Alex.cane

Ben depuis hier plus de pub intempestive, en tout cas merci encore d'avoir pris de ton temps.... si tu as besoins de moi je pourrais répondre à des questions culinaires c'est plutot mon domaine ! sinon j'aurais voulus savoir : j'ai acheté un PC avec vista et je voulais le protégé (anti virus, anti spyware etc...) dois je gardé Norton qui est inclu ou as tu des liens pour de freeware éfficace?

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:20:26, on 07/01/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ltmoh\Ltmoh.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe C:\Program Files\TOSHIBA\Tvs\TvsTray.exe C:\WINDOWS\system32\TPSMain.exe C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe C:\WINDOWS\system32\TPSBattM.exe C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Neuf\Kit\WiFi\9wifi.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\SAGEM Wi-Fi USB 802.11g\WLANUTL.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\MSN Messenger\livecall.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\annedebellefon\Bureau\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe O4 - HKLM\..\Run: [TPSMain] TPSMain.exe O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_SB0.tmp" /EF "HKLM" O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Sagem - Utilitaire réseau pour Clé USB Wi-Fi 802.11g.lnk = ? O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll/search.htm O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo...toUploader3.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.bellapix.com/XUpload.ocx O16 - DPF: {EFFDEEEC-F9E1-4461-91D2-DAEB8CC595F1} (CSViewer Control) - http://62.210.194.99:8080/CSViewer.cab O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe -- End of file - 10612 bytes

Voici enfin le rapport --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 18:06:56 07/01/2008 + Résultat de l'analyse: HKLM\SOFTWARE\Gator.com -> Adware.Gator : Nettoyé. HKLM\SOFTWARE\Gator.com\Gator -> Adware.Gator : Nettoyé. HKLM\SOFTWARE\Gator.com\Gator\dyn -> Adware.Gator : Nettoyé. HKLM\SOFTWARE\Gator.com\Gator\stat -> Adware.Gator : Nettoyé. HKLM\SOFTWARE\ShopperReports -> Adware.HotBar : Nettoyé. HKLM\SOFTWARE\ShopperReports\ShopperReports -> Adware.HotBar : Nettoyé. HKLM\SOFTWARE\ShopperReports\ShopperReports\PostInstaller -> Adware.HotBar : Nettoyé. HKU\S-1-5-21-1875425668-1477605634-2782053197-1007\Software\ShopperReports -> Adware.HotBar : Nettoyé. HKU\S-1-5-21-1875425668-1477605634-2782053197-1007\Software\ShopperReports\ShopperReports -> Adware.HotBar : Nettoyé. HKU\S-1-5-21-1875425668-1477605634-2782053197-1007\Software\ShopperReports\ShopperReports\PostInstaller -> Adware.HotBar : Nettoyé. HKU\S-1-5-21-1875425668-1477605634-2782053197-1007\Software\Prodiff\rmxnavigator\shopping\\sh163 -> Adware.Locators : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][2].txt -> TrackingCookie.2o7 : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@adviva[1].txt -> TrackingCookie.Adviva : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@atdmt[3].txt -> TrackingCookie.Atdmt : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@clickbank[2].txt -> TrackingCookie.Clickbank : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@estat[1].txt -> TrackingCookie.Estat : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Hitbox : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Hitbox : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Liveperson : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Lop : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][2].txt -> TrackingCookie.Lop : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@overture[1].txt -> TrackingCookie.Overture : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Serving-sys : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][2].txt -> TrackingCookie.Webtrendslive : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@yadro[2].txt -> TrackingCookie.Yadro : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Yieldmanager : Nettoyé. C:\Documents and Settings\annedebellefon\Cookies\[email protected][2].txt -> TrackingCookie.Yieldmanager : Nettoyé. Fin du rapport

Dsl je ne comprend pas quel fichiers je dois supprimer... Merci de m'éclairer.

Je dois m'absenter jusqu'a ce soir 22h donc les prochaines étapes seront faite dans 6h30. En tout cas jai plus le probleme de popup, mais je suppose que il y a toujours un risque ... Donc post moi les étapes stp et je m'en occuperé en tout cas merci beaucoup, c'est vraiment sympa d'intervenir aussi vite et de prendre du temps pour ce genre de probleme. see you later.

