncrement, GetModuleFileNameA, IsBadWritePtr, LCMapStringW<br>> USER32.dll: EndDialog, DialogBoxParamA, DestroyWindow, DefWindowProcA, BeginPaint, GetClientRect, DrawTextA, EndPaint, PostQuitMessage, SetWindowsHookExA, LoadIconA, LoadCursorA, RegisterClassExA, LoadStringA, GetMessageA, TranslateAcceleratorA, TranslateMessage, DispatchMessageA, CallNextHookEx, GetActiveWindow, GetWindowTextA, UnhookWindowsHookEx, GetWindowThreadProcessId, GetFocus, GetClassNameA, GetWindowLongA, GetKeyNameTextA, GetKeyboardState, ToAscii, GetWindow, LoadAcceleratorsA<br>> ADVAPI32.dll: RegQueryValueExA, RegCloseKey, RegOpenKeyExA<br>> SHELL32.dll: ShellExecuteA<br><br>( 0 exports ) <br> PDFiD.: - RDS...: NSRL Reference Data Set<br>- ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=a1f8667e7d8936ff7d5f3c58cedad5a5''>http://www.threatexpert.com/report.aspx?md5=a1f8667e7d8936ff7d5f3c58cedad5a5' target='_blank'>http://www.threatexpert.com/report.aspx?md5=a1f8667e7d8936ff7d5f3c58cedad5a5</a>'>http://www.threatexpert.com/report.aspx?md5=a1f8667e7d8936ff7d5f3c58cedad5a5</a> Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.101 2009.05.22 Trojan.Generic!IK AhnLab-V3 5.0.0.2 2009.05.22 - AntiVir 7.9.0.168 2009.05.22 - Antiy-AVL 2.0.3.1 2009.05.22 - Authentium 5.1.2.4 2009.05.22 - Avast 4.8.1335.0 2009.05.22 - AVG 8.5.0.339 2009.05.22 - BitDefender 7.2 2009.05.22 Trojan.Generic.1267762 CAT-QuickHeal 10.00 2009.05.22 - ClamAV 0.94.1 2009.05.22 - Comodo 1157 2009.05.08 TrojWare.Win32.PSW.OnLineGames.OBD DrWeb 5.0.0.12182 2009.05.22 - eSafe 7.0.17.0 2009.05.21 - eTrust-Vet 31.6.6518 2009.05.22 - F-Prot 4.4.4.56 2009.05.22 - F-Secure 8.0.14470.0 2009.05.22 - Fortinet 3.117.0.0 2009.05.22 PossibleThreat GData 19 2009.05.22 Trojan.Generic.1267762 Ikarus T3.1.1.49.0 2009.05.22 Trojan.Generic K7AntiVirus 7.10.741 2009.05.21 - Kaspersky 7.0.0.125 2009.05.22 - McAfee 5623 2009.05.22 - McAfee+Artemis 5623 2009.05.22 - McAfee-GW-Edition 6.7.6 2009.05.22 - Microsoft 1.4701 2009.05.22 - NOD32 4098 2009.05.22 Win32/PSW.OnLineGames.OBD Norman 6.01.05 2009.05.22 - nProtect 2009.1.8.0 2009.05.22 - Panda 10.0.0.14 2009.05.22 Suspicious file PCTools 4.4.2.0 2009.05.21 - Prevx 3.0 2009.05.22 - Rising 21.30.42.00 2009.05.22 - Sophos 4.42.0 2009.05.22 - Sunbelt 3.2.1858.2 2009.05.22 - Symantec 1.4.4.12 2009.05.22 - TheHacker 6.3.4.3.331 2009.05.22 - TrendMicro 8.950.0.1092 2009.05.22 - VBA32 3.12.10.5 2009.05.22 - ViRobot 2009.5.22.1747 2009.05.22 - VirusBuster 4.6.5.0 2009.05.22 - Information additionnelle File size: 176181 bytes MD5...: a1f8667e7d8936ff7d5f3c58cedad5a5 SHA1..: fcdddca47f6ce7328ba52a787919716fa7276fde SHA256: ce872a3c3d527c1d761101b43c41def27255f12dc8d0c34aa82af7f4645dcd88 SHA512: c62c0eb713975870bb17a95322b8b156af4752063ff450bb40ece90f135afae5<br>419acc969691bc3856a2cf2153793dd3a6b2b8e126ec894b1cb416a2724c27ed ssdeep: 1536:q780YkCmI0jCWClDsecpJx1RZ9ai8HrDwM+1T6rVaFo6XYtoEpKyK:f5kCm<br>HjCWClwLxZZ8HncT6k26ItoEpKJ<br> PEiD..: InstallShield 2000 TrID..: File type identification<br>Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%) PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x3230<br>timedatestamp.....: 0x475cff88 (Mon Dec 10 08:57:44 2007)<br>machinetype.......: 0x14c (I386)<br><br>( 6 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x21a70 0x22000 3.59 cb30df918db38184af1e2db09c0d92d2<br>.rdata 0x23000 0x1550 0x2000 3.57 814d11cb616ec835160d5003486485f6<br>.data 0x25000 0x3704 0x2000 