karhell

ok, et merci beaucoup de ton aide préciseuse !

Voilà : C:\WINDOWS\System32\Uninstall.ico -->07/08/2006 12:30:25 C:\WINDOWS\System32\Help.ico -->07/08/2006 12:30:24 C:\WINDOWS\System32\pavas.ico -->07/08/2006 12:30:23 C:\WINDOWS\System32\wpa.dbl -->07/08/2006 11:59:00 C:\WINDOWS\System32\nvapps.xml -->07/08/2006 11:58:55 C:\WINDOWS\System32\PerfStringBackup.TMP -->14/07/2006 09:11:12 C:\WINDOWS\System32\MRT.exe -->07/07/2006 03:21:46 C:\WINDOWS\System32\CONFIG.NT -->25/06/2006 15:48:10 C:\WINDOWS\System32\WgaLogon.dll -->19/06/2006 16:20:42 C:\WINDOWS\System32\LegitCheckControl.dll -->19/06/2006 16:19:42 C:\WINDOWS\System32\WgaTray.exe -->19/06/2006 16:19:26 C:\WINDOWS\System32\jgpl400.dll -->01/06/2006 20:48:44 C:\WINDOWS\System32\jgdw400.dll -->01/06/2006 20:48:44 C:\WINDOWS\System32\aswBoot.exe -->31/05/2006 11:02:04 C:\WINDOWS\System32\AVASTSS.scr -->31/05/2006 10:54:35 C:\WINDOWS\System32\shdocvw.dll -->29/05/2006 17:29:14 C:\WINDOWS\System32\mshtml.dll -->19/05/2006 17:09:50 C:\WINDOWS\System32\iphlpapi.dll -->19/05/2006 15:23:35 C:\WINDOWS\System32\dnsapi.dll -->19/05/2006 15:23:35 C:\WINDOWS\System32\dhcpcsvc.dll -->19/05/2006 15:23:35 C:\WINDOWS\System32\jscript.dll -->18/05/2006 07:31:21 C:\WINDOWS\System32\rasmans.dll -->14/05/2006 10:48:16 C:\WINDOWS\System32\xpsp3res.dll -->11/05/2006 10:57:36 C:\WINDOWS\System32\wininet.dll -->10/05/2006 07:24:40 C:\WINDOWS\System32\urlmon.dll -->10/05/2006 07:24:39 C:\WINDOWS\setupapi.log -->07/08/2006 12:56:09 C:\WINDOWS\wiadebug.log -->07/08/2006 11:58:51 C:\WINDOWS\0.log -->07/08/2006 11:58:51 C:\WINDOWS\WindowsUpdate.log -->07/08/2006 11:58:50 C:\WINDOWS\wiaservc.log -->07/08/2006 11:58:48 C:\WINDOWS\bootstat.dat -->07/08/2006 11:58:42 C:\WINDOWS\setupact.log -->07/08/2006 11:56:20 C:\WINDOWS\ntbtlog.txt -->07/08/2006 11:55:24 C:\WINDOWS\SchedLgU.Txt -->07/08/2006 11:53:37 C:\WINDOWS\win.ini -->06/08/2006 21:40:11 C:\WINDOWS\WgaNotify.log -->06/08/2006 19:04:01 C:\WINDOWS\setuperr.log -->06/08/2006 18:21:29 C:\WINDOWS\tsc.ini -->06/08/2006 13:04:01 C:\WINDOWS\vsapi32.dll -->06/08/2006 13:01:12 C:\WINDOWS\VPTNFILE.637 -->06/08/2006 13:01:12 Le volume dans le lecteur C s'appelle HDD Le num‚ro de s‚rie du volume est E405-A18A R‚pertoire de C:\WINDOWS\system 22/12/2003 03:28 4ÿ672 WOWPOST.EXE 1 fichier(s) 4ÿ672 octets 0 R‚p(s) 104ÿ312ÿ782ÿ848 octets libres Le volume dans le lecteur C s'appelle HDD Le num‚ro de s‚rie du volume est E405-A18A R‚pertoire de C:\WINDOWS\system32 20/08/2004 01:09 6ÿ144 csrss.exe 1 fichier(s) 6ÿ144 octets 0 R‚p(s) 104ÿ312ÿ782ÿ848 octets libres Le volume dans le lecteur C s'appelle HDD Le num‚ro de s‚rie du volume est E405-A18A R‚pertoire de C:\Program Files 07/08/2006 11:56 <REP> . 07/08/2006 11:56 <REP> .. 