jeffoul

oups : © CJoint.com, 2012

Bonjur Pear, voici les différents rapports : Adwcleaner R1: © CJoint.com, 2012 Adwcleaner S1 : © CJoint.com, 2012 MBAM : © CJoint.com, 2012 MBAM : © CJoint.com, 2012 ZHPDIAG : © CJoint.com, 2012 Merci

Bonjour, un petit nettoyage en cours, pourriez vous m'analyser ce rapport hijackthis. © CJoint.com, 2012 Merci d'avance

Merci Pear. Tout est OK

Ce doit être ça : © CJoint.com, 2012 le fichier s'appel ZHPFix[R1].txt Je n'ai aucun fichier du nom de ZHPFixReport.txt

Bonjour Pear, voici le rapport : © CJoint.com, 2012

Voici les différents rapport RogueKiller, je n'ai pu en faire que 3 © CJoint.com, 2012 © CJoint.com, 2012 © CJoint.com, 2012 Mbam : © CJoint.com, 2012 Zhpdiag : © CJoint.com, 2012

Bonjour Pear et merci pour cette réponse éclair ! Voici le rapport ADW Cleaner : © CJoint.com, 2012 Voici le rapport Jrt.txt : malheureusement je n'ai pas eu le temps de l'enregistrer que le pC a redémarré Voici le rapport Mbam.log : © CJoint.com, 2012 Voici le rapport ZhpDiag.txt : © CJoint.com, 2012 Merci

Bonjour, un petit nettoyage en cours, pourriez vous m'analyser ce rapport hijackthis. © CJoint.com, 2012 Merci d'avance

Pour moi tout à l'air bon aussi. Merci beaucoup pour ton aide

Bonjour Bernard 53, voici le rapport :

Bonjour Bernard 53. Merci pour ta réponse, Le serveur sur lequel mon site est hébergé à été vérolé. OVH m'a dit que ça venait de mon PC, faille du au logiciel filezilla et à un virus. Voici le rapport demandé : Lien CJoint.com BGjnyoS77sn

Bonjour, Mon PC est vérolé, j'ai effectué une analyse antivir sans résultats. Voici le rapport Hijackthis : Merci par avance Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:32:53, on 08/07/2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.17006) Boot mode: Normal Running processes: C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe C:\Program Files (x86)\ASUSTek\ASUSDVD 8\PDVD8Serv.exe C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe C:\Windows\AsScrPro.exe C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\SysWOW64\rundll32.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\sysWow64\SearchProtocolHost.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [url=http://go.microsoft.com/fwlink/?linkid=54896]Bing[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url=http://go.microsoft.com/fwlink/?LinkId=54896]Bing[/url] R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [url=http://fr.msn.com/]MSN Hotmail.fr, Messenger, Skype, Sydrive, Actualité, Sport, People, Femmes - MSN France[/url] R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;127.0.0.1:9421; R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files (x86)\ASUSTek\ASUSDVD 8\PDVD8Serv.exe" O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files (x86)\ASUSTek\ASUSDVD 8\Language\Language.exe" O4 - HKLM\..\Run: [updateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5" O4 - HKLM\..\Run: [updateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min /ns O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [ccleaner] "C:\Program Files (x86)\CCleaner\CCleaner64.exe" /AUTO O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-21-521896939-2007487020-1374861470-1004\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'yoodaSGBD') O4 - HKUS\S-1-5-21-521896939-2007487020-1374861470-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'yoodaSGBD') O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe O4 - Global Startup: FancyStart daemon.lnk = ? O4 - Global Startup: SRS Premium Sound.lnk = ? O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing) O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing) O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing) O23 - Service: Akamai NetSession Interface (Akamai) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: @appmgmts.dll,-3250 (AppMgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\cscsvc.dll,-200 (CscService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%windir%\WindowsMobile\rapimgr.dll,-104 (RapiMgr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Splashtop® Remote Service (SplashtopRemoteService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Splashtop Software Updater Service (SSUService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\StorSvc.dll,-100 (StorSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%windir%\WindowsMobile\wcescomm.dll,-40079 (WcesComm) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: XobniService - Xobni Corporation - C:\Program Files (x86)\Xobni\XobniService.exe O23 - Service: SGBD Yooda SeeUrank (yoodaPG) - PostgreSQL Global Development Group - C:/Yooda/SeeUrankFalcon/pgsql/bin/pg_ctl.exe -- End of file - 28660 bytes

Bonjour TomTom 95, désolé pour ce retard de réponse, je n'ai pas reçu de notification de réponse. Merci pour ta réponse, voici les deux rapport demandé : OTM : Lien CJoint.com BExunpPPYqA ZHPDiag : Lien CJoint.com BExulR5bz6P Merci, Jeff

Bonjour, mon PC devient très lent. J'ai réalisé une analyse antivir et voici le log Hijackthis : Merci d'avance Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:34:27, on 17/05/2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16968) Boot mode: Normal Running processes: C:\Program Files (x86)\Translate Client\translateclient.exe C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe C:\Program Files (x86)\ASUSTek\ASUSDVD 8\PDVD8Serv.exe C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe C:\Windows\AsScrPro.exe C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\FeedDemon\FeedDemon.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Evernote\Evernote\Evernote.exe C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Adobe\Adobe Photoshop CS2\Photoshop.exe C:\Users\jeff\AppData\Local\Temp\Adobelm_Cleanup.0001 C:\Users\jeff\AppData\Local\Temp\Adobelm_Cleanup.0001 C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe C:\Windows\SysWOW64\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail.fr, Messenger, Skype, Actualité, Sport, People, Femmes - MSN France R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;127.0.0.1:9421; R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Koyote Soft Toolbar - {1E864EAC-892F-4A60-8C17-63123FD5731C} - C:\Program Files (x86)\Koyote Soft Toolbar\IE\5.6\koyotesoftToolbarIE.dll R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Koyote Soft Toolbar - {1E864EAC-892F-4A60-8C17-63123FD5731C} - C:\Program Files (x86)\Koyote Soft Toolbar\IE\5.6\koyotesoftToolbarIE.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll O3 - Toolbar: Koyote Soft Toolbar - {1E864EAC-892F-4A60-8C17-63123FD5731C} - C:\Program Files (x86)\Koyote Soft Toolbar\IE\5.6\koyotesoftToolbarIE.dll O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files (x86)\ASUSTek\ASUSDVD 8\PDVD8Serv.exe" O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files (x86)\ASUSTek\ASUSDVD 8\Language\Language.exe" O4 - HKLM\..\Run: [updateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5" O4 - HKLM\..\Run: [updateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min /ns O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" O4 - HKLM\..\Run: [bEWINTERNET-FR-DMGP-V2SessionManager] "C:\Program Files (x86)\Orange\IEWInternet\SessionManager\SessionManager.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKLM\..\Run: [searchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\jeff\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe O4 - Global Startup: FancyStart daemon.lnk = ? O4 - Global Startup: SRS Premium Sound.lnk = ? O4 - Global Startup: Translate Client.lnk = C:\Program Files (x86)\Translate Client\translateclient.exe O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing) O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing) O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing) O23 - Service: Akamai NetSession Interface (Akamai) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe O23 - Service: @appmgmts.dll,-3250 (AppMgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\cscsvc.dll,-200 (CscService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - Unknown owner - C:\PROGRA~2\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%windir%\WindowsMobile\rapimgr.dll,-104 (RapiMgr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service SFR Gestionnaire Connexion (ServiceSFRABCD) - Unknown owner - C:\Program Files (x86)\SFR\Gestionnaire de Connexion SFR\SFRABCDService.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\StorSvc.dll,-100 (StorSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%windir%\WindowsMobile\wcescomm.dll,-40079 (WcesComm) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: XobniService - Xobni Corporation - C:\Program Files (x86)\Xobni\XobniService.exe O23 - Service: SGBD Yooda SeeUrank (yoodaPG) - PostgreSQL Global Development Group - C:/Yooda/SeeUrankFalcon/pgsql/bin/pg_ctl.exe -- End of file - 29578 bytes

Merci Bernard, en effet tout va mieux, plus de ralentissement ! Voici le rapport Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 6433 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 24/04/2011 15:43:54 mbam-log-2011-04-24 (15-43-54).txt Type d'examen: Examen complet (C:\|D:\|) Elément(s) analysé(s): 397234 Temps écoulé: 1 heure(s), 19 minute(s), 11 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