0.73 e185d21138aaed7d103bf00b02022b1c<br>.idata 0x29000 0xcf1 0x1000 3.82 c530ca6a97f35904f9cbadc0ecc75a20<br>.rsrc 0x2a000 0x1236 0x2000 1.58 2ec370d9ca340c883788049e02105258<br>.reloc 0x2c000 0xfca 0x1000 6.00 b71a5a930d15703456989f40251d1024<br><br>( 4 imports ) <br>> KERNEL32.dll: lstrlenA, GetLocalTime, LCMapStringA, ReadFile, SetEndOfFile, GetStringTypeW, GetStringTypeA, MultiByteToWideChar, GetOEMCP, GetACP, GetCPInfo, SetFilePointer, CreateFileA, FlushFileBuffers, SetStdHandle, VirtualAlloc, GetModuleHandleA, HeapAlloc, SetConsoleCtrlHandler, RtlUnwind, VirtualFree, HeapFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, GetEnvironmentStrings, WideCharToMultiByte, FreeEnvironmentStringsW, FreeEnvironmentStringsA, UnhandledExceptionFilter, CloseHandle, GetLastError, LoadLibraryA, GetProcAddress, HeapReAlloc, FreeLibrary, HeapValidate, IsBadReadPtr, ExitProcess, TerminateProcess, GetCurrentProcess, GetStartupInfoA, GetCommandLineA, GetVersion, DebugBreak, GetStdHandle, WriteFile, InterlockedDecrement, OutputDebugStringA, InterlockedIncrement, GetModuleFileNameA, IsBadWritePtr, LCMapStringW<br>> USER32.dll: EndDialog, DialogBoxParamA, DestroyWindow, DefWindowProcA, BeginPaint, GetClientRect, DrawTextA, EndPaint, PostQuitMessage, SetWindowsHookExA, LoadIconA, LoadCursorA, RegisterClassExA, LoadStringA, GetMessageA, TranslateAcceleratorA, TranslateMessage, DispatchMessageA, CallNextHookEx, GetActiveWindow, GetWindowTextA, UnhookWindowsHookEx, GetWindowThreadProcessId, GetFocus, GetClassNameA, GetWindowLongA, GetKeyNameTextA, GetKeyboardState, ToAscii, GetWindow, LoadAcceleratorsA<br>> ADVAPI32.dll: RegQueryValueExA, RegCloseKey, RegOpenKeyExA<br>> SHELL32.dll: ShellExecuteA<br><br>( 0 exports ) <br> PDFiD.: - RDS...: NSRL Reference Data Set<br>- ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=a1f8667e7d8936ff7d5f3c58cedad5a5' target='_blank'>http://www.threatexpert.com/report.aspx?md5=a1f8667e7d8936ff7d5f3c58cedad5a5</a> Y aurait-il encore d'autres fichiers qui pourraient se révéler être trojans ou autre, d'après vous?

J'ai poursuivi. Je ne sais pas ce qui a changé, mais lorsque j'ai redémarré le programme, il n'a plus été question de problèmes avec un hypothétique antivirus en route... ----------------- ComboFix 09-05-21.01 - Gimineh 22/05/2009 17:35.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1022.659 [GMT 2:00] Lancé depuis: c:\documents and settings\Gimineh\Bureau\Combo-Fixer.exe AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Gimineh\Application Data\Install.dat c:\windows\patch.exe c:\windows\system32\drivers\gxvxcyaxjmsqgxnhrqhmnbgrttkawkyxfaivj.sys c:\windows\system32\gxvxccounter c:\windows\system32\gxvxctewmolaiefypdevvtrrnhvmpjckrogjd.dll c:\windows\system32\gxvxcxbdpmywlbokobgccgjeffujeopjchsvp.dll . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_gxvxcserv.sys -------\Legacy_BOONTY_GAMES -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers créés du 2009-04-22 au 2009-05-22 )))))))))))))))))))))))))))))))))))) . 2009-05-21 15:08 . 2009-05-21 15:08 -------- d-----w c:\documents and settings\Gimineh\Application Data\Uniblue 2009-05-21 15:08 . 2009-05-21 15:08 -------- d-----w c:\program files\Uniblue 2009-05-21 14:46 . 2009-05-21 14:46 -------- dc----w c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800} 2009-05-21 14:10 . 2009-05-21 14:10 -------- d-----w c:\program files\Trend Micro 2009-05-21 13:52 . 