13/03/2005 12:56 <REP> 123 Free Solitaire 13/03/2005 12:31 2ÿ109ÿ895 123free.exe 29/04/2004 18:02 <REP> 2flyer 29/04/2004 18:01 1ÿ550ÿ249 2flyerScreensaverBulder.zip 30/10/2004 14:03 26ÿ832ÿ217 66.81_win2kxp_international_whql.exe 23/07/2006 16:33 <REP> 7-Zip 23/03/2006 21:40 <REP> a2 free 17/11/2004 22:01 3ÿ160ÿ832 a2freesetup.exe 23/01/2004 20:12 1ÿ760ÿ378 aaw6.exe 14/07/2006 09:51 1ÿ695ÿ829 absetup.exe 06/08/2005 17:54 <REP> Adobe 10/10/2005 20:46 844ÿ272 advisor.exe 28/02/2004 20:20 <REP> Ahead 05/02/2005 21:45 <REP> Alwil Software 03/10/2004 14:13 1ÿ111ÿ312 antrenamer2_install.exe 30/11/2005 08:21 <REP> Atlantis_at 14/07/2006 09:53 <REP> Avant Browser 03/01/2004 00:21 9ÿ632ÿ256 avg70t_206.exe 27/03/2005 16:26 <REP> AviSynth 2.5 29/04/2004 14:03 4ÿ053ÿ504 avwinsfx.exe 27/12/2005 21:57 <REP> AxBx 10/10/2005 20:46 <REP> Belarc 30/11/2005 08:21 <REP> BitComet 14/06/2005 18:56 1ÿ957ÿ233 bitcomet.exe 31/08/2005 15:46 <REP> BlackSunSoft.net 12/03/2006 21:48 <REP> Blighty Design 27/05/2006 00:38 <REP> Blubster 02/10/2004 18:36 6ÿ937ÿ322 bpssr.exe 18/03/2005 18:51 3ÿ469ÿ632 BSINSTALL.exe 12/07/2004 20:42 <REP> BubbleBall 24/11/2005 22:11 <REP> CCleaner 24/11/2005 22:10 541ÿ279 ccsetup126.exe 01/08/2006 19:09 1ÿ458ÿ008 ccsetup131.exe 08/06/2005 06:54 12ÿ234ÿ628 celestia-win32-1.3.2.exe 30/11/2005 08:23 <REP> ChrisTV 29/12/2004 21:33 4ÿ628ÿ111 cleaner41.exe 27/03/2005 14:50 <REP> CloneDVD 13/03/2006 15:11 <REP> clubclio 24/03/2004 20:54 <REP> CodeStuff 04/10/2004 22:41 <REP> Common Files 30/11/2005 08:26 <REP> Curious Labs 27/03/2005 13:04 <REP> CyberLink 13/02/2004 20:08 <REP> directx 31/08/2005 15:57 <REP> DivX 31/08/2005 15:50 <REP> DivXMachine II 15/06/2005 20:58 7ÿ720ÿ345 divx_codec_5.2.1.zip 27/03/2005 16:16 11ÿ503ÿ690 DM2.exe 03/10/2004 12:15 <REP> Documents To Go 26/02/2006 14:49 <REP> DVD Audio Extractor 31/08/2005 10:29 <REP> DVD Shrink 26/02/2006 14:48 1ÿ342ÿ128 dvdaudioextractor.exe 27/03/2005 15:27 1ÿ104ÿ734 dvdshrink_3.2.0.16_fr.zip 21/09/2005 18:58 <REP> dvdtitle0.62 21/09/2005 18:57 278ÿ970 dvdtitle0.62.rar 29/06/2005 20:39 6ÿ767ÿ104 EasyDivX_0820_standard.exe 21/02/2005 19:56 2ÿ842ÿ383 EClea2_0.exe 27/05/2006 00:12 <REP> eMule 05/04/2006 20:18 4ÿ677ÿ596 eMule0.47a-Installer.exe 14/02/2004 21:49 <REP> ESBUnitConv 10/11/2004 21:16 1ÿ877ÿ180 etajv_ps2_6.14.zip 04/02/2006 12:59 10ÿ325ÿ531 Eudora_6.2.vf.exe 27/03/2005 14:43 548 event.log 09/01/2005 15:25 <REP> EvilLyrics 31/12/2004 14:57 289ÿ204 evillyrics.zip 24/11/2005 22:18 <REP> ewido 24/11/2005 22:18 6ÿ628ÿ944 ewido-setup.exe 15/06/2005 20:59 <REP> FairUse Wizard 15/06/2005 20:58 3ÿ835ÿ373 fairuse_1.0_light.zip 30/11/2005 08:24 <REP> Fantastic Flame Screensaver 16/10/2005 10:57 866ÿ636 fantasticflame.exe 27/03/2005 16:26 <REP> ffvfw 30/06/2005 13:36 <REP> Fichiers communs 01/04/2004 20:24 <REP> fire 27/03/2005 18:01 5ÿ118ÿ768 Firefox Setup 1.0.2.exe 28/12/2004 21:49 700ÿ120 flashplayer7installer.exe 11/02/2006 12:31 2ÿ562ÿ585 fm50fr.exe 12/02/2006 11:22 <REP> foxmail 21/03/2006 19:29 620ÿ710 framxpro.zip 20/11/2004 15:01 7ÿ030ÿ550 fsav2004n.exe 15/05/2005 11:30 2ÿ525ÿ096 ftpexpert3.exe 27/03/2005 13:17 <REP> FusionSoft DVD Player XP 06/08/2006 01:01 <REP> GameHouse 