Bonjour, merci pour votre réponse, voici le rapport : ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 12:13:29 le 23/04/2011, Mode normal Microsoft Windows 7 Professionnel (X64) jeff@JFS-PC (ASUSTeK Computer Inc. K61IC) ============== ACTION(S) ============== Dossier supprimé: C:\Users\jeff\AppData\Roaming\Mozilla\FireFox\Profiles\8c9egy24.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} Dossier supprimé: C:\Users\jeff\AppData\Roaming\Mozilla\FireFox\Profiles\8c9egy24.default\conduit Dossier supprimé: C:\Users\jeff\AppData\Roaming\Mozilla\FireFox\Profiles\8c9egy24.default\ConduitEngine Dossier supprimé: C:\Users\jeff\AppData\Roaming\Mozilla\FireFox\Profiles\8c9egy24.default\extensions\engine@conduit.com Dossier supprimé: C:\Program Files (x86)\AskBarDis Dossier supprimé: C:\Users\jeff\AppData\LocalLow\Conduit Dossier supprimé: C:\Program Files (x86)\Conduit (!) -- Fichiers temporaires supprimés. -- Fichier ouvert: C:\Users\jeff\AppData\Roaming\Mozilla\FireFox\Profiles\8c9egy24.default\Prefs.js -- Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"")... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20... Ligne supprimée: user_pref("CommunityToolbar.EngineOwner", "ConduitEngine"); Ligne supprimée: user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com"); Ligne supprimée: user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine"); Ligne supprimée: user_pref("CommunityToolbar.IsEngineShown", true); Ligne supprimée: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine"); Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com"); Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine"); Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine"); Ligne supprimée: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Thu Mar 31 2011 10:43:38 GMT+02... Ligne supprimée: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Ligne supprimée: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Apr 19 2011 16:44:02 GMT+0200"); Ligne supprimée: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Ligne supprimée: user_pref("CommunityToolbar.alert.locale", "en"); Ligne supprimée: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Ligne supprimée: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Apr 22 2011 21:34:01 GMT+0200"); Ligne supprimée: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1303303927"); Ligne supprimée: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Ligne supprimée: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Ligne supprimée: user_pref("CommunityToolbar.alert.showTrayIcon", false); Ligne supprimée: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Ligne supprimée: user_pref("CommunityToolbar.alert.userId", "b83f7a6e-7b5d-414c-a918-a02d8ea38ac2"); Ligne supprimée: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Ligne supprimée: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Ligne supprimée: user_pref("ConduitEngine.AppTrackingLastCheckTime", "Mon Apr 11 2011 09:23:38 GMT+0200"); Ligne supprimée: user_pref("ConduitEngine.CTID", "ConduitEngine"); Ligne supprimée: user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Thu Apr 21 2011 15:41:51 GMT+0200"); Ligne supprimée: user_pref("ConduitEngine.FirstServerDate", "03/31/2011 11"); Ligne supprimée: user_pref("ConduitEngine.FirstTime", true); Ligne supprimée: user_pref("ConduitEngine.FirstTimeFF3", true); Ligne supprimée: user_pref("ConduitEngine.HasUserGlobalKeys", true); Ligne supprimée: user_pref("ConduitEngine.Initialize", true); Ligne supprimée: user_pref("ConduitEngine.InitializeCommonPrefs", true); Ligne supprimée: user_pref("ConduitEngine.InstalledDate", "Thu Mar 31 2011 10:43:39 GMT+0200"); Ligne supprimée: user_pref("ConduitEngine.IsMulticommunity", false); Ligne supprimée: user_pref("ConduitEngine.IsOpenThankYouPage", false); Ligne supprimée: user_pref("ConduitEngine.IsOpenUninstallPage", true); Ligne supprimée: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Fri Apr 22 2011 21:34:22 GMT+0200"); Ligne supprimée: user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sat Apr 23 2011 11:58:32 GMT+0200"); Ligne supprimée: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true); Ligne supprimée: user_pref("ConduitEngine.SettingsLastCheckTime", "Sat Apr 23 2011 11:58:32 GMT+0200"); Ligne supprimée: user_pref("ConduitEngine.UserID", "UN19697287744137348"); Ligne supprimée: user_pref("ConduitEngine.componentAlertEnabled", false); Ligne supprimée: user_pref("ConduitEngine.engineLocale", "fr"); Ligne supprimée: user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Fri Apr 22 2011 21:34:22 GMT+0200"); Ligne supprimée: user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sat Apr 23 2011 11:58:33 GMT+0200"); Ligne supprimée: user_pref("ConduitEngine.initDone", true); Ligne supprimée: user_pref("ConduitEngine.isAppTrackingManagerOn", true); Ligne supprimée: user_pref("ConduitEngine.usagesFlag", 2); Ligne supprimée: user_pref("extensions.seoquake.baidu-mode", 0); -- Fichier Fermé -- Clé supprimée: HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f} Clé supprimée: HKLM\Software\Classes\CLSID\{08993A7C-E764-4172-9627-BFB5EA6897B2} Clé supprimée: HKLM\Software\Classes\CLSID\{128A6C66-AC6A-4617-8268-AB7F47B7215E} Clé supprimée: HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed} Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{201f27d4-3704-41d6-89c1-aa35e39143ed} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201f27d4-3704-41d6-89c1-aa35e39143ed} Clé supprimée: HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041d03e-fd4b-44e0-b742-2d9b88305f98} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041d03e-fd4b-44e0-b742-2d9b88305f98} Clé supprimée: HKLM\Software\Classes\CLSID\{571715D7-3395-4DF0-B43C-784836209E60} Clé supprimée: HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf} Clé supprimée: HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b} Clé supprimée: HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362} Clé supprimée: HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA} Clé supprimée: HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9} Clé supprimée: HKLM\Software\Classes\Interface\{DB885111-F39F-4D88-9EE5-C88460B6DF7B} Clé supprimée: HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742} Clé supprimée: HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150} Clé supprimée: HKLM\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2} Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton.1 Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl.1 Clé supprimée: HKLM\Software\Classes\AskToolBar.SettingsPlugin Clé supprimée: HKLM\Software\Classes\AskToolBar.SettingsPlugin.1 Clé supprimée: HKLM\Software\Classes\Toolbar.CT2504091 Clé supprimée: HKLM\Software\Conduit Clé supprimée: HKCU\Software\Conduit Clé supprimée: HKCU\Software\AppDataLow\AskBarDis Clé supprimée: HKCU\Software\AppDataLow\Toolbar Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1 Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{3041D03E-FD4B-44E0-B742-2D9B88305F98} Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{3041D03E-FD4B-44E0-B742-2D9B88305F98} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [4.0 (fr)] **** Plugins\npFoxitReaderPlugin.dll (Foxit Software Company) Searchplugins\bing.xml ( hxxp://www.bing.com/search) Components\browsercomps.dll (Mozilla Foundation) -- C:\Users\jeff\AppData\Roaming\Mozilla\FireFox\Profiles\8c9egy24.default -- Extensions\DTToolbar@toolbarnet.com (DAEMON Tools Toolbar) Extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74} (SeoQuake) Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} (Vuze Remote Community Toolbar) Extensions\{fae5bcbc-dd73-439a-a15e-5b9ff39c0e9b} (KeywordSpy™ SEO/PPC) Prefs.js - browser.download.lastDir, C:\\Users\\jeff\\Desktop Prefs.js - browser.startup.homepage, hxxp://www.brestunt.com Prefs.js - browser.startup.homepage_override.buildID, 20110318052756 Prefs.js - browser.startup.homepage_override.mstone, rv:2.0 Prefs.js - privacy.popups.showBrowserMessage, false ======================================== **** Google Chrome Version [10.0.648.205] **** -- C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Activé: true) (?) Preferences - homepage: hxxp://www.google.com/ Preferences - homepage_is_newtabpage: false Plugin - "Silverlight" (Activé: true) Plugin - "Foxit Reader Plugin for Mozilla" (Activé: true) ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_URLSearchHooks|{ba14329e-9550-4989-b3f2-9732e92d17cc} - "Vuze Remote Toolbar" (C:\Program Files (x86)\Vuze_Remote\tbVuze.dll) HKLM_URLSearchHooks|{ba14329e-9550-4989-b3f2-9732e92d17cc} - "Vuze Remote Toolbar" (C:\Program Files (x86)\Vuze_Remote\tbVuze.dll) HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll) HKCU_Toolbar\WebBrowser|{BA14329E-9550-4989-B3F2-9732E92D17CC} (C:\Program Files (x86)\Vuze_Remote\tbVuze.dll) HKLM_Toolbar|{32099AAC-C132-4136-9E9A-4E364A424E17} (C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll) HKLM_Toolbar|{ba14329e-9550-4989-b3f2-9732e92d17cc} (C:\Program Files (x86)\Vuze_Remote\tbVuze.dll) HKLM_ElevationPolicy\34bd7e0a-a7ee-40c7-8e97-b07a29e70d73 - C:\Program Files (x86)\Vuze_Remote\Vuze_RemoteToolbarHelper.exe (?) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "@C:\Windows\WindowsMobile\INetRepl.dll,-222" (C:\Windows\WindowsMobile\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?) BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll) BHO\{ba14329e-9550-4989-b3f2-9732e92d17cc} - "Vuze Remote Toolbar" (C:\Program Files (x86)\Vuze_Remote\tbVuze.dll) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 122 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 17 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 23/04/2011 12:13:49 (13122 Octet(s)) Fin à: 12:15:15, 23/04/2011 ============== E.O.F ==============