2008-04-14 01:57 32128 ----a-w c:\windows\system32\dllcache\wceusbsh.sys 2009-05-21 13:51 . 2001-08-17 19:28 7556 ----a-w c:\windows\system32\dllcache\usroslba.sys 2009-05-21 13:50 . 2004-08-05 11:00 14336 ----a-w c:\windows\system32\dllcache\tsprof.exe 2009-05-21 13:49 . 2004-08-05 11:00 21896 ----a-w c:\windows\system32\dllcache\tdipx.sys 2009-05-21 13:48 . 2001-08-23 15:47 24660 ----a-w c:\windows\system32\dllcache\spxupchk.dll 2009-05-21 13:47 . 2004-08-05 11:00 26112 ----a-w c:\windows\system32\dllcache\sm90w.dll 2009-05-21 13:46 . 2001-08-17 19:53 6912 ----a-w c:\windows\system32\dllcache\seaddsmc.sys 2009-05-21 13:45 . 2009-05-21 13:45 -------- dc-h--w c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} 2009-05-21 13:44 . 2001-08-23 15:47 35328 ----a-w c:\windows\system32\dllcache\psisload.dll 2009-05-21 13:43 . 2001-08-17 18:11 35328 ----a-w c:\windows\system32\dllcache\pcntpci5.sys 2009-05-21 13:42 . 2001-08-17 18:12 27209 ----a-w c:\windows\system32\dllcache\otc06x5.sys 2009-05-21 13:41 . 2001-08-17 19:49 15872 ----a-w c:\windows\system32\dllcache\ne2000.sys 2009-05-21 13:40 . 2008-04-13 18:46 49024 ----a-w c:\windows\system32\dllcache\mstape.sys 2009-05-21 13:39 . 2004-08-03 20:39 20864 ----a-w c:\windows\system32\dllcache\lwadihid.sys 2009-05-21 13:38 . 2001-08-17 20:55 6144 ----a-w c:\windows\system32\dllcache\kbd101b.dll 2009-05-21 13:37 . 2004-08-03 20:29 161020 ----a-w c:\windows\system32\dllcache\i81xnt5.sys 2009-05-21 13:36 . 2001-08-23 15:47 31232 ----a-w c:\windows\system32\dllcache\hpgt42tk.dll 2009-05-21 13:35 . 2004-08-05 11:00 15360 ----a-w c:\windows\system32\dllcache\flattemp.exe 2009-05-21 13:34 . 2001-08-17 19:53 7296 ----a-w c:\windows\system32\dllcache\elmsmc.sys 2009-05-21 13:33 . 2001-08-23 15:09 29691 ----a-w c:\windows\system32\dllcache\dgapci.sys 2009-05-21 13:32 . 2001-08-17 18:13 46108 ----a-w c:\windows\system32\dllcache\cben5.sys 2009-05-21 13:31 . 2004-08-03 20:31 36224 ----a-w c:\windows\system32\dllcache\an983.sys 2009-05-21 11:58 . 2009-05-21 12:00 -------- d-----w c:\windows\BDOSCAN8 2009-05-16 18:47 . 2009-05-16 18:47 56 ---ha-w c:\windows\system32\ezsidmv.dat 2009-05-16 18:47 . 2009-05-21 22:15 -------- d-----w c:\documents and settings\Gimineh\Application Data\skypePM 2009-05-16 18:46 . 2009-05-16 18:46 -------- d-----w c:\program files\Fichiers communs\Skype 2009-05-16 18:46 . 2009-05-16 18:46 -------- d-----r c:\program files\Skype 2009-04-26 20:51 . 2009-04-26 20:51 278984 ----a-w c:\windows\system32\drivers\atksgt.sys 2009-04-26 20:51 . 2009-04-26 20:51 25416 ----a-w c:\windows\system32\drivers\lirsgt.sys 2009-04-24 13:34 . 2004-05-10 10:14 118272 ----a-w c:\windows\system32\SX5363S.DLL 2009-04-24 13:34 . 2009-04-24 13:34 -------- d-----w c:\program files\Gameforge4D . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-22 15:46 . 2008-07-04 17:43 5 ----a-w c:\windows\system32\Ftstr.dat 2009-05-22 15:26 . 2006-04-08 22:12 -------- d-----w c:\documents and settings\Gimineh\Application Data\Xfire 2009-05-22 15:21 . 2009-05-21 15:02 -------- dc----w c:\documents and settings\All Users\Application Data\SecTaskMan 2009-05-22 14:57 . 2009-05-21 15:02 -------- d-----w c:\program files\Security Task Manager 2009-05-22 00:33 . 2006-05-17 18:43 -------- d-----w c:\documents and settings\Gimineh\Application Data\Skype 2009-05-20 23:22 . 2006-03-06 15:59 -------- d-s---w c:\program files\Xfire 2009-05-20 16:51 . 