22/05/1996 18:52 68ÿ392 GL.H 09/02/1996 09:42 12ÿ024 GLAUX.H 16/07/1996 15:41 1ÿ093ÿ958 GLAUX.LIB 21/02/2004 16:12 2ÿ363ÿ459 GlobFXSpaceTravel.exe 17/05/1996 15:35 18ÿ282 GLU.H 29/07/1996 12:09 139ÿ712 GLU32.DLL 12/06/1996 15:37 49ÿ514 GLU32.LIB 17/06/2006 11:05 <REP> Google 11/02/2006 14:32 11ÿ817ÿ800 GoogleEarth-0762.exe 28/07/2005 19:44 10ÿ844ÿ936 GoogleEarth.exe 28/07/2006 19:18 13ÿ736ÿ064 GoogleEarthWin.exe 03/01/2004 11:50 452ÿ808 GoogleToolbarInstaller_fr.exe 21/11/2004 19:38 8ÿ058ÿ783 GP410FULL_EN.EXE 16/04/2006 13:00 <REP> GrabIt 16/04/2006 13:00 1ÿ265ÿ438 GrabIt160b.exe 03/01/2004 00:41 <REP> Grisoft 21/11/2004 19:39 <REP> Guitar Pro 4 03/11/2004 21:46 1ÿ197ÿ320 guitare1-4.2.exe 28/05/2006 15:56 <REP> Heredis 8 21/02/2005 12:03 212ÿ849 hijackthis.zip 02/10/2004 18:20 183ÿ169 hjt.zip 30/06/2005 13:35 5ÿ809ÿ216 hyplay_setup.exe 25/03/2006 13:31 <REP> Inkscape 25/03/2006 13:27 8ÿ645ÿ836 Inkscape-0.43-1.win32.exe 06/08/2005 17:50 237ÿ043 install.exe 29/12/2004 10:17 3ÿ592ÿ848 Installer_AIM.exe 26/09/2004 20:38 683ÿ315 Install_Dll_MMTV.zip 31/12/2005 11:25 948ÿ936 install_flash_player.exe 16/10/2004 00:13 <REP> IntelliTamper 10/10/2004 20:38 137ÿ893 intellitamper.exe 15/06/2006 01:17 <REP> Internet Explorer 07/07/2004 19:10 <REP> InterVideo 11/01/2006 19:25 <REP> iPod 16/04/2005 11:34 <REP> IrfanView 11/01/2006 19:25 <REP> iTunes 11/01/2006 19:09 36ÿ488ÿ456 iTunesSetup.exe 16/04/2005 11:27 877ÿ056 iview395.exe 26/01/2004 19:56 <REP> Jasc Software Inc 25/02/2004 20:32 <REP> Java 31/08/2005 16:15 <REP> JEUX 26/01/2004 20:03 <REP> K-Lite Codec Pack 26/10/2005 12:23 218ÿ515ÿ668 karatedemo.zip 28/04/2005 12:18 <REP> Kazaa Lite K++ 05/04/2006 22:09 5ÿ361ÿ888 kerio.exe 06/04/2006 18:44 5ÿ239ÿ245 kerio_firewall_4.2.3__crack.rar 04/01/2004 01:32 6ÿ594ÿ452 klcodec220f.exe 31/12/2004 19:45 3ÿ790ÿ211 KTV2.0.0.0.zip 23/01/2004 20:13 <REP> Lavasoft 31/07/2006 06:48 <REP> LIVEUPDATE 13/02/2004 20:05 <REP> Logitech 09/04/2006 01:49 <REP> Lupas Rename 2000 09/04/2006 01:49 550ÿ218 LupasRenameSetup.exe 28/03/2004 18:06 <REP> Macromedia 10/10/2004 12:39 712ÿ446 Mechanic.EXE 09/02/2005 08:43 <REP> Messenger 10/04/2006 22:47 <REP> MessengerPlus! 3 02/11/2004 15:42 963ÿ955 Meteo-Live.exe 26/02/2006 14:38 <REP> Microsoft AntiSpyware 03/01/2004 11:55 <REP> microsoft frontpage 03/01/2004 11:55 <REP> Microsoft Office 03/01/2004 11:56 <REP> Microsoft Visual Studio 26/01/2004 20:03 <REP> Microsoft Works 16/02/2005 21:47 6ÿ531ÿ728 MicrosoftAntiSpywareInstall.exe 12/03/2005 12:25 <REP> MindArk 25/04/2004 00:40 <REP> mirc 26/09/2004 20:38 704ÿ909 MMTV2.40.zip 11/10/2004 07:15 <REP> Movie Maker 07/08/2006 10:24 <REP> Mozilla Firefox 13/06/2004 21:47 <REP> MP3Producer 13/06/2004 21:46 2ÿ435ÿ259 mp3producer.exe 10/04/2006 22:45 4ÿ752ÿ968 MsgPlus-363.exe 30/09/2002 14:00 <REP> MSN Gaming Zone 15/11/2005 22:40 <REP> MSN Messenger 27/12/2005 21:56 779ÿ141 mvc2005.zip 14/06/2004 00:01 <REP> My BootDisk 30/05/2004 18:04 582ÿ303 