Ca a été un peu long mais je pense que tu es habitué... voici les resultats --------------------------------------------------------------------------------------------------- C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll unregistered successfully. C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll moved successfully. Created on 01/06/2008 13:52:46 ---------------------------------------------------------------------------------------------------- --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 14:58:34 06/01/2008 + Résultat de l'analyse: HKLM\SOFTWARE\Gator.com -> Adware.Gator : Ignoré. HKLM\SOFTWARE\Gator.com\Gator -> Adware.Gator : Ignoré. HKLM\SOFTWARE\Gator.com\Gator\dyn -> Adware.Gator : Ignoré. HKLM\SOFTWARE\Gator.com\Gator\stat -> Adware.Gator : Ignoré. HKLM\SOFTWARE\ShopperReports -> Adware.HotBar : Ignoré. HKLM\SOFTWARE\ShopperReports\ShopperReports -> Adware.HotBar : Ignoré. HKLM\SOFTWARE\ShopperReports\ShopperReports\PostInstaller -> Adware.HotBar : Ignoré. HKU\S-1-5-21-1875425668-1477605634-2782053197-1007\Software\ShopperReports -> Adware.HotBar : Ignoré. HKU\S-1-5-21-1875425668-1477605634-2782053197-1007\Software\ShopperReports\ShopperReports -> Adware.HotBar : Ignoré. HKU\S-1-5-21-1875425668-1477605634-2782053197-1007\Software\ShopperReports\ShopperReports\PostInstaller -> Adware.HotBar : Ignoré. HKU\S-1-5-21-1875425668-1477605634-2782053197-1007\Software\Prodiff\rmxnavigator\shopping\\sh163 -> Adware.Locators : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@2o7[1].txt -> TrackingCookie.2o7 : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][2].txt -> TrackingCookie.2o7 : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@adtech[1].txt -> TrackingCookie.Adtech : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@advertising[2].txt -> TrackingCookie.Advertising : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@adviva[2].txt -> TrackingCookie.Adviva : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@atdmt[3].txt -> TrackingCookie.Atdmt : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@clickbank[2].txt -> TrackingCookie.Clickbank : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@estat[1].txt -> TrackingCookie.Estat : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@fastclick[2].txt -> TrackingCookie.Fastclick : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Hitbox : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Hitbox : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@hitbox[2].txt -> TrackingCookie.Hitbox : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Liveperson : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Lop : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][2].txt -> TrackingCookie.Lop : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@overture[1].txt -> TrackingCookie.Overture : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Serving-sys : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@tradedoubler[3].txt -> TrackingCookie.Tradedoubler : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@weborama[2].txt -> TrackingCookie.Weborama : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@weborama[3].txt -> TrackingCookie.Weborama : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][2].txt -> TrackingCookie.Webtrendslive : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\annedebellefon@yadro[2].txt -> TrackingCookie.Yadro : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][1].txt -> TrackingCookie.Yieldmanager : Ignoré. C:\Documents and Settings\annedebellefon\Cookies\[email protected][2].txt -> TrackingCookie.Yieldmanager : Ignoré. Fin du rapport

Apparament je n'est plus de popup cid, je suppose que maintenant je dois DL AntiVir et remplacer Avast ...

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:42:23, on 06/01/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\ltmoh\Ltmoh.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe C:\Program Files\TOSHIBA\Tvs\TvsTray.exe C:\WINDOWS\system32\TPSMain.exe C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe C:\WINDOWS\system32\TPSBattM.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Neuf\Kit\WiFi\9wifi.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\SAGEM Wi-Fi USB 802.11g\WLANUTL.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\WinRAR\WinRAR\WinRAR.exe C:\DOCUME~1\ANNEDE~1\LOCALS~1\Temp\Rar$EX00.125\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe O4 - HKLM\..\Run: [TPSMain] TPSMain.exe O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_SB0.tmp" /EF "HKLM" O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Sagem - Utilitaire réseau pour Clé USB Wi-Fi 802.11g.lnk = ? O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll/search.htm O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ShopperReports - Compare product prices - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE15} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo...toUploader3.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.bellapix.com/XUpload.ocx O16 - DPF: {EFFDEEEC-F9E1-4461-91D2-DAEB8CC595F1} (CSViewer Control) - http://62.210.194.99:8080/CSViewer.cab O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe -- End of file - 10667 bytes