2005-08-31 14:16 -------- d-----w c:\program files\Fichiers communs\Symantec Shared 2009-05-19 21:46 . 2005-12-16 18:39 -------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion 2009-05-19 21:46 . 2006-04-04 18:45 -------- d-----w c:\documents and settings\All Users\Application Data\Trymedia 2009-05-19 21:46 . 2005-08-31 14:16 -------- d-----w c:\documents and settings\All Users\Application Data\Symantec 2009-05-16 18:46 . 2006-03-08 17:24 -------- d-----w c:\documents and settings\All Users\Application Data\Skype 2009-05-16 13:34 . 2005-10-08 21:07 -------- d-----w c:\program files\Common Files 2009-05-13 19:02 . 2005-09-06 20:17 50960 -c--a-w c:\documents and settings\Danielle\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-04-29 01:32 . 2006-09-01 12:48 98304 ----a-w c:\windows\system32\CmdLineExt.dll 2009-04-22 22:02 . 2006-04-08 14:21 50960 -c--a-w c:\documents and settings\Gimineh\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-04-18 21:57 . 2007-06-28 22:46 -------- d-----w c:\program files\Warcraft III 1.21b 2009-04-15 07:04 . 2004-08-20 09:24 86566 ----a-w c:\windows\system32\perfc00C.dat 2009-04-15 07:04 . 2004-08-20 09:24 515042 ----a-w c:\windows\system32\perfh00C.dat 2009-04-11 20:46 . 2008-05-01 19:08 -------- d-----w c:\documents and settings\All Users\Application Data\TrackMania 2009-04-11 16:02 . 2009-04-11 16:02 -------- d-----w c:\program files\MSBuild 2009-04-11 16:01 . 2009-04-11 16:01 123040 ----a-w c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat 2009-04-11 15:49 . 2009-04-11 15:49 -------- d-----w c:\program files\Reference Assemblies 2009-04-11 15:43 . 2009-04-11 15:42 -------- d-----w c:\program files\Microsoft Games for Windows - LIVE 2009-04-11 11:51 . 2009-04-09 16:39 -------- d-----w c:\program files\JkDefrag 2009-04-10 22:04 . 2007-06-28 22:50 229963 -c--a-w c:\windows\War3Unin.dat 2009-04-10 21:15 . 2007-06-28 22:50 2829 -c--a-w c:\windows\War3Unin.pif 2009-04-10 21:15 . 2007-06-28 22:50 139264 ----a-w c:\windows\War3Unin.exe 2009-04-10 14:42 . 2006-09-01 21:56 -------- d-----w c:\program files\Ubisoft 2009-04-10 00:30 . 2007-11-09 19:08 138168 -c--a-w c:\windows\system32\drivers\PnkBstrK.sys 2009-04-10 00:30 . 2007-11-09 19:07 75064 ----a-w c:\windows\system32\PnkBstrA.exe 2009-04-10 00:27 . 2007-11-09 19:08 189472 ----a-w c:\windows\system32\PnkBstrB.exe 2009-04-09 21:11 . 2005-08-31 14:07 -------- d--h--w c:\program files\InstallShield Installation Information 2009-04-09 20:03 . 2006-10-07 14:34 -------- d-----w c:\program files\Electronic Arts 2009-04-09 19:51 . 2009-04-05 11:18 -------- d-----w c:\program files\Data Realms 2009-04-04 22:42 . 2008-01-09 22:03 -------- d-----w c:\program files\OpenAL 2009-03-28 21:32 . 2009-03-28 21:30 -------- d-----w c:\program files\Warcraft III 1.22a 2009-03-21 22:14 . 2009-03-21 22:14 3774 ----a-r c:\documents and settings\Gimineh\Application Data\Microsoft\Installer\{C194D333-B84A-4BB7-B35E-060732D98DC4}\_F9CA2052147BEB87F4CFC0.exe 2009-03-21 22:14 . 2009-03-21 22:14 3774 ----a-r c:\documents and settings\Gimineh\Application Data\Microsoft\Installer\{C194D333-B84A-4BB7-B35E-060732D98DC4}\_CD4B0F1180842A4810A87B.exe 2009-03-21 22:14 . 2009-03-21 22:14 3774 ----a-r c:\documents and settings\Gimineh\Application Data\Microsoft\Installer\{C194D333-B84A-4BB7-B35E-060732D98DC4}\_6FEFF9B68218417F98F549.exe 2009-03-06 14:20 . 2004-08-20 09:24 286720 ----a-w c:\windows\system32\pdh.dll 2009-03-03 00:13 . 