mybootdisk.exe 28/02/2004 20:06 24ÿ070ÿ405 nero6303.exe 27/03/2005 19:02 165ÿ527 nerodvd[takefiles.com].zip 06/07/2004 21:41 <REP> Nullsoft 25/05/2004 21:53 11ÿ523ÿ703 NVC54_R1FRA.exe 07/07/2004 19:10 <REP> NVIDIA Corporation 28/02/2004 20:02 8ÿ364ÿ093 n‚ro.exe 08/05/2004 17:56 <REP> OLYMPUS 29/07/1996 12:11 733ÿ296 OPENGL32.DLL 16/07/1996 15:33 336ÿ274 OPENGL32.LIB 30/10/2004 13:57 495ÿ458 Opengl95.exe 31/07/2006 19:10 <REP> Opera 31/07/2006 19:08 6ÿ436ÿ200 Opera 9 International Setup.exe 17/06/2006 14:18 <REP> Opera7 13/04/2006 06:44 <REP> Outlook Express 29/12/2005 20:07 3ÿ843ÿ584 ow32enen851.exe 02/01/2004 23:22 16ÿ613ÿ524 ow32frfr723j.exe 19/02/2006 15:31 3ÿ786ÿ240 ow32frfr852.exe 12/03/2006 19:39 3ÿ852ÿ288 ow32frfr853.exe 08/04/2006 22:26 3ÿ905ÿ536 ow32frfr854.exe 27/03/2005 13:00 6ÿ658ÿ586 P5DVD_Trial.1130.exe 29/02/2004 13:53 3ÿ205ÿ106 pack_ultime.exe 31/08/2005 15:45 1ÿ714ÿ365 pdivx312.zip 12/03/2005 12:24 1ÿ251ÿ608 PE_Installer.exe 18/04/2004 13:35 2ÿ734ÿ658 pg-setup.exe 10/10/2005 19:07 <REP> Picasa2 10/10/2005 18:57 4ÿ130ÿ336 picasa2-current.exe 12/02/2006 15:39 <REP> PIXresizer 12/02/2006 15:37 2ÿ287ÿ930 PIXresizer.zip 02/01/2004 23:15 1ÿ955ÿ904 PPVIEWER.EXE 19/02/2006 19:53 1ÿ921ÿ549 PPVIEWER.rar 26/01/2004 19:55 65ÿ250ÿ400 psp810frtr.exe 11/01/2006 19:26 <REP> QuickTime 27/03/2005 18:47 8ÿ892ÿ453 quicktime-alternative_quicktime_alternative_1.43_francais_12650.exe 27/03/2005 18:45 2ÿ696ÿ225 quicktimealt132.exe 03/02/2004 22:08 3ÿ188ÿ838 quickzip.exe 21/02/2004 13:53 <REP> Radio Fr Solo 09/08/1996 12:03 4ÿ788 README.TXT 18/11/2003 16:16 <REP> Real 12/07/2004 20:36 <REP> ReflexiveArcade 06/02/2004 12:52 <REP> RegCleaner 21/02/2004 12:30 1ÿ306ÿ512 resubmitted.translation_in_french.exe 02/03/2006 19:29 <REP> Ricochet Xtreme 11/03/2004 16:33 8ÿ360ÿ497 RicochetSetup.exe 01/08/2006 19:07 <REP> ScanSpyware v3.8.0.1 05/02/2005 21:40 8ÿ776ÿ096 setupfre.exe 01/09/2005 18:58 2ÿ849ÿ912 setup_christv_4_60_pro.exe 12/03/2006 21:48 1ÿ844ÿ806 spade114.exe 03/01/2004 00:16 8ÿ643ÿ584 spf.exe 21/03/2006 19:24 <REP> splus 21/03/2006 19:22 3ÿ917ÿ862 splus_install.exe 01/08/2006 19:13 <REP> Spybot - Search & Destroy 20/02/2005 21:21 4ÿ354ÿ084 spybotsd13.exe 24/11/2005 22:24 9ÿ186ÿ496 ssfisetup1_1831495768.exe 04/10/2004 21:39 1ÿ557ÿ164 ss_install.exe 05/04/2006 22:12 <REP> Sunbelt Software 27/03/2005 14:44 <REP> Super DVD Copy 03/01/2004 11:54 <REP> temp_office 06/08/2006 00:18 <REP> The Cleaner 21/02/2005 19:57 <REP> ToniArts 11/04/2006 22:31 <REP> TrackMania Nations ESWC 09/01/2005 16:02 <REP> TriglowPictures 07/04/2006 21:00 <REP> Trillian 07/04/2006 20:51 8ÿ999ÿ955 trillian-v3.1.exe 19/04/2006 20:44 9ÿ109ÿ072 TU2006TrialFR.exe 19/04/2006 20:47 <REP> TuneUp Utilities 2006 07/07/2004 19:11 <REP> Ulead Systems 06/04/2006 17:48 <REP> Unlocker 06/04/2006 17:47 186ÿ490 unlocker1.8.1.exe 29/04/2004 18:58 <REP> uscars 18/05/2004 07:09 <REP> ValuSoft 02/01/2005 13:18 <REP> VideoLAN 19/05/2005 10:17 <REP> Viewpoint 11/06/2005 