[Fermé] Ask Toolbar, Search Guard Plus, Search Guard Plus Updater, Fast Browser Search -- gros souci avec mon pc

bonjour a tous

j'aurais besoin de vos connaissances, voilà mon soucis

hier, j'ai voulue désinstaller antivir car il était périmé,donc je voulais le desintaller pour le refaire une installation propre mais voilà impossible de l'enlever et impossible de le reinstaller de plus depuis j'ai ne peux plus aller sur internet avec ie ni firefox ,et impossible de faire une restauration il me met le message d'erreur 0x80070032 j'ai essayer de remettre antivir impossible !! mon pc détecte bien internet mais je ne peux rien faire, j'ai désactiver les pare feu aucun changement! est ce que j'ai choper un virus du faite que mon antivirus était périmé ou c vista qui galère. si je suis dans le mauvais post j'en suis désolée ( je suis ce qu'on apelle une hyper novice) merci d'avance pour votre aide!

ah oui j'oubliais j'utilise le pc de ma mère pour vous contacter

bonjour a tous
nouvelles du front lol
hier soir apres avoir chercher sur le net, j'ai essayé de faire une restauration en mode sans echec et aussi d'installer un anti virus pour nettoyer impossible aussi Sad

je crois qu'il va y avoir du formatage à préparer Sad

Bonjour

En fait, tout a commencé quand tu as voulu désinstaller Antivir. Qu'est ce qui s'est passé quand tu as essayé de le faire ?

PS : quand il te dit qu'il est périmé, il faut juste lancer sa mise à jour.

bonjour

je n'arrivais pas à installer la mise à jour donc j'ai voulue le désintaller et le remettre proprement mais impossible il me dit "vous avez une ancienne version vous devez redemarrer l'ordi" c'est que j'ai fait et depuis non seulement antivir ne s'est pas installer et plus moyen d'aller sur le net ni de faire une restauration (j'ai suivi les conseils sur ce site http://www.libellules.ch/restauration_system_vista.php mais meme là impossible!!)

Re

titi2208 a écrit:: j'ai désactiver les pare feu

Tu en as combien ?

j'ai le pare feux window et bifender

Re

Tu ne dois avoir qu'un seul parefeu actif sur le pc ou le pc risque de planter. Et tu as combien d'antivirus ?

j'en avait qu'un antivir , cette aprem j'ai essayé la restauration il me dit le message suivant " impossible de créer la tache planifiée pour la raison suivante cette demande n'est pas pris en charge (0x80070032)"

apres avoir essayer d'installer spybot je ne peux finir l'installation j'ai le message suivant "l'adresse ou le nom de serveur n'a pas pu etre résolu"

si je me connecte à msn il me met message d'erreur 80072ee7
j'ai essayé en mode sans échec, derniere bonne configuration, rien ne va
sa fait beaucoup d'erreur non?
mon pc reçoit le signal wifi excellent mais je ne peut pas aller sur internet
c'est grave docteur Sad

Alors voyons voir ce qu'on peut faire.

Depuis le pc qui marche, télécharge ceci sur une clé usb
http://dlpro.antivir.com/package/removaltool/win32/en/removaltool-win32-en.exe
http://dlpro.antivir.com/down/windows/registrycleaner_en.zip

Place les sur le bureau de l'ordinateur qui ne marche pas correctement :
Lance removaltool-win32-en.exe.
Une fois fini, décompresse registrycleaner et lance le.

Antivir sera désinstallé. Des soucis pour l'instant ?

je suis en train de le faire, je vous tiens au courant merci Wink

bon alors j'ai pu lancer removaltool-win32-en.exe. mais par contre impossible de lancer
registrycleaner quand je clique dessus il me met message " the application wasn't started with administrator rights.please start the application as administrator"
comprend rien du tout !

Re

Il faut le lancer avec les droits administrateur.

Clique droit sur l'icône de registrycleaner et sélectionne "exécuter en tant qu'administrateur".

ok c'est fait il m'indique 10 clés si je les suprime il me met message d'erreur" failed to delete one or many keys"
même en traduisant je comprend rien lol

je voulais mettre le rapport que j'ai eue dans le bloc note mais je n'y arrive pas

Salut

Ok, essayons comme ça.
Clique ici pour télécharger Revo Uninstaller sur ton bureau

Lance Revo Uninstaller.
Utilisateur de vista : clique droit, sélectionne "lancer en tant qu'administrateur"
Cherche le programme que tu souhaites désinstaller (antivir), clique droit dessus et sélectionne Uninstall.
Clique sur Yes pour confirmer.
Fenêtre suivante, sélectionne Advanced mode
Clique sur Next pour lancer la désinstallation d'antivir.
Clique sur Yes pour confirmer la désinstallation.
A la fin des 4 étapes, clique sur Next pour confirmer une seconde recherche.
A la fin, clique sur Next puis Finish.

j'ai installé Revo Uninstaller. il ne trouve pas antivir dans mes programmes, peut etre qu'il n'y est plus?
en attendant les problèmes eux sont toujours là Sad

j'ai mis à jour mon profil informatique
maintenant je n'ai plus la barre acer en bas elle a disparue!! sans rien faire c'est dingue ça!!

Salut , je rentre et je sors

revouninstaller ne trouve plus le programme mais il reste peut être des traces.

va voir dans C/program files ( ou programmes sous vista ) , tu cherches s'il y a un dossier " antivir " et tu le vires et là tu pourras le réinstaller proprement.

C/ program------------------> démarrer
ordinateur
C
program..

ok merci c'est fait
il y avait un dossier mais il était vide je l'ai supprimé quand même

Ok pour antivir, voyons voir de ce côté là

Clique ici pour télécharger SystemLook (de jpshortstuff) sur ton bureau (autre lien)

Double clique sur SystemLook pour le lancer
Copie le texte qui se trouve dans l'encadré ci-dessous et colle le dans la fenêtre de texte de SystemLook.

Citation :

:regfind
Antivir
Avira

:folderfind
Antivir*
Avira*
Clique sur le bouton Look pour lancer le scan
A la fin, poste le rapport qui apparaitra dans le bloc note (le rapport se trouve aussi ici sur ton bureau sous le nom SystemLook.txt

Note: Le scan peut être plus ou moins long.

Télécharge Security Check (clique ici) de screen317 et sauvegarde-le sur ton Bureau.

Double-clic sur Security Check.exe (l'extension peut ne pas apparaitre)
(vista : clique droit, exécuter en tant qu'administrateur)
Suis les instructions données à l'écran.
Le rapport sera ouvert dans notepad : checkup.txt; Poste le dans ta prochaine réponse.

bonsoir, voici le premier rapport avec SystemLook
SystemLook v1.0 by jpshortstuff (29.08.09)
Log created at 22:47 on 16/11/2009 by Delcroix (Administrator - Elevation successful)

========== regfind ==========

Searching for "Antivir"
[HKEY_CURRENT_USER\Software\NewTech Infosystems\CD & DVD-MAKER\Recent File List]
"File1"="C:\Users\Delcroix\Downloads\eMule\Incoming\Mcafee Antivirus2007 Keygen.iso"
[HKEY_CURRENT_USER\Software\NewTech Infosystems\CD & DVD-MAKER\Recent File List]
"File1"="C:\Users\Delcroix\Downloads\eMule\Incoming\Mcafee Antivirus2007 Keygen.iso"
[HKEY_CURRENT_USER\Software\NewTech Infosystems\CD & DVD-MAKER\Recent File List]
"File1"="C:\Users\Delcroix\Downloads\eMule\Incoming\Mcafee Antivirus2007 Keygen.iso"
[HKEY_CURRENT_USER\Software\NewTech Infosystems\CD & DVD-MAKER\Recent File List]
"File1"="C:\Users\Delcroix\Downloads\eMule\Incoming\Mcafee Antivirus2007 Keygen.iso"
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
"Path"="C:\Program Files\Avira\AntiVir Desktop\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
"Path"="C:\Program Files\Avira\AntiVir Desktop\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
"Path"="C:\Program Files\Avira\AntiVir Desktop\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
"Path"="C:\Program Files\Avira\AntiVir Desktop\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.key]
@="AntiVir.Keyfile"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2781761E-28E0-4109-99FE-B9D127C57AFE}]
@="Windows Defender IOfficeAntiVirus implementation"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}\DefaultIcon]
@="C:\Program Files\Avira\AntiVir Desktop\rcimage.dll,-101"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}\Shell\Open\Command]
@="C:\Program Files\Avira\AntiVir Desktop\avcenter.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{45AC2688-0253-4ED8-97DE-B5370FA7D48A}\InProcServer32]
@="C:\Program Files\Avira\AntiVir Desktop\shlext.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{45AC2688-0253-4ED8-97DE-B5370FA7D48A}\InProcServer32]
@="C:\Program Files\Avira\AntiVir Desktop\shlext.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9086709A-DF58-4F4F-B6FC-406DAB7080AA}\InprocServer32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9086709A-DF58-4F4F-B6FC-406DAB7080AA}\InprocServer32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B25C4B00-60DF-4A30-A3B0-4B50AACDF94B}\InprocServer32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B25C4B00-60DF-4A30-A3B0-4B50AACDF94B}\InprocServer32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0623B03B-EC25-47A1-A8CA-7466651044CE}\1.0\0\win32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0623B03B-EC25-47A1-A8CA-7466651044CE}\1.0\HELPDIR]
@="C:\Program Files\Avira\AntiVir Desktop"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\ControlPanel\NameSpace\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E89B44E32BC3573469CA0FD41B885674]
"00000000000000000000000000000000"="c:\Program Files\Norton Internet Security\Norton AntiVirus\rcOffcAV.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
"Name"="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
"Name"="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
"Name"="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
"Name"="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Hardware Profiles\0001\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Hardware Profiles\0001\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Hardware Profiles\Current\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Hardware Profiles\Current\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService\Enum]
"0"="Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService\Enum]
"0"="Root\LEGACY_ANTIVIRSERVICE\0000"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Hardware Profiles\0001\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Hardware Profiles\0001\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000]
"Service"="AntiVirSchedulerService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ANTIVIRSERVICE\0000]
"Service"="AntiVirService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\0001\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\0001\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\Current\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\Current\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService\Enum]
"0"="Root\LEGACY_ANTIVIRSCHEDULERSERVICE\0000"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService\Enum]
"0"="Root\LEGACY_ANTIVIRSERVICE\0000"
[HKEY_USERS\S-1-5-21-3900110501-3121509196-1145528884-1000\Software\NewTech Infosystems\CD & DVD-MAKER\Recent File List]
"File1"="C:\Users\Delcroix\Downloads\eMule\Incoming\Mcafee Antivirus2007 Keygen.iso"
[HKEY_USERS\S-1-5-21-3900110501-3121509196-1145528884-1000\Software\NewTech Infosystems\CD & DVD-MAKER\Recent File List]
"File1"="C:\Users\Delcroix\Downloads\eMule\Incoming\Mcafee Antivirus2007 Keygen.iso"
[HKEY_USERS\S-1-5-21-3900110501-3121509196-1145528884-1000\Software\NewTech Infosystems\CD & DVD-MAKER\Recent File List]
"File1"="C:\Users\Delcroix\Downloads\eMule\Incoming\Mcafee Antivirus2007 Keygen.iso"
[HKEY_USERS\S-1-5-21-3900110501-3121509196-1145528884-1000\Software\NewTech Infosystems\CD & DVD-MAKER\Recent File List]
"File1"="C:\Users\Delcroix\Downloads\eMule\Incoming\Mcafee Antivirus2007 Keygen.iso"
[HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSCHEDULERSERVICE]
[HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_ANTIVIRSERVICE]

Searching for "Avira"
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira]
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
"Path"="C:\Program Files\Avira\AntiVir Desktop\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
"Path"="C:\Program Files\Avira\AntiVir Desktop\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
"Path"="C:\Program Files\Avira\AntiVir Desktop\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop]
"Path"="C:\Program Files\Avira\AntiVir Desktop\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}\DefaultIcon]
@="C:\Program Files\Avira\AntiVir Desktop\rcimage.dll,-101"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{305CA226-D286-468e-B848-2B2E8E697B74}\Shell\Open\Command]
@="C:\Program Files\Avira\AntiVir Desktop\avcenter.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{45AC2688-0253-4ED8-97DE-B5370FA7D48A}\InProcServer32]
@="C:\Program Files\Avira\AntiVir Desktop\shlext.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{45AC2688-0253-4ED8-97DE-B5370FA7D48A}\InProcServer32]
@="C:\Program Files\Avira\AntiVir Desktop\shlext.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9086709A-DF58-4F4F-B6FC-406DAB7080AA}\InprocServer32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9086709A-DF58-4F4F-B6FC-406DAB7080AA}\InprocServer32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B25C4B00-60DF-4A30-A3B0-4B50AACDF94B}\InprocServer32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B25C4B00-60DF-4A30-A3B0-4B50AACDF94B}\InprocServer32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0623B03B-EC25-47A1-A8CA-7466651044CE}\1.0\0\win32]
@="C:\Program Files\Avira\AntiVir Desktop\avwmi.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0623B03B-EC25-47A1-A8CA-7466651044CE}\1.0\HELPDIR]
@="C:\Program Files\Avira\AntiVir Desktop"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\ControlPanel\NameSpace\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
"Name"="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
"Name"="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
"Name"="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\AntiVir Desktop]
"Name"="Avira AntiVir Premium"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\sched.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirService]
"ImagePath"=""C:\Program Files\Avira\AntiVir Desktop\avguard.exe""

========== folderfind ==========

Searching for "Antivir*"
No folders found.