2004-08-20 09:24 826368 ----a-w c:\windows\system32\wininet.dll 2008-07-29 16:37 . 2008-07-29 16:37 0 -c--a-w c:\program files\temp01 2006-03-19 13:48 . 2006-03-16 19:45 310 -c--a-w c:\program files\config.log 2006-03-16 19:52 . 2006-03-16 19:46 14 -c--a-w c:\program files\md5.log 2006-03-16 19:51 . 2006-03-16 19:45 44 -c--a-w c:\program files\playerfile.log 2006-03-16 19:48 . 2006-03-16 19:48 733 -c--a-w c:\program files\wad.log 2006-03-16 19:48 . 2006-03-16 19:48 899 -c--a-w c:\program files\textures.log 2006-03-16 19:48 . 2006-03-16 19:48 903 -c--a-w c:\program files\entvars.log 2006-03-16 19:48 . 2006-03-16 19:48 211 -c--a-w c:\program files\position.log 2006-03-16 19:48 . 2006-03-16 19:48 110 -c--a-w c:\program files\skybox.log 2006-03-16 19:48 . 2006-03-16 19:48 0 -c--a-w c:\program files\entvars2.log 2006-03-16 19:48 . 2006-03-16 19:48 0 -c--a-w c:\program files\entity.log 2006-03-16 19:48 . 2006-03-16 19:48 549728 -c--a-w c:\program files\Snip_Light.exe 2006-03-16 19:45 . 2006-03-16 19:45 0 -c--a-w c:\program files\engine.log 2006-03-16 19:45 . 2006-03-16 19:45 388 -c--a-w c:\program files\engine_init.log 2006-03-16 19:45 . 2006-03-16 19:45 3590 -c--a-w c:\program files\glwin_create.log 2006-03-16 19:45 . 2006-03-16 19:45 202 -c--a-w c:\program files\main.log 2006-03-16 19:45 . 2006-03-16 19:45 65 -c--a-w c:\program files\new_engine.log 2005-10-31 21:36 . 2005-10-31 21:36 18837024 -c--a-w c:\program files\Office2003SP1-kb842532-client-enu.exe 2008-06-02 19:37 . 2008-06-02 19:37 48 --sh--w c:\windows\SB6BCE78C.tmp . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-05-11 6729728] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-04-25 139264] "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184] "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 81920] "SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-05-11 86016] "dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-05-31 122941] "ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2006-09-02 84640] "osCheck"="c:\program files\Norton Internet Security\osCheck.exe" [2006-09-05 26248] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-08-31 98304] "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2005-05-11 1519616] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\Gimineh\Menu D‚marrer\Programmes\D‚marrage\ Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-4-29 3145552] c:\documents and settings\Admiona\Menu D‚marrer\Programmes\D‚marrage\ Club Internet.lnk - c:\program files\Club-Internet\Lanceur\lanceur.exe [2007-12-26 5484544] c:\documents and settings\Gimineh\Menu D‚marrer\Programmes\D‚marrage\ Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-4-29 3145552] c:\documents and settings\Gimineh\Menu D‚marrer\Programmes\D‚marrage\ Xfire.lnk - c:\program files\Xfire\Xfire.exe [2009-4-29 3145552] [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "DisallowRun"= 0 (0x0) "HideClock"= 0 (0x0) [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ 'autocheck autochk *' [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "CTFMON.EXE"=c:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "CTSysVol"=c:\program files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r "ControlCenter2.0"=c:\program files\Brother\ControlCenter2\brctrcen.exe /autorun "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "BJCFD"=c:\program files\BroadJump\Client Foundation\CFD.exe "UpdReg"=c:\windows\UpdReg.EXE "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\MSN Messenger 7\\msnmsgr.exe"= "c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\BF2.