Folder cleanup failed. C:\Documents and Settings\All Users\Application Data\Mode Rule 64 Inter scheduled to be deleted on reboot. C:\DOCUME~1\ANNEDE~1\APPLIC~1\MPEGAN~1 moved successfully. C:\WINDOWS\Tasks\A38EEB3B91859EB7.job moved successfully. Created on 01/06/2008 13:15:40 ------------------------------ Je pense que la manip n'est pas fini vu la premiere ligne. En tout cas merci deja pour la rapidité de l'intervention

Rapport lopxpMH2 version 2.0 fait à 12:10:53,45 le 06/01/2008 C:\Documents and Settings\annedebellefon\Local Settings\Temporary Internet Files\Content.IE5\5XP1L8BN ****************************************** ## Répertoires Application Data Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\All Users\Application Data 06/09/2005 07:47 <REP> . 06/09/2005 07:47 <REP> .. 06/09/2005 08:02 <REP> Adobe 01/03/2006 18:36 <REP> Adobe Systems 31/10/2005 19:56 <REP> Ahead 11/11/2007 12:57 <REP> Apple 11/11/2007 12:58 <REP> Apple Computer 29/01/2007 20:08 <REP> BVRP Software 29/01/2007 20:11 <REP> DVD Shrink 04/03/2006 15:32 <REP> Global Software Publishing 26/10/2006 13:59 <REP> Messenger Plus! 06/09/2005 07:47 <REP> Microsoft 21/12/2007 12:10 <REP> Mode Rule 64 Inter 06/09/2005 08:19 <REP> MSN Search Toolbar 08/10/2007 18:46 <REP> PlayFirst 24/04/2006 23:51 <REP> QuickTime 06/09/2005 05:59 <REP> SBSI 13/02/2007 17:13 <REP> Skype 26/02/2007 17:21 <REP> Sony Ericsson 06/09/2005 08:11 <REP> Symantec 08/10/2007 18:45 <REP> TEMP 30/11/2006 11:54 <REP> UDL 09/07/2006 22:50 <REP> Windows Genuine Advantage 06/09/2005 07:47 62 desktop.ini 12/11/2007 16:42 1 755 QTSBandwidthCache 2 fichier(s) 1 817 octets 23 Rép(s) 13 588 123 648 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\annedebellefon\Application Data 27/10/2005 16:59 <REP> . 27/10/2005 16:59 <REP> .. 27/10/2005 16:59 <REP> Adobe 15/11/2005 15:56 <REP> AdobeUM 31/10/2005 19:59 <REP> Ahead 11/11/2007 13:06 <REP> Apple Computer 30/11/2006 12:28 <REP> EPSON 16/05/2006 12:41 <REP> FotoWire 21/01/2007 17:51 <REP> Google 27/10/2005 16:59 <REP> Identities 30/10/2005 23:34 <REP> InterVideo 05/03/2007 11:16 <REP> Leadertech 01/11/2005 21:22 <REP> Macromedia 27/10/2005 16:59 <REP> Microsoft 28/10/2005 20:17 <REP> Microsoft Web Folders 21/12/2007 12:10 <REP> Mpeg Ante 27/10/2005 16:59 <REP> MSN Search Toolbar 01/11/2005 21:27 <REP> MSNInstaller 08/10/2007 18:46 <REP> PlayFirst 17/03/2007 00:01 <REP> Screenshot Sender 09/05/2006 14:09 <REP> ShopperReports 13/02/2007 17:14 <REP> Skype 27/10/2005 16:59 <REP> Sonic 16/11/2005 12:20 <REP> Sun 27/10/2005 16:59 <REP> Symantec 13/02/2007 21:51 <REP> Template 27/10/2005 16:59 <REP> toshiba 14/10/2007 11:06 <REP> U3 09/12/2006 09:56 <REP> uTorrent 27/10/2005 16:59 62 desktop.ini 30/10/2005 13:41 380 wklnhst.dat 2 fichier(s) 442 octets 29 Rép(s) 13 588 123 648 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\annedebellefon\Local Settings\Application Data 27/10/2005 16:59 <REP> . 27/10/2005 16:59 <REP> .. 27/10/2005 16:59 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150020} 30/11/2006 13:23 <REP> ABBYY 27/10/2005 16:59 <REP> Adobe 31/10/2005 19:59 <REP> Ahead 11/11/2007 12:57 <REP> Apple 11/11/2007 12:57 <REP> Apple Computer 27/10/2005 16:59 <REP> ApplicationHistory 21/01/2007 17:51 <REP> Google 08/11/2005 23:04 <REP> Identities 16/05/2006 12:52 <REP> Logitech-LS 27/10/2005 16:59 <REP> Microsoft 16/02/2006 22:41 <REP> WMTools Downloaded Files 06/11/2005 16:39 210 944 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 27/10/2005 16:59 137 fusioncache.dat 28/10/2005 18:21 48 432 GDIPFONTCACHEV1.DAT 27/10/2005 16:59 4 272 436 IconCache.db 4 fichier(s) 4 531 949 octets 14 Rép(s) 13 588 119 552 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\Default User\Application Data 06/09/2005 07:47 <REP> . 06/09/2005 07:47 <REP> .. 