Bonjour, je me permet un UP

Bonjour, Pourriez vous m'analyser ce rapport ? Rapport Hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:25:58, on 17/04/2011 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16766) Boot mode: Normal Running processes: C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\ASUSTek\ASUSDVD 8\PDVD8Serv.exe C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe C:\Program Files (x86)\LiveZilla\LiveZilla.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe C:\Program Files (x86)\CardDetector\HUAWEI\CardDetector.exe C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe C:\Windows\AsScrPro.exe C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\jeff\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\SysWOW64\DllHost.exe C:\Users\jeff\Downloads\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Asus | MSN R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Asus | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Bing, Actualité et Sport R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files (x86)\ASUSTek\ASUSDVD 8\PDVD8Serv.exe" O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files (x86)\ASUSTek\ASUSDVD 8\Language\Language.exe" O4 - HKLM\..\Run: [updateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5" O4 - HKLM\..\Run: [updateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe O4 - HKLM\..\Run: [LiveZilla] "C:\Program Files (x86)\LiveZilla\LiveZilla.exe" -minimize O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min /ns O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [HTC Sync Loader] "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup O4 - HKLM\..\Run: [CardDetectorHUAWEI] C:\Program Files (x86)\CardDetector\HUAWEI\CardDetector.exe O4 - HKLM\..\Run: [bEWINTERNET-FR-DMGP-V2SessionManager] "C:\Program Files (x86)\Orange\IEWInternet\SessionManager\SessionManager.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTProAgent.exe" -autorun O4 - HKCU\..\Run: [Google Update] "C:\Users\jeff\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - Global Startup: FancyStart daemon.lnk = ? O4 - Global Startup: SRS Premium Sound.lnk = ? O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O13 - Gopher Prefix: O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~2\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing) O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Service SFR Gestionnaire Connexion (ServiceSFRABCD) - SFR & Celliance - C:\Program Files (x86)\SFR\Gestionnaire de Connexion SFR\SFRABCDService.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: SGBD Yooda SeeUrank (yoodaPG) - PostgreSQL Global Development Group - C:/Yooda/SeeUrankFalcon/pgsql/bin/pg_ctl.exe -- End of file - 13698 bytes Rapport antivir : Avira AntiVir Personal Date de création du fichier de rapport : dimanche 17 avril 2011 21:44 La recherche porte sur 2568972 souches de virus. Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus Numéro de série : 0000149996-ADJIE-0000001 Plateforme : Windows Vista 64 Bit Version de Windows : (plain) [6.1.7600] Mode Boot : Démarré normalement Identifiant : Système Nom de l'ordinateur : JFS-PC Informations de version : BUILD.DAT : 9.0.0.81 21698 Bytes 22/10/2010 12:02:00 AVSCAN.EXE : 9.0.3.10 466689 Bytes 03/06/2010 14:20:22 AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 09:21:02 LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:11 LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 09:21:31 VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 14:20:21 VBASE001.VDF : 7.11.0.0 13342208 Bytes 14/12/2010 15:39:52 VBASE002.VDF : 7.11.3.0 1950720 Bytes 09/02/2011 16:39:23 VBASE003.VDF : 7.11.5.225 1980416 Bytes 07/04/2011 09:35:48 VBASE004.VDF : 7.11.5.226 2048 Bytes 07/04/2011 09:35:48 VBASE005.VDF : 7.11.5.227 2048 Bytes 07/04/2011 09:35:48 VBASE006.VDF : 7.11.5.228 2048 Bytes 07/04/2011 09:35:49 VBASE007.VDF : 7.11.5.229 2048 Bytes 07/04/2011 09:35:49 VBASE008.VDF : 7.11.5.230 2048 Bytes 07/04/2011 09:35:50 VBASE009.VDF : 7.11.5.231 2048 Bytes 07/04/2011 09:35:50 VBASE010.VDF : 7.11.5.232 2048 Bytes 07/04/2011 09:35:50 VBASE011.VDF : 7.11.5.233 2048 Bytes 07/04/2011 09:35:50 VBASE012.VDF : 7.11.5.234 2048 Bytes 07/04/2011 09:35:52 VBASE013.VDF : 7.11.6.28 158208 Bytes 11/04/2011 15:50:17 VBASE014.VDF : 7.11.6.74 116224 Bytes 13/04/2011 15:50:19 VBASE015.VDF : 7.11.6.113 137728 Bytes 14/04/2011 15:50:23 VBASE016.VDF : 7.11.6.114 2048 Bytes 14/04/2011 15:50:23 VBASE017.VDF : 7.11.6.115 2048 Bytes 14/04/2011 15:50:23 VBASE018.VDF : 7.11.6.116 2048 Bytes 14/04/2011 15:50:23 VBASE019.VDF : 7.11.6.117 2048 Bytes 14/04/2011 15:50:23 VBASE020.VDF : 7.11.6.118 2048 Bytes 14/04/2011 15:50:23 VBASE021.VDF : 7.11.6.119 2048 Bytes 14/04/2011 15:50:23 VBASE022.VDF : 7.11.6.120 2048 Bytes 14/04/2011 15:50:24 VBASE023.VDF : 7.11.6.121 2048 Bytes 14/04/2011 15:50:24 VBASE024.VDF : 7.11.6.122 2048 Bytes 14/04/2011 15:50:24 VBASE025.VDF : 7.11.6.123 2048 Bytes 14/04/2011 15:50:24 VBASE026.VDF : 7.11.6.124 2048 Bytes 14/04/2011 15:50:24 VBASE027.VDF : 7.11.6.125 2048 Bytes 14/04/2011 15:50:24 VBASE028.VDF : 7.11.6.126 2048 Bytes 14/04/2011 15:50:24 VBASE029.VDF : 7.11.6.127 2048 Bytes 14/04/2011 15:50:24 VBASE030.VDF : 7.11.6.128 2048 Bytes 14/04/2011 15:50:25 VBASE031.VDF : 7.11.6.145 108032 Bytes 17/04/2011 19:34:12 Version du moteur : 8.2.4.208 AEVDF.DLL : 8.1.2.1 106868 Bytes 30/07/2010 15:34:49 AESCRIPT.DLL : 8.1.3.58 1266042 Bytes 04/04/2011 09:34:52 AESCN.DLL : 8.1.7.2 127349 Bytes 22/11/2010 15:21:21 AESBX.DLL : 8.1.3.2 254324 Bytes 22/11/2010 15:21:41 AERDL.DLL : 8.1.9.9 639347 Bytes 25/03/2011 17:47:45 AEPACK.DLL : 8.2.6.0 549237 Bytes 08/04/2011 09:37:50 AEOFFICE.DLL : 8.1.1.20 205177 Bytes 04/04/2011 09:34:24 AEHEUR.DLL : 8.1.2.98 3441014 Bytes 15/04/2011 15:50:50 AEHELP.DLL : 8.1.16.1 246134 Bytes 04/02/2011 15:58:09 AEGEN.DLL : 8.1.5.4 397684 Bytes 04/04/2011 09:33:20 AEEMU.DLL : 8.1.3.0 393589 Bytes 22/11/2010 15:19:55 AECORE.DLL : 8.1.20.2 196982 Bytes 08/04/2011 09:36:09 AEBB.DLL : 8.1.1.0 53618 Bytes 03/06/2010 14:20:21 AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:30 AVPREF.DLL : 9.0.3.0 44289 Bytes 03/06/2010 14:20:22 AVREP.DLL : 10.0.0.9 174120 Bytes 05/03/2011 13:43:43 AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 14:24:42 AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:22 AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:36:37 SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49 SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:20:57 NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 14:40:59 RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 03/06/2010 14:20:20 RCTEXT.DLL : 9.0.73.0 88321 Bytes 03/06/2010 14:20:20 Configuration pour la recherche actuelle : Nom de la tâche...............................: Contrôle intégral du système Fichier de configuration......................: c:\program files (x86)\avira\antivir desktop\sysscan.avp Documentation.................................: bas Action principale.............................: interactif Action secondaire.............................: ignorer Recherche sur les secteurs d'amorçage maître..: marche Recherche sur les secteurs d'amorçage.........: marche Secteurs d'amorçage...........................: C:, D:, Recherche dans les programmes actifs..........: marche Recherche en cours sur l'enregistrement.......: marche Recherche de Rootkits.........................: marche Contrôle d'intégrité de fichiers système......: arrêt Fichier mode de recherche.....................: Tous les fichiers Recherche sur les archives....................: marche Limiter la profondeur de récursivité..........: 20 Archive Smart Extensions......................: marche Heuristique de macrovirus.....................: marche Heuristique fichier...........................: moyen Début de la recherche : dimanche 17 avril 2011 21:44 La recherche d'objets cachés commence. Impossible d'initialiser le pilote. La recherche sur les processus démarrés commence : Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés Processus de recherche 'taskeng.exe' - '0' module(s) sont contrôlés Processus de recherche 'audiodg.exe' - '0' module(s) sont contrôlés Processus de recherche 'plugin-container.exe' - '1' module(s) sont contrôlés Processus de recherche 'wuauclt.exe' - '0' module(s) sont contrôlés Processus de recherche 'dllhost.exe' - '0' module(s) sont contrôlés Processus de recherche 'smartlogon.exe' - '1' module(s) sont contrôlés Processus de recherche 'OUTLOOK.EXE' - '1' module(s) sont contrôlés Processus de recherche 'firefox.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'wmpnetwk.exe' - '0' module(s) sont contrôlés Processus de recherche 'iPodService.exe' - '0' module(s) sont contrôlés Processus de recherche 'RAVCpl64.exe' - '0' module(s) sont contrôlés Processus de recherche 'CLMLSvc.exe' - '1' module(s) sont contrôlés Processus de recherche 'AsScrPro.exe' - '1' module(s) sont contrôlés Processus de recherche 'SRSPremiumPanel_64.exe' - '0' module(s) sont contrôlés Processus de recherche 'RichVideo.exe' - '1' module(s) sont contrôlés Processus de recherche 'ADSMTray.exe' - '1' module(s) sont contrôlés Processus de recherche 'ADSMSrv.exe' - '1' module(s) sont contrôlés Processus de recherche 'CardDetector.exe' - '1' module(s) sont contrôlés Processus de recherche 'htcUPCTLoader.exe' - '1' module(s) sont contrôlés Processus de recherche 'iTunesHelper.exe' - '1' module(s) sont contrôlés Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés Processus de recherche 'hppusg.exe' - '1' module(s) sont contrôlés Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés Processus de recherche 'LiveZilla.exe' - '1' module(s) sont contrôlés Processus de recherche 'DMedia.exe' - '1' module(s) sont contrôlés Processus de recherche 'ATKOSD2.exe' - '1' module(s) sont contrôlés Processus de recherche 'HControlUser.exe' - '1' module(s) sont contrôlés Processus de recherche 'PDVD8Serv.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés Processus de recherche 'wmdc.exe' - '0' module(s) sont contrôlés Processus de recherche 'AmIcoSinglun64.exe' - '0' module(s) sont contrôlés Processus de recherche 'ETDCtrl.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'TrustedInstaller.exe' - '0' module(s) sont contrôlés Processus de recherche 'SearchIndexer.exe' - '0' module(s) sont contrôlés Processus de recherche 'postgres.exe' - '1' module(s) sont contrôlés Processus de recherche 'postgres.exe' - '1' module(s) sont contrôlés Processus de recherche 'postgres.exe' - '1' module(s) sont contrôlés Processus de recherche 'postgres.exe' - '1' module(s) sont contrôlés Processus de recherche 'WLIDSVCM.EXE' - '0' module(s) sont contrôlés Processus de recherche 'conhost.exe' - '0' module(s) sont contrôlés Processus de recherche 'postgres.exe' - '1' module(s) sont contrôlés Processus de recherche 'pg_ctl.exe' - '1' module(s) sont contrôlés Processus de recherche 'WLIDSVC.EXE' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'SFRABCdService.exe' - '1' module(s) sont contrôlés Processus de recherche 'SeaPort.exe' - '1' module(s) sont contrôlés Processus de recherche 'PassThruSvr.exe' - '1' module(s) sont contrôlés Processus de recherche 'OberonGameConsoleService.exe' - '0' module(s) sont contrôlés Processus de recherche 'HPSIsvc.exe' - '0' module(s) sont contrôlés Processus de recherche 'HPLaserJetService.exe' - '1' module(s) sont contrôlés Processus de recherche 'BackupService.exe' - '0' module(s) sont contrôlés Processus de recherche 'WDC.exe' - '1' module(s) sont contrôlés Processus de recherche 'KBFiltr.exe' - '1' module(s) sont contrôlés Processus de recherche 'ATKOSD.exe' - '1' module(s) sont contrôlés Processus de recherche 'ACEngSvr.exe' - '0' module(s) sont contrôlés Processus de recherche 'Atouch64.exe' - '1' module(s) sont contrôlés Processus de recherche 'HControl.exe' - '1' module(s) sont contrôlés Processus de recherche 'ControlDeckStartUp.exe' - '1' module(s) sont contrôlés Processus de recherche 'sensorsrv.exe' - '1' module(s) sont contrôlés Processus de recherche 'ACMON.exe' - '0' module(s) sont contrôlés Processus de recherche 'wcourier.exe' - '1' module(s) sont contrôlés Processus de recherche 'BatteryLife.exe' - '0' module(s) sont contrôlés Processus de recherche 'ALU.exe' - '1' module(s) sont contrôlés Processus de recherche 'taskeng.exe' - '0' module(s) sont contrôlés Processus de recherche 'explorer.exe' - '0' module(s) sont contrôlés Processus de recherche 'taskhost.exe' - '0' module(s) sont contrôlés Processus de recherche 'dwm.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'mDNSResponder.exe' - '1' module(s) sont contrôlés Processus de recherche 'AppleMobileDeviceService.exe' - '1' module(s) sont contrôlés Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés Processus de recherche 'spoolsv.exe' - '0' module(s) sont contrôlés Processus de recherche 'GFNEXSrv.exe' - '1' module(s) sont contrôlés Processus de recherche 'nvvsvc.exe' - '0' module(s) sont contrôlés Processus de recherche 'AsLdrSrv.exe' - '1' module(s) sont contrôlés Processus de recherche 'FBAgent.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'winlogon.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'nvvsvc.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'lsm.exe' - '0' module(s) sont contrôlés Processus de recherche 'lsass.exe' - '0' module(s) sont contrôlés Processus de recherche 'services.exe' - '0' module(s) sont contrôlés Processus de recherche 'csrss.exe' - '0' module(s) sont contrôlés Processus de recherche 'wininit.exe' - '0' module(s) sont contrôlés Processus de recherche 'csrss.exe' - '0' module(s) sont contrôlés Processus de recherche 'smss.exe' - '0' module(s) sont contrôlés '50' processus ont été contrôlés avec '50' modules La recherche sur les secteurs d'amorçage maître commence : Secteur d'amorçage maître HD0 [iNFO] Aucun virus trouvé ! La recherche sur les secteurs d'amorçage commence : Secteur d'amorçage 'C:\' [iNFO] Aucun virus trouvé ! Secteur d'amorçage 'D:\' [iNFO] Aucun virus trouvé ! La recherche sur les renvois aux fichiers exécutables (registre) commence : Le registre a été contrôlé ( '34' fichiers). La recherche sur les fichiers sélectionnés commence : Recherche débutant dans 'C:\' <OS> C:\hiberfil.sys [AVERTISSEMENT] Impossible d'ouvrir le fichier ! [REMARQUE] Ce fichier est un fichier système Windows. [REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche. C:\Users\jeff\AppData\Roaming\keygen.exe [RESULTAT] Contient le cheval de Troie TR/Agent.73728.CR C:\Users\jeff\Desktop\A trier\Temp\Keygen_Crack\CollectionKeyFinal\adobe-master-cs4-keygen.exe [RESULTAT] Contient le cheval de Troie TR/Dldr.BZW C:\Users\jeff\Desktop\A trier\Temp\Keygen_Crack\CollectionKeyFinal\CS4MCLG.EXE [RESULTAT] Contient le cheval de Troie TR/Agent.469268.A C:\Users\jeff\Documents\Vuze Downloads\CS4_Keygen+Crack_Win+Mac_X-force.rar [0] Type d'archive: RAR --> CS4_Keygen+Crack_Win+Mac_X-force\Keygen\ACS4MC-Keygen (X-FORCE).exe [RESULTAT] Contient le cheval de Troie TR/Dldr.BZW C:\Users\jeff\Documents\Vuze Downloads\Adobe Dreamweaver CS4\Adobe CS4 Activation Patch\Adobe CS4 Keygen.exe [RESULTAT] Contient le cheval de Troie TR/Dldr.BZW C:\Windows\sysfiles\windll.exe [RESULTAT] Contient le cheval de Troie TR/Dropper.Gen C:\Windows\System32\drivers\sptd.sys [AVERTISSEMENT] Impossible d'ouvrir le fichier ! Recherche débutant dans 'D:\' <DATA> D:\pagefile.sys [AVERTISSEMENT] Impossible d'ouvrir le fichier ! [REMARQUE] Ce fichier est un fichier système Windows. [REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche. Début de la désinfection : C:\Users\jeff\AppData\Roaming\keygen.exe [RESULTAT] Contient le cheval de Troie TR/Agent.73728.CR [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4e245abd.qua' ! C:\Users\jeff\Desktop\A trier\Temp\Keygen_Crack\CollectionKeyFinal\adobe-master-cs4-keygen.exe [RESULTAT] Contient le cheval de Troie TR/Dldr.BZW [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4e1a5abd.qua' ! C:\Users\jeff\Desktop\A trier\Temp\Keygen_Crack\CollectionKeyFinal\CS4MCLG.EXE [RESULTAT] Contient le cheval de Troie TR/Agent.469268.A [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ddf5aac.qua' ! C:\Users\jeff\Documents\Vuze Downloads\CS4_Keygen+Crack_Win+Mac_X-force.rar [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '45da9445.qua' ! C:\Users\jeff\Documents\Vuze Downloads\Adobe Dreamweaver CS4\Adobe CS4 Activation Patch\Adobe CS4 Keygen.exe [RESULTAT] Contient le cheval de Troie TR/Dldr.BZW [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '461cac0e.qua' ! C:\Windows\sysfiles\windll.exe [RESULTAT] Contient le cheval de Troie TR/Dropper.Gen [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4e195ac2.qua' ! Fin de la recherche : dimanche 17 avril 2011 23:23 Temps nécessaire: 1:31:23 Heure(s) La recherche a été effectuée intégralement 37655 Les répertoires ont été contrôlés 806722 Des fichiers ont été contrôlés 6 Des virus ou programmes indésirables ont été trouvés 0 Des fichiers ont été classés comme suspects 0 Des fichiers ont été supprimés 0 Des virus ou programmes indésirables ont été réparés 6 Les fichiers ont été déplacés dans la quarantaine 0 Les fichiers ont été renommés 3 Impossible de contrôler des fichiers 806713 Fichiers non infectés 5228 Les archives ont été contrôlées 3 Avertissements 8 Consignes