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\Xfire\\Xfire.exe"= "c:\\Program Files\\Nival Interactive\\Blitzkrieg\\Run\\Game.exe"= "c:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"= "c:\\Program Files\\Electronic Arts\\Démo de Battlefield 2142\\BF2142.exe"= "c:\\Program Files\\Warcraft III\\war3.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Sierra\\FEARCombat\\FEARMP.exe"= "c:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"= "c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"= "c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe"= "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Program Files\\Microsoft Games\\Dungeon Siege 2\\DungeonSiege2.exe"= "c:\program files\Gameforge4D\AirRivals_FR\Launcher.atm"= c:\program files\Gameforge4D\AirRivals_FR\Launcher.atm:Enabled:GameExe2 "c:\program files\Gameforge4D\AirRivals_FR\Res-Voip\SCVoIP.exe"= c:\program files\Gameforge4D\AirRivals_FR\Res-Voip\SCVoIP.exe:Enabled:GameVoIP "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "6667:TCP"= 6667:TCP:IRC "27900:TCP"= 27900:TCP:Master Server UDP Heartbeat "28900:TCP"= 28900:TCP:Master Server List Request "29900:TCP"= 29900:TCP:GP Connection Manager "29901:TCP"= 29901:TCP:GP Search Manager "13139:TCP"= 13139:TCP:Custom UDP Pings "6500:TCP"= 6500:TCP:default roomquery port R2 MS DllSvr;MS DllSvr(MS NetWork Services);c:\windows\system32\msds32.exe [04/07/2008 19:43 167989] R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\COMMONFX.sys [27/06/2008 19:21 99352] R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\CTAUDFX.sys [27/06/2008 19:21 555032] R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\CTSBLFX.sys [27/06/2008 19:21 566296] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [05/03/2009 17:58 101936] S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.sys [27/06/2008 19:21 99352] S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.sys [27/06/2008 19:21 555032] S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\CTERFXFX.sys [27/06/2008 19:21 100888] S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.sys [27/06/2008 19:21 100888] S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.sys [27/06/2008 19:21 566296] S3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;c:\windows\system32\drivers\usb8023.sys [20/08/2004 11:24 12800] --- Autres Services/Pilotes en mémoire --- *NewlyCreated* - COMHOST HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contenu du dossier 'Tâches planifiées' 2009-05-01 c:\windows\Tasks\Norton Internet Security - Analyse système complète - Danielle.job - c:\progra~1\NORTON~1\NORTON~1\Navw32.exe [2006-09-06 21:38] 2005-09-06 c:\windows\Tasks\Rappel d'abonnement 1 auprès de l'ISP.job - c:\windows\system32\OOBE\oobebaln.exe [2004-08-20 02:34] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage mStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/ uInternet Connection Wizard,ShellNext = iexplore IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 Trusted Zone: secuser.com\www TCP: {EBE77BBF-3EB3-43C6-8504-EE8278861B09} = 194.117.200.10,194.117.200.15 DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab FF - ProfilePath - c:\documents and settings\Gimineh\Application Data\Mozilla\Firefox\Profiles\k3hx7rhk.