10:29 <REP> Visicom Media 02/01/2005 13:12 7ÿ071ÿ334 vlc-0.8.1-win32.exe 09/05/2004 11:51 <REP> vTuner 28/03/2004 01:47 4ÿ139ÿ989 vtuner.exe 12/03/2006 17:35 <REP> Warcraft III 06/01/2004 00:38 <REP> WC3 29/03/2006 20:30 511ÿ016 widgetsus.exe 25/03/2006 19:12 <REP> Win G‚n‚alogic 09/04/2006 01:19 <REP> Winamp 03/01/2004 13:39 4ÿ228ÿ953 winamp501_full.exe 30/06/2005 13:19 5ÿ186ÿ992 winamp5093_full_emusic-7plus.exe 20/05/2005 09:56 8ÿ530ÿ568 winamp509_full_silvertide_emusic-8basic.exe 28/10/2005 10:41 6ÿ077ÿ712 winamp511_full_emusic-7plus.exe 18/03/2006 16:01 5ÿ616ÿ888 winamp521_full_emusic-7plus.exe 14/07/2006 09:57 <REP> Windows Defender 13/02/2004 20:04 <REP> Windows Media Components 18/02/2006 09:16 <REP> Windows Media Player 11/10/2004 07:12 <REP> Windows NT 26/02/2006 14:37 6ÿ715ÿ392 WindowsDefender.msi 18/03/2005 00:17 <REP> WinMX 23/10/2005 12:05 15ÿ491ÿ065 WinProPackDemo.zip 14/09/2005 10:53 <REP> WinRAR 07/03/2004 13:52 <REP> WinZip 15/02/2004 14:58 1ÿ096ÿ495 wrar330fr.exe 30/09/2002 14:05 <REP> xerox 30/11/2005 08:28 <REP> XOP Demo 24/07/2005 20:44 2ÿ095ÿ574 xopdemo.exe 29/03/2006 20:33 <REP> Yahoo! 07/11/2004 21:09 2ÿ481ÿ047 yetisports6.zip 31/03/2006 10:31 11ÿ453ÿ032 zlsSetup_61_744_001_fr.exe 06/08/2006 00:56 <REP> Zylom Games 131 fichier(s) 868ÿ852ÿ111 octets 132 R‚p(s) 104ÿ312ÿ754ÿ176 octets libres Le volume dans le lecteur C s'appelle HDD Le num‚ro de s‚rie du volume est E405-A18A R‚pertoire de C:\Program Files\fichiers communs 30/06/2005 13:36 <REP> . 30/06/2005 13:36 <REP> .. 29/08/2005 14:08 <REP> Adobe 28/02/2004 20:20 <REP> Ahead 06/07/2004 21:41 <REP> AOL 29/02/2004 16:25 <REP> Designer 04/04/2004 13:17 <REP> DirectX 13/02/2004 20:05 <REP> FotoWire 30/06/2005 13:36 <REP> Hypnotizer 07/07/2004 19:11 <REP> InstallShield 02/01/2004 23:32 <REP> Java 13/02/2004 20:07 <REP> Logitech 06/02/2004 13:29 <REP> Macromedia 14/07/2006 09:57 <REP> Microsoft Shared 30/09/2002 14:02 <REP> MSSoap 03/01/2004 13:45 <REP> NSV 30/09/2002 13:55 <REP> ODBC 29/04/2004 14:30 <REP> Panda Software 18/11/2003 16:16 <REP> Real 12/07/2004 20:28 <REP> Services 30/09/2002 13:55 <REP> SpeechEngines 26/01/2004 12:33 <REP> SWF Studio 13/04/2006 06:44 <REP> System 07/07/2004 19:11 <REP> Ulead Systems 19/04/2006 20:46 <REP> Wise Installation Wizard 18/11/2003 16:16 <REP> xing shared 0 fichier(s) 0 octets 26 R‚p(s) 104ÿ312ÿ766ÿ464 octets libres Le volume dans le lecteur C s'appelle HDD Le num‚ro de s‚rie du volume est E405-A18A R‚pertoire de C:\Program Files\common files 04/10/2004 22:41 <REP> . 04/10/2004 22:41 <REP> .. 11/09/2004 19:02 <REP> System 0 fichier(s) 0 octets 3 R‚p(s) 104ÿ312ÿ766ÿ464 octets libres Le volume dans le lecteur C s'appelle HDD Le num‚ro de s‚rie du volume est E405-A18A R‚pertoire de C:\ 09/03/2000 10:06 28ÿ680 FLIPART.EXE 29/08/2002 16:03 6ÿ384 GETDRIVE.EXE 2 fichier(s) 35ÿ064 octets 0 R‚p(s) 104ÿ312ÿ766ÿ464 octets libres c:\Documents and Settings\All Users\Application Data\City Window Mags Bags\body flap.exe c:\Documents and Settings\All Users\Application Data\City Window Mags Bags\deafextra.