27/10/2005 16:57 <REP> Adobe 27/10/2005 16:57 <REP> Identities 06/09/2005 07:47 <REP> Microsoft 27/10/2005 16:57 <REP> MSN Search Toolbar 27/10/2005 16:57 <REP> Sonic 27/10/2005 16:57 <REP> Symantec 27/10/2005 16:57 <REP> toshiba 06/09/2005 07:47 62 desktop.ini 1 fichier(s) 62 octets 9 Rép(s) 13 588 123 648 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data 06/09/2005 07:47 <REP> . 06/09/2005 07:47 <REP> .. 27/10/2005 16:57 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150020} 27/10/2005 16:57 <REP> Adobe 27/10/2005 16:57 <REP> ApplicationHistory 06/09/2005 05:54 <REP> Microsoft 27/10/2005 16:57 135 fusioncache.dat 27/10/2005 16:57 4 822 708 IconCache.db 2 fichier(s) 4 822 843 octets 6 Rép(s) 13 588 123 648 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\LocalService\Application Data 06/09/2005 05:57 <REP> . 06/09/2005 05:57 <REP> .. 06/09/2005 05:57 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 13 588 123 648 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data 06/09/2005 05:57 <REP> . 06/09/2005 05:57 <REP> .. 06/09/2005 05:57 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 13 588 123 648 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\NetworkService\Application Data 06/09/2005 05:57 <REP> . 06/09/2005 05:57 <REP> .. 06/09/2005 05:57 <REP> Microsoft 01/11/2005 21:22 <REP> Symantec 0 fichier(s) 0 octets 4 Rép(s) 13 588 123 648 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data 06/09/2005 05:57 <REP> . 06/09/2005 05:57 <REP> .. 06/09/2005 05:57 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 13 588 123 648 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\Propriétaire Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Documents and Settings\Propriétaire\Local Settings\Application Data 27/10/2005 17:00 <REP> . 27/10/2005 17:00 <REP> .. 27/10/2005 17:00 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 13 588 119 552 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data 06/09/2005 05:57 <REP> . 06/09/2005 05:57 <REP> .. 27/10/2005 16:58 <REP> Adobe 27/10/2005 16:58 <REP> Identities 06/09/2005 05:57 <REP> Microsoft 27/10/2005 16:58 <REP> MSN Search Toolbar 27/10/2005 16:58 <REP> Sonic 27/10/2005 16:58 <REP> Symantec 27/10/2005 16:58 <REP> toshiba 06/09/2005 05:57 62 desktop.ini 1 fichier(s) 62 octets 9 Rép(s) 13 588 119 552 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data 06/09/2005 05:57 <REP> . 06/09/2005 05:57 <REP> .. 27/10/2005 16:58 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150020} 27/10/2005 16:58 <REP> Adobe 27/10/2005 16:58 <REP> ApplicationHistory 06/09/2005 05:57 <REP> Microsoft 27/10/2005 16:58 135 fusioncache.dat 27/10/2005 16:58 4 822 708 IconCache.db 2 fichier(s) 4 822 843 octets 6 Rép(s) 13 588 119 552 octets libres ****************************************** Recherche des taches planifiées dans C:\WINDOWS\tasks C:\WINDOWS\Tasks\A38EEB3B91859EB7.job ZýClH?Mˆ`¡ýÆc{F ô < s "€!Ø > = c : \ d o c u m e ~ 1 \ a n n e d e ~ 1 \ a p p l i c ~ 1 \ m p e g a n ~ 1 \ d o w n l o a d r d r j u m p . e x e a n n e d e b e l l e f o n 0 Ð < C:\WINDOWS\Tasks\AppleSoftwareUpdate.job 3û3¿MÙÌCºúg ×}îF ê < s €! : C : \ P r o g r a m F i l e s \ A p p l e S o f t w a r e U p d a t e \ S o f t w a r e U p d a t e . e x e - t a s k S Y S T E M 0 × 2 ****************************************** ## Répertoires de C:\Program Files Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 6468-751A Répertoire de C:\Program Files 05/01/2008 23:34 <REP> . 05/01/2008 23:34 <REP> .. 