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll ---- PARAMETRES FIREFOX ---- FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: content.max.tokenizing.time - 200000 FF - user.js: content.notify.interval - 100000 FF - user.js: content.switch.threshold - 650000 FF - user.js: nglayout.initialpaint.delay - 300 . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-22 17:44 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_USERS\S-1-5-21-2001226193-1141318510-407013838-1011\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:86,5d,cf,c3,49,41,96,b5,1f,f7,1a,9e,17,e0,77,83,aa,e9,77,09,6b,be,e6, c6,89,5c,bd,ce,20,f4,72,2c,9e,58,3b,bb,44,e7,69,2c,64,75,a1,ff,c8,b5,a6,55,\ "??"=hex:81,c6,b7,51,2c,d3,a9,76,10,71,30,02,4f,4c,18,1c [HKEY_USERS\S-1-5-21-2001226193-1141318510-407013838-1011\Software\SecuROM\License information*] "datasecu"=hex:bc,e9,16,70,b5,79,72,b7,67,3a,b6,22,30,82,15,6c,53,9f,82,55,a8, 6c,a7,de,e6,13,cf,6a,9c,ba,c5,be,73,5d,ce,3d,76,8a,df,1d,50,0e,5a,2e,5e,0e,\ "rkeysecu"=hex:d6,98,87,06,d2,07,51,a8,32,51,6c,a5,8e,84,43,10 . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'explorer.exe'(2280) c:\program files\Xfire\xfire_toucan_36913.dll c:\progra~1\WINDOW~2\wmpband.dll c:\windows\system32\eappprxy.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll c:\program files\MyWaySA\SrchAsDe\deSrcAs.dll c:\windows\system32\dla\tfswshx.dll c:\windows\system32\tfswapi.dll c:\windows\system32\dla\tfswcres.dll c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\brss01a.exe c:\windows\system32\Brmfrmps.exe c:\windows\system32\drivers\CDAC11BA.EXE c:\program files\Fichiers communs\Symantec Shared\ccSvcHst.exe c:\windows\system32\CTSVCCDA.EXE c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe c:\windows\system32\PnkBstrA.exe c:\windows\system32\PnkBstrB.exe c:\windows\system32\detls.exe . ************************************************************************** . Heure de fin: 2009-05-22 17:49 - La machine a redémarré ComboFix-quarantined-files.txt 2009-05-22 15:49 Avant-CF: 18 904 244 224 octets libres Après-CF: 20 126 760 960 octets libres Current=2 Default=2 Failed=1 LastKnownGood=4 Sets=1,2,3,4 363 --- E O F --- 2009-05-12 21:38

Merci pour votre accueil! Peut-être avez-vous mis ces liens d'instructions pour les forums dû à mon titre peu explicite, mais je ne sais pas de quoi il s'agit... si jamais vous avez une proposition de titre plus claire pour aider à se repérer les autres intervenants de ce forum, je prends volontiers! ------------- * AVG a détecté une infection, selon vous. Puis-je alors l'éradiquer simplement en utiliser AVG? * ComboFix: Après avoir suivi les instructions, lors du démarrage j'obtiens une surprise! L'antivirus qui ne se lance pas, et qui n'apparait nulle part dans ma fenêtre, est actif selon Combofix... Il est dit que des dommages sont possibles, dois-je poursuivre?

Bonjour De nombreux éléments ne marchent plus suite à une dite éradication d'un truc néfaste (virus ou trojan, je ne sais plus). Je vous expose ici le déroulement complet des événements, et vous remercie d'avance pour l'aide que vous pourrez m'apporter! Système d'exploitation: Windows Xp Edition Familiale. Hier Norton Internet Security (mon antivirus) détecte un trojan et cette chose dont j'ai le lien d'information: http://securityresponse.symantec.com/secur...