Bonsoir, le PC n'est pas à moi, celui d'un ami. j'ai juste besoin d'une analyse Hijackthis

Bonjour, j'ai un PC infecté, pourriez vous m'aider. Voici mon rapport Hijackthis, j'ai fait une analyse antivir complète juste avant ... Merci d'avance Avira AntiVir Personal Date de création du fichier de rapport : jeudi 10 mars 2011 21:11 La recherche porte sur 2455078 souches de virus. Le programme fonctionne en version intégrale illimitée. Les services en ligne sont disponibles. Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus Numéro de série : 0000149996-ADJIE-0000001 Plateforme : Windows XP Version de Windows : (Service Pack 3) [5.1.2600] Mode Boot : Démarré normalement Identifiant : jan Nom de l'ordinateur : JAN-046AD6BAE7D Informations de version : BUILD.DAT : 10.0.0.110 31822 Bytes 04/02/2011 13:16:00 AVSCAN.EXE : 10.0.3.5 435368 Bytes 04/02/2011 11:08:49 AVSCAN.DLL : 10.0.3.0 56168 Bytes 04/02/2011 11:09:07 LUKE.DLL : 10.0.3.2 104296 Bytes 04/02/2011 11:08:56 LUKERES.DLL : 10.0.0.0 13672 Bytes 04/02/2011 11:09:08 VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 08:05:36 VBASE001.VDF : 7.11.0.0 13342208 Bytes 14/12/2010 11:09:03 VBASE002.VDF : 7.11.0.1 2048 Bytes 14/12/2010 11:09:03 VBASE003.VDF : 7.11.0.2 2048 Bytes 14/12/2010 11:09:03 VBASE004.VDF : 7.11.0.3 2048 Bytes 14/12/2010 11:09:03 VBASE005.VDF : 7.11.0.4 2048 Bytes 14/12/2010 11:09:04 VBASE006.VDF : 7.11.0.5 2048 Bytes 14/12/2010 11:09:04 VBASE007.VDF : 7.11.0.6 2048 Bytes 14/12/2010 11:09:04 VBASE008.VDF : 7.11.0.7 2048 Bytes 14/12/2010 11:09:04 VBASE009.VDF : 7.11.0.8 2048 Bytes 14/12/2010 11:09:04 VBASE010.VDF : 7.11.0.9 2048 Bytes 14/12/2010 11:09:04 VBASE011.VDF : 7.11.0.10 2048 Bytes 14/12/2010 11:09:04 VBASE012.VDF : 7.11.0.11 2048 Bytes 14/12/2010 11:09:04 VBASE013.VDF : 7.11.0.52 128000 Bytes 16/12/2010 11:09:04 VBASE014.VDF : 7.11.0.91 226816 Bytes 20/12/2010 11:09:04 VBASE015.VDF : 7.11.0.122 136192 Bytes 21/12/2010 11:09:04 VBASE016.VDF : 7.11.0.156 122880 Bytes 24/12/2010 11:09:04 VBASE017.VDF : 7.11.0.185 146944 Bytes 27/12/2010 11:09:05 VBASE018.VDF : 7.11.0.228 132608 Bytes 30/12/2010 11:09:05 VBASE019.VDF : 7.11.1.5 148480 Bytes 03/01/2011 11:09:05 VBASE020.VDF : 7.11.1.37 156672 Bytes 07/01/2011 11:09:05 VBASE021.VDF : 7.11.1.65 140800 Bytes 10/01/2011 11:09:05 VBASE022.VDF : 7.11.1.87 225280 Bytes 11/01/2011 11:09:05 VBASE023.VDF : 7.11.1.124 125440 Bytes 14/01/2011 11:09:05 VBASE024.VDF : 7.11.1.155 132096 Bytes 17/01/2011 11:09:06 VBASE025.VDF : 7.11.1.189 451072 Bytes 20/01/2011 11:09:06 VBASE026.VDF : 7.11.1.230 138752 Bytes 24/01/2011 11:09:06 VBASE027.VDF : 7.11.2.12 164352 Bytes 27/01/2011 11:09:06 VBASE028.VDF : 7.11.2.43 178176 Bytes 01/02/2011 09:59:28 VBASE029.VDF : 7.11.2.44 2048 Bytes 01/02/2011 09:59:28 VBASE030.VDF : 7.11.2.45 2048 Bytes 01/02/2011 09:59:28 VBASE031.VDF : 7.11.2.73 180736 Bytes 04/02/2011 11:16:43 Version du moteur : 8.2.4.162 AEVDF.DLL : 8.1.2.1 106868 Bytes 04/02/2011 11:08:46 AESCRIPT.DLL : 8.1.3.53 1282427 Bytes 03/02/2011 19:54:44 AESCN.DLL : 8.1.7.2 127349 Bytes 04/02/2011 11:08:45 AESBX.DLL : 8.1.3.2 254324 Bytes 04/02/2011 11:08:45 AERDL.DLL : 8.1.9.2 635252 Bytes 04/02/2011 11:08:45 AEPACK.DLL : 8.2.4.9 512374 Bytes 03/02/2011 19:54:43 AEOFFICE.DLL : 8.1.1.16 205179 Bytes 03/02/2011 19:54:43 AEHEUR.DLL : 8.1.2.73 3207541 Bytes 03/02/2011 19:54:43 AEHELP.DLL : 8.1.16.1 246134 Bytes 03/02/2011 19:54:42 AEGEN.DLL : 8.1.5.2 397683 Bytes 04/02/2011 11:08:38 AEEMU.DLL : 8.1.3.0 393589 Bytes 04/02/2011 11:08:38 AECORE.DLL : 8.1.19.2 196983 Bytes 04/02/2011 11:08:37 AEBB.DLL : 8.1.1.0 53618 Bytes 04/02/2011 11:08:37 AVWINLL.DLL : 10.0.0.0 19304 Bytes 04/02/2011 11:08:50 AVPREF.DLL : 10.0.0.0 44904 Bytes 04/02/2011 11:08:49 AVREP.DLL : 10.0.0.8 62209 Bytes 17/06/2010 13:27:52 AVREG.DLL : 10.0.3.2 53096 Bytes 04/02/2011 11:08:49 AVSCPLR.DLL : 10.0.3.2 84328 Bytes 04/02/2011 11:08:49 AVARKT.DLL : 10.0.22.6 231784 Bytes 04/02/2011 11:08:46 AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 04/02/2011 11:08:48 SQLITE3.DLL : 3.6.19.0 355688 Bytes 17/06/2010 13:28:02 AVSMTP.DLL : 10.0.0.17 63848 Bytes 04/02/2011 11:08:49 NETNT.DLL : 10.0.0.0 11624 Bytes 17/06/2010 13:28:01 RCIMAGE.DLL : 10.0.0.26 2550120 Bytes 10/02/2010 23:23:03 RCTEXT.DLL : 10.0.58.0 99688 Bytes 04/02/2011 11:09:08 Configuration pour la recherche actuelle : Nom de la tâche...............................: Bref contrôle système après installation Fichier de configuration......................: c:\program files\avira\antivir desktop\setupprf.dat Documentation.................................: bas Action principale.............................: interactif Action secondaire.............................: ignorer Recherche sur les secteurs d'amorçage maître..: marche Recherche sur les secteurs d'amorçage.........: marche Recherche dans les programmes actifs..........: marche Recherche en cours sur l'enregistrement.......: marche Recherche de Rootkits.........................: arrêt Contrôle d'intégrité de fichiers système......: arrêt Fichier mode de recherche.....................: Sélection de fichiers intelligente Recherche sur les archives....................: marche Limiter la profondeur de récursivité..........: 20 Archive Smart Extensions......................: marche Heuristique de macrovirus.....................: marche Heuristique fichier...........................: moyen Début de la recherche : jeudi 10 mars 2011 21:11 La recherche sur les processus démarrés commence : Processus de recherche 'avwsc.exe' - '1' module(s) sont contrôlés Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés Processus de recherche 'avconfig.exe' - '1' module(s) sont contrôlés Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés Processus de recherche 'avshadow.exe' - '1' module(s) sont contrôlés Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés Processus de recherche 'setup.exe' - '1' module(s) sont contrôlés Processus de recherche 'presetup.exe' - '1' module(s) sont contrôlés Processus de recherche 'avira_antivir_personal_free.exe' - '1' module(s) sont contrôlés Processus de recherche 'jucheck.exe' - '0' module(s) sont contrôlés Processus de recherche 'rundll32.exe' - '0' module(s) sont contrôlés Processus de recherche 'plugin-container.exe' - '0' module(s) sont contrôlés Processus de recherche 'firefox.exe' - '0' module(s) sont contrôlés Processus de recherche 'alg.exe' - '0' module(s) sont contrôlés Processus de recherche 'TeamViewer.exe' - '0' module(s) sont contrôlés Processus de recherche 'x10nets.exe' - '0' module(s) sont contrôlés Processus de recherche 'TeamViewer_Service.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'PDAgent.exe' - '0' module(s) sont contrôlés Processus de recherche 'nvsvc32.exe' - '0' module(s) sont contrôlés Processus de recherche 'NMSAccessU.exe' - '0' module(s) sont contrôlés Processus de recherche 'jqs.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'spoolsv.exe' - '0' module(s) sont contrôlés Processus de recherche 'soffice.bin' - '0' module(s) sont contrôlés Processus de recherche 'soffice.exe' - '0' module(s) sont contrôlés Processus de recherche 'UpdateStar.exe' - '0' module(s) sont contrôlés Processus de recherche 'ctfmon.exe' - '0' module(s) sont contrôlés Processus de recherche 'SuperCopier2.exe' - '0' module(s) sont contrôlés Processus de recherche 'AdobeARM.exe' - '0' module(s) sont contrôlés Processus de recherche 'winampa.exe' - '0' module(s) sont contrôlés Processus de recherche 'jusched.exe' - '0' module(s) sont contrôlés Processus de recherche 'RUNDLL32.EXE' - '0' module(s) sont contrôlés Processus de recherche 'RTHDCPL.EXE' - '0' module(s) sont contrôlés Processus de recherche 'Explorer.EXE' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'lsass.exe' - '0' module(s) sont contrôlés Processus de recherche 'services.exe' - '0' module(s) sont contrôlés Processus de recherche 'winlogon.exe' - '0' module(s) sont contrôlés Processus de recherche 'csrss.exe' - '0' module(s) sont contrôlés Processus de recherche 'smss.exe' - '0' module(s) sont contrôlés Fin de la recherche : jeudi 10 mars 2011 21:11 Temps nécessaire: 00:02 Minute(s) La recherche a été interrompue ! 0 Les répertoires ont été contrôlés 124 Des fichiers ont été contrôlés 0 Des virus ou programmes indésirables ont été trouvés 0 Des fichiers ont été classés comme suspects 0 Des fichiers ont été supprimés 0 Des virus ou programmes indésirables ont été réparés 0 Les fichiers ont été déplacés dans la quarantaine 0 Les fichiers ont été renommés 0 Impossible de scanner des fichiers 124 Fichiers non infectés 1 Les archives ont été contrôlées 0 Avertissements 0 Consignes Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:14:24, on 10/03/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\SuperCopier2\SuperCopier2.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\jan\Application Data\UpdateStar\UpdateStar.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe C:\Program Files\TeamViewer\Version6\TeamViewer.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Fichiers communs\Java\Java Update\jucheck.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\msdtc.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Bing, Actualité et Sport R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: ShopperReports - {100EB1FD-D03E-47fd-81F3-EE91287F9465} - C:\Program Files\ShopperReports3\bin\3.0.485.0\ShopperReports.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [superCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [EPSON Stylus SX200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE /FU "C:\WINDOWS\TEMP\E_S68.tmp" /EF "HKCU" O4 - HKCU\..\Run: [updateStar] C:\Documents and Settings\jan\Application Data\UpdateStar\UpdateStar.exe -A O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10k_Plugin.exe -update plugin O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShopperReports3\bin\3.0.485.0\ShopperReports.dll O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShopperReports3\bin\3.0.485.0\ShopperReports.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {05CA9FB0-3E3E-4b36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813 O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab O16 - DPF: {6e32070a-766d-4ee6-879c-dc1fa91d2fc3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing) O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe -- End of file - 11381 bytes