24/04/2006 23:51 <REP> 3ivx 30/11/2006 13:22 <REP> ABBYY FineReader 6.0 Sprint 29/01/2007 20:09 <REP> AC3Filter 05/03/2007 11:14 <REP> Adobe 11/06/2007 10:55 <REP> Ahead 08/10/2007 20:49 <REP> Alcohol Soft 29/10/2006 17:26 <REP> Alwil Software 15/12/2005 21:15 <REP> Anuman Interactive 11/11/2007 12:57 <REP> Apple Software Update 27/10/2005 16:58 <REP> Atheros 06/09/2005 06:38 <REP> ATI Technologies 06/09/2005 06:45 <REP> AvRack 23/01/2006 14:08 <REP> Calendrier 2006 15/11/2005 19:24 <REP> Canon 05/09/2007 15:29 <REP> CCleaner 06/09/2005 05:52 <REP> ComPlus Applications 24/04/2006 23:50 <REP> DivX 25/04/2006 19:50 <REP> dvdplay 07/10/2007 17:41 <REP> EA GAMES 13/12/2007 23:15 <REP> eMule 07/12/2006 10:49 <REP> EPSON 11/10/2007 17:33 <REP> Fichiers communs 29/01/2007 20:09 <REP> Gabest 29/01/2007 18:09 <REP> Google 09/05/2006 14:16 <REP> HbTools_Icons 11/12/2007 23:13 <REP> Internet Explorer 06/09/2005 07:13 <REP> InterVideo 16/02/2006 22:42 <REP> IrfanView 06/09/2005 06:07 <REP> Java 29/01/2007 20:09 <REP> LiveUpdate 16/05/2006 12:41 <REP> Logitech 06/09/2005 06:52 <REP> ltmoh 06/09/2005 06:05 <REP> Messenger 21/12/2007 12:09 <REP> Messenger Plus! Live 06/09/2005 05:55 <REP> microsoft frontpage 28/10/2005 20:17 <REP> Microsoft Office 28/10/2005 20:20 <REP> Microsoft Visual Studio 07/09/2005 12:36 <REP> Microsoft Works 06/09/2005 08:09 <REP> Microsoft.NET 18/08/2006 20:21 <REP> monAlbumPhoto 29/01/2007 20:09 <REP> Morgan 06/09/2005 05:52 <REP> Movie Maker 04/01/2008 16:07 <REP> Mpeg Ante 01/11/2005 21:26 <REP> MSN 06/09/2005 05:51 <REP> MSN Gaming Zone 21/12/2007 12:09 <REP> MSN Messenger 06/09/2005 08:21 <REP> MSN Toolbar Suite 20/11/2006 17:25 <REP> MSXML 4.0 24/04/2006 23:50 <REP> MUSK Codec Pack v5 06/09/2005 05:52 <REP> NetMeeting 12/02/2007 22:01 <REP> Neuf 05/01/2008 23:43 <REP> NoAdware5.0 29/10/2006 17:28 <REP> Norton AntiVirus 24/04/2006 23:53 <REP> On2 Technologies 06/09/2005 05:51 <REP> Online Services 08/10/2007 18:45 <REP> orange 13/06/2007 22:33 <REP> Outlook Express 11/11/2007 12:59 <REP> QuickTime 06/09/2005 06:45 <REP> Realtek Sound Manager 01/11/2005 20:54 <REP> SAGEM 28/10/2005 20:31 <REP> SAGEM Wi-Fi USB 802.11g 10/12/2005 20:39 <REP> scrabble 06/09/2005 05:53 <REP> Services en ligne 09/05/2006 14:09 <REP> ShopperReports 13/02/2007 17:13 <REP> Skype 06/09/2005 07:59 <REP> Sonic 26/02/2007 17:21 <REP> Sony Ericsson 29/10/2006 17:28 <REP> Symantec 06/09/2005 06:47 <REP> Synaptics 06/09/2005 08:24 <REP> TOSHIBA 31/10/2007 14:38 <REP> Ubisoft 27/06/2007 21:10 <REP> UltraVnc 09/12/2006 09:56 <REP> utorrent 29/01/2007 20:09 <REP> WinASPI 30/06/2007 19:54 <REP> Windows Live 30/06/2007 22:02 <REP> Windows Media Connect 2 30/06/2007 22:09 <REP> Windows Media Player 06/09/2005 05:51 <REP> Windows NT 16/02/2006 22:08 <REP> WinRAR 06/09/2005 05:55 <REP> xerox 29/01/2007 20:09 <REP> XviD 0 fichier(s) 0 octets 83 Rép(s) 13 588 115 456 octets libres ****************************************** ## Popups autorisées * Internet Explorer ! REG.EXE VERSION 3.0 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow skyblog.com/ REG_BINARY www.pagesjaunes.fr REG_BINARY www.clubic.com REG_BINARY www.unilim.fr REG_BINARY videos.tf1.fr REG_BINARY host-domain-lookup.com REG_SZ www.host-domain-lookup.com REG_SZ mysearchnow.com REG_SZ www.mysearchnow.com REG_SZ searchweb2.com REG_SZ www.searchweb2.com REG_SZ * Mozilla Firefox (1 autorisé 2 interdit) ****************************************** ## Registre * [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main] Search Bar REG_SZ http://recherche.neuf.fr/ie/default.html * [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 64 inter flaw hold REG_SZ C:\Documents and Settings\All Users\Application Data\Mode Rule 64 Inter\Junk debug.exe * [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] Cake pile REG_SZ C:\DOCUME~1\ANNEDE~1\APPLIC~1\MPEGAN~1\loadfour.exe ****************************************** ## Zones de sécurité * HKCU Domains (4) * P3P History (5) ****************************************** ## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif" *************** Fin du rapport ****************