-99&tabid=2 Il exécute des actions pour l'éradiquer. Dans le processus d'éradication, Norton m'informe qu'il doit redémarrer. Au prochain démarrage: Norton exécute des actions (je ne sais pas quoi exactement), sur fond bleu windows. Puis tout se lance sans problèmes. A noter: des forts ralentissements dans le navigateur internet de temps en temps. Actions: Scan système. Mais l'antivirus ne scanne que 50,000 éléments environ. En temps normal, il analyse plus de 300,000 éléments! Aujourd'hui Démarrage de l'ordinateur. Je remarque que l'antivirus Norton ne s'est pas lancé automatiquement. Je tente de le démarrer manuellement... rien ne se passe. Puis, 20 secondes environ après: Sur quoi je tente l'aide de symantec. Parfaitement inutile. Je me dirige alors vers une restoration du système. Nouveau souci. Message: "Restoration du système ne peut pas protéger votre ordinateur. Faites redémarrer votre ordinateur, puis relancez Restoration du système". A noter: de nombreuses modifications sur l'ensemble de la configuration de mon pc, de celles que j'ai vues: * les fichiers thumbs.db sont visibles (fichiers cachés visibles) * dans le menu démarrer, la colonne de raccourcis programmes permanents est vide (celle au-dessus de la colonne affichant les derniers programmes ouverts) * le dossier dans lequel j'enregistre des fichiers depuis mon navigateur est mémorisé. Lorsque j'ai voulu enregistrer quelque-chose, il m'a indiqué un dossier profond dans les dossiers système * le service pare-feu windows ne démarre pas (je comptais l'activer en secours, n'ayant plus aucune protection...) (Joie) Mes actions * Redémarrages du système. Ils se révèlent sans effet. * Je rétablis les fichiers thumbs.db en mode caché. * Je remets des raccourcis dans la colonne de raccourcis permanents. Ils ont continué à disparaitre avec les premiers redémarrages mais paraissent de rester conservés maintenant. * Norton ne marche pas. La restoration système non plus. Mais je mise sur faire marcher la restoration du système pour refaire marcher norton. Après avoir parcouru des forums, je tombe sur un programme appelé resto.bat . Ce dernier me permet d'ouvrir quelque temps le programme de restoration. Mais aucun point de restoration semble en mémoire, et je ne peux pas non plus en créer. Un redémarrage plus tard, le restoration système affiche à nouveau le message: "Restoration du système ne peut pas protéger votre ordinateur. Faites redémarrer votre ordinateur, puis relancez Restoration du système". * J'ai tenté de télécharger des antivirus gratuits pour tenter de détecter là ou le "problème" se trouve... --> Adaware AE ne marche pas. Problème lors de l'installation. --> Avast rencontre également un problème lors de l'installation, le petit programme chargé de télécharger le reste de l'antivirus ne parvient pas à télécharger. * Tentatives de scan système avec des antiviraux en ligne: nouveaux échecs (sites de bitdefender et kaspersky) * Je redémarre et passe en mode sans-échec. Je clique sur norton, qui lance un scan système après le message "certaines fonctionnalités sont indisponibles en mode sans-échec" Le scan analyse 5000 éléments et dit qu'il n'y a pas de problème, puis ferme. A nouveau, déficience. En temps normal, il analyse plus de 300,000 éléments! * Je lance AVG Anti-Rootkit. Résulat d'un scan: Dois-je les supprimer? * J'ai tenté aussi de faire marcher HiJackThis pour vous poster un rapport. Mais lorsque je clique sur l'icône de lancement, c'est comme si je cliquais sur une icône vide, rien ne se passe. Je me demande ce qui peut bien provoquer tout cela!