Searching for "Avira*"
No folders found.

-=End Of File=-

et voici le rapport Security Check
Results of screen317's Security Check version 0.99.0
Windows Vista Service Pack 2 (UAC is enabled)
``````````````````````````````
Antivirus/Firewall Check:
WMIC entry does not exist for antivirus; attempting automatic update.
``````````````````````````````
Anti-malware/Other Utilities Check:
Ad-Aware
HijackThis 2.0.2
Java(TM) 6 Update 13
Java(TM) 6 Update 5
Java(TM) 6 Update 7
Out of date Java installed!
Adobe Flash Player 10
Adobe Reader 7.1.0 - Français
Out of date Adobe Reader installed!
``````````````````````````````
Process Check:
objlist.exe by Laurent
Windows Defender MSASCui.exe
Ad-Aware AAWService.exe is disabled!
Ad-Aware AAWTray.exe is disabled!
``````````````````````````````
DNS Vulnerability Check:
Unknown. This method cannot test your vulnerability to DNS cache poisoning.

`````````End of Log```````````

sa fait peur quand je vois tout en rouge et le mot poisoning!

Salut

Au fait, vu que tu n'as plus d'antivirus, et qu'apparemment tu ne peux pas en installer d'autre, évite de surfer sur le net Wink

Alors il reste des traces d'antivir dans le registre. Essaie de relancer Avira RegistryCleaner pour voir si il y arrive cette fois ci (via un clic droit).

Par contre, ça m'ennuierait d'être passé à côté de quelquechose.

Clique ici pour télécharger OTL (de Old Timer) sur ton bureau
Ferme toutes tes fenêtres, puis double clique sur OTL.exe pour le lancer.
Sous Output, coche Minimal Output et laisse les autres options par défaut.
Coche Lop Check et Purity check
Sous Custom Scans (en bas), copie/colle ceci

%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.*
%PROGRAMFILES%\*.
Clique sur le bouton Run Scan en haut à gauche puis patiente quelques instants.
- A la fin du scan, deux rapports s'ouvriront (OTL.Txt et Extras.Txt). Copie/colle ici l'ensemble des rapports.
PS : Les rapport sont aussi enregistrés sur le bureau

.

Les rapports sont longs, mets un rapport par message svp.

Bonne journée

bonjour et merci encore de m'aider

voici le rapport OTL
OTL logfile created on: 17/11/2009 11:16:26 - Run 1
OTL by OldTimer - Version 3.1.6.0 Folder = C:\Users\Delcroix\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 228,13 Gb Total Space | 58,01 Gb Free Space | 25,43% Space Free | Partition Type: NTFS
Drive D: | 227,87 Gb Total Space | 103,07 Gb Free Space | 45,23% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 3,74 Gb Total Space | 3,00 Gb Free Space | 80,22% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MIKE
Current User Name: Delcroix
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Delcroix\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Users\Delcroix\AppData\Local\dgpfw.exe (courthouse)
PRC - C:\Program Files\SGPSA\ie3sh.exe ()
PRC - C:\Users\Delcroix\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe (Microsoft Corporation)
PRC - C:\Program Files\Search Guard PlusU\sgpupdaters.exe ()
PRC - C:\Program Files\Search Guard Plus\SearchGuardPlus.exe ()
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
PRC - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\System32\WUDFHost.exe (Microsoft Corporation)
PRC - C:\Windows\ehome\ehtray.exe (Microsoft Corporation)
PRC - C:\Windows\ehome\ehmsas.exe (Microsoft Corporation)
PRC - C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE (Advanced Micro Devices Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Hercules\WiFi Station\WiFiStation.exe (Hercules)
PRC - C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
PRC - C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe (Sony Ericsson Mobile Communications AB)
PRC - C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
PRC - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
PRC - C:\Program Files\Common Files\Teleca Shared\Generic.exe (Teleca AB)
PRC - C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT)
PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)
PRC - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
PRC - C:\Acer\Empowering Technology\SysMonitor.exe ()
PRC - C:\Program Files\sTabLauncher\sTabLauncher.exe (Sergio Santos)
PRC - C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
PRC - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe ()
PRC - C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - C:\Windows\vVX3000.exe (Microsoft Corporation)
PRC - C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Ulead Systems\AutoDetector\Monitor.exe (Ulead Systems, Inc.)

========== Modules (SafeList) ==========

MOD - C:\Users\Delcroix\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV - (CLTNetCnService) -- File not found
SRV - (AntiVirService) -- File not found
SRV - (AntiVirSchedulerService) -- File not found
SRV - (gusvc) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (ASKUpgrade) -- C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe ()
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (FontCache3.0.0.0) -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (idsvc) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (aawservice) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc) -- C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (ehRecvr) -- C:\Windows\ehome\ehrecvr.exe (Microsoft Corporation)
SRV - (Ati External Event Utility) -- C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (hpqcxs08) -- C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll (Hewlett-Packard Co.)
SRV - (hpqddsvc) -- C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll (Hewlett-Packard Co.)
SRV - (RichVideo) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
SRV - (Acer HomeMedia Connect Service) -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
SRV - (eDataSecurity Service) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT)
SRV - (eRecoveryService) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
SRV - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (AcerMemUsageCheckService) -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe ()
SRV - (LightScribeService) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (Pml Driver HPZ12) -- C:\Windows\System32\HPZipm12.dll (Hewlett-Packard)
SRV - (Net Driver HPZ12) -- C:\Windows\System32\HPZinw12.dll (Hewlett-Packard)
SRV - (ehSched) -- C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
SRV - (ehstart) -- C:\Windows\ehome\ehstart.dll (Microsoft Corporation)
SRV - (ose) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (StarOpen) -- C:\Windows\System32\drivers\StarOpen.sys ()
DRV - (usb_rndisx) -- C:\Windows\System32\drivers\usb8023x.sys (Microsoft Corporation)
DRV - (RMCAST) -- C:\Windows\System32\drivers\rmcast.sys (Microsoft Corporation)
DRV - (usbaudio) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (NTIDrvr) -- C:\Windows\System32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV - (s716unic) -- C:\Windows\System32\drivers\s716unic.sys (MCCI Corporation)
DRV - (s716obex) -- C:\Windows\System32\drivers\s716obex.sys (MCCI Corporation)
DRV - (s716nd5) -- C:\Windows\System32\drivers\s716nd5.sys (MCCI Corporation)
DRV - (s716mdm) -- C:\Windows\System32\drivers\s716mdm.sys (MCCI Corporation)
DRV - (s716mgmt) -- C:\Windows\System32\drivers\s716mgmt.sys (MCCI Corporation)
DRV - (s716mdfl) -- C:\Windows\System32\drivers\s716mdfl.sys (MCCI Corporation)
DRV - (s716bus) -- C:\Windows\System32\drivers\s716bus.sys (MCCI Corporation)
DRV - (IntcAzAudAddService) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (PSDNServ) -- C:\Windows\system32\drivers\PSDNServ.sys (HiTRUST)
DRV - (psdvdisk) -- C:\Windows\system32\drivers\psdvdisk.sys (HiTRUST)
DRV - (PSDFilter) -- C:\Windows\system32\DRIVERS\psdfilter.sys (HiTRUST)
DRV - (netr73) -- C:\Windows\System32\drivers\netr73.sys (Ralink Technology Inc.)
DRV - (int15) -- C:\Acer\Empowering Technology\eRecovery\int15.sys ()
DRV - (VX3000) -- C:\Windows\System32\drivers\VX3000.sys (Microsoft Corporation)
DRV - (PCAMp50) -- C:\Windows\System32\drivers\PCAMp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (PCASp50) -- C:\Windows\System32\drivers\PCASp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (yukonwlh) -- C:\Windows\System32\drivers\yk60x86.sys (Marvell)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Brserid) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (secdrv) -- C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (sscdmdm) -- C:\Windows\System32\drivers\sscdmdm.sys (MCCI)
DRV - (sscdmdfl) -- C:\Windows\System32\drivers\sscdmdfl.sys (MCCI)
DRV - (sscdbus) -- C:\Windows\System32\drivers\sscdbus.sys (MCCI)
DRV - (USBModem) -- C:\Windows\System32\drivers\lgusbmodem.sys (LG Electronics Inc.)
DRV - (usbbus) -- C:\Windows\System32\drivers\lgusbbus.sys (LG Electronics Inc.)
DRV - (PQNTDrv) -- C:\Windows\System32\drivers\PQNTDRV.sys (PowerQuest Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SEARCH PAGE = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.5

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/09/03 11:31:52 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/11/14 17:13:40 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/11/14 17:13:39 | 00,000,000 | ---D | M]

[2009/11/14 17:13:52 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Extensions
[2009/11/14 17:13:52 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/03/04 15:22:11 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2009/10/09 11:56:42 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Firefox\extensions
[2009/10/09 11:56:42 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2009/11/14 17:15:26 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Firefox\Profiles\q2t7877g.default\extensions
[2009/11/14 17:15:26 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Firefox\Profiles\q2t7877g.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/11/14 17:13:39 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/11/14 17:13:39 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/11/03 04:31:19 | 00,023,512 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/11/03 04:31:19 | 00,137,176 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/11/03 04:31:19 | 00,064,984 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2009/11/03 02:56:19 | 00,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2009/11/03 02:56:19 | 00,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2009/11/03 02:56:19 | 00,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2009/11/03 02:56:19 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/11/03 02:56:19 | 00,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2009/11/03 02:56:19 | 00,000,652 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skyrock Toolbar) - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL (Skyrock )
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll (Google Inc.)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB)
O2 - BHO: (Fast Browser Search Toolbar Helper) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O3 - HKLM\..\Toolbar: (Fast Browser Search Toolbar) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKLM\..\Toolbar: (Skyrock Toolbar) - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL (Skyrock )
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKCU\..\Toolbar\WebBrowser: (Skyrock Toolbar) - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL (Skyrock )
O4 - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe ()
O4 - HKLM..\Run: [Acer Tour] File not found
O4 - HKLM..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.)
O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)
O4 - HKLM..\Run: [eRecoveryService] File not found
O4 - HKLM..\Run: [FBSSA] C:\Program Files\SGPSA\ie3sh.exe ()
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Co.)
O4 - HKLM..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\IMBooster.exe File not found
O4 - HKLM..\Run: [LifeCam] C:\Program Files\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Ulead AutoDetector v2] C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe (Ulead Systems, Inc.)
O4 - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKCU..\Run: [dgpfw] c:\users\delcroix\appdata\local\dgpfw.exe (courthouse)
O4 - HKCU..\Run: [ehTray.exe] C:\Windows\ehome\ehtray.exe (Microsoft Corporation)
O4 - HKCU..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -Mozilla\4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6; Mozilla\4.0 ( File not found