Bonjour, j'ai depuis quelque temps des popups publicitaire avec comme titre CiD. Je cherche de l'aide pour supprimer ce probleme. voici deja le scan de HJT ------------------------------------ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 00:16:03, on 06/01/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\alg.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ltmoh\Ltmoh.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe C:\Program Files\TOSHIBA\Tvs\TvsTray.exe C:\WINDOWS\system32\TPSMain.exe C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe C:\WINDOWS\system32\TPSBattM.exe C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Neuf\Kit\WiFi\9wifi.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\SAGEM Wi-Fi USB 802.11g\WLANUTL.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\MSN Messenger\livecall.exe C:\Program Files\Internet Explorer\iexplore.exe C:\DOCUME~1\ANNEDE~1\LOCALS~1\Temp\Rar$EX00.953\HijackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe O4 - HKLM\..\Run: [TPSMain] TPSMain.exe O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_SB0.tmp" /EF "HKLM" O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [64 inter flaw hold] C:\Documents and Settings\All Users\Application Data\Mode Rule 64 Inter\Junk debug.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKCU\..\Run: [Cake pile] C:\DOCUME~1\ANNEDE~1\APPLIC~1\MPEGAN~1\loadfour.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Sagem - Utilitaire réseau pour Clé USB Wi-Fi 802.11g.lnk = ? O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB2.05.0000.1105\fr-fr\msntb.dll/search.htm O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ShopperReports - Compare product prices - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE15} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.bellapix.com/XUpload.ocx O16 - DPF: {EFFDEEEC-F9E1-4461-91D2-DAEB8CC595F1} (CSViewer Control) - http://62.210.194.99:8080/CSViewer.cab O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe -- End of file - 11066 bytes ------------------------------------- MERCI DE M'AIDER !!!