voila j'ai tout effectué le travail que vous aviez demandé.
voici le log de moveIt:
<EmptyTemp>
Temp folders emptied.
IE temp folders emptied.
LoadLibrary failed for C:\Windows\system32\itngxsgs.dll
C:\Windows\system32\itngxsgs.dll NOT unregistered.
C:\Windows\system32\itngxsgs.dll moved successfully.
C:\Windows\system32\EeMTsYxx.ini2 moved successfully.
C:\Windows\system32\MTstBcfe.ini2 moved successfully.
File/Folder C:\Windows\system32\dawxbgyv.dll not found.
File/Folder C:\Windows\system32\atmdtoix.dll not found.
File/Folder C:\Windows\system32\ywvkdsnr.dll not found.
<HKEY_LOCAL_MACHINE>
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{762E647A-282B-4001-AC9B-FC88DE96526A}\\ not found.
<HKEY_LOCAL_MACHINE>
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8154D204-945C-4F26-B263-526FF544EE0B}\\ not found.
<HKEY_LOCAL_MACHINE>
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\fc7481f5 not found.
<HKEY_LOCAL_MACHINE>
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\BMff47b269 not found.
OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06152008_101811
par contre j'ai eu une erreur lors du scan de moveIT mais je pense que ca doit se voir dans le log!!! j'y comprend absolument rien
voici le log de déckard:c'est que main.txt:
Deckard's System Scanner v20071014.68
Run by propriétaire on 2008-06-13 22:08:00
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- HijackThis (run as propriétaire.exe) ----------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:08:04, on 13/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\ESET\nod32kui.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\propriétaire\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\PROPRI~1.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {762E647A-282B-4001-AC9B-FC88DE96526A} - (no file)
O2 - BHO: (no name) - {8154D204-945C-4F26-B263-526FF544EE0B} - (no file)
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [OutpostMonitor] C:\PROGRA~1\Agnitum\OUTPOS~1\op_mon.exe /tray /noservice
O4 - HKLM\..\Run: [OutpostFeedBack] "C:\Program Files\Agnitum\Outpost Firewall Pro\feedback.exe" /dump:os_startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) -
http://www.eset.eu/OnlineScanner.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) -
http://sdlc-esd.sun.com/ESD42/JSCDL/jre ... 586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/s ... wflash.cab
O20 - AppInit_DLLs: c:\progra~1\agnitum\outpos~1\wl_hook.dll
O23 - Service: Agnitum Client Security Service (acssrv) - Agnitum Ltd. - C:\PROGRA~1\Agnitum\OUTPOS~1\acs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: SCM Driver Daemon (NishService) - Unknown owner - C:\Program Files\System Control Manager\edd.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Windows\system32\oodag.exe
--
End of file - 4746 bytes
-- Files created between 2008-05-13 and 2008-06-13 -----------------------------
2008-06-12 19:21:30 0 d-------- C:\Windows\LastGood.Tmp
2008-06-05 20:54:52 0 d-------- C:\Windows\system32\directx
2008-06-05 12:18:41 0 d-------- C:\Users\All Users\Malwarebytes
2008-06-05 12:18:41 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-06-05 12:03:58 126976 -----n--- C:\Windows\system32\itngxsgs.dll
2008-06-05 09:40:43 0 d-------- C:\Program Files\EsetOnlineScanner
2008-06-05 09:00:13 0 d-------- C:\Program Files\Trend Micro
2008-06-05 07:40:03 417091 --ahs---- C:\Windows\system32\EeMTsYxx.ini2
2008-06-04 12:54:39 418085 --ahs---- C:\Windows\system32\MTstBcfe.ini2
2008-06-04 12:19:15 0 d-------- C:\Windows\system32\Filt
2008-06-04 12:19:15 0 d-------- C:\Program Files\Agnitum
2008-06-04 12:19:09 0 d-------- C:\Users\All Users\Agnitum
2008-06-04 00:12:05 408576 --a------ C:\Windows\system32\Smab.dll