O4 - Startup: C:\Users\Delcroix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Notification de cadeaux MSN.lnk = C:\Users\Delcroix\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: BindDirectlyToPropertySetStorage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O9 - Extra Button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll File not found
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} https://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{21dba5a5-f838-11dc-bf8f-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{21dba5a5-f838-11dc-bf8f-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Autorun.exe -- File not found
O33 - MountPoints2\{341b00a1-5d58-11dd-8a12-001d920d2227}\Shell - "" = AutoRun
O33 - MountPoints2\{341b00a1-5d58-11dd-8a12-001d920d2227}\Shell\AutoRun\command - "" = L:\LaunchU3.exe -- File not found
O33 - MountPoints2\{74bc1ad0-0add-11dd-81eb-001d920d2227}\Shell - "" = AutoRun
O33 - MountPoints2\{74bc1ad0-0add-11dd-81eb-001d920d2227}\Shell\AutoRun\command - "" = J:\Setup.exe -- File not found
O33 - MountPoints2\{f0115b54-a9b3-11dd-9cf1-c86b5e67ddf1}\Shell - "" = AutoRun
O33 - MountPoints2\{f0115b54-a9b3-11dd-9cf1-c86b5e67ddf1}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found

========== Files/Folders - Created Within 30 Days ==========

[2009/11/17 11:15:22 | 00,529,408 | ---- | C] (OldTimer Tools) -- C:\Users\Delcroix\Desktop\OTL.exe
[2009/11/16 11:22:37 | 00,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2009/11/15 22:05:00 | 01,060,864 | ---- | C] (Microsoft Corporation) -- C:\Users\Delcroix\Desktop\MFC71.dll
[2009/11/15 22:05:00 | 00,499,712 | ---- | C] (Microsoft Corporation) -- C:\Users\Delcroix\Desktop\msvcp71.dll
[2009/11/15 22:05:00 | 00,348,160 | ---- | C] (Microsoft Corporation) -- C:\Users\Delcroix\Desktop\msvcr71.dll
[2009/11/15 22:05:00 | 00,262,144 | ---- | C] (Avira GmbH) -- C:\Users\Delcroix\Desktop\RegCleaner.dll
[2009/11/15 22:05:00 | 00,090,112 | ---- | C] (Avira GmbH) -- C:\Users\Delcroix\Desktop\RegCleaner.exe
[2009/11/15 19:41:54 | 00,367,616 | ---- | C] (Avira GmbH) -- C:\Users\Delcroix\Desktop\removaltool-win32-en.exe
[2009/11/15 16:24:07 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/11/15 16:23:59 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Users\Delcroix\Desktop\HJTInstall.exe
[2009/11/14 17:13:43 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\AppData\Local\Mozilla
[2009/11/14 17:13:39 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2009/11/14 13:21:41 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\AppData\Local\MigWiz
[2009/11/14 12:57:41 | 16,409,960 | ---- | C] (Safer Networking Limited ) -- C:\Users\Delcroix\Desktop\spybotsd162.exe
[2009/11/12 19:08:48 | 00,288,256 | ---- | C] (courthouse) -- C:\Users\Delcroix\AppData\Local\dgpfw.exe
[2009/11/11 14:47:00 | 02,036,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2009/11/11 14:46:54 | 00,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
[2009/11/08 19:09:12 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\AppData\Roaming\live-player
[2009/11/08 19:08:34 | 00,000,000 | ---D | C] -- C:\Program Files\Live-Player
[2009/11/07 14:32:39 | 00,000,000 | ---D | C] -- C:\Program Files\PhotoScape
[2009/11/04 06:14:29 | 03,599,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
[2009/10/28 11:45:04 | 10,627,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmp.dll
[2009/10/28 11:45:02 | 08,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2009/10/28 11:45:02 | 00,310,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unregmp2.exe
[2009/10/22 21:25:56 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\AppData\Roaming\dBpoweramp
[2009/10/22 19:08:16 | 28,752,673 | ---- | C] (eRightSoft ) -- C:\Users\Delcroix\Desktop\super_super_v2009_build_36_anglais_19891.exe
[2007/04/24 13:53:32 | 00,053,248 | ---- | C] ( ) -- C:\Windows\System32\Interop.Shell32.dll

========== Files - Modified Within 30 Days ==========

[2009/11/17 11:17:02 | 00,001,717 | ---- | M] () -- C:\Users\Delcroix\AppData\Local\dgpfw_navps.dat
[2009/11/17 11:16:40 | 00,003,339 | ---- | M] () -- C:\Users\Delcroix\AppData\Local\dgpfw.dat
[2009/11/17 11:16:30 | 06,291,456 | -HS- | M] () -- C:\Users\Delcroix\ntuser.dat
[2009/11/17 11:15:12 | 02,106,110 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/11/17 11:15:12 | 01,530,524 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2009/11/17 11:15:12 | 00,049,234 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2009/11/17 11:15:12 | 00,046,336 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/11/17 11:15:12 | 00,011,514 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2009/11/17 11:08:29 | 00,000,091 | ---- | M] () -- C:\Users\Delcroix\AppData\Local\wngof.bat
[2009/11/17 11:07:27 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009/11/17 11:07:25 | 00,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/11/17 11:07:25 | 00,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/11/17 11:07:22 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/11/17 11:03:32 | 00,529,408 | ---- | M] (OldTimer Tools) -- C:\Users\Delcroix\Desktop\OTL.exe
[2009/11/16 23:19:15 | 00,524,288 | -HS- | M] () -- C:\Users\Delcroix\ntuser.dat{3518fcc8-6edc-11dd-bb7d-001d920d2227}.TMContainer00000000000000000001.regtrans-ms
[2009/11/16 23:19:15 | 00,065,536 | -HS- | M] () -- C:\Users\Delcroix\ntuser.dat{3518fcc8-6edc-11dd-bb7d-001d920d2227}.TM.blf
[2009/11/16 23:19:10 | 02,613,785 | -H-- | M] () -- C:\Users\Delcroix\AppData\Local\IconCache.db
[2009/11/16 11:22:37 | 00,001,061 | ---- | M] () -- C:\Users\Delcroix\Desktop\Revo Uninstaller.lnk
[2009/11/16 11:22:18 | 00,000,296 | ---- | M] () -- C:\Users\Delcroix\Desktop\revosetup.exe - Raccourci.lnk
[2009/11/15 19:38:36 | 00,909,117 | ---- | M] () -- C:\Users\Delcroix\Desktop\registrycleaner_en.zip
[2009/11/15 19:37:46 | 00,367,616 | ---- | M] (Avira GmbH) -- C:\Users\Delcroix\Desktop\removaltool-win32-en.exe
[2009/11/15 16:57:12 | 00,409,216 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/11/15 16:49:50 | 00,000,680 | ---- | M] () -- C:\Users\Delcroix\AppData\Local\d3d9caps.dat
[2009/11/15 16:48:15 | 00,001,878 | ---- | M] () -- C:\Users\Delcroix\Desktop\HijackThis.lnk
[2009/11/15 16:03:06 | 01,401,570 | ---- | M] () -- C:\Users\Delcroix\Documents\Photo appareil1007.jpg
[2009/11/15 00:03:23 | 00,000,879 | ---- | M] () -- C:\Users\Delcroix\Desktop\Internet.lnk
[2009/11/14 17:13:40 | 00,001,728 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2009/11/14 12:49:56 | 16,409,960 | ---- | M] (Safer Networking Limited ) -- C:\Users\Delcroix\Desktop\spybotsd162.exe
[2009/11/12 19:08:48 | 00,288,256 | ---- | M] (courthouse) -- C:\Users\Delcroix\AppData\Local\dgpfw.exe
[2009/11/12 03:04:06 | 00,000,275 | ---- | M] () -- C:\Windows\win.ini
[2009/11/10 19:08:39 | 00,316,552 | ---- | M] () -- C:\Users\Delcroix\AppData\Local\dgpfw_nav.dat
[2009/11/08 19:08:36 | 00,000,621 | ---- | M] () -- C:\Users\Public\Desktop\Live-Player.lnk
[2009/11/08 16:44:14 | 00,062,976 | ---- | M] () -- C:\Users\Delcroix\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/11/07 14:32:49 | 00,000,832 | ---- | M] () -- C:\Users\Delcroix\Desktop\PhotoScape.lnk
[2009/11/05 18:36:21 | 26,768,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mrt.exe
[2009/11/04 16:58:09 | 04,541,531 | ---- | M] () -- C:\Users\Delcroix\Desktop\Althea and Donna - Uptown Top Ranking.flv
[2009/11/04 13:49:47 | 27,485,2852 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2009/11/02 20:42:06 | 00,195,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2009/10/30 16:49:11 | 00,108,856 | ---- | M] () -- C:\Users\Delcroix\222.wav
[2009/10/30 16:48:35 | 00,089,656 | ---- | M] () -- C:\Users\Delcroix\Si Si Dla Bonne Ziikk xPP.wav
[2009/10/22 19:08:17 | 28,752,673 | ---- | M] (eRightSoft ) -- C:\Users\Delcroix\Desktop\super_super_v2009_build_36_anglais_19891.exe
[2009/10/19 20:26:20 | 01,482,584 | ---- | M] () -- C:\Users\Delcroix\Documents\Photo appareil1008.jpg
[2009/10/19 14:36:07 | 03,599,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll

========== Files Created - No Company Name ==========

[2009/11/16 11:22:37 | 00,001,061 | ---- | C] () -- C:\Users\Delcroix\Desktop\Revo Uninstaller.lnk
[2009/11/16 11:22:18 | 00,000,296 | ---- | C] () -- C:\Users\Delcroix\Desktop\revosetup.exe - Raccourci.lnk
[2009/11/16 01:07:31 | 02,613,785 | -H-- | C] () -- C:\Users\Delcroix\AppData\Local\IconCache.db
[2009/11/15 19:42:02 | 00,909,117 | ---- | C] () -- C:\Users\Delcroix\Desktop\registrycleaner_en.zip
[2009/11/15 16:24:07 | 00,001,878 | ---- | C] () -- C:\Users\Delcroix\Desktop\HijackThis.lnk
[2009/11/14 23:57:59 | 00,000,680 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\d3d9caps.dat
[2009/11/14 17:13:40 | 00,001,728 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2009/11/12 19:08:48 | 00,316,552 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\dgpfw_nav.dat
[2009/11/12 19:08:48 | 00,003,339 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\dgpfw.dat
[2009/11/12 19:08:48 | 00,001,717 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\dgpfw_navps.dat
[2009/11/08 19:08:36 | 00,000,621 | ---- | C] () -- C:\Users\Public\Desktop\Live-Player.lnk
[2009/11/08 19:08:33 | 00,000,091 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\wngof.bat
[2009/11/07 14:32:49 | 00,000,832 | ---- | C] () -- C:\Users\Delcroix\Desktop\PhotoScape.lnk
[2009/11/04 16:58:09 | 04,541,531 | ---- | C] () -- C:\Users\Delcroix\Desktop\Althea and Donna - Uptown Top Ranking.flv
[2009/10/30 16:49:11 | 00,108,856 | ---- | C] () -- C:\Users\Delcroix\222.wav
[2009/10/30 16:48:35 | 00,089,656 | ---- | C] () -- C:\Users\Delcroix\Si Si Dla Bonne Ziikk xPP.wav
[2009/10/20 19:05:30 | 05,443,725 | ---- | C] () -- C:\Users\Delcroix\Documents\Cascada - Evacuate The Dancefloor (Radio Edit).mp3
[2009/10/19 21:26:00 | 01,482,584 | ---- | C] () -- C:\Users\Delcroix\Documents\Photo appareil1008.jpg
[2009/10/19 21:26:00 | 01,401,570 | ---- | C] () -- C:\Users\Delcroix\Documents\Photo appareil1007.jpg
[2009/09/24 13:15:02 | 00,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/05/20 21:11:45 | 00,114,688 | ---- | C] () -- C:\Windows\System32\WLANUTL.dll
[2008/10/06 23:57:34 | 00,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2008/09/29 11:13:54 | 00,000,135 | ---- | C] () -- C:\Windows\ULEAD32.INI
[2008/07/24 13:41:16 | 00,000,810 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2008/05/11 09:16:19 | 00,000,493 | ---- | C] () -- C:\Windows\ODBC.INI
[2008/05/01 23:26:20 | 00,000,200 | ---- | C] () -- C:\Users\Delcroix\AppData\Roaming\wklnhst.dat
[2008/04/18 13:05:19 | 00,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2008/04/18 07:34:33 | 00,000,059 | ---- | C] () -- C:\Windows\wininit.ini
[2008/04/18 07:32:24 | 00,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2008/04/15 12:39:28 | 00,000,571 | ---- | C] () -- C:\Windows\System32\FeMakro.ini
[2008/04/15 12:39:28 | 00,000,497 | ---- | C] () -- C:\Windows\System32\FeAnim.ini
[2008/04/13 09:16:17 | 00,009,728 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2008/04/12 07:41:24 | 00,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2008/04/09 13:17:36 | 00,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2008/04/09 13:17:34 | 03,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008/04/09 13:17:34 | 00,755,027 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2008/04/09 13:17:34 | 00,159,839 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2008/04/09 13:17:33 | 00,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2008/04/09 13:17:33 | 00,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest
[2008/04/09 13:09:52 | 00,062,976 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/04/02 13:31:50 | 00,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini
[2008/04/02 13:31:49 | 00,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini
[2008/04/02 13:29:39 | 00,113,640 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\GDIPFONTCACHEV1.DAT
[2008/03/23 03:45:54 | 00,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007/04/24 23:47:52 | 00,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN4.dll
[2007/04/24 21:58:29 | 00,000,695 | ---- | C] () -- C:\Windows\generic.ini
[2007/04/24 21:58:28 | 00,000,109 | ---- | C] () -- C:\Windows\Alaunch.ini
[2007/04/24 13:53:32 | 00,331,776 | ---- | C] () -- C:\Windows\System32\ScrollBarLib.dll
[2007/02/06 22:58:10 | 00,204,800 | ---- | C] () -- C:\Windows\System32\NotesActnMenu.dll
[2007/02/06 22:57:58 | 00,266,240 | ---- | C] () -- C:\Windows\System32\NotesExtmngr.dll