Oui beaucoup, a part la lecture de la vidéo, mais cela doit être une question de carte graphique ou autre. Merci beaucoup

J'avais pas décoché la second. C'est un dossier, il ne peut pas l'analyser, et il n'y a rien dedans. Voici le rapport pour : c:\windows\system32\E6A0BABBA8.sys a-squared 4.5.0.24 2009.07.31 - AhnLab-V3 5.0.0.2 2009.07.31 - AntiVir 7.9.0.238 2009.07.31 - Antiy-AVL 2.0.3.7 2009.07.31 - Authentium 5.1.2.4 2009.07.31 - Avast 4.8.1335.0 2009.07.31 - AVG 8.5.0.406 2009.07.31 - BitDefender 7.2 2009.07.31 - CAT-QuickHeal 10.00 2009.07.30 - ClamAV 0.94.1 2009.07.31 - Comodo 1826 2009.07.31 - DrWeb 5.0.0.12182 2009.07.31 - eSafe 7.0.17.0 2009.07.30 - eTrust-Vet 31.6.6649 2009.07.31 - F-Prot 4.4.4.56 2009.07.31 - F-Secure 8.0.14470.0 2009.07.31 - Fortinet 3.120.0.0 2009.07.31 - GData 19 2009.07.31 - Ikarus T3.1.1.64.0 2009.07.31 - Jiangmin 11.0.800 2009.07.31 - K7AntiVirus 7.10.807 2009.07.31 - Kaspersky 7.0.0.125 2009.07.31 - McAfee 5694 2009.07.31 - McAfee+Artemis 5694 2009.07.31 - McAfee-GW-Edition 6.8.5 2009.07.31 - Microsoft 1.4903 2009.07.31 - NOD32 4295 2009.07.31 - Norman 6.01.09 2009.07.31 - nProtect 2009.1.8.0 2009.07.31 - Panda 10.0.0.14 2009.07.31 - PCTools 4.4.2.0 2009.07.31 - Rising 21.40.44.00 2009.07.31 - Sophos 4.44.0 2009.07.31 - Sunbelt 3.2.1858.2 2009.07.31 - Symantec 1.4.4.12 2009.07.31 - TheHacker 6.3.4.3.374 2009.07.30 - TrendMicro 8.950.0.1094 2009.07.31 - VBA32 3.12.10.9 2009.07.31 - ViRobot 2009.7.31.1863 2009.07.31 - VirusBuster 4.6.5.0 2009.07.31 - Information additionnelle File size: 88 bytes MD5...: 7377e8700886525785881274b264886f SHA1..: 384027a1c4b5f269541e632e123de4b0464bb487 SHA256: 51cc0ce81f3d1160d18b7b90c968dad7ed81c1722cd7ae09dd64904ed5be4df7 ssdeep: 3:hl/JgMlll/bonn:K2b2 PEiD..: - TrID..: File type identification MS Flight Simulator Aircraft Performance Info (100.0%) PEInfo: - PDFiD.: - RDS...: NSRL Reference Data Set - Voici le rapport Hijackthis : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:09:42, on 31/07/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\SuperCopier\SuperCopier.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE D:\ulead workshop\DVDWS.exe C:\Program Files\Corel\PhotoImpact X3\Iedit_.exe C:\Program Files\Adobe\Adobe Photoshop CS2\Photoshop.exe C:\DOCUME~1\jeffoul\LOCALS~1\Temp\Adobelm_Cleanup.0001 C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe C:\DOCUME~1\jeffoul\LOCALS~1\Temp\Adobelm_Cleanup.0001 C:\Program Files\hijackthis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe O4 - HKLM\..\Run: [systrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [superCopier.exe] C:\Program Files\SuperCopier\SuperCopier.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Reduire avec Alice's Biscuit - C:\Program Files\kayenko\alice's biscuit\alice.htm O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm O8 - Extra context menu item: Recherche sur eBay - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.orange.fr O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} - O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.5.0_09) - O16 - DPF: {90E8E859-1B10-4C64-B991-DDFB157CD50B} - O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} (Java Plug-in 1.5.0_09) - O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.5.0_09) - O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - "C:\Program Files\BinarySense\HDDlife 3\hlAPP.dll" (file missing) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 8327 bytes

Je ne trouve pas les fichiers que vous me demandez d'envoyer. Sinon, voici mon rapport Hijacthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:54:23, on 31/07/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\SuperCopier\SuperCopier.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE D:\ulead workshop\DVDWS.exe C:\Program Files\Corel\PhotoImpact X3\Iedit_.exe C:\Program Files\Adobe\Adobe Photoshop CS2\Photoshop.exe C:\DOCUME~1\jeffoul\LOCALS~1\Temp\Adobelm_Cleanup.0001 C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe C:\DOCUME~1\jeffoul\LOCALS~1\Temp\Adobelm_Cleanup.0001 C:\WINDOWS\system32\wuauclt.exe C:\Program Files\hijackthis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe O4 - HKLM\..\Run: [systrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [superCopier.exe] C:\Program Files\SuperCopier\SuperCopier.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Reduire avec Alice's Biscuit - C:\Program Files\kayenko\alice's biscuit\alice.htm O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm O8 - Extra context menu item: Recherche sur eBay - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.orange.fr O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} - O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.5.0_09) - O16 - DPF: {90E8E859-1B10-4C64-B991-DDFB157CD50B} - O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} (Java Plug-in 1.5.0_09) - O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.5.0_09) - O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - "C:\Program Files\BinarySense\HDDlife 3\hlAPP.dll" (file missing) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 8360 bytes merci

