mamata03

Pour le vider, je fais un couper coller sur un disque dur externe, si j'ai bien compris. Mon ordinateur continuera de fonctionner normalement sans problème. Merci.

Bonjour, je pense que si mais je voudrais savoir comment récupérer de la place sur ce disque. Merci.

Bonjour, je viens de faire une sauvegarde de factory_image sur mon ordinateur et depuis celui-ci est en rouge, je ne comprend pas alors que la sauvegarde s'est déroulée correctement. J'ai un HP Pavillion a6218.fr avec Vista. De plus je ne peux pas ouvrir le dossier de sauvegarde car c'est un dossier BIN. Je suis perdu, aidez-moi s'il vous plaît, je ne voudrais pas avoir planté mon ordi. Merci.

Bonjour, j'ai un hp pavillon avec en lecteur D: un factory image de 7.3GO. Actuellement, il me reste 900mo, je voudrais savoir si je le vide sur un disque dur externe, est ce que mon ordinateur sera plus rapide. Est-ce nécessaire ou est-ce que je peux continuer avec le peu d'espace disponible et combien de temps. Merci par avance.

Résolu.

info.txt logfile of random's system information tool 1.06 2009-05-10 11:29:17 ======Uninstall list====== -->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe -->MsiExec /X{85EBB283-65AF-4C53-9EBE-7C0A232762F7} 32 Bit HP CIO Components Installer-->MsiExec.exe /I{2614F54E-A828-49FA-93BA-45A3F756BFAA} ActiveCheck component for HP Active Support Library-->MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E} Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF} Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B} Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 8.1.4 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003} Adobe Shockwave Player-->C:\Windows\System32\Adobe\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Adobe\SHOCKW~1\Install.log AGEIA GAME System Software-->MsiExec.exe /I{D54049D3-256C-4E19-AAE9-861F6B00BF29} AGEIA PhysX v7.03.21-->MsiExec.exe /X{85EBB283-65AF-4C53-9EBE-7C0A232762F7} Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886} Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7} avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup Burn4Free CD and DVD-->"C:\Program Files\Burn4Free\uninstall.exe" CamStudio 2.0 Fr-->"C:\Program Files\CamStudio\unins000.exe" ccc-Branding-->MsiExec.exe /I{4F027497-15AE-4DE5-B3BC-8E721C6127DE} CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" CDex extraction audio-->"C:\Program Files\CDex_150\uninstall.exe" Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E} Crawler Toolbar with Web Security Guard-->C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe uninst Defraggler (remove only)-->"C:\Program Files\Defraggler\uninst.exe" EasyBits Magic Desktop-->C:\Windows\system32\ezMDUninstall.exe Favorit-->c:\users\mathias\appdata\local\ukqqq.bat ffdshow [rev 1909] [2008-03-20]-->"C:\Program Files\ffdshow\unins000.exe" FormatFactory-->MsiExec.exe /X{9A5BF34B-2ECB-4F4B-A9CB-46B5AA469503} Free Mp3 Wma Converter V 1.6.3-->"C:\Program Files\Free Audio Pack\unins000.exe" Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF} Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3} HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall Hitman 2: Silent Assassin-->C:\PROGRA~1\EIDOSI~1\HITMAN~1\uninstall.exe HP Active Support Library 32 bit components-->MsiExec.exe /I{6D3DB611-D5E8-4E4B-8952-0D3F549F9CC6} HP Active Support Library-->C:\Program Files\InstallShield Installation Information\{0A47BAFF-D4FF-4BD3-96CA-02A22EA62722}\setup.exe -runfromtemp -l0x0409 HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB5E289E-76BF-4251-9F3F-9B763F681AE0}\setup.exe" -l0x9 -removeonly HP Customer Feedback-->MsiExec.exe /I{9DBA770F-BF73-4D39-B1DF-6035D95268FC} HP Customer Participation Program 8.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat HP Driver Diagnostics-->MsiExec.exe /I{ED3F469E-D9EC-4DF1-968F-5812CE2F30F8} HP Easy Setup - Frontend-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40F7AED3-0C7D-4582-99F6-484A515C73F2}\setup.exe" -l0x9 -removeonly HP Imaging Device Functions 8.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat HP OCR Software 8.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat HP On-Screen Cap/Num/Scroll Lock Indicator-->C:\Windows\system32\OsdRemove.exe HP Photosmart Essential 3.0-->C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70} HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B-->C:\Program Files\HP\Digital Imaging\{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}\setup\hpzscr01.exe -datfile hposcr19.dat -onestop -showdisconnect -forcereboot HP Picasso Media Center Add-In-->MsiExec.exe /I{55979C41-7D6A-49CC-B591-64AC1BBE2C8B} HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC} HP Solution Center 8.