[2007/02/06 22:57:20 | 00,086,016 | ---- | C] () -- C:\Windows\System32\MSNSpook.dll
[2007/02/06 22:56:30 | 00,028,672 | ---- | C] () -- C:\Windows\System32\BatchCrypto.dll
[2007/02/06 22:56:28 | 00,073,728 | ---- | C] () -- C:\Windows\System32\APISlice.dll
[2007/02/06 22:52:08 | 00,063,488 | ---- | C] () -- C:\Windows\System32\ShowErrMsg.dll
[2006/12/25 14:44:48 | 00,022,016 | ---- | C] () -- C:\Windows\System32\MailFormat_U.dll
[2006/11/02 13:50:50 | 00,000,174 | -HS- | C] () -- C:\Program Files\desktop.ini
[2006/11/02 13:37:35 | 00,037,665 | ---- | C] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
[2006/11/02 13:37:35 | 00,029,779 | ---- | C] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2006/11/02 13:37:35 | 00,026,489 | ---- | C] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 13:37:35 | 00,026,040 | ---- | C] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 13:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 11:25:26 | 00,557,568 | ---- | C] () -- C:\Windows\System32\hpotscl1.dll
[2006/11/02 11:23:31 | 00,000,275 | ---- | C] () -- C:\Windows\win.ini
[2006/11/02 11:23:31 | 00,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006/11/02 08:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2005/12/22 20:05:46 | 00,015,498 | ---- | C] () -- C:\Windows\VX3000.ini
[2003/04/01 09:58:02 | 00,005,260 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
[2001/12/26 14:12:30 | 00,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll
[2001/09/03 21:46:38 | 00,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll
[2001/07/30 14:33:56 | 00,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll
[2001/07/23 20:04:36 | 00,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll

========== LOP Check ==========

[2008/04/02 13:29:42 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\ATI
[2008/04/15 12:14:52 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\DAEMON Tools
[2009/10/22 21:25:56 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\dBpoweramp
[2009/03/08 22:06:52 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\eMule
[2008/06/19 07:38:16 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\GARMIN
[2009/04/01 21:07:56 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\LimeWire
[2009/11/08 19:09:12 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\live-player
[2009/07/21 01:08:23 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\Samsung
[2009/04/25 00:19:36 | 00,000,000 | RH-D | M] -- C:\Users\Delcroix\AppData\Roaming\SecuROM
[2008/09/25 13:11:33 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\Teleca
[2008/05/01 23:26:21 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\Template
[2009/01/25 03:20:48 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\URSE Games
[2009/11/14 14:35:30 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\uTorrent
[2009/11/17 11:07:27 | 00,000,006 | -H-- | M] () -- C:\Windows\Tasks\SA.DAT
[2009/11/16 23:19:16 | 00,032,500 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2007/04/24 13:54:32 | 00,003,379 | ---- | M] () -- C:\-20070424.log
[2006/09/18 22:43:36 | 00,000,024 | ---- | M] () -- C:\autoexec.bat
[2009/04/11 07:36:36 | 00,333,257 | RHS- | M] () -- C:\bootmgr
[2007/04/24 21:59:23 | 00,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2006/09/18 22:43:37 | 00,000,010 | ---- | M] () -- C:\config.sys
[2009/09/07 18:17:08 | 00,230,424 | ---- | M] () -- C:\img2-001.raw
[2008/09/29 11:13:41 | 00,000,000 | RHS- | M] () -- C:\IO.SYS
[2006/11/29 16:35:22 | 00,000,512 | ---- | M] () -- C:\MDR.iss
[2008/09/29 11:13:41 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009/11/17 11:07:16 | 35,343,72864 | -HS- | M] () -- C:\pagefile.sys
[2007/04/24 13:49:43 | 00,000,420 | ---- | M] () -- C:\RHDSetup.log
[2008/08/18 18:49:13 | 00,000,159 | ---- | M] () -- C:\Setup.log
[2008/12/26 17:49:51 | 00,000,594 | ---- | M] () -- C:\updatedatfix.log

< %PROGRAMFILES%\*.* >
[2008/09/05 10:18:33 | 00,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini

< %PROGRAMFILES%\*. >
[2007/04/24 13:31:46 | 00,000,000 | ---D | M] -- C:\Program Files\Acer Arcade Live
[2008/04/02 13:31:49 | 00,000,000 | ---D | M] -- C:\Program Files\Acer Inc
[2007/04/24 13:57:49 | 00,000,000 | ---D | M] -- C:\Program Files\Adobe
[2009/05/24 15:56:57 | 00,000,000 | ---D | M] -- C:\Program Files\AoA Audio Extractor
[2009/06/20 14:28:45 | 00,000,000 | ---D | M] -- C:\Program Files\Apowersoft
[2009/10/09 11:56:42 | 00,000,000 | ---D | M] -- C:\Program Files\AskBarDis
[2008/04/02 13:19:54 | 00,000,000 | ---D | M] -- C:\Program Files\ATI
[2008/04/02 13:21:16 | 00,000,000 | ---D | M] -- C:\Program Files\ATI Technologies
[2009/06/20 14:19:52 | 00,000,000 | ---D | M] -- C:\Program Files\Audacity
[2009/08/01 01:15:59 | 00,000,000 | ---D | M] -- C:\Program Files\AVS4YOU
[2009/02/17 22:50:33 | 00,000,000 | ---D | M] -- C:\Program Files\BinaryBiz
[2009/10/05 21:13:54 | 00,000,000 | ---D | M] -- C:\Program Files\CDex
[2009/08/01 01:09:29 | 00,000,000 | ---D | M] -- C:\Program Files\Common Files
[2007/04/24 13:27:23 | 00,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2008/04/15 12:41:29 | 00,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Lite
[2008/04/13 09:18:09 | 00,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Pro
[2009/03/21 11:37:07 | 00,000,000 | ---D | M] -- C:\Program Files\DivX
[2009/04/25 00:06:28 | 00,000,000 | ---D | M] -- C:\Program Files\EA GAMES
[2008/04/06 13:00:42 | 00,000,000 | ---D | M] -- C:\Program Files\eChanblard
[2009/05/25 15:19:11 | 00,000,000 | ---D | M] -- C:\Program Files\eMule
[2008/04/05 12:45:47 | 00,000,000 | ---D | M] -- C:\Program Files\eSobi
[2009/09/27 21:42:30 | 00,000,000 | ---D | M] -- C:\Program Files\Fast Browser Search
[2008/04/02 13:25:12 | 00,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs
[2008/06/19 07:38:12 | 00,000,000 | ---D | M] -- C:\Program Files\Garmin
[2009/01/28 15:54:22 | 00,000,000 | ---D | M] -- C:\Program Files\Google
[2008/08/20 18:41:17 | 00,000,000 | ---D | M] -- C:\Program Files\Hercules
[2008/08/20 18:17:42 | 00,000,000 | ---D | M] -- C:\Program Files\Hercules(4)
[2008/07/24 13:42:58 | 00,000,000 | ---D | M] -- C:\Program Files\Hewlett-Packard
[2008/07/24 13:45:34 | 00,000,000 | ---D | M] -- C:\Program Files\HP
[2009/10/06 19:42:06 | 00,000,000 | ---D | M] -- C:\Program Files\Illustrate
[2009/07/21 00:47:52 | 00,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2009/10/16 08:39:14 | 00,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2009/04/15 20:37:56 | 00,000,000 | ---D | M] -- C:\Program Files\Java
[2008/04/09 13:17:34 | 00,000,000 | ---D | M] -- C:\Program Files\K-Lite Codec Pack
[2008/10/19 13:14:59 | 00,000,000 | ---D | M] -- C:\Program Files\Lavasoft
[2009/03/04 15:21:49 | 00,000,000 | ---D | M] -- C:\Program Files\LimeWire
[2009/11/08 19:09:12 | 00,000,000 | ---D | M] -- C:\Program Files\Live-Player
[2009/01/25 03:24:19 | 00,000,000 | ---D | M] -- C:\Program Files\M6 Jeux
[2009/08/11 21:46:22 | 00,000,000 | ---D | M] -- C:\Program Files\Messenger Plus! Live
[2009/02/06 08:08:17 | 00,000,000 | ---D | M] -- C:\Program Files\Micro Application
[2009/05/22 16:39:45 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2008/05/11 09:15:18 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft ActiveSync
[2008/04/07 02:10:19 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2006/11/02 13:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2008/05/24 22:00:40 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft LifeCam
[2008/05/11 09:14:57 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2008/05/30 12:52:16 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2009/10/15 02:02:09 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2008/05/11 09:13:53 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2009/10/16 08:39:14 | 00,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2009/11/15 16:49:22 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2006/11/02 13:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2008/04/07 02:03:21 | 00,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2007/04/24 14:07:49 | 00,000,000 | ---D | M] -- C:\Program Files\NewTech Infosystems
[2009/01/25 03:20:31 | 00,000,000 | ---D | M] -- C:\Program Files\Oberon Media
[2008/08/24 19:13:06 | 00,000,000 | ---D | M] -- C:\Program Files\Orange
[2008/10/06 23:57:50 | 00,000,000 | ---D | M] -- C:\Program Files\PDFCreator
[2008/10/06 23:57:41 | 00,000,000 | ---D | M] -- C:\Program Files\PDFCreator Toolbar
[2009/03/03 19:02:40 | 00,000,000 | ---D | M] -- C:\Program Files\PhotoFiltre
[2009/11/07 14:36:06 | 00,000,000 | ---D | M] -- C:\Program Files\PhotoScape
[2009/02/17 22:50:34 | 00,000,000 | ---D | M] -- C:\Program Files\PowerQuest
[2009/06/20 14:42:01 | 00,000,000 | ---D | M] -- C:\Program Files\QuickMediaConverter
[2009/05/20 21:13:06 | 00,000,000 | ---D | M] -- C:\Program Files\RALINK
[2007/04/24 13:48:10 | 00,000,000 | ---D | M] -- C:\Program Files\Realtek
[2006/11/02 13:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2009/07/21 00:46:02 | 00,000,000 | ---D | M] -- C:\Program Files\Samsung
[2009/09/27 21:42:32 | 00,000,000 | ---D | M] -- C:\Program Files\Search Guard Plus
[2009/09/27 21:42:32 | 00,000,000 | ---D | M] -- C:\Program Files\Search Guard PlusU
[2009/02/17 22:50:38 | 00,000,000 | ---D | M] -- C:\Program Files\SFaxTools
[2009/05/20 19:02:59 | 00,000,000 | ---D | M] -- C:\Program Files\SFR
[2009/09/27 21:42:32 | 00,000,000 | ---D | M] -- C:\Program Files\SGPSA
[2009/03/08 14:26:58 | 00,000,000 | ---D | M] -- C:\Program Files\skyrocktbar
[2008/09/25 13:03:40 | 00,000,000 | ---D | M] -- C:\Program Files\Sony Ericsson
[2008/12/14 12:10:24 | 00,000,000 | ---D | M] -- C:\Program Files\sTabLauncher
[2009/11/15 16:24:07 | 00,000,000 | ---D | M] -- C:\Program Files\Trend Micro
[2008/09/29 11:14:14 | 00,000,000 | ---D | M] -- C:\Program Files\Ulead iPhoto Express
[2009/06/19 23:53:21 | 00,000,000 | ---D | M] -- C:\Program Files\Ulead Systems
[2006/11/02 14:01:55 | 00,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2009/05/20 21:11:45 | 00,000,000 | ---D | M] -- C:\Program Files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter
[2008/09/29 11:58:37 | 00,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2009/11/16 11:22:37 | 00,000,000 | ---D | M] -- C:\Program Files\VS Revo Group
[2009/10/16 08:39:14 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Calendar
[2009/10/16 08:39:14 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration
[2009/10/16 08:39:13 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2009/10/16 08:39:14 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2009/05/22 16:42:24 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2009/05/22 16:39:27 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive
[2009/11/14 14:35:29 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2009/10/29 03:16:19 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2008/04/02 13:25:12 | 00,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2009/10/16 08:39:13 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery
[2009/10/16 08:39:14 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2008/04/10 06:47:49 | 00,000,000 | ---D | M] -- C:\Program Files\WinRAR
[2008/04/02 13:29:07 | 00,000,000 | ---D | M] -- C:\Program Files\Yahoo!

========== Files - Unicode (All) ==========
[2009/11/02 20:39:44 | 00,400,056 | ---- | M] ()(C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ?_02_11_2009@20_33_03.wav) -- C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ♥_02_11_2009@20_33_03.wav
[2009/11/02 20:39:44 | 00,400,056 | ---- | C] ()(C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ?_02_11_2009@20_33_03.wav) -- C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ♥_02_11_2009@20_33_03.wav
[2009/11/02 20:31:56 | 00,048,056 | ---- | M] ()(C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ?_02_11_2009@20_31_40.wav) -- C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ♥_02_11_2009@20_31_40.wav
[2009/11/02 20:31:56 | 00,048,056 | ---- | C] ()(C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ?_02_11_2009@20_31_40.wav) -- C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ♥_02_11_2009@20_31_40.wav

========== Alternate Data Streams ==========

@Alternate Data Stream - 170 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:8CE646EE
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:390B30B4
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:F79DAA38
< End of report >

et voici le rapport extras