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{3303E88E-C09C-44FD-9D15-3A0265DB938A}\ARPPRODUCTICON.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{4D8314D2-11FE-4397-A7CC-7015CFF50BCE}\ARPPRODUCTICON.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{4D8314D2-11FE-4397-A7CC-7015CFF50BCE}\PalmDesktopShortcut.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\ARPPRODUCTICON.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\NewShortcut1.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\NewShortcut1_1.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\VersaMailSetupB.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\VersaMailSetupE.exe c:\Documents and Settings\.........\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\VersaMailSetupF.exe c:\Documents and Settings\..\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\VersaMailSetupG.exe c:\Documents and Settings\..\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\VersaMailSetupI.exe c:\Documents and Settings\..\Application Data\Microsoft\Installer\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\VersaMailSetupS.exe c:\Documents and Settings\..\Application Data\Microsoft\Installer\{F4CF1F52-F326-4700-9A07-BBA1DF2AA716}\ARPPRODUCTICON.exe c:\Documents and Settings\..\Application Data\Microsoft\Installer\{F4CF1F52-F326-4700-9A07-BBA1DF2AA716}\NewShortcut3_07FB580BF187437F9CBB930D0129A475.exe c:\Documents and Settings\..\Application Data\Microsoft\Installer\{F4CF1F52-F326-4700-9A07-BBA1DF2AA716}\NewShortcut31_491CED7A0F134BE6957A59DCA69E8271.exe c:\Documents and Settings\..\Bureau\Chercher\chercher\LFiles.exe c:\Documents and Settings\..\JEUX\battleships.exe c:\Documents and Settings\..\JEUX\bubbletrouble.exe c:\Documents and Settings\..\Bureau\JEUX\ConquerAntarctica.exe c:\Documents and Settings\..\Bureau\JEUX\TmNationsESWC_Setup.exe c:\Documents and Settings\..\Bureau\JEUX\emu N64\1964_099.exe c:\Documents and Settings\..\Bureau\JEUX\emu N64\7z442.exe c:\Documents and Settings\..\Bureau\JEUX\emu N64\099\1964.exe c:\Documents and Settings\..\Bureau\JEUX\emu PSX\pSX_1_6\psxfin.exe c:\Documents and Settings\..\Bureau\JEUX\emu PSX\pSX_1_6\cdimages\A Bugs Life-PSX-PAL-FR_part01.exe c:\Documents and Settings\..\Bureau\JEUX\emu PSX\pSX_1_6\utils\cdztool.exe c:\Documents and Settings\..\Bureau\JEUX\emu2\WinKawaks.exe c:\Documents and Settings\..\Bureau\JEUX\emulateur\Fusion.exe c:\Documents and Settings\..\Bureau\JEUX\raiden\delrd.exe c:\Documents and Settings\..\Bureau\JEUX\raiden\loader.exe c:\Documents and Settings\..\Bureau\JEUX\raiden\raidenii.exe c:\Documents and Settings\..\Bureau\JEUX\raiden\setup.exe c:\Documents and Settings\..\Bureau\JEUX\Sim\SC3\sc3demo.exe c:\Documents and Settings\..\Bureau\JEUX\yeti\PINGOUINS !!.exe c:\Documents and Settings\..\Bureau\JEUX\yeti\PINGOUINS 2.exe c:\Documents and Settings\..