2008-06-04 00:12:04 719872 --a------ C:\Windows\system32\devil.dll <Not Verified; Abysmal Software; Developer's Image Library (DevIL)>
2008-06-04 00:12:03 318976 --a------ C:\Windows\system32\avisynth.dll <Not>
2008-06-04 00:12:02 70656 --a------ C:\Windows\system32\yv12vfw.dll <Not>
2008-06-04 00:12:02 70656 --a------ C:\Windows\system32\i420vfw.dll <Not>
2008-06-04 00:12:02 27648 --a------ C:\Windows\system32\AVSredirect.dll
2008-06-04 00:12:02 66560 --a------ C:\Windows\MOTA113.exe
2008-06-04 00:11:58 217073 --a------ C:\Windows\meta4.exe
2008-06-04 00:11:58 0 d-------- C:\Program Files\AviSynth 2.5
2008-06-04 00:09:23 27648 ---hs---- C:\Windows\system32\Smab0.dll
2008-06-04 00:09:20 31232 -r-hs---- C:\Windows\system32\msfDX.dll <Not>
2008-06-04 00:09:19 163328 -r-hs---- C:\Windows\system32\flvDX.dll <Not>
2008-06-04 00:06:45 0 d-------- C:\Program Files\eRightSoft
2008-06-03 09:28:36 298104 --a------ C:\Windows\system32\imon.dll <Not>
2008-06-02 21:11:10 0 d-------- C:\Users\All Users\ESET
2008-06-02 20:00:34 0 d-------- C:\Program Files\Lavalys
2008-06-01 13:43:55 40960 --a------ C:\Windows\system32\psfind.dll
2008-06-01 13:39:57 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-06-01 08:01:31 0 d-------- C:\Windows\system32\oodag
2008-06-01 07:47:45 0 d-------- C:\Program Files\OO Software
2008-05-31 17:04:34 0 d-------- C:\Users\propriétaire\.housecall6.6
2008-05-31 17:03:13 0 d-------- C:\Windows\Sun
2008-05-31 17:02:24 0 d-------- C:\Program Files\Java
2008-05-31 16:55:25 0 d-------- C:\Program Files\Common Files\Java
2008-05-31 16:36:08 0 d-------- C:\Windows\system32\Kaspersky Lab
2008-05-31 12:27:08 0 d-------- C:\Program Files\MSXML 4.0
2008-05-31 12:08:31 0 d-------- C:\Program Files\Microsoft Works
2008-05-31 12:07:29 0 d-------- C:\Program Files\Microsoft.NET
2008-05-31 12:05:39 0 d-------- C:\Program Files\Microsoft Visual Studio 8
2008-05-31 12:04:33 0 d-------- C:\Users\All Users\Microsoft Help
2008-05-31 12:03:36 0 dr-h----- C:\MSOCache
2008-05-31 11:49:46 0 d-------- C:\Program Files\Common Files\Agnitum Shared
2008-05-31 08:11:42 0 d-------- C:\Program Files\uTorrent
2008-05-31 07:57:43 0 d-------- C:\Windows\pss
2008-05-31 07:22:27 0 d-------- C:\PerfLogs
2008-05-31 00:20:02 0 d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-05-31 00:17:17 0 d-------- C:\Program Files\Lavasoft
2008-05-31 00:00:47 0 d-------- C:\Users\All Users\Nero
2008-05-31 00:00:47 0 d-------- C:\Program Files\Nero
2008-05-31 00:00:47 0 d-------- C:\Program Files\Common Files\Nero
2008-05-30 23:44:31 0 d-------- C:\Program Files\VideoLAN
2008-05-30 23:43:35 0 d-------- C:\Program Files\Foxit Software
2008-05-30 23:31:30 0 d-------- C:\Program Files\BOINC
2008-05-30 23:30:37 0 d-------- C:\Windows\Downloaded Installations
2008-05-30 23:11:43 0 d-------- C:\Program Files\DAEMON Tools Lite
2008-05-30 23:09:58 717296 --a------ C:\Windows\system32\drivers\sptd.sys
2008-05-30 22:30:51 0 d-------- C:\Program Files\TeraCopy
2008-05-30 22:25:32 0 d-------- C:\Program Files\CCleaner
2008-05-30 20:58:27 0 d-------- C:\Windows\PCHEALTH
2008-05-30 20:55:35 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2008-05-30 20:55:17 0 d-------- C:\Program Files\Windows Live
2008-05-30 20:55:09 0 d-------- C:\Users\All Users\WLInstaller
2008-05-30 20:04:54 0 --a------ C:\Windows\nsreg.dat
2008-05-30 19:51:01 0 d-------- C:\Windows\system32\Macromed
2008-05-30 17:53:22 0 d-------- C:\Program Files\Toshiba
2008-05-30 17:53:07 0 d--hs---- C:\Windows\Installer
2008-05-30 17:51:38 0 d-------- C:\Users\All Users\NVIDIA
2008-05-30 17:48:13 0 d-------- C:\Program Files\Common Files\InstallShield
2008-05-30 17:43:25 0 d-------- C:\Program Files\Intel
2008-05-30 17:43:12 0 d-------- C:\Intel