OTL Extras logfile created on: 17/11/2009 11:16:26 - Run 1
OTL by OldTimer - Version 3.1.6.0 Folder = C:\Users\Delcroix\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 228,13 Gb Total Space | 58,01 Gb Free Space | 25,43% Space Free | Partition Type: NTFS
Drive D: | 227,87 Gb Total Space | 103,07 Gb Free Space | 45,23% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 3,74 Gb Total Space | 3,00 Gb Free Space | 80,22% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MIKE
Current User Name: Delcroix
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.chm [@ = chm.file] -- "%SystemRoot%\hh.exe" %1
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %* File not found
chm.file [open] -- "%SystemRoot%\hh.exe" %1 File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 0
"InternetSettingsDisableNotify" = 0
"AutoUpdateDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0BA767B9-89FA-44D0-8C2E-CB92A77BBB11}" = lport=443 | protocol=6 | dir=in | app=system |
"{610AF0FE-F290-4AE4-A7A0-ED5492E1569C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{6A98034D-41E0-4773-8157-BD1941EB8884}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{6ECA73F9-6206-4364-A3A4-D98054CE22DB}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{A49DA8BD-EB96-4B4A-80C6-067CC0C3DCE2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{AE11CC25-7657-46CF-98F2-D3640FF5D870}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C2D4AB38-6E97-4174-8E66-885F86FA909B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{D58E0E45-E064-4DC5-8643-B456C11195BE}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{DF9A319E-EC81-48CA-B963-3C9064C82121}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{E1A9C27D-BA4B-41BC-876E-DE3E9C5A6205}" = lport=445 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{111840CE-F731-4519-AB62-D9FCD707D149}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{211761BD-2353-4FB3-8E26-BA06456FDCC5}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{2EE4B011-B71D-4D28-8EC8-7200311EFFE7}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe |
"{31A60708-F002-42F4-9908-B33BD16550DD}" = dir=in | app=c:\program files\acer arcade live\slideshow dvd\component\clsldvd.exe |
"{3344D80B-FB26-420F-8681-657B5346203D}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe |
"{383C1570-BA3C-4015-8188-2C4B6D3284C4}" = dir=in | app=c:\program files\acer arcade live\acer homemedia\homemedia.exe |
"{44FD451D-9567-4FC2-9C5F-59CCBBBC1F45}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{46D05E43-99F4-44A4-B83C-39F287D79AAA}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe |
"{4FF06BD9-4370-4B76-ACF7-40542F1CF716}" = dir=in | app=c:\program files\acer arcade live\acer homemedia connect\kernel\dms\clmsserver.exe |
"{8AA072ED-928C-4F1F-A0DD-0C4AC27613C1}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{932D4E56-6D5F-4909-A913-8B5947834283}" = dir=in | app=c:\program files\acer arcade live\acer videomagician\videomagician.exe |
"{96FB5B8F-6D95-4F7A-809C-7952FC936ACB}" = dir=in | app=c:\program files\acer arcade live\acer homemedia connect\homemedia connect.exe |
"{A5333138-7820-4A45-A0F8-9FD93BB4D627}" = dir=in | app=c:\program files\acer arcade live\acer dv magician\component\arawp.exe |
"{B4E3A7E7-6249-4309-B05F-B68B9B030828}" = dir=in | app=c:\program files\acer arcade live\acer dvdivine\dvdivine.exe |
"{C52ED614-58CC-4E45-AA8D-2569073E3BC4}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe |
"{D585109C-A3E9-47A0-B1F8-BEF827E9F6D7}" = dir=in | app=c:\program files\acer arcade live\acer dv magician\component\dvax2process.exe |
"{E4522AF9-7007-431F-8130-4EB8AADF6AE9}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe |
"{F95798C9-BF0A-4D20-BD7C-6B38E7FF9FEE}" = dir=in | app=c:\program files\acer arcade live\acer arcade live main page\acer arcade live.exe |
"TCP Query User{516395B8-5897-435E-9D59-A2C35FC78166}C:\users\delcroix\appdata\local\emule\emule.exe" = protocol=6 | dir=in | app=c:\users\delcroix\appdata\local\emule\emule.exe |
"TCP Query User{583A14D0-CE9D-4879-A81D-460DCDE55F6F}C:\program files\echanblard\emule.exe" = protocol=6 | dir=in | app=c:\program files\echanblard\emule.exe |
"TCP Query User{62D1F809-5D33-4FFE-9A42-6803C4806240}C:\program files\limewire\limewire.exe" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"TCP Query User{9B021D37-8799-46EC-9019-76F83E6E3247}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{B0C30E2F-1DF7-4DF0-A1DC-6D70ABA4D65F}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"TCP Query User{DC77006D-88CF-4A09-88A5-FF8F13F0A22E}C:\program files\echanblard\emule.exe" = protocol=6 | dir=in | app=c:\program files\echanblard\emule.exe |
"UDP Query User{20C18360-EA6D-481D-8445-722B22286353}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{67009F9B-1AE6-441C-828D-21137B99AE1C}C:\program files\echanblard\emule.exe" = protocol=17 | dir=in | app=c:\program files\echanblard\emule.exe |
"UDP Query User{70FC954C-4A9C-45A3-8435-0B4FCDD783A7}C:\users\delcroix\appdata\local\emule\emule.exe" = protocol=17 | dir=in | app=c:\users\delcroix\appdata\local\emule\emule.exe |
"UDP Query User{759A1AB1-827C-4DF8-8569-046225285C65}C:\program files\echanblard\emule.exe" = protocol=17 | dir=in | app=c:\program files\echanblard\emule.exe |
"UDP Query User{95F7BDB9-D94D-417F-A319-6A621F78FB70}C:\program files\limewire\limewire.exe" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"UDP Query User{D5ACCAD9-DC0F-4942-A372-DC7F1A91F1C0}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{001E7FB6-BB6B-4ED0-BEDC-B5404ED96D4E}" = DocProc
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00381AD3-CD59-D060-1863-E1931CF7EFA8}" = CCC Help Finnish
"{04441EE4-3631-43DB-813A-9D031380C8E5}" = MarketingReg
"{059C042E-796A-4ACC-A81A-ECC2010BB78C}" = Windows Live Messenger
"{06A940CD-4924-485E-8500-476C9E08A820}" = Samsung PC Studio 3
"{0D8753BC-F497-5ACF-44AF-AD67E5D00A9C}" = CCC Help English
"{0E691604-B328-4B4A-8F17-C9D6395075C5}" = Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter
"{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp
"{11AFE21E-B193-430D-B57A-DFF7815BB962}" = Ulead PhotoImpact 12
"{132888AE-EF67-41C5-BCA2-7D5D2488AB63}" = Acer HomeMedia Connect
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{1407F8A7-5BCE-C139-4EFD-93277F280F48}" = ccc-utility
"{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}" = Google Earth
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{22466889-7642-488d-AA0E-F619704CF7AB}" = DeviceDiscovery
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 13
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2EB715C1-786B-8B37-FDF9-0B4844AB5642}" = Catalyst Control Center Localization Spanish
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{3281291B-7AE8-6550-0AE9-7383919A1880}" = CCC Help Italian
"{35198E46-B990-F8A3-EAC6-7E079F040224}" = Catalyst Control Center Localization German
"{366FFC89-C800-4366-B903-B9C4314109A5}" = Garmin WebUpdater
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3D91E4E6-E653-5418-C2DE-697392F0E901}" = Catalyst Control Center Graphics Full Existing
"{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra
"{41581EF5-45A7-11DA-9D78-000129760D75}" = Acer SlideShow DVD
"{415CDA53-9100-476F-A7B2-476691E117C7}" = HP Smart Web Printing
"{44E54A81-9D91-4AA1-9417-80AFF134F5FF}" = Galerie de photos Windows Live
"{462E5968-A02C-4C0A-9F74-1C4DA758CD80}" = sTabLauncher
"{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}" = HPSSupply
"{4A5E2D64-C7CF-D0FC-9527-67D2510B9839}" = CCC Help Norwegian
"{4CCCB69A-E62C-D5C9-D2F4-BCDD66D5370A}" = CCC Help Japanese
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{5CC68528-24FF-4DF8-91C9-AF540F98505A}" = Sony Ericsson Drivers
"{5D20A864-DFE2-1A19-DB14-6F12399EE879}" = Catalyst Control Center Localization Danish
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67ADE9AF-5CD9-4089-8825-55DE4B366799}" = NTI Backup NOW! 4.7
"{6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}" = Microsoft Works
"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{6FA7DE6D-6569-3400-CEA2-09478C891C5E}" = Catalyst Control Center Localization Norwegian
"{6FF1E62C-7FC2-DCAD-6016-5CE6528AF325}" = CCC Help Swedish
"{718263DE-E612-4653-BB7D-7154BA9E31AB}" = Microsoft LifeCam
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7370DF47-B4F9-4279-BFC3-3F09919F720D}" = Installation Windows Live
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{76BD2250-898A-40C0-385D-8FB02741CF75}" = Catalyst Control Center Localization Finnish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{78C54562-8E15-5065-20E1-424B9B511B73}" = ATI Catalyst Install Manager
"{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver
"{80A2A967-C1B7-412D-B2B2-C4A33209C205}" = Garmin POI Loader
"{818B4951-8169-9613-C354-2398FC2839E6}" = Catalyst Control Center Graphics Full New
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call
"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01
"{879D0F0E-A889-ADDD-2CBE-223E75D9B0A1}" = CCC Help Danish
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8F52BC87-2029-464D-C1C1-7BCFB16482D3}" = Catalyst Control Center Localization French
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{9011040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{917F408E-89C1-4A76-9B1C-6A140E330AD0}" = Micro Application - Votre véranda en 3D
"{94389919-B0AA-4882-9BE8-9F0B004ECA35}" = Acer Tour
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{953A6D3D-1CA6-3C0F-CC45-9E62B87A5751}" = Catalyst Control Center Graphics Light
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C244239-ED8E-40f1-937F-51C706CD2160}" = Les Sims

2 Deluxe
"{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}" = Windows Live Sync
"{9DE1E6F5-180F-430D-AD8D-E3E4CA25BFC2}_is1" = YouTube Music Converter V1.2.2
"{A2235F18-B173-B573-8CFB-D02EAFDD89C0}" = CCC Help Spanish
"{A87B11AC-4344-4E5D-8B12-8F471A87DAD9}" = LightScribe 1.4.136.1
"{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = Acer HomeMedia
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AB6097D9-D722-4987-BD9E-A076E2848EE2}" = Acer Empowering Technology
"{AC76BA86-7AD7-1036-7B44-A71000000002}" = Adobe Reader 7.1.0 - Français
"{ACA85783-8EEA-4f0a-B2A3-A8173F30209F}" = C4200_doccd
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AEEAE013-92F1-4515-B278-139F1A692A36}" = Acer eDataSecurity Management
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B09BCBF6-87EE-4403-A336-3A9510856535}" = HP Photosmart All-In-One Software 9.0
"{B0F2F8BF-AFA5-4F58-AE0B-E06623F43417}" = AMF WinFax Pro Automator
"{B145EC69-66F5-11D8-9D75-000129760D75}" = Acer DVDivine
"{B192E1BB-98A4-4369-9271-96117A57F546}" = Sony Ericsson PC Suite
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{BFDE4176-5DFE-4db9-AA00-8F30CB001BDA}" = c4200_Help
"{C39E671D-0528-4c5e-A034-8470C5BC393A}" = C4200
"{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio 3
"{C4EAEA25-443B-B846-2A62-A4C584277FB6}" = ccc-core-static
"{C92E7DF1-624A-4D95-A4C4-18CB491B44A4}" = Sony Ericsson Device Data
"{C9CBBBA9-7A9E-0F39-5085-B541EACC52D7}" = CCC Help German
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEF82DD9-B49B-1474-8A85-C3AE5CCD5602}" = Catalyst Control Center Localization Japanese
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D462BF9E-0C35-4705-BF9B-3DF9F3816643}" = Acer ePerformance Management
"{D6BF6477-8369-489F-8DE6-3731F4B88560}" = Sony Ericsson PC Suite
"{D8B7A682-20DA-4797-8415-B1FB14D4D32B}" = PS_AIO_Software
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live
"{DECE22F4-EEDD-4615-BC56-2F4827FAD64B}" = Hercules WiFi Station
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{DFCC820E-4A31-3B88-C3FC-1CE6E93A313F}" = CCC Help Dutch
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E28750A2-45F2-4b63-99F7-9F81A94B1E2D}" = PS_AIO_Software_min
"{E647747F-6933-AF55-F413-F6C3B719A0D2}" = CCC Help French
"{E82DA8EA-4451-D48B-B212-64723027EB5E}" = Catalyst Control Center Localization Italian
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}" = Samsung PC Studio 3 USB Driver Installer
"{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}" = Adobe Flash Player 10 Plugin
"{ED935A3D-C413-8455-27E4-5799376E7F11}" = Catalyst Control Center Localization Dutch
"{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}" = Acer Arcade Live Main Page
"{F03CC256-7D39-3043-5D81-40E7636DBC1A}" = Catalyst Control Center Graphics Previews Vista
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F2FCE785-C9E7-2F06-964A-C66F5B49BA97}" = Skins