\Bureau\JEUX\yeti\PINGOUINS 3.exe c:\Documents and Settings\..\Bureau\JEUX\yeti\yetisports4.exe c:\Documents and Settings\..\Bureau\JEUX\yeti\yetisports6.exe c:\Documents and Settings\..\Bureau\JEUX\yeti\yetisports8.exe c:\Documents and Settings\..\Bureau\kazaa et autres\BlubsterSetup.exe c:\Documents and Settings\..\Bureau\kazaa et autres\dvdtitle.exe c:\Documents and Settings\..\Bureau\kazaa et autres\GrabIt153b.exe c:\Documents and Settings\..\Bureau\MP3\Ren\clubclio.exe c:\Documents and Settings\..\Bureau\PROGRAMMES\TCPOptimizer.exe c:\Documents and Settings\..\Bureau\SECURITE\cwshredder.exe c:\Documents and Settings\..\Bureau\SECURITE\SmitfraudFix\SmitfraudFix\GenericRenosFix.exe c:\Documents and Settings\..\Bureau\SECURITE\SmitfraudFix\SmitfraudFix\Process.exe c:\Documents and Settings\..\Bureau\SECURITE\SmitfraudFix\SmitfraudFix\Reboot.exe c:\Documents and Settings\..\Bureau\SECURITE\SmitfraudFix\SmitfraudFix\restart.exe c:\Documents and Settings\..\Bureau\SECURITE\SmitfraudFix\SmitfraudFix\SrchSTS.exe c:\Documents and Settings\..\Bureau\SECURITE\SmitfraudFix\SmitfraudFix\swreg.exe c:\Documents and Settings\..\Bureau\SECURITE\SmitfraudFix\SmitfraudFix\swsc.exe c:\Documents and Settings\..\Mes documents\Mes images\TA-FBIRD\test.exe c:\Documents and Settings\..\Mes documents\screensavers\greenwood.exe c:\Documents and Settings\..\Mes documents\screensavers\karhellcars.exe c:\Program Files\Documents To Go\DocsToGo.exe c:\Program Files\Documents To Go\HandheldInstall.exe c:\Program Files\Documents To Go\ptgxlat.exe c:\Program Files\Documents To Go\ZipUtil.exe c:\WINDOWS\Installer\{4E7E8E6A-15F1-4E26-9352-26AD235131E9}\DocumentsToGo.exe c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\USMT\iconlib.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{5C047F84-737C-4C16-8D59-903FE1C21C25}\mpengine.dll c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylomgamesplayer.dll c:\Documents and Settings\..\Application Data\Avant Browser\update.dll c:\Documents and Settings\..\Application Data\Identities\{002AVPFP-JHLQ-ABE5-RUNH-200OMT85IVUO}\xmlparse.dll c:\Documents and Settings\..\Application Data\Macromedia\Dreamweaver MX\Configuration\Flash Player\FlashPlayerW.dll c:\Documents and Settings\..\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll Vérifications de quelques clefs Recherche de clefs EGDACCESS HKLM\SOFTWARE\Microsoft\Windows\explorer\SharedTaskScheduler

bon, impossible de lancer le scan avec aucun des 3 antivirus en ligne .... pour autant depuis le nettoyage en mode sans échec avec smitfraudfix, je n'ai plus de problèmes .... y'a t il autre chose à faire ?