voici les différents rapports : SmitFraudFix v2.423 Rapport fait à 16:51:49,17, 31/07/2009 Executé à partir de C:\Documents and Settings\jeffoul\Bureau\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Le type du système de fichiers est NTFS Fix executé en mode sans echec »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus »»»»»»»»»»»»»»»»»»»»»»»» hosts 127.0.0.1 localhost 127.0.0.1 bin.errorprotector.com ## added by CiD 127.0.0.1 br.errorsafe.com ## added by CiD 127.0.0.1 br.winantivirus.com ## added by CiD 127.0.0.1 br.winfixer.com ## added by CiD 127.0.0.1 cdn.drivecleaner.com ## added by CiD 127.0.0.1 cdn.errorsafe.com ## added by CiD 127.0.0.1 cdn.winsoftware.com ## added by CiD 127.0.0.1 de.errorsafe.com ## added by CiD 127.0.0.1 de.winantivirus.com ## added by CiD ... »»»»»»»»»»»»»»»»»»»»»»»» VACFix VACFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix S!Ri's WS2Fix: LSP not Found. »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix GenericRenosFix by S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés C:\DOCUME~1\jeffoul\Favoris\Online Security Test.url supprimé C:\Program Files\akl\ supprimé »»»»»»»»»»»»»»»»»»»»»»»» IEDFix IEDFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix Agent.OMZ.Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» 404Fix 404Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» RK »»»»»»»»»»»»»»»»»»»»»»»» DNS HKLM\SYSTEM\CCS\Services\Tcpip\..\{5CECAB5D-F907-465A-A08D-D0B1EF0CDA46}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CCS\Services\Tcpip\..\{FDB541D4-E845-4832-A94C-126D47C58BB7}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS1\Services\Tcpip\..\{5CECAB5D-F907-465A-A08D-D0B1EF0CDA46}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS1\Services\Tcpip\..\{FDB541D4-E845-4832-A94C-126D47C58BB7}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS3\Services\Tcpip\..\{5CECAB5D-F907-465A-A08D-D0B1EF0CDA46}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS3\Services\Tcpip\..\{FDB541D4-E845-4832-A94C-126D47C58BB7}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! "System"="" »»»»»»»»»»»»»»»»»»»»»»»» RK.2 »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre Nettoyage terminé. »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Fin -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2 X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.20GHz ) BIOS : BIOS Date: 06/21/05 16:05:41 Ver: 08.00.10 USER : jeffoul ( Administrator ) BOOT : Fail-safe boot Antivirus : AntiVir Desktop 9.0.1.30 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:29 Go (Free:3 Go) D:\ (Local Disk) - NTFS - Total:97 Go (Free:3 Go) E:\ (Local Disk) - NTFS - Total:48 Go (Free:1 Go) F:\ (CD or DVD) G:\ (CD or DVD) H:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go) I:\ (Local Disk) - NTFS - Total:9 Go (Free:4 Go) J:\ (Local Disk) - NTFS - Total:9 Go (Free:0 Go) K:\ (Local Disk) - NTFS - Total:28 Go (Free:5 Go) L:\ (Local Disk) - NTFS - Total:298 Go (Free:297 Go) M:\ (CD or DVD) N:\ (USB) - FAT32 - Total:3927 Mo (Free:0 Go) O:\ (Local Disk) - NTFS - Total:465 Go (Free:55 Go) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [1] ( 31/07/2009|16:07 ) -----------\\ Recherche de Fichiers / Dossiers ... C:\DOCUME~1\jeffoul\Cookies\jeffoul@contentcatalog.hotbar[1].txt C:\DOCUME~1\jeffoul\Cookies\jeffoul@hotbar[2].txt C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\Config.xml C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\db C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\dwld C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\report C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\res1 C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\db\Aliases.dbs C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\db\Sites.dbs C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\dwld\WhiteList.xip C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\report\aggr_storage.xml C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\report\send_storage.xml C:\DOCUME~1\jeffoul\APPLIC~1\ShoppingReport\cs\res1\WhiteList.dbs C:\Program Files\ShoppingReport C:\Program Files\ShoppingReport\Bin C:\Program Files\ShoppingReport\Bin\2.5.0 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\1 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\1px_dark.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\1px_green.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\1px_white.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\234x60storage-dropdownEN.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\4x4 Rally.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\a.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\add_en.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Air Dodge.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\air hockey.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\alias.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Alien.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Alpha Bravo Charlie.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\an.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\arrow_down.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\arrow_red.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\arrow_red2.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\arrow_up.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\autofill.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\avstate.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\b.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\background2.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Balloony.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Battle Tanks.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bgmeteo_results.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bg_300px.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bg_cityweather.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bg_games3.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bg_games4.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bg_pub.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bg_story.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bg_tblresults.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bg_ttl.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Black Jack.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\bomber bob.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Bowling.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\btn_close.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\btn_minus.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\btn_moreforecast.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Bubble Bobble The Revival.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\c.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\cn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\COMBOSEARCH.acs C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Connect 2.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Cowboy Bullet.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\cubeez.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\curve ball.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\d.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\dictionary.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\dn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\dropdown.css C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\ErrorLog.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\f.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\fish eat fish.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_argentine.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_australia.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_brazil.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_brazil.bmp321920250 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_canada.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_china.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_france.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_germany.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_greece.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_hongkong.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_india.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_indonesia.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_italy.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_japan.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_korea.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_mexico.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_netherlands.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_netherlands.bmp9018609 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_spain.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_sweeden.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_taiwan.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_uk.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_uk.bmp322343218 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\flag_usa.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Flashludo.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Fly plane.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Flyplane.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\fn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\forest challenge 2.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\g.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\galaxians.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\games.js C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\games.xml C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\games1_5.cfg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\gamesmenu.html C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\game_placeholder.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\gaming.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\gn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\gograph.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\gold diggers.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred0.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred0_5.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred1.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred1_5.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred2.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred2_5.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred3.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred3_5.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred4.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred4_5.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\graphred5.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\hideremove.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\highlight.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\hn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Hungry Space.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_aquarius.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_aries.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_cancer.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_capricorn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_gemini.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_leo.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_libra.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_pisces.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_sagittarius.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_scorpio.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_taurus.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\h_virgo.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\i.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\icotemp_placeholder.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\img_games1_5.cfg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\in.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\indiana jones.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\ipsearch.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\j.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\jn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\k.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\keep ups 2.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\kn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\l.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\ln.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\loading.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\login.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\logo.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\ma balls.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Memory Trial.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\micro tanks.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\mini nitros.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\mini pool 2.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\mini pool.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\mini putt 3.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\minipool2.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Muay Thai.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\n.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\naval gun.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\New York_NY_weather.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\New York_NY_weather.txt142425562 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\New York_NY_weather.txt16136312 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\New York_NY_weather.txt24686156 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\New York_NY_weather.txt284923937 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\New York_NY_weather.txt43107015 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\new02.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\NewCfg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\news.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\news.html C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\nn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\o.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Office Paintball v2.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\on.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\overlord.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\p.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\pestscanimg.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\pig wars.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\pn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\popup_off.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\popup_on.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\pubplaceholder.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\q.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\qn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\r.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Raidenx.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\relatedlinks.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\report.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\rn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\rss.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\rss.xsl C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\rss1.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\rsslib.js C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\rssmenu1_5b.zip C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\s.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_dictionnary.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_domain.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_domain.bmp256064703 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_ency.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_graphic.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_graphic.bmp259409593 C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_images.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_music.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_news.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_people.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_products.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_software.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_stocks.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\search_video.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\security.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\show jumping.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo1.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo10.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo11.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo12.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo13.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo14.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo15.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo16.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo17.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo18.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo19.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo2.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo20.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo3.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo4.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo5.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo6.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo7.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo8.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Sinfo9.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\siteinfo.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\slider.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\sn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Space explorer.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\spacer.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\stars-red1.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\stars-red2.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\stars-red3.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\stars-red4.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\stars-red5.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Stone Breaker.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\storage.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\sweet tooth.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\t.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\table tennis.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Tanks.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\tetris.JPG C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\thes_search.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\tn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\tools.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\Tower Defence.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\toy cars.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\translate.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\u.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\un.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\upgrade.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\userbadsites.txt C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\v.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\virtual cop.