"{F6EFFB76-4A07-11DA-9D78-000129760D75}" = Acer DV Magician
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{F79A208D-D929-11D9-9D77-000129760D75}" = Acer VideoMagician
"{F964B470-B0CE-4264-150A-910BBD0AAC4E}" = Catalyst Control Center Core Implementation
"{FBA01CB8-BDE5-2CF8-D9B2-1FFEEB3803A4}" = Catalyst Control Center Localization Swedish
"{FD7F242B-9AA0-40c3-941E-3A9821D19C09}" = PS_AIO_ProductContext
"{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status
"{FE57DE70-95DE-4B64-9266-84DA811053DB}" = HP Update
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player
"Alfa 8C Slideshow" = Alfa 8C Slideshow Screen Saver
"AoA Audio Extractor_is1" = AoA Audio Extractor 1.0
"Ask Toolbar_is1" = Ask Toolbar
"Audacity_is1" = Audacity 1.2.6
"AVS Update Manager_is1" = AVS Update Manager 1.0
"dBpoweramp Music Converter" = dBpoweramp Music Converter
"eMule" = eMule
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 9.0
"HP Photosmart Essential" = HP Photosmart Essential 2.01
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HPExtendedCapabilities" = HP Customer Participation Program 9.0
"HPOCR" = HP OCR Software 9.0
"InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker
"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0
"KLiteCodecPack_is1" = K-Lite Codec Pack 3.8.5 Full
"LimeWire" = LimeWire 5.1.1
"Live-Player" = Live-Player
"Messenger Plus! Live" = Messenger Plus! Live
"Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.5)" = Mozilla Firefox (3.5.5)
"PDFCreator Toolbar" = PDFCreator Toolbar
"PhotoFiltre" = PhotoFiltre
"PhotoScape" = PhotoScape
"Revo Uninstaller" = Revo Uninstaller 1.83
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"Search Guard Plus" = Search Guard Plus (My Tattoons)
"Search Guard Plus Updater" = Search Guard Plus Updater (My Tattoons)
"SFR_Kit" = SFR - Kit de connexion
"skyrocktbar" = Skyrock Toolbar
"TBSB07183.TBSB07183Toolbar" = Fast Browser Search (My Tattoons)
"Ulead iPhoto Express 1.0" = Ulead iPhoto Express 1.0
"VirtualLab 5 Client_is1" = VirtualLab Client 5.5.17
"VLC media player" = VLC media player 0.9.2
"WinFax Merger_is1" = WinFax Merger version 2.2
"WinLiveSuite_Wave3" = Installation Windows Live
"WinRAR archiver" = Archiveur WinRAR
"wngof" = Favorit

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Notification de cadeaux MSN" = Notification de cadeaux MSN
"QUICKMEDIACONVERTER" = Player

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

bonsoir

apres avoir parcouru le net, je me suis dit que c'était un probleme de réseaux ou de dns puisqu'il parait qu'avec vista il y a des soucis, mais en faite peu importe ce que je met dans la barre d'adresse rien ne marche, aucune adresse ne fonctionne alors que mon signal wifi est excellent ,meme quand je met l'adresse191. machin je sais plus sa marche pas pfffff commence à m'énervé cet ordi Sad

Salut Titi

Et bien j'aurais dû commencer par OTL, on aurait peut être gagné du temps, tu as quelques programmes sur ton pc qui méritent qu'on s'attarde sur eux surtout qu'ils peuvent être à l'origine de tous tes problèmes. Leur installation est récente et semble coincider avec le début de tes problèmes. Je déplacerai ton sujet dans la section Aide à la désinfection.

Avant de commencer, une petite remarque :
- tu as installé des logiciels de P2P (Emule et Limewire), du fait des risques inhérents à ce genre de programmes (regarde dans ma signature), je te conseille de les désinstaller. En fait la seule chose que je te demande, c'est de ne pas les utiliser pendant cette "aide à la désinfection".

Vu que tu es sous vista, tous les logiciels que je vais te demander de télécharger doivent être lancés via un clic droit sur l'icône du programme => lancer en tant qu'administrateur.

Première étape

Généralement attrapée en téléchargeant des programmes piégés comme ceux-ci :

Citation :: go-astro
Funky Emoticons
Games-AttacK
GoRecord
HotTVPlayer / HotTVPlayer & Paris Hilton
Live-Player <<<<<<<<<<<<<<<<< tu as celui ci.
MailSkinner
Messenger Skinner
Instant Access
InternetGameBox
Official Emule (Version d'Emule modifiée)
Original Solitaire
SuperSexPlayer
Speed Downloading
Sudoplanet
Webmediaplayer
Sur le site www*games-desktop*com
Sur le site www*pc-on-internet*com ( Favorit )

Clique ici pour télécharger Navilog1 sur le bureau.

/!\ Désactive tes protections résidentes : antivirus, antispyware, parefeu ... /!\

Double clique sur Navilog1.exe pour le lancer.
Utilisateur de vista, clique droit sur l'icône, et sélectionne "Exécuter en tant qu'administrateur"

Choisi la langue 1 (f : français) et valide avec "Entrée"
Appuie sur une touche après chaque avertissement.
Au menu principal, choisis 1 (recherche/désinfection automatique) et valide.

Si aucune infection n'est détectée :
Lorsque cela te sera demandé, appuie sur une touche.
Le bloc-note va s'ouvrir, sauvegarde le rapport sur le bureau et ferme-le.
Sinon, il se trouve ici : C:\cleannavi.txt
Poste-le dans ta prochaine réponse

Si une infection est détectée, la procédure se poursuit
Lorsque cela te sera demandé, appuie sur une touche.
Le pc va redémarrer, laisse-le faire (s'il ne le fait pas automatiquement, redémarre manuellement)
Au démarrage lance ta session habituelle.
Le bureau restera vide, c'est normal, patiente jusqu'à avoir le message "nettoyage terminée le ..."
Le bloc-note va s'ouvrir, sauvegarde le rapport sur le bureau et ferme-le.
Sinon, il se trouve ici : C:\cleannavi.txt
Poste-le dans ta prochaine réponse

(PS : Si le bureau ne réapparait pas, relance le processus explorer via le gestionnaire des tâches : Fichier -> nouvelle tâche -> explorer )

/!\ N'oublie pas de réactiver tes protections résidentes /!\

Seconde étape

Lance la désinstallation de ces programmes svp :

Ask Toolbar
Search Guard Plus (My Tattoons)
Search Guard Plus Updater (My Tattoons)
Fast Browser Search (My Tattoons)

Troisième étape

Relance OTL

Dans le cadre Custom Scans/Fixes qui est en bas, colle le contenu du cadre ci dessous :

Citation :

:OTL
SRV - (ASKUpgrade) -- C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe ()
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB)
O2 - BHO: (Fast Browser Search Toolbar Helper) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O3 - HKLM\..\Toolbar: (Fast Browser Search Toolbar) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O4 - HKLM..\Run: [FBSSA] C:\Program Files\SGPSA\ie3sh.exe ()
O33 - MountPoints2\{21dba5a5-f838-11dc-bf8f-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{21dba5a5-f838-11dc-bf8f-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Autorun.exe -- File not found
[2009/10/09 11:56:42 | 00,000,000 | ---D | M] -- C:\Program Files\AskBarDis
[2009/09/27 21:42:30 | 00,000,000 | ---D | M] -- C:\Program Files\Fast Browser Search
[2009/09/27 21:42:32 | 00,000,000 | ---D | M] -- C:\Program Files\Search Guard Plus
[2009/09/27 21:42:32 | 00,000,000 | ---D | M] -- C:\Program Files\Search Guard PlusU
[2009/09/27 21:42:32 | 00,000,000 | ---D | M] -- C:\Program Files\SGPSA

:Commands
[purity]
[emptytemp]

Puis clique sur le bouton Run Fix en haut.
Laisse OTL tourner, le pc va redémarrer.
Au redémarrage, un nouveau rapport va s'ouvrir, copie/colle son contenu ici svp

Quatrième étape

Télécharge MalwareByte's Anti-Malware :

Installe le programme
Lance-le et mets à jour la base de définition.
Choisi Exécuter un examen rapide puis Rechercher
Sélectionne les disques dur et clique sur Lancer l'examen
Laisse l'analyse se faire (cela peut durer longtemps).
A la fin, vérifie que les éléments trouvés soient cochés (dans "Résultat de l'examen").
Puis clique sur Supprimer la sélection en bas.
Un redémarrage peut être nécessaire.

Un rapport va s'afficher, enregistre-le sur ton bureau. Sinon, après le démarrage, il se trouvera dans Rapports/logs[/list]
Et poste le rapport svp

Une aide à l'utilisation ici

Dernière étape

Dans ta prochaine réponse, copie/colle ici svp :
- le rapport de Navilog1
- le rapport d'OTL
- le rapport de Malwarebyte

Bonne journée Smile

bonjour

eh ben j'ai du boulot !!je m'y mets tout de suite Wink

re bonjour
alors par étape voici le navilog
Fix Navipromo version 4.0.5 commencé le 18/11/2009 10:37:19,15

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 10.11.2009 à 18h00 par IL-MAFIOSO

Microsoft

Windows Vista

Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Delcroix ( Administrator )
BOOT : Normal boot

C:\ (Local Disk) - NTFS - Total:228 Go (Free:58 Go)
D:\ (Local Disk) - NTFS - Total:227 Go (Free:103 Go)
E:\ (CD or DVD)
F:\ (USB) - FAT32 - Total:3827 Mo (Free:3 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)
K:\ (USB)

Recherche executée en mode normal

Nettoyage exécuté au redémarrage de l'ordinateur

C:\Program Files\Live-Player supprimé !
c:\progra~2\micros~1\windows\startm~1\programs\Live-Player supprimé !
C:\Users\Delcroix\AppData\Roaming\Live-Player supprimé !
c:\users\public\desktop\Live-Player.lnk supprimé !
C:\Windows\prefetch\LIVE-PLAYER.EXE-C386027A.pf supprimé !
C:\Windows\prefetch\dgpfw*.pf supprimé !
C:\Windows\prefetch\wngof*.pf supprimé !
C:\Users\Delcroix\AppData\Local\dgpfw.exe supprimé !
C:\Users\Delcroix\AppData\Local\dgpfw.dat supprimé !
C:\Users\Delcroix\AppData\Local\dgpfw_nav.dat supprimé !
C:\Users\Delcroix\AppData\Local\dgpfw_navps.dat supprimé !
C:\Users\Delcroix\AppData\Local\wngof.bat supprimé !

Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\Delcroix\AppData\Local\Temp effectué !

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Scan terminé 18/11/2009 10:43:08,67 ***

deuxième étape rapport OTL
All processes killed
========== OTL ==========
No service named ASKUpgrade was found to stop!
Unable to stop service ASKUpgrade!
File C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found.
File C:\Program Files\AskBarDis\bar\bin\askBar.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0626A63-410B-45E2-99A1-3F2475B2D695}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}\ not found.
File C:\Program Files\SGPSA\BHO.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\ not found.
File C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{1BB22D38-A411-4B13-A746-C2A4F4EC7344} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}\ not found.
File C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}\ not found.
File C:\Program Files\AskBarDis\bar\bin\askBar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\FBSSA deleted successfully.
File C:\Program Files\SGPSA\ie3sh.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{21dba5a5-f838-11dc-bf8f-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21dba5a5-f838-11dc-bf8f-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{21dba5a5-f838-11dc-bf8f-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21dba5a5-f838-11dc-bf8f-806e6f6e6963}\ not found.
File E:\Autorun.exe not found.
Folder C:\Program Files\AskBarDis\ not found.
Folder C:\Program Files\Fast Browser Search\ not found.
Folder C:\Program Files\Search Guard Plus\ not found.
Folder C:\Program Files\Search Guard PlusU\ not found.
Folder C:\Program Files\SGPSA\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Delcroix
->Temp folder emptied: 3289464 bytes
->Temporary Internet Files folder emptied: 293398777 bytes
->Java cache emptied: 60909899 bytes
->FireFox cache emptied: 3420625 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 4906 bytes
RecycleBin emptied: 51646216 bytes

Total Files Cleaned = 393,62 mb

OTL by OldTimer - Version 3.1.6.0 log created on 11182009_111227

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

et troisième étape rapprt malware
Malwarebytes' Anti-Malware 1.41
Version de la base de données: 2775
Windows 6.0.6002 Service Pack 2

18/11/2009 11:23:28
mbam-log-2009-11-18 (11-23-28).txt

Type de recherche: Examen rapide
Eléments examinés: 93311
Temps écoulé: 2 minute(s), 44 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

comme je ne peux toujours pas me connecter , je vais mettre un post sur probleme de réseau,qu'est ce que tu en pense?

Salut

Pour le moment, je te le déconseille ^^ la personne qui t'aidera et moi même allons nous gêner ... et puis ton problème de connexion est visible dans le rapport OTL.

Première étape :

Clique ici pour télécharger SREng sur ton bureau

Double clique sur l'archive pour la décompresser sur le bureau.
Lance SREngLdr.exe et clique sur System Repair (à gauche).
Utilisateur de vista, clique droit sur l'icône et sélectionne "lancer en tant qu'administrateur"
Sélectionne l'onglet Advanced Repair puis clique sur Winsock Reset.