2008-05-30 17:34:22 0 d-------- C:\Windows\Panther
2008-05-30 17:34:08 0 d--hs---- C:\Boot
2008-05-30 16:44:57 0 dr------- C:\Users\propriétaire\Searches
2008-05-30 16:44:47 0 dr------- C:\Users\propriétaire\Contacts
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Voisinage réseau
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Voisinage d'impression
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Videos
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\SendTo
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Saved Games
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Recent
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Pictures
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Music
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Modèles
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Mes documents
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Menu Démarrer
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Local Settings
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Links
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Favorites
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Downloads
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Documents
2008-05-30 16:44:42 0 dr------- C:\Users\propriétaire\Desktop
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Cookies
2008-05-30 16:44:42 0 d--hs---- C:\Users\propriétaire\Application Data
2008-05-30 16:44:42 0 d--h----- C:\Users\propriétaire\AppData
2008-05-30 16:44:41 2883584 --ahs---- C:\Users\propriétaire\NTUSER.DAT
2008-05-30 16:42:19 0 d--hs---- C:\Users\Default\Modèles
2008-05-30 16:42:19 0 d--hs---- C:\Users\Default\Menu Démarrer
2008-05-30 16:42:19 0 d--hs---- C:\Users\All Users\Modèles
2008-05-30 16:42:19 0 d--hs---- C:\Users\All Users\Menu Démarrer
2008-05-30 16:42:19 0 d--hs---- C:\Users\All Users\Favoris
2008-05-30 16:42:19 0 d--hs---- C:\Users\All Users\Bureau
2008-05-30 16:42:19 0 d--hs---- C:\Program Files\Fichiers communs
2008-05-30 16:42:18 0 d--hs---- C:\Users\Default\Voisinage réseau
2008-05-30 16:42:18 0 d--hs---- C:\Users\Default\Voisinage d'impression
2008-05-30 16:42:18 0 d--hs---- C:\Users\Default\Mes documents
2008-05-30 16:37:54 0 d-------- C:\Windows\SoftwareDistribution
2008-05-30 16:36:53 0 d-------- C:\Windows\system32\catroot2
2008-05-30 16:36:42 0 d-------- C:\Windows\Debug
2008-05-30 16:35:16 0 d-------- C:\Windows\Prefetch
2008-05-30 16:35:04 0 d--hs---- C:\System Volume Information
-- Find3M Report ---------------------------------------------------------------
2008-06-13 22:02:07 672334 --a------ C:\Windows\system32\perfh00C.dat
2008-06-13 22:02:07 124434 --a------ C:\Windows\system32\perfc00C.dat
2008-06-13 21:55:17 28000 --a------ C:\Users\propriétaire\AppData\Roaming\nvModes.001
2008-06-13 21:53:03 0 d-------- C:\Program Files\Windows Mail
2008-06-13 12:51:43 0 d-------- C:\Users\propriétaire\AppData\Roaming\TeraCopy
2008-06-13 12:38:11 28000 --a------ C:\Users\propriétaire\AppData\Roaming\nvModes.dat
2008-06-07 22:17:35 0 d-------- C:\Users\propriétaire\AppData\Roaming\U3
2008-06-05 20:04:24 0 d-------- C:\Users\propriétaire\AppData\Roaming\uTorrent
2008-06-05 18:55:13 0 d-------- C:\Users\propriétaire\AppData\Roaming\vlc
2008-06-05 12:18:54 0 d-------- C:\Users\propriétaire\AppData\Roaming\Malwarebytes
2008-06-05 11:46:06 0 d-------- C:\Users\propriétaire\AppData\Roaming\DAEMON Tools
2008-06-05 11:39:04 0 d-------- C:\Program Files\MSBuild
2008-06-04 12:20:43 0 d-------- C:\Program Files\Windows Sidebar
2008-06-04 12:20:43 0 d-------- C:\Program Files\Windows Photo Gallery
2008-06-04 12:20:42 0 d-------- C:\Program Files\Windows Journal
2008-06-04 12:20:42 0 d-------- C:\Program Files\Windows Defender