ok, voilà le 2eme rapport SmitfraudFix, fait en mode sans échec : J'enchaine avec le scan kaspersky et je le mets ici dès que c'est fini ! SmitFraudFix v2.81 Rapport fait à 11:56:10,71, 07/08/2006 Executé à partir de C:\Documents and Settings\....\Bureau\SECURITE\SmitfraudFix\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Fix executé en mode sans echec »»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] "bestreak"="{874443fe-aa33-4ebf-a6ac-73208787e62d}" »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix GenericRenosFix by S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés C:\Program Files\IntCodec\ supprimé »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre Nettoyage terminé. »»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Fin

Voilà (j'ai juste enlevé les endroits où apparaissaient mon nom ! merci beaucoup ! SmitFraudFix v2.81 Rapport fait à 21:41:21,68, 06/08/2006 Executé à partir de C:\Documents and Settings\.......\Bureau\SECURITE\SmitfraudFix\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Fix executé en mode normal »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\......\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\.......~1\Favoris »»»»»»»»»»»»»»»»»»»»»»»» Bureau »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files C:\Program Files\IntCodec\ PRESENT ! »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="file:///C:/Documents%20and%20Settings/......./Mes%20documents/Mes%20images/cougar/71%20cougar%205000$%205.JPG" "SubscribedURL"="file:///C:/Documents%20and%20Settings/......../Mes%20documents/Mes%20images/cougar/71%20cougar%205000$%205.JPG" "FriendlyName"="" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Ma page d'accueil" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] "bestreak"="{874443fe-aa33-4ebf-a6ac-73208787e62d}" »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll »»»»»»»»»»»»»»»»»»»»»»»» Fin

Bonjour et merci d'avance pour l'aide dont j'ai bien besoin. Depuis hier, j'ai des pop-up m'avertissant en anglais que des virus, troyens et autres malwares s'en prennent à mon Pc et à mes données persos. De plus la page de démarrage de IE a changé pour un site de soit-disants logiciels de sécurité. Bref je pense bien sur que ces popus sont eux même la manifestations de vilaines petites bêtes. Comme je le fais régulièrement, j'ai passé tous les logiciels de désinfections que j'ai sous la main (spy-bot, ad-aware etc ...) mais rien n'y fait j'ai donc suivi la procédure décrite ici et passé hijackthis voilà le rapport, merci de me dire ce que je dois faire Logfile of HijackThis v1.99.1 Scan saved at 19:02:40, on 06/08/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\IntCodec\isamonitor.exe C:\Program Files\IntCodec\pmsngr.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\IntCodec\pmmon.exe C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe C:\Program Files\IntCodec\isamini.exe C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe C:\Program Files\Opera\Opera.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {1da7dbe8-c51b-4ae4-bc6e-21863349b0b4} - C:\Program Files\IntCodec\isaddon.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\ O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\WINDOWS\System32\x10nets.exe (file missing)