Clique sur Ok et Oui.

Quitte SREng et redémarre Windows.

Maintenant, essaie de te connecter au net.

Seconde étape :

Relance OTL et clique sur Quick scan.
Patiente le temps du scan et copie/colle le rapport svp.

bonsoir
toujours aucune possibilé de ce connecter à internet que se soit avec ie ou firefox

je post le rapport OTL

OTL logfile created on: 18/11/2009 21:46:00 - Run 3
OTL by OldTimer - Version 3.1.6.0 Folder = C:\Users\Delcroix\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2,00 Gb Total Physical Memory | 1,84 Gb Available Physical Memory | 91,92% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 228,13 Gb Total Space | 56,50 Gb Free Space | 24,77% Space Free | Partition Type: NTFS
Drive D: | 227,87 Gb Total Space | 103,07 Gb Free Space | 45,23% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MIKE
Current User Name: Delcroix
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Minimal
Quick Scan

========== Processes (SafeList) ==========

PRC - C:\Users\Delcroix\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Users\Delcroix\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe (Microsoft Corporation)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
PRC - C:\Program Files\Internet Explorer\ieuser.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
PRC - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\System32\WUDFHost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\mobsync.exe (Microsoft Corporation)
PRC - C:\Windows\ehome\ehtray.exe (Microsoft Corporation)
PRC - C:\Windows\ehome\ehmsas.exe (Microsoft Corporation)
PRC - C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE (Advanced Micro Devices Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Hercules\WiFi Station\WiFiStation.exe (Hercules)
PRC - C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
PRC - C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe (Sony Ericsson Mobile Communications AB)
PRC - C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
PRC - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
PRC - C:\Program Files\Common Files\Teleca Shared\Generic.exe (Teleca AB)
PRC - C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT)
PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)
PRC - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
PRC - C:\Acer\Empowering Technology\SysMonitor.exe ()
PRC - C:\Program Files\sTabLauncher\sTabLauncher.exe (Sergio Santos)
PRC - C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
PRC - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe ()
PRC - C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - C:\Windows\vVX3000.exe (Microsoft Corporation)
PRC - C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Ulead Systems\AutoDetector\Monitor.exe (Ulead Systems, Inc.)

========== Modules (SafeList) ==========

MOD - C:\Users\Delcroix\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV - (CLTNetCnService) -- File not found
SRV - (AntiVirService) -- File not found
SRV - (AntiVirSchedulerService) -- File not found
SRV - (gusvc) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (FontCache3.0.0.0) -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (idsvc) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (aawservice) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc) -- C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (ehRecvr) -- C:\Windows\ehome\ehrecvr.exe (Microsoft Corporation)
SRV - (Ati External Event Utility) -- C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (hpqcxs08) -- C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll (Hewlett-Packard Co.)
SRV - (hpqddsvc) -- C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll (Hewlett-Packard Co.)
SRV - (RichVideo) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
SRV - (Acer HomeMedia Connect Service) -- C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
SRV - (eDataSecurity Service) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT)
SRV - (eRecoveryService) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
SRV - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (AcerMemUsageCheckService) -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe ()
SRV - (LightScribeService) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (Pml Driver HPZ12) -- C:\Windows\System32\HPZipm12.dll (Hewlett-Packard)
SRV - (Net Driver HPZ12) -- C:\Windows\System32\HPZinw12.dll (Hewlett-Packard)
SRV - (ehSched) -- C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
SRV - (ehstart) -- C:\Windows\ehome\ehstart.dll (Microsoft Corporation)
SRV - (ose) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SEARCH PAGE =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.5

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/09/03 11:31:52 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/11/14 17:13:40 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/11/14 17:13:39 | 00,000,000 | ---D | M]

[2009/11/14 17:13:52 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Extensions
[2009/11/14 17:13:52 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/03/04 15:22:11 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2009/11/17 21:33:50 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Firefox\Profiles\q2t7877g.default\extensions
[2009/11/14 17:15:26 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\mozilla\Firefox\Profiles\q2t7877g.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/11/14 17:13:39 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/11/14 17:13:39 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/11/03 04:31:19 | 00,023,512 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/11/03 04:31:19 | 00,137,176 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/11/03 04:31:19 | 00,064,984 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2009/11/03 02:56:19 | 00,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2009/11/03 02:56:19 | 00,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2009/11/03 02:56:19 | 00,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2009/11/03 02:56:19 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/11/03 02:56:19 | 00,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2009/11/03 02:56:19 | 00,000,652 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skyrock Toolbar) - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL (Skyrock )
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll (Google Inc.)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKLM\..\Toolbar: (Skyrock Toolbar) - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL (Skyrock )
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKCU\..\Toolbar\WebBrowser: (Skyrock Toolbar) - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL (Skyrock )
O4 - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe ()
O4 - HKLM..\Run: [Acer Tour] File not found
O4 - HKLM..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (Acer Inc.)
O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)
O4 - HKLM..\Run: [eRecoveryService] File not found
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Co.)
O4 - HKLM..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\IMBooster.exe File not found
O4 - HKLM..\Run: [LifeCam] C:\Program Files\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Ulead AutoDetector v2] C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe (Ulead Systems, Inc.)
O4 - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKCU..\Run: [ehTray.exe] C:\Windows\ehome\ehtray.exe (Microsoft Corporation)
O4 - HKCU..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -Mozilla\4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6; Mozilla\4.0 ( File not found
O4 - Startup: C:\Users\Delcroix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Notification de cadeaux MSN.lnk = C:\Users\Delcroix\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: BindDirectlyToPropertySetStorage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O9 - Extra Button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll File not found
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} https://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{341b00a1-5d58-11dd-8a12-001d920d2227}\Shell - "" = AutoRun
O33 - MountPoints2\{341b00a1-5d58-11dd-8a12-001d920d2227}\Shell\AutoRun\command - "" = L:\LaunchU3.exe -- File not found
O33 - MountPoints2\{74bc1ad0-0add-11dd-81eb-001d920d2227}\Shell - "" = AutoRun
O33 - MountPoints2\{74bc1ad0-0add-11dd-81eb-001d920d2227}\Shell\AutoRun\command - "" = J:\Setup.exe -- File not found
O33 - MountPoints2\{f0115b54-a9b3-11dd-9cf1-c86b5e67ddf1}\Shell - "" = AutoRun
O33 - MountPoints2\{f0115b54-a9b3-11dd-9cf1-c86b5e67ddf1}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found

========== Files/Folders - Created Within 14 Days ==========

[2009/11/18 21:35:25 | 02,224,128 | ---- | C] (Smallfrogs Studio) -- C:\Users\Delcroix\Desktop\SREngLdr.EXE
[2009/11/18 21:35:25 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\Desktop\Upload
[2009/11/18 11:19:15 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\AppData\Roaming\Malwarebytes
[2009/11/18 11:19:12 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/11/18 11:19:11 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/11/18 11:19:11 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2009/11/18 11:19:11 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2009/11/18 11:19:11 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/11/18 11:18:51 | 04,045,528 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Delcroix\Desktop\mbam-setup.exe
[2009/11/18 11:12:28 | 00,000,000 | ---D | C] -- C:\_OTL
[2009/11/18 10:36:39 | 00,000,000 | ---D | C] -- C:\Program Files\Navilog1
[2009/11/17 22:29:08 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\AppData\Local\Apps
[2009/11/17 11:15:22 | 00,529,408 | ---- | C] (OldTimer Tools) -- C:\Users\Delcroix\Desktop\OTL.exe
[2009/11/16 11:22:37 | 00,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2009/11/15 19:41:54 | 00,367,616 | ---- | C] (Avira GmbH) -- C:\Users\Delcroix\Desktop\removaltool-win32-en.exe
[2009/11/15 16:24:07 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/11/15 16:23:59 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Users\Delcroix\Desktop\HJTInstall.exe
[2009/11/14 17:13:43 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\AppData\Local\Mozilla
[2009/11/14 17:13:39 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2009/11/14 13:21:41 | 00,000,000 | ---D | C] -- C:\Users\Delcroix\AppData\Local\MigWiz
[2009/11/07 14:32:39 | 00,000,000 | ---D | C] -- C:\Program Files\PhotoScape
[2007/04/24 13:53:32 | 00,053,248 | ---- | C] ( ) -- C:\Windows\System32\Interop.Shell32.dll

========== Files - Modified Within 14 Days ==========

[2009/11/18 21:46:14 | 06,291,456 | -HS- | M] () -- C:\Users\Delcroix\ntuser.dat
[2009/11/18 21:42:53 | 02,142,078 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/11/18 21:42:53 | 01,564,956 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2009/11/18 21:42:53 | 00,049,234 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2009/11/18 21:42:53 | 00,046,336 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/11/18 21:42:53 | 00,011,514 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2009/11/18 21:38:06 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009/11/18 21:38:01 | 00,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/11/18 21:38:01 | 00,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/11/18 21:37:59 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/11/18 21:36:42 | 00,524,288 | -HS- | M] () -- C:\Users\Delcroix\ntuser.dat{3518fcc8-6edc-11dd-bb7d-001d920d2227}.TMContainer00000000000000000001.regtrans-ms
[2009/11/18 21:36:42 | 00,065,536 | -HS- | M] () -- C:\Users\Delcroix\ntuser.dat{3518fcc8-6edc-11dd-bb7d-001d920d2227}.TM.blf
[2009/11/18 21:36:36 | 04,284,551 | -H-- | M] () -- C:\Users\Delcroix\AppData\Local\IconCache.db
[2009/11/18 21:27:18 | 00,868,323 | ---- | M] () -- C:\Users\Delcroix\Desktop\sreng2.zip
[2009/11/18 11:19:14 | 00,000,822 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/11/18 10:27:28 | 04,045,528 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Delcroix\Desktop\mbam-setup.exe
[2009/11/18 10:26:30 | 00,228,109 | ---- | M] () -- C:\Users\Delcroix\Desktop\Navilog1.exe
[2009/11/17 11:03:32 | 00,529,408 | ---- | M] (OldTimer Tools) -- C:\Users\Delcroix\Desktop\OTL.exe
[2009/11/16 11:22:37 | 00,001,061 | ---- | M] () -- C:\Users\Delcroix\Desktop\Revo Uninstaller.lnk