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\vmlib.js C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\vmntoolbartb1403.cfg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\vmntoolbartb1500.cfg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\vn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\w.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\war games.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\web.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\wn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\worm.jpg C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\x.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\xp_close_small.gif C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\yahoo.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\z.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\zn.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\zoom.bmp C:\DOCUME~1\jeffoul\APPLIC~1\VMNToolbar\1\rsscenter.xml C:\Program Files\VMNToolbar C:\Program Files\VMNToolbar\install.ico C:\Program Files\VMNToolbar\toolbar.ini C:\Program Files\VMNToolbar\uninstall.exe C:\DOCUME~1\jeffoul\APPLIC~1\WeatherDPA C:\DOCUME~1\jeffoul\APPLIC~1\WeatherDPA\Weather C:\DOCUME~1\jeffoul\APPLIC~1\WeatherDPA\Weather\WeatherDPA C:\DOCUME~1\jeffoul\APPLIC~1\WeatherDPA\Weather\WeatherStartup.xml C:\DOCUME~1\jeffoul\APPLIC~1\WeatherDPA\Weather\WeatherDPA\Weather_XML C:\DOCUME~1\jeffoul\APPLIC~1\Zango C:\DOCUME~1\jeffoul\APPLIC~1\Zango\IESkins C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\HostOI C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\HostOL C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\HostOI\dynamic C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\HostOI\static C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\HostOL\dynamic C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\HostOL\static C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\1.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\1383356.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\2885069.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\3251993.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\3786240.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\3895318.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\600583.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\934538.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\991767.sdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\domains.txt C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\ustat C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000003674 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000003756 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000023894 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000025488 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000026429 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000029227 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000032671 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000032930 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000033037 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000044868 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000051643 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000052451 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000053072 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000057533 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000059264 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000059554 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000059702 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000060898 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000063625 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000069497 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000069613 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000080166 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000082618 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000082926 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000083145 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\12457 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\214816 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\23111 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\243256 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\247895 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\27414 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\33912 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\374830 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\436199 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\4487 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\472662 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\528786 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\553281 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\560770 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\652325 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\658110 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\69263 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\705076 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\710858 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\747090 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\753592 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\78918 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\90358 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\dynamic\ustat\3868.dat C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2 C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\avatar.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\btntrans.idx C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\btntrans1.dat C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\buttondir.txt C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\components.cdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\cursors.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\default.cdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_511745-514279.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_bidzC_ZT_IE-ca.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_bidzC_ZT_IE-us.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_categorize.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_comparison.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_explorer-Mails.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_explorer-people.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_favorites.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_Games.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_Hide.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_hotbarcom.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_Hotmail.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_hsskin.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_jemster.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_jemsterie.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_jemsteruk.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_jobsearch.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_Mails.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_MobileSidewalk.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_new.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_premium.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_reun.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_ringtones.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_SearchBoxTrapper.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_searchfor.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_searchgo.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_weather.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Default_yellowpages.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_1000.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_2000.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_3000.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_bar.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_bbar1.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_logos.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_other.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_weather.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\editblbuttons.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\email-def-511724-548964.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\email-def-511724-9595.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\email-t1-bg.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\icons2.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\ie_games_icon.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\ie_video.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\keywords.idx C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\keywords1.dat C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\layout.cdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\linkpathlegal.txt C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\progress.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\sales_buttons.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\sdfmodifier.xml C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\s_icons_buttons.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\t2_bg.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\theweb.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\top7.cdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\Top7_theweb.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\tsd_bg.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\zango_btn.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\1\zango_ie_menu.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\avatar.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\btntrans.idx C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\btntrans1.dat C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\buttondir.txt C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\components.cdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\cursors.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\default.cdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_511745-514279.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_bidzC_ZT_IE-ca.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_bidzC_ZT_IE-us.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_categorize.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_comparison.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_explorer-Mails.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_explorer-people.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_favorites.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_Games.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_Hide.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_hotbarcom.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_Hotmail.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_hsskin.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_jemster.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_jemsterie.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_jemsteruk.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_jobsearch.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_Mails.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_MobileSidewalk.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_new.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_premium.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_reun.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_ringtones.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_SearchBoxTrapper.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_searchfor.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_searchgo.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_weather.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Default_yellowpages.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_1000.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_2000.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_3000.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_bar.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_bbar1.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_logos.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_other.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_weather.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\editblbuttons.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\email-def-511724-548964.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\email-def-511724-9595.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\email-t1-bg.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\icons2.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\ie_games_icon.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\ie_video.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\keywords.idx C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\keywords1.dat C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\layout.cdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\linkpathlegal.txt C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\progress.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\sales_buttons.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\sdfmodifier.xml C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\s_icons_buttons.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\t2_bg.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\theweb.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\top7.cdf C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\Top7_theweb.mnu C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\tsd_bg.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\zango_btn.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\2\zango_ie_menu.res C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\avatar.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\BtnTrans.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\BtnTrans1.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\buttondir.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\cursors.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\default.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_1000.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_2000.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_3000.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_bar.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_bbar1.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_logos.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_other.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_weather.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\editblbuttons.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\email-t1-bg.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\icons2.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\ie_games_icon.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\ie_video.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\keywords.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\keywords1.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\layout.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\linkpathlegal.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\progress.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\sales_buttons.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\samplegroups2.txt C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\samplegroups2.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\sdfmodifier.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\s_icons_buttons.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\t2_bg.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\top7.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\tsd_bg.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\zango_btn.xip C:\DOCUME~1\jeffoul\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\zango_ie_menu.xip C:\Program Files\Zango C:\Program Files\Zango\bin C:\Program Files\Zango\bin\10.3.75.0 C:\Program Files\Zango\bin\10.3.75.0\arrow.ico C:\Program Files\Zango\bin\10.3.75.0\copyright.txt C:\Program Files\Zango\bin\10.3.75.0\firefox C:\Program Files\Zango\bin\10.3.75.0\link.ico C:\Program Files\Zango\bin\10.3.75.0\firefox\extensions C:\Program Files\Zango\bin\10.3.75.0\firefox\extensions\chrome.manifest C:\Program Files\Zango\bin\10.3.75.0\firefox\extensions\components C:\Program Files\Zango\bin\10.3.75.0\firefox\extensions\install.rdf C:\Program Files\Zango\bin\10.3.75.0\firefox\extensions\plugins C:\Program Files\Zango\bin\10.3.75.0\firefox\extensions\components\npclntax.xpt C:\DOCUME~1\jeffoul\Cookies\jeffoul@hosted.zango[2].txt C:\DOCUME~1\ALLUSE~1\APPLIC~1\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 -----------\\ Extensions (jeffoul) - {2722cbe5-82a8-4037-a8f5-e1cb2100e3b2} => adsense (jeffoul) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar (jeffoul) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper (jeffoul) - {c45c406e-ab73-11d8-be73-000a95be3b12} => webdeveloper (jeffoul) - {d57c9ff1-6389-48fc-b770-f78bd89b6e8a} => searchstatus (jeffoul) - {EF522540-89F5-46b9-B6FE-1829E2B572C6} => googlepreview (jeffoul) - {fce36c1e-58d8-498a-b2a5-66ad1cedebbb} => customizegoogle -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Search Page"="http://www.google.com" "Start Page"="http://www.brestunt.com/" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"'>http://go.microsoft.com/fwlink/?LinkId=69157"'>http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\jeffoul\Application Data\Azureus\torrents\Adobe.Photoshop.Pro.CS2.v9.0.Full.ISO.+.WORKING.Keygen.torrent C:\DOCUME~1\jeffoul\Application Data\Azureus\torrents\Adobe.Premiere.Pro.v2.0.WinXP.Incl.Keygen-SSG.torrent C:\DOCUME~1\jeffoul\Application Data\Azureus\torrents\Magic_Iso_5.3b216_+_Crack__by_kheman [mininova].torrent C:\DOCUME~1\jeffoul\Application Data\Azureus\torrents\Sony.Vegas.v7.0c.Incl.Keygen-SSG.torrent C:\DOCUME~1\jeffoul\Application Data\Azureus\torrents\Tomtom_6.010_installer___crack.3527637.TPB.torrent C:\DOCUME~1\jeffoul\Application Data\Azureus\torrents\_Adobe_After_Effects_CS3_Professional_2008_PC___Crack [mininova].torrent C:\DOCUME~1\jeffoul\Application Data\Azureus\torrents\_Tomtom_6.010_installer___crack.3527637.TPB.torrent 1 - "C:\ToolBar SD\TB_1.txt" - 31/07/2009|11:55 - Option : [1] 2 - "C:\ToolBar SD\TB_2.txt" - 31/07/2009|15:55 - Option : [1] 3 - "C:\ToolBar SD\TB_3.txt" - 31/07/2009|16:08 - Option : [1] -----------\\ Fin du rapport a 16:08:40,78 ComboFix 09-07-29.04 - jeffoul 31/07/2009 17:19.1.