2008-06-04 12:20:42 0 d-------- C:\Program Files\Windows Collaboration
2008-06-04 12:20:42 0 d-------- C:\Program Files\Windows Calendar
2008-06-04 12:20:31 0 d-------- C:\Program Files\Movie Maker
2008-06-04 12:19:48 0 d-------- C:\Users\propriétaire\AppData\Roaming\Agnitum
2008-06-02 21:12:29 0 d-------- C:\Users\propriétaire\AppData\Roaming\ESET
2008-05-31 16:55:25 0 d-------- C:\Program Files\Common Files
2008-05-31 07:30:15 174 --ahs---- C:\Program Files\desktop.ini
2008-05-31 00:20:02 0 d-------- C:\Users\propriétaire\AppData\Roaming\Lavasoft
2008-05-31 00:09:09 0 d-------- C:\Users\propriétaire\AppData\Roaming\Nero
2008-05-30 20:04:52 0 d-------- C:\Users\propriétaire\AppData\Roaming\Mozilla
2008-05-30 19:51:02 0 d-------- C:\Users\propriétaire\AppData\Roaming\Macromedia
2008-05-30 19:51:02 0 d-------- C:\Users\propriétaire\AppData\Roaming\Adobe
2008-05-30 16:44:48 0 d-------- C:\Users\propriétaire\AppData\Roaming\Identities
2008-05-30 16:42:19 0 d-------- C:\Program Files\Windows NT
2008-03-17 17:39:16 475136 --a------ C:\Windows\boinc.scr <Not>
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{762E647A-282B-4001-AC9B-FC88DE96526A}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8154D204-945C-4F26-B263-526FF544EE0B}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [20/06/2007 12:21]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [20/06/2007 12:21]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [20/06/2007 12:21]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [03/06/2008 09:27]
"OutpostMonitor"="C:\PROGRA~1\Agnitum\OUTPOS~1\op_mon.exe" [05/12/2007 11:57]
"OutpostFeedBack"="C:\Program Files\Agnitum\Outpost Firewall Pro\feedback.exe" [04/12/2007 14:45]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [19/01/2008 09:33]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)
"EnableLUA"=0 (0x0)
"EnableUIADesktopToggle"=0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=c:\progra~1\agnitum\outpos~1\wl_hook.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk]
path=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
backup=C:\Windows\pss\Bluetooth Manager.lnk.CommonStartup
backupExtension=.CommonStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
"C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
"C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
"C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
"C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
C:\Windows\system32\oodtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
%ProgramFiles%\Windows Defender\MSASCui.exe -hide
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalService nsi lltdsvc SSDPSRV upnphost SCardSvr w32time EventSystem RemoteRegistry WinHttpAutoProxySvc lanmanworkstation TBS SLUINotify THREADORDER fdrespub netprofm fdphost wcncsvc QWAVE Mcx2Svc WebClient SstpSvc
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{43e2bba2-2e5e-11dd-999e-001d9251ca1f}]
AutoRun\command- E:\PortableApps\PortableAppsMenu\PortableAppsMenu.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f4fe1c5-3015-11dd-b7ea-001d9251ca1f}]
AutoRun\command- C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe m.vbs
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e4f91d3b-2e8c-11dd-a130-001d9251ca1f}]
AutoRun\command- G:\Launch.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f4feafe2-2e84-11dd-a479-001d9251ca1f}]
AutoRun\command- C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe m.vbs
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
C:\Windows\system32\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
-- End of Deckard's System Scanner: finished at 2008-06-13 22:09:31 ------------
voici. merci encore une fois et désolé pour "l'urgence" de la situation qui vous a sidéré.