[2009/11/15 19:38:36 | 00,909,117 | ---- | M] () -- C:\Users\Delcroix\Desktop\registrycleaner_en.zip
[2009/11/15 19:37:46 | 00,367,616 | ---- | M] (Avira GmbH) -- C:\Users\Delcroix\Desktop\removaltool-win32-en.exe
[2009/11/15 16:57:12 | 00,409,216 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/11/15 16:49:50 | 00,000,680 | ---- | M] () -- C:\Users\Delcroix\AppData\Local\d3d9caps.dat
[2009/11/15 16:48:15 | 00,001,878 | ---- | M] () -- C:\Users\Delcroix\Desktop\HijackThis.lnk
[2009/11/15 16:03:06 | 01,401,570 | ---- | M] () -- C:\Users\Delcroix\Documents\Photo appareil1007.jpg
[2009/11/15 00:03:23 | 00,000,879 | ---- | M] () -- C:\Users\Delcroix\Desktop\Internet.lnk
[2009/11/14 17:13:40 | 00,001,728 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2009/11/12 03:04:06 | 00,000,275 | ---- | M] () -- C:\Windows\win.ini
[2009/11/08 16:44:14 | 00,062,976 | ---- | M] () -- C:\Users\Delcroix\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/11/07 14:32:49 | 00,000,832 | ---- | M] () -- C:\Users\Delcroix\Desktop\PhotoScape.lnk

========== Files Created - No Company Name ==========

[2009/11/18 21:35:25 | 00,035,952 | ---- | C] () -- C:\Users\Delcroix\Desktop\releasenotes_cht.htm
[2009/11/18 21:35:25 | 00,032,326 | ---- | C] () -- C:\Users\Delcroix\Desktop\releasenotes_chs.htm
[2009/11/18 21:35:18 | 00,868,323 | ---- | C] () -- C:\Users\Delcroix\Desktop\sreng2.zip
[2009/11/18 11:19:14 | 00,000,822 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/11/18 10:36:30 | 00,228,109 | ---- | C] () -- C:\Users\Delcroix\Desktop\Navilog1.exe
[2009/11/16 11:22:37 | 00,001,061 | ---- | C] () -- C:\Users\Delcroix\Desktop\Revo Uninstaller.lnk
[2009/11/16 01:07:31 | 04,284,551 | -H-- | C] () -- C:\Users\Delcroix\AppData\Local\IconCache.db
[2009/11/15 19:42:02 | 00,909,117 | ---- | C] () -- C:\Users\Delcroix\Desktop\registrycleaner_en.zip
[2009/11/15 16:24:07 | 00,001,878 | ---- | C] () -- C:\Users\Delcroix\Desktop\HijackThis.lnk
[2009/11/14 23:57:59 | 00,000,680 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\d3d9caps.dat
[2009/11/14 17:13:40 | 00,001,728 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2009/11/07 14:32:49 | 00,000,832 | ---- | C] () -- C:\Users\Delcroix\Desktop\PhotoScape.lnk
[2009/09/24 13:15:02 | 00,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/05/20 21:11:45 | 00,114,688 | ---- | C] () -- C:\Windows\System32\WLANUTL.dll
[2008/10/06 23:57:34 | 00,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2008/09/29 11:13:54 | 00,000,135 | ---- | C] () -- C:\Windows\ULEAD32.INI
[2008/07/24 13:41:16 | 00,000,810 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2008/05/11 09:16:19 | 00,000,493 | ---- | C] () -- C:\Windows\ODBC.INI
[2008/05/01 23:26:20 | 00,000,200 | ---- | C] () -- C:\Users\Delcroix\AppData\Roaming\wklnhst.dat
[2008/04/18 13:05:19 | 00,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2008/04/18 07:34:33 | 00,000,059 | ---- | C] () -- C:\Windows\wininit.ini
[2008/04/18 07:32:24 | 00,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2008/04/15 12:39:28 | 00,000,571 | ---- | C] () -- C:\Windows\System32\FeMakro.ini
[2008/04/15 12:39:28 | 00,000,497 | ---- | C] () -- C:\Windows\System32\FeAnim.ini
[2008/04/13 09:16:17 | 00,009,728 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2008/04/12 07:41:24 | 00,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2008/04/09 13:17:36 | 00,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2008/04/09 13:17:34 | 03,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008/04/09 13:17:34 | 00,755,027 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2008/04/09 13:17:34 | 00,159,839 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2008/04/09 13:17:33 | 00,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2008/04/09 13:17:33 | 00,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest
[2008/04/09 13:09:52 | 00,062,976 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/04/02 13:31:50 | 00,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini
[2008/04/02 13:31:49 | 00,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini
[2008/04/02 13:29:39 | 00,113,640 | ---- | C] () -- C:\Users\Delcroix\AppData\Local\GDIPFONTCACHEV1.DAT
[2008/03/23 03:45:54 | 00,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007/04/24 23:47:52 | 00,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN4.dll
[2007/04/24 21:58:29 | 00,000,695 | ---- | C] () -- C:\Windows\generic.ini
[2007/04/24 21:58:28 | 00,000,109 | ---- | C] () -- C:\Windows\Alaunch.ini
[2007/04/24 13:53:32 | 00,331,776 | ---- | C] () -- C:\Windows\System32\ScrollBarLib.dll
[2007/02/06 22:58:10 | 00,204,800 | ---- | C] () -- C:\Windows\System32\NotesActnMenu.dll
[2007/02/06 22:57:58 | 00,266,240 | ---- | C] () -- C:\Windows\System32\NotesExtmngr.dll
[2007/02/06 22:57:20 | 00,086,016 | ---- | C] () -- C:\Windows\System32\MSNSpook.dll
[2007/02/06 22:56:30 | 00,028,672 | ---- | C] () -- C:\Windows\System32\BatchCrypto.dll
[2007/02/06 22:56:28 | 00,073,728 | ---- | C] () -- C:\Windows\System32\APISlice.dll
[2007/02/06 22:52:08 | 00,063,488 | ---- | C] () -- C:\Windows\System32\ShowErrMsg.dll
[2006/12/25 14:44:48 | 00,022,016 | ---- | C] () -- C:\Windows\System32\MailFormat_U.dll
[2006/11/02 13:50:50 | 00,000,174 | -HS- | C] () -- C:\Program Files\desktop.ini
[2006/11/02 13:37:35 | 00,037,665 | ---- | C] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
[2006/11/02 13:37:35 | 00,029,779 | ---- | C] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2006/11/02 13:37:35 | 00,026,489 | ---- | C] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 13:37:35 | 00,026,040 | ---- | C] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 13:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 11:25:26 | 00,557,568 | ---- | C] () -- C:\Windows\System32\hpotscl1.dll
[2006/11/02 11:23:31 | 00,000,275 | ---- | C] () -- C:\Windows\win.ini
[2006/11/02 11:23:31 | 00,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006/11/02 08:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2005/12/22 20:05:46 | 00,015,498 | ---- | C] () -- C:\Windows\VX3000.ini
[2003/04/01 09:58:02 | 00,005,260 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
[2001/12/26 14:12:30 | 00,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll
[2001/09/03 21:46:38 | 00,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll
[2001/07/30 14:33:56 | 00,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll
[2001/07/23 20:04:36 | 00,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll

========== LOP Check ==========

[2008/04/02 13:29:42 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\ATI
[2008/04/15 12:14:52 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\DAEMON Tools
[2009/10/22 21:25:56 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\dBpoweramp
[2009/03/08 22:06:52 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\eMule
[2008/06/19 07:38:16 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\GARMIN
[2009/04/01 21:07:56 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\LimeWire
[2009/07/21 01:08:23 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\Samsung
[2009/04/25 00:19:36 | 00,000,000 | RH-D | M] -- C:\Users\Delcroix\AppData\Roaming\SecuROM
[2008/09/25 13:11:33 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\Teleca
[2008/05/01 23:26:21 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\Template
[2009/01/25 03:20:48 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\URSE Games
[2009/11/14 14:35:30 | 00,000,000 | ---D | M] -- C:\Users\Delcroix\AppData\Roaming\uTorrent
[2009/11/18 21:38:06 | 00,000,006 | -H-- | M] () -- C:\Windows\Tasks\SA.DAT
[2009/11/18 21:36:42 | 00,032,500 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Files - Unicode (All) ==========
[2009/11/02 20:39:44 | 00,400,056 | ---- | M] ()(C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ?_02_11_2009@20_33_03.wav) -- C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ♥_02_11_2009@20_33_03.wav
[2009/11/02 20:39:44 | 00,400,056 | ---- | C] ()(C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ?_02_11_2009@20_33_03.wav) -- C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ♥_02_11_2009@20_33_03.wav
[2009/11/02 20:31:56 | 00,048,056 | ---- | M] ()(C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ?_02_11_2009@20_31_40.wav) -- C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ♥_02_11_2009@20_31_40.wav
[2009/11/02 20:31:56 | 00,048,056 | ---- | C] ()(C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ?_02_11_2009@20_31_40.wav) -- C:\Users\Delcroix\[c=13]Mademoiselle Saloméé ♥_02_11_2009@20_31_40.wav

========== Alternate Data Streams ==========

@Alternate Data Stream - 170 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:8CE646EE
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:390B30B4
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:F79DAA38
< End of report >

Effectivement.

Essaie ceci
http://www.micro-astuce.com/reseau/protocole-TCP-vista

Puis essaie de te connecter.

Enfin relance Avira RegistryCleaner en tant qu'administrateur.
Puis essaie de réinstaller antivir.

bonsoir, désolé d'avoir répondue tardivement mais je suis stage ,j'étais crevée!
alors j'ai fait ce que tu m'as dit et c'est bon je peut aller sur le net!! puis j'ai reinstaller antivir plus de problème, je te remercie vivement pour ton aide, est ce que je dois supprimer OTL et les autres programmes ou je les laisse encore un peu au cas ou il y aurait un problème?

Salut titi2208

titi2208 a écrit:: bonsoir, désolé d'avoir répondue tardivement mais je suis stage ,j'étais crevée!

Pas de souci Wink

Citation :: c'est bon je peut aller sur le net!! puis j'ai reinstaller antivir plus de problème

Super, si ça ne t'ennuie pas, je préférerais lancer 2 scans supplémentaires pour s'assurer que c'est ok et mettre à jour différents programmes.

Si tu es d'accord :

Première étape :

Télécharge TFC (clique ici) (de Old Timer) sur le bureau

TFC va fermer toutes tes fenêtres, je te conseille d'enregistrer ton travail puis de les fermer par toi même pour éviter de perdre ton travail
Double clique sur TFC.exe pour le lancer
Clique sur le bouton Start et patiente quelques instants.
Une fois le nettoyage terminé, ton pc va redémarrer. S'il ne le fait pas, redémarre le toi même pour terminer le nettoyage

Seconde étape :

Télécharge MalwareByte's Anti-Malware :

Installe le programme
Lance-le et met à jour la base de définition.
Choisi Exécuter un examen rapide puis Rechercher
Sélectionne les disques dur et clique sur Lancer l'examen
Laisse l'analyse se faire (cela peut durer longtemps).
A la fin, vérifie que les éléments trouvés soient cochés (dans "Résultat de l'examen").
Puis clique sur Supprimer la sélection en bas.
Un redémarrage peut être nécessaire.

Un rapport va s'afficher, enregistre-le sur ton bureau. Sinon, après le démarrage, il se trouvera dans Rapports/logs[/list]
Et poste le rapport svp

Une aide à l'utilisation ici

Troisième étape :

La version de Java qui est installée n'est pas à jour :
Télécharge JavaRa.zip sur ton bureau.

Extraire tout

JavaRa.exe

Recherche de mise à jour s

Mettre à jour via jucheck.exe

Rechercher

Installer

Effacer les anciennes versions

Oui

Ok

Quatrième étape :

Rends toi sur kaspersky online scanner (clique ici)

Clique sur accept en bas pour installer le programme.
Ferme toutes tes fenêtres et désactive tes logiciels de sécurité.
Clique sur exécuter pour lancer le programme.
Patiente le temps de la mise à jour ...
Clique sur my computer sous scan (à gauche)
Patiente le temps du scan.
Dès que c'est fini, clique sur view report... en bas, puis clique sur save report...

Sauvegarde le rapport sous le nom kaspersky.txt et copie/colle son contenu ici svp.
Réactive ton antivirus.

ps : n'utilise pas ton pc le temps du scan.

Dernière étape :

Copie/colle les rapports suivants dans ta prochaine réponse :
- Malwarebytes
- kaspersky

Salut titi2208

Toujours avec nous ?

Sujet fermé en raison de l'inactivité. Si vous souhaitez réouvrir ce sujet, faites en la demande par MP en indiquant la raison et le lien vers ce sujet. Cela ne s'applique qu'à titi2208. Pour les autres, créez votre propre sujet svp.

» [Fermé] SGPSA, Search Guard PlusU, Search Guard Plus, Fast Browser Search, Winsudate -- message erreur imprimante
» [Résolu] Fast Browser Search, SGPSA - Utorrent plante windows
» [fermé]Problème avec search-web.net - Besoin d'aide svp
» j ai pusieurs souci avec l ordi
» [Résolu] Aide... j'ai un souci avec mon PC