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1023.639 [GMT 2:00] Running from: c:\documents and settings\jeffoul\Bureau\ComboFix.exe AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7} WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\All Users\Application Data\ZangoSA c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSA.dat c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSA_kyf.dat c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSAAbout.mht c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSAau.dat c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSAEula.mht c:\program files\Download Plugin c:\program files\Download Plugin\DlPlugin-Moz\buddy.dat c:\program files\download plugin\DlPlugin-Moz\vendor.txt c:\windows\a.bat c:\windows\bdn.com c:\windows\FVProtect.exe c:\windows\Installer\1a1f6460.msp c:\windows\Installer\1a1f6461.msp c:\windows\Installer\1a1f6462.msp c:\windows\Installer\1a1f6463.msp c:\windows\Installer\1a1f6464.msp c:\windows\Installer\1a1f6465.msp c:\windows\Installer\1a1f6466.msp c:\windows\Installer\1a1f6467.msp c:\windows\Installer\1a1f6468.msp c:\windows\Installer\1b0b6.msi c:\windows\Installer\61a186c.msi c:\windows\Installer\WMEncoder.msi c:\windows\iTunesMusic.exe c:\windows\mslagent c:\windows\mslagent\2_mslagent.dll c:\windows\mslagent\mslagent.exe c:\windows\mslagent\uninstall.exe c:\windows\mssecu.exe c:\windows\system32\404Fix.exe c:\windows\system32\Agent.OMZ.Fix.exe c:\windows\system32\akttzn.exe c:\windows\system32\anticipator.dll c:\windows\system32\awtoolb.dll c:\windows\system32\bdn.com c:\windows\system32\bsva-egihsg52.exe c:\windows\system32\dpcproxy.exe c:\windows\system32\dumphive.exe c:\windows\system32\hoproxy.dll c:\windows\system32\hxiwlgpm.dat c:\windows\system32\hxiwlgpm.exe c:\windows\system32\IEDFix.C.exe c:\windows\system32\IEDFix.exe c:\windows\system32\lsprst7.dll c:\windows\system32\msgp.exe c:\windows\system32\msnbho.dll c:\windows\system32\mssecu.exe c:\windows\system32\msvchost.exe c:\windows\system32\mtr2.exe c:\windows\system32\mwin32.exe c:\windows\system32\netode.exe c:\windows\system32\newsd32.exe c:\windows\system32\o4Patch.exe c:\windows\system32\Process.exe c:\windows\system32\ps1.exe c:\windows\system32\psof1.exe c:\windows\system32\psoft1.exe c:\windows\system32\regc64.dll c:\windows\system32\regm64.dll c:\windows\system32\Rundl1.exe c:\windows\system32\smp c:\windows\system32\smp\msrc.exe c:\windows\system32\sncntr.exe c:\windows\system32\SrchSTS.exe c:\windows\system32\ssprs.dll c:\windows\system32\ssurf022.dll c:\windows\system32\ssvchost.com c:\windows\system32\ssvchost.exe c:\windows\system32\sysreq.exe c:\windows\system32\taack.dat c:\windows\system32\taack.exe c:\windows\system32\temp#01.exe c:\windows\system32\thun.dll c:\windows\system32\thun32.dll c:\windows\system32\tmp.reg c:\windows\system32\VACFix.exe c:\windows\system32\VBIEWER.OCX c:\windows\system32\vbsys2.dll c:\windows\system32\vcatchpi.dll c:\windows\system32\VCCLSID.exe c:\windows\system32\winlogonpc.exe c:\windows\system32\winsystem.exe c:\windows\system32\WINWGPX.EXE c:\windows\system32\WS2Fix.exe c:\windows\userconfig9x.dll c:\windows\winsystem.exe . ((((((((((((((((((((((((( Files Created from 2009-06-28 to 2009-07-31 ))))))))))))))))))))))))))))))) . 2009-07-31 09:44 . 2009-07-31 14:46 -------- d-----w- C:\ToolBar SD 2009-07-30 23:43 . 2009-07-30 23:42 404225 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\update.exe 2009-07-30 23:43 . 2009-07-30 23:42 345345 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\update.dll 2009-07-30 23:43 . 2009-04-17 15:07 87297 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updaterc.dll 2009-07-30 23:43 . 2009-03-03 09:21 9985 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updguirc.dll 2009-07-30 23:43 . 2009-02-24 11:16 117505 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updgui.dll 2009-07-30 23:43 . 2009-02-17 12:49 79105 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updext.dll 2009-07-30 23:43 . 2008-10-20 06:38 126721 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\scewxmlw.dll 2009-07-30 23:40 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys 2009-07-30 23:40 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys 2009-07-30 23:40 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys 2009-07-30 23:40 . 2009-07-30 23:40 -------- d-----w- c:\program files\Avira 2009-07-30 23:40 . 2009-07-30 23:40 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira 2009-07-30 20:21 . 2009-07-30 20:21 -------- d-----w- c:\documents and settings\jeffoul\Application Data\BinarySense 2009-07-30 20:20 . 2009-07-30 20:20 -------- d-----w- c:\program files\Fichiers communs\BinarySense 2009-07-30 20:20 . 2009-07-30 20:20 -------- d-----w- c:\program files\BinarySense 2009-07-21 22:03 . 2009-07-21 22:03 -------- d-sh--w- c:\documents and settings\jeffoul\PrivacIE 2009-07-21 21:58 . 2009-07-21 21:58 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache 2009-07-21 21:57 . 2009-07-21 21:57 -------- d-sh--w- c:\documents and settings\jeffoul\IETldCache 2009-07-21 21:41 . 2009-07-21 21:41 -------- d-----w- c:\windows\ie8updates 2009-07-21 21:34 . 2009-07-21 21:39 -------- dc-h--w- c:\windows\ie8 2009-07-21 21:19 . 2009-07-01 07:08 101376 -c----w- c:\windows\system32\dllcache\iecompat.dll 2009-07-21 21:19 . 2009-07-03 16:57 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll 2009-07-21 21:18 . 2009-07-03 16:57 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll 2009-07-16 20:51 . 2009-07-16 20:51 -------- d-----w- c:\program files\Disk Checker 2009-07-15 20:38 . 2009-03-24 14:07 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-31 15:09 . 2006-11-21 22:58 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP 2009-07-31 14:38 . 2009-06-16 09:23 -------- d-----w- c:\program files\Notepad++ 2009-07-31 13:37 . 2006-12-13 15:08 -------- d-----w- c:\documents and settings\jeffoul\Application Data\IDMComp 2009-07-31 13:37 . 2006-12-13 15:06 -------- d-----w- c:\program files\IDM Computer Solutions 2009-07-31 09:44 . 2008-10-14 19:42 -------- d-----w- c:\program files\Spybot - Search & Destroy 2009-07-31 09:44 . 2008-10-14 19:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-07-31 09:15 . 2006-12-12 11:19 -------- d-----w- c:\documents and settings\jeffoul\Application Data\vlc 2009-07-27 12:02 . 2007-01-25 16:37 -------- d-----w- c:\documents and settings\jeffoul\Application Data\dvdcss 2009-07-26 01:25 . 2006-11-29 15:44 -------- d-----w- c:\documents and settings\jeffoul\Application Data\Azureus 2009-07-21 23:41 . 2007-01-15 17:09 -------- d-----w- c:\documents and settings\jeffoul\Application Data\ImgBurn 2009-07-21 23:29 . 2006-11-21 22:38 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-07-21 23:28 . 2008-05-30 18:23 -------- d-----w- c:\documents and settings\jeffoul\Application Data\Samsung 2009-07-21 23:24 . 2007-06-13 09:41 -------- d-----w- c:\program files\Flash Saver 2009-07-21 23:23 . 2008-02-15 22:48 -------- d-----w- c:\program files\Winamp 2009-07-21 23:21 . 2006-11-28 11:38 -------- d-----w- c:\documents and settings\jeffoul\Application Data\BSplayer 2009-07-21 23:20 . 2007-09-13 13:06 -------- d-----w- c:\program files\Bonjour 2009-07-20 10:47 . 2006-12-06 15:14 199212 ----a-w- c:\windows\Fonts\AdobeFnt07.lst 2009-07-17 18:00 . 2006-11-24 17:51 128960 ----a-w- c:\documents and settings\jeffoul\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-07-16 15:31 . 2001-10-02 14:57 495320 ----a-w- c:\windows\system32\perfh00C.dat 2009-07-16 15:31 . 2001-10-02 14:56 85840 ----a-w- c:\windows\system32\perfc00C.dat 2009-07-16 09:49 . 2008-10-13 19:55 -------- d-----w- c:\documents and settings\All Users\Application Data\mdkdkbet 2009-07-08 16:43 . 2009-06-23 22:47 -------- d-----w- c:\documents and settings\jeffoul\Application Data\VSO 2009-07-03 16:57 . 2001-08-24 14:00 915456 ----a-w- c:\windows\system32\wininet.dll 2009-06-23 22:45 . 2009-06-23 22:45 -------- d-----w- c:\program files\VSO 2009-06-19 22:51 . 2008-09-13 00:19 -------- d-----w- c:\program files\Safari 2009-06-19 22:47 . 2009-06-19 22:46 -------- d-----w- c:\program files\iTunes 2009-06-19 22:47 . 2009-06-19 22:46 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} 2009-06-19 22:46 . 2009-06-19 22:46 -------- d-----w- c:\program files\iPod 2009-06-19 22:46 . 2008-08-07 09:57 -------- d-----w- c:\program files\Fichiers communs\Apple 2009-06-19 22:44 . 2009-06-19 22:44 -------- d-----w- c:\program files\QuickTime 2009-06-05 09:42 . 2008-08-07 09:57 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys 2009-06-03 19:27 . 2001-10-02 15:42 1296896 ----a-w- c:\windows\system32\quartz.dll 2009-05-07 15:43 . 2001-10-02 13:57 347136 ----a-w- c:\windows\system32\localspl.dll 2007-12-15 14:51 . 2006-11-23 21:18 278528 ----a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe 2009-07-15 22:31 . 2008-07-26 15:01 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll 2009-04-08 11:30 . 2009-04-08 11:30 27976 ----a-w- c:\program files\mozilla firefox\plugins\atgpcdec.dll 2009-04-08 11:30 . 2009-04-08 11:30 126360 ----a-w- c:\program files\mozilla firefox\plugins\atgpcext.dll 2009-04-08 11:30 . 2009-04-08 11:30 98712 ----a-w- c:\program files\mozilla firefox\plugins\ieatgpc.dll 2005-05-13 16:12 . 2005-05-13 16:12 217073 --sha-r- c:\windows\meta4.exe 2005-10-24 10:13 . 2005-10-24 10:13 66560 --sha-r- c:\windows\MOTA113.exe 2005-10-13 20:27 . 2005-10-13 20:27 422400 --sha-r- c:\windows\x2.64.exe 2005-10-07 18:14 . 2005-10-07 18:14 308224 --sha-r- c:\windows\system32\avisynth.dll 2005-07-14 11:31 . 2005-07-14 11:31 27648 --sha-r- c:\windows\system32\AVSredirect.dll 2005-06-26 14:32 . 2005-06-26 14:32 616448 --sha-r- c:\windows\system32\cygwin1.dll 2005-06-21 21:37 . 2005-06-21 21:37 45568 --sha-r- c:\windows\system32\cygz.dll 2007-01-26 21:24 . 2006-11-25 12:05 88 --sh--r- c:\windows\system32\E6A0BABBA8.sys 2004-01-24 23:00 . 2004-01-24 23:00 70656 --sha-r- c:\windows\system32\i420vfw.dll 2007-01-26 21:24 . 2006-11-25 12:05 2828 --sha-w- c:\windows\system32\KGyGaAvL.sys 2006-04-27 09:24 . 2006-04-27 09:24 2945024 --sha-r- c:\windows\system32\Smab.dll 2005-02-28 12:16 . 2005-02-28 12:16 240128 --sha-r- c:\windows\system32\x.264.exe . ------- Sigcheck ------- [-] 2007-06-13 13:22 979456 80A5400514EB32D393654768C4017E46 c:\windows\explorer.exe [7] 2007-06-13 13:10 1037312 B795475444D6D57A572C14B9E1A29839 c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe [-] 2001-10-02 11:18 1005056 9E20A8EF0CA524446AFEE29F4423CC8F c:\windows\$NtServicePackUninstall$\explorer.exe [7] 2004-08-19 15:09 1036288 2A7BD330924252A2FD80344FC949BB72 c:\windows\$NtUninstallKB938828$\explorer.exe [-] 2007-06-13 13:22 979456 80A5400514EB32D393654768C4017E46 c:\windows\ServicePackFiles\i386\explorer.exe [-] 2008-04-14 02:34 1037824 F2317622D29F9FF0F88AEECD5F60F0DD c:\windows\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\explorer.exe [7] 2007-06-13 13:22 1037312 D0288319660EDCFED07C7E74C4EA38A5 c:\windows\system32\dllcache\explorer.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SuperCopier.exe"="c:\program files\SuperCopier\SuperCopier.exe" [2003-04-24 683520] "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360] "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2005-11-15 1204224] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "snpstd"="c:\windows\vsnpstd.exe" [2004-06-10 286720] "SystrayORAHSS"="c:\program files\Orange\Systray\SystrayApp.exe" [2007-09-25 94208] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-19 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="c:\documents and settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "SuperCopier.exe"=c:\program files\SuperCopier\SuperCopier.exe "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "ORAHSSSessionManager"=c:\program files\Orange\SessionManager\SessionManager.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager "c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager "c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"= "c:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"= "c:\\Program Files\\mIRC\\mirc.exe"= "c:\\Program Files\\Azureus\\Azureus.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "10859:TCP"= 10859:TCP:BitComet 10859 TCP "10859:UDP"= 10859:UDP:BitComet 10859 UDP "26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [15/10/2008 00:48 28544] R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [31/07/2009 01:40 108289] R2 HDDlife HDD Access service;HDDlife HDD Access service;c:\program files\Fichiers communs\BinarySense\hldasvc.exe [09/08/2007 14:23 816376] S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [02/08/2005 23:10 32512] S3 portio32;portio32;c:\windows\system32\drivers\portio32.sys --> c:\windows\system32\drivers\portio32.sys [?] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contents of the 'Scheduled Tasks' folder 2009-07-29 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 10:34] 2009-07-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-117609710-261478967-725345543-1003.job - c:\documents and settings\jeffoul\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-19 18:02] 2009-07-30 c:\windows\Tasks\Maintenance en 1 clic.job - c:\program files\TuneUp Utilities 2008\OneClick.exe [2007-12-21 13:17] 2009-07-31 c:\windows\Tasks\WGASetup.job - c:\windows\system32\KB905474\wgasetup.exe [2009-04-08 20:18] . - - - - ORPHANS REMOVED - - - - SSODL-AdmUiDsc-{1F21957C-4D5A-3B5A-80A3-090AF0D9C993} - (no file) . ------- Supplementary Scan ------- . mWindow Title = IE: &Reduire avec Alice's Biscuit - c:\program files\kayenko\alice's biscuit\alice.htm IE: &Télécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddLink.html IE: Download with GetRight - c:\program files\GetRight\GRdownload.htm IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Open with GetRight Browser - c:\program files\GetRight\GRbrowse.htm IE: Recherche sur eBay - c:\program files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html IE: Tout t&élécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddList.html Trusted Zone: orange.fr\www Handler: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - c:\program files\BinarySense\HDDlife 3\hlAPP.dll DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} DPF: {90E8E859-1B10-4C64-B991-DDFB157CD50B} DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} FF - ProfilePath - c:\documents and settings\jeffoul\Application Data\Mozilla\Firefox\Profiles\s03v92rc.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - prefs.js: browser.startup.homepage - hxxp://www.brestunt.com/ FF - plugin: c:\documents and settings\jeffoul\Local Settings\Application Data\Google\Update\1.2.145.5\npGoogleOneClick8.dll FF - plugin: c:\program files\Java\jre1.5.0_09\bin\NPJava11.dll FF - plugin: c:\program files\Java\jre1.5.0_09\bin\NPJava12.dll FF - plugin: c:\program files\Java\jre1.5.0_09\bin\NPJava13.dll FF - plugin: c:\program files\Java\jre1.5.0_09\bin\NPJava14.dll FF - plugin: c:\program files\Java\jre1.5.0_09\bin\NPJava32.dll FF - plugin: c:\program files\Java\jre1.5.0_09\bin\NPJPI150_09.dll FF - plugin: c:\program files\Java\jre1.5.0_09\bin\NPOJI610.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npatgpc.dll ---- FIREFOX POLICIES ---- FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: content.max.tokenizing.time - 200000 FF - user.js: content.notify.interval - 100000 FF - user.js: content.switch.threshold - 650000 FF - user.js: nglayout.initialpaint.delay - 300 c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-31 17:29 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-117609710-261478967-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{28FE1486-7C1A-7B09-2CAB-ACEF366C019A}*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) "palojjimcmobfcacghojhajalpckiijo"=hex:69,61,6c,6a,63,63,61,65,70,69,65,6d,67, 61,6c,63,6d,67,00,00 "oafplleigpoccbikbfakfihmocgdif"=hex:69,61,6c,6a,63,63,61,65,70,69,65,6d,67,61, 6c,63,6d,67,00,00 "kanohijfaknajllchcjdcn"=hex:62,61,62,6b,00,00 [HKEY_USERS\S-1-5-21-117609710-261478967-725345543-1003\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\ActiveSync] "Name"="ActiveSync" "DisplayName"="Microsoft ActiveSync" "Param1"="ActiveSync" "Type"="wellknown" "Order"=dword:00000001 "State"=dword:0000000b [HKEY_USERS\S-1-5-21-117609710-261478967-725345543-1003\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\IESettings] "Name"="IESettings" "Type"="IESettings" "Order"=dword:00000004 "State"=dword:0000000b [HKEY_USERS\S-1-5-21-117609710-261478967-725345543-1003\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\MediaFiles] "Name"="MediaFiles" "Type"="MediaFiles" "Order"=dword:00000003 "State"=dword:0000000b [HKEY_USERS\S-1-5-21-117609710-261478967-725345543-1003\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\NPW] "Name"="NPW" "Param1"="NPW" "Type"="wellknown" "Order"=dword:00000002 "State"=dword:0000000b [HKEY_USERS\S-1-5-21-117609710-261478967-725345543-1003\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\Outlook] "Name"="Outlook" "DisplayName"="Microsoft Outlook" "Param1"="Outlook" "Type"="wellknown" "Order"=dword:00000000 "State"=dword:00000020 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "cd042efbbd7f7af1647644e76e06692b"=hex:2e,e8,e1,00,eb,16,2b,de,d1,e3,50,c7,09, 2c,58,49,c8,28,51,af,b0,29,a3,98,65,eb,52,5b,7a,2d,ce,fe,e2,63,26,f1,3f,c8,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "bca643cdc5c2726b20d2ecedcc62c59b"=hex:71,3b,04,66,8b,46,0d,96,bb,79,de,c3,00, a9,79,2e,71,3b,04,66,8b,46,0d,96,38,00,f5,1e,1e,b9,0f,78,6a,9c,d6,61,af,45,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "2c81e34222e8052573023a60d06dd016"=hex:ff,7c,85,e0,43,d4,0e,fe,38,b1,d0,07,d3, eb,ed,a2,25,da,ec,7e,55,20,c9,26,4b,f5,a3,eb,8e,90,b6,0b,ff,7c,85,e0,43,d4,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "2582ae41fb52324423be06337561aa48"=hex:3e,1e,9e,e0,57,5a,93,61,bb,a1,6d,00,04, c8,db,82,3e,1e,9e,e0,57,5a,93,61,20,ec,21,af,ed,34,56,3a,86,8c,21,01,be,91,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "caaeda5fd7a9ed7697d9686d4b818472"=hex:cd,44,cd,b9,a6,33,6c,cd,86,77,1f,15,40, 3b,f5,d5,cd,44,cd,b9,a6,33,6c,cd,52,1d,8b,94,ff,66,49,03,f5,1d,4d,73,a8,13,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:b0,18,ed,a7,3f,8d,37,a4,b9,cb,f4,a6,7c, ff,74,89,b0,18,ed,a7,3f,8d,37,a4,ac,d2,83,a2,e3,34,9d,46,df,20,58,62,78,6b,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "4d370831d2c43cd13623e232fed27b7b"=hex:97,20,4e,9a,c7,f1,35,ee,9c,59,b5,85,2c, c3,7f,09,31,77,e1,ba,b1,f8,68,02,d8,28,ca,6c,11,80,e4,04,fb,a7,78,e6,12,2f,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BEB3C0C7-B648-4257-96D9-B5D024816E27}\Version*Version] "Version"=hex:a7,d5,32,c3,43,e4,7b,2e,96,b5,22,f8,02,09,d1,6c,e3,09,1c,32,fc, b1,c9,aa,fb,fc,d6,26,94,68,20,f5,79,1a,39,be,a1,e0,a2,34,33,47,4e,32,a5,1d,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "1d68fe701cdea33e477eb204b76f993d"=hex:83,6c,56,8b,a0,85,96,ab,3a,c2,32,58,0a, 84,db,8d,83,6c,56,8b,a0,85,96,ab,f8,04,2e,4b,70,ad,91,99,01,3a,48,fc,e8,04,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "1fac81b91d8e3c5aa4b0a51804d844a3"=hex:f6,0f,4e,58,98,5b,89,c9,00,08,67,13,a2, e7,84,95,51,fa,6e,91,28,9e,14,cc,42,c1,9f,f5,ff,a5,9e,1e,f6,0f,4e,58,98,5b,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "f5f62a6129303efb32fbe080bb27835b"=hex:3d,ce,ea,26,2d,45,aa,78,f9,dd,e6,24,a7, f0,c0,0e,b1,cd,45,5a,a8,c4,f8,b9,c4,31,e3,9f,d0,51,8f,57,3d,ce,ea,26,2d,45,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:f8,31,0f,a9,5f,a0,ec,fb,05,6d,2f,fc,93, 8c,75,ed,e3,0e,66,d5,eb,bc,2f,6b,b6,a6,4b,fa,09,0f,28,01,2a,b7,cc,b5,b9,7f,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\\WINDOWS\\system32\\OLE32.DLL" "8a8aec57dd6508a385616fbc86791ec2"=hex:05,73,21,dd,54,d8,4a,c5,2f,11,68,aa,b9, 17,7d,73,fa,ea,66,7f,d4,3b,6b,70,12,bf,13,f0,2d,03,6c,15,6c,43,2d,1e,aa,22,\ [HKEY_LOCAL_MACHINE\software\Minnetonka Audio Software\SurCode Dolby Digital Premiere\Version*Version] "Version"=hex:a7,d5,32,c3,43,e4,7b,2e,96,b5,22,f8,02,09,d1,6c,e3,09,1c,32,fc, b1,c9,aa,fb,fc,d6,26,94,68,20,f5,79,1a,39,be,a1,e0,a2,34,33,47,4e,32,a5,1d,\ . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(1312) c:\windows\system32\Ati2evxx.dll . Completion time: 2009-07-31 17:32 ComboFix-quarantined-files.txt 2009-07-31 15:32 Pre-Run: 4 081 664 000 octets libres Post-Run: 4 095 459 328 octets libres 471 --- E O F --- 2009-07-29 01:03