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat HP Total Care Advisor-->MsiExec.exe /X{0DDA7620-4F8B-43B3-8828-CA5EE292FA3B} HP Update-->MsiExec.exe /X{FE57DE70-95DE-4B64-9266-84DA811053DB} HPAsset component for HP Active Support Library-->MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367} HPSSupply-->MsiExec.exe /X{EB75DE50-5754-4F6F-875D-126EDF8E4CB3} Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D} Intel® Matrix Storage Manager-->C:\Windows\System32\Imsmudlg.exe Java 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF} Java 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030} Java 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040} Java 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050} Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070} Java SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010} Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3} KC Softwares VideoInspector-->"C:\Program Files\KC Softwares\VideoInspector\unins000.exe" Lame ACM MP3 Codec-->C:\Windows\system32\rundll32.exe setupapi,InstallHinfSection Remove_LameMP3 132 C:\Windows\INF\LameACM.inf Ma-Config.com plugin-->MsiExec.exe /I{D2D7529F-6B55-4C1C-BC9C-D6F1BCC066B6} Macromedia Flash Player 8-->MsiExec.exe /X{6815FCDD-401D-481E-BA88-31B4754C2B46} Micro Application - PrintPratic 4-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EC79B672-686B-4C0A-9402-12EA1A04A99C}\Setup.exe" -l0x40c Microsoft LifeCam-->MsiExec.exe /X{968D41C3-25BB-4632-A6DF-2E1C8F0143A4} Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual J# 2.0 Redistributable Package-->C:\Windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Visual J# 2.0 Redistributable Package\install.exe Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C} morphemuleversion-->"C:\Program Files\eMule\unins000.exe" Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} muvee autoProducer 6.0-->C:\Program Files\InstallShield Installation Information\{C7EED2B7-078F-4D94-84FF-72B13FF22264}\setup.exe -runfromtemp -l0x040c -removeonly Navilog1 3.5.8-->"C:\Program Files\Navilog1\unins000.exe" neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33} Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} Outils de diagnostic du matériel-->C:\Program Files\PC-Doctor 5 for Windows\uninst.exe Python 2.5-->MsiExec.exe /I{0A2C5854-557E-48C8-835A-3B9F074BDCAA} Realtek High Definition Audio Driver-->RtlUpd.exe -r -m Recuva (remove only)-->"C:\Program Files\Recuva\uninst.exe" Revo Uninstaller 1.80-->C:\Program Files\VS Revo Group\Revo Uninstaller\uninst.exe Roxio Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0} Roxio Creator Audio-->MsiExec.exe /X{83FFCFC7-88C6-41c6-8752-958A45325C82} Roxio Creator Basic v9-->MsiExec.exe /X{C8B0680B-CDAE-4809-9F91-387B6DE00F7C} Roxio Creator Copy-->MsiExec.exe /X{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048} Roxio Creator Data-->MsiExec.exe /X{0D397393-9B50-4c52-84D5-77E344289F87} Roxio Creator EasyArchive-->MsiExec.exe /X{11F93B4B-48F0-4A4E-AE77-DFA96A99664B} Roxio Creator Tools-->MsiExec.exe /X{0394CDC8-FABD-4ed8-B104-03393876DFDF} Roxio Express Labeler 3-->MsiExec.exe /X{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA} Roxio MyDVD Basic v9-->MsiExec.exe /X{938B1CD7-7C60-491E-AA90-1F1888168240} Search Settings 1.2-->MsiExec.exe /X{D0C73318-7B4A-4D16-A0C4-3B83F075EA88} Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} SFR - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D} Solution de clavier multimédia amélioré-->C:\HP\KBD\Install.exe /u Suppress plus 1.8-->"C:\Program Files\splus\unins000.exe" VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027} Version de démonstration de Microsoft Office Home and Student 2007-->c:\hp\bin\MSOffice\uninst2.cmd Vista Codec Package-->MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99} VSO Image Resizer 2.1.5.5c-->"C:\Program Files\VSO\Image Resizer\unins000.exe" Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52} Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657} Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C} Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E} Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} ======Hosts File====== 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com ======Security center information====== AV: Norton Internet Security (outdated) FW: Norton Internet Security (disabled) AS: Spybot - Search and Destroy (outdated) AS: AVG Anti-Spyware (disabled) (outdated) AS: Windows Defender AS: Norton Internet Security (outdated) ======System event log====== Computer Name: PC-de-Mathias Event Code: 17 Message: Le périphérique a renvoyé une ou plusieurs réponses incorrectes après une réinitialisation du clavier. Record Number: 165586 Source Name: i8042prt Time Written: 20090510081647.529600-000 Event Type: Avertissement User: Computer Name: PC-de-Mathias Event Code: 19 Message: Impossible de régler la vitesse et le délai de répétition automatique du clavier. Record Number: 165587 Source Name: i8042prt Time Written: 20090510081647.529600-000 Event Type: Avertissement User: Computer Name: PC-de-Mathias Event Code: 1003 Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 00E04C100EA2. Il s'est produit l'erreur suivante : L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP). Record Number: 165599 Source Name: Microsoft-Windows-Dhcp-Client Time Written: 20090510092617.000000-000 Event Type: Avertissement User: Computer Name: PC-de-Mathias Event Code: 17 Message: Le périphérique a renvoyé une ou plusieurs réponses incorrectes après une réinitialisation du clavier. Record Number: 165604 Source Name: i8042prt Time Written: 20090510092624.534000-000 Event Type:

-----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel® Pentium® Dual CPU E2140 @ 1.60GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Mathias ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Activated) Firewall : Norton Internet Security 2007 (Not Activated) A:\ (Local Disk) - NTFS - Total:97 Go (Free:82 Go) C:\ (Local Disk) - NTFS - Total:230 Go (Free:149 Go) D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go) E:\ (CD or DVD) F:\ (USB) G:\ (USB) H:\ (USB) I:\ (USB) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [2] ( 10/05/2009|13:43 ) [ UAC => 1 ] -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://http//www.portailneuf.fr/" "Search Page"="http://home.microsoft.com/access/allinone.asp" "Search Bar"="http://g.msn.fr/0SEFRFR/SAOS02" "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"'>http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"'>http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Url"="http://go.microsoft.com/fwlink/?LinkId=75720" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.msn.com/" "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Bar"="http://search.msn.com/spbasic.htm" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! [ UAC => 1 ] 1 - "C:\ToolBar SD\TB_1.txt" - 10/05/2009|12:08 - Option : [1] 2 - "C:\ToolBar SD\TB_2.txt" - 10/05/2009|13:32 - Option : [2] 3 - "C:\ToolBar SD\TB_3.txt" - 10/05/2009|13:43 - Option : [2]

J'espère que c'est le bon rapport. Apparemment tout est propre. Merci.Malwarebytes' Anti-Malware 1.36 Version de la base de données: 2109 Windows 6.0.6001 Service Pack 1 11/05/2009 19:56:56 mbam-log-2009-05-11 (19-56-56).txt Type de recherche: Examen complet (A:\|C:\|D:\|) Eléments examinés: 210511 Temps écoulé: 1 hour(s), 41 minute(s), 58 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

Malwarebytes' Anti-Malware 1.36 Version de la base de données: 2104 Windows 6.0.6001 Service Pack 1 10/05/2009 19:35:46 mbam-log-2009-05-10 (19-35-46).txt Type de recherche: Examen complet (A:\|C:\|D:\|) Eléments examinés: 210390 Temps écoulé: 1 hour(s), 46 minute(s), 46 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

Pas de nouvelles bonnes nouvelles pour l'instant pas de récidives. Merci. @+

Résultat de Navilog en 2: Clean Navipromo version 3.7.6 commencé le 10/05/2009 à 13:36:19,41 Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel® Pentium® Dual CPU E2140 @ 1.60GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Mathias ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Activated) Firewall : Norton Internet Security 2007 (Not Activated) A:\ (Local Disk) - NTFS - Total:97 Go (Free:82 Go) C:\ (Local Disk) - NTFS - Total:230 Go (Free:149 Go) D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go) E:\ (CD or DVD) F:\ (USB) G:\ (USB) H:\ (USB) I:\ (USB) Mode suppression automatique avec prise en charge résultats Catchme et GNS Nettoyage exécuté au redémarrage de l'ordinateur *** fsbl1.txt non trouvé *** (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche) *** Suppression avec sauvegardes résultats GenericNaviSearch *** * Suppression dans "C:\Windows\System32" * * Suppression dans "C:\Users\Mathias\AppData\Local\Microsoft" * * Suppression dans "C:\Users\Mathias\AppData\Local\virtualstore\windows\system32" * * Suppression dans "C:\Users\Mathias\AppData\Local" * *** Suppression dossiers dans "C:\Windows" *** *** Suppression dossiers dans "C:\Program Files" *** *** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" *** *** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1" *** *** Suppression dossiers dans "C:\ProgramData" *** *** Suppression dossiers dans c:\users\mathias\appdata\roaming\micros~1\windows\startm~1\programs *** *** Suppression dossiers dans "C:\Users\Mathias\AppData\Local\virtualstore\Program Files" *** *** Suppression dossiers dans "C:\Users\Mathias\AppData\Local" *** *** Suppression dossiers dans "C:\Users\Mathias\AppData\Roaming" *** *** Suppression fichiers *** *** Suppression fichiers temporaires *** Nettoyage contenu C:\Windows\Temp effectué ! Nettoyage contenu C:\Users\Mathias\AppData\Local\Temp effectué ! *** Traitement Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Suppression avec sauvegardes nouveaux fichiers Instant Access : 2)Recherche, création sauvegardes et suppression Heuristique : * Dans "C:\Windows\system32" * * Dans "C:\Users\Mathias\AppData\Local\Microsoft" * * Dans "C:\Users\Mathias\AppData\Local\virtualstore\windows\system32" * * Dans "C:\Users\Mathias\AppData\Local" * ykakkiu.exe trouvé ! Copie ykakkiu.exe réalisée avec succès ! ykakkiu.exe supprimé ! ykakkiu.dat trouvé ! Copie ykakkiu.dat réalisée avec succès ! ykakkiu.dat supprimé ! ykakkiu_nav.dat trouvé ! Copie ykakkiu_nav.dat réalisée avec succès ! ykakkiu_nav.dat supprimé ! ykakkiu_navps.dat trouvé ! Copie ykakkiu_navps.dat réalisée avec succès ! ykakkiu_navps.dat supprimé ! *** Sauvegarde du Registre vers dossier Safebackup *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok *** Certificats *** Certificat Egroup absent ! Certificat Electronic-Group absent ! Certificat Montorgueil absent ! Certificat OOO-Favorit absent ! Certificat Sunny-Day-Design-Ltdt absent ! *** Recherche autres dossiers et fichiers connus *** *** Nettoyage terminé le 10/05/2009 à 13:40:07,72 *** et le deuxième: -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel® Pentium® Dual CPU E2140 @ 1.60GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Mathias ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Activated) Firewall : Norton Internet Security 2007 (Not Activated) A:\ (Local Disk) - NTFS - Total:97 Go (Free:82 Go) C:\ (Local Disk) - NTFS - Total:230 Go (Free:149 Go) D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go) E:\ (CD or DVD) F:\ (USB) G:\ (USB) H:\ (USB) I:\ (USB) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [2] ( 10/05/2009|13:43 ) [ UAC => 1 ] -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://http//www.portailneuf.fr/" "Search Page"="http://home.microsoft.com/access/allinone.asp" "Search Bar"="http://g.msn.fr/0SEFRFR/SAOS02" "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"'>http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"'>http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Url"="http://go.microsoft.com/fwlink/?LinkId=75720" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.msn.com/" "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Bar"="http://search.msn.com/spbasic.htm" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! [ UAC => 1 ] 1 - "C:\ToolBar SD\TB_1.txt" - 10/05/2009|12:08 - Option : [1] 2 - "C:\ToolBar SD\TB_2.txt" - 10/05/2009|13:32 - Option : [2] 3 - "C:\ToolBar SD\TB_3.txt" - 10/05/2009|13:43 - Option : [2] -----------\\ Fin du rapport a 13:43:39,66

voici le deuxieme rapport: Search Navipromo version 3.7.6 commencé le 10/05/2009 à 12:36:29,42 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel® Pentium® Dual CPU E2140 @ 1.60GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Mathias ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Activated) Firewall : Norton Internet Security 2007 (Not Activated) A:\ (Local Disk) - NTFS - Total:97 Go (Free:82 Go) C:\ (Local Disk) - NTFS - Total:230 Go (Free:147 Go) D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go) E:\ (CD or DVD) F:\ (USB) G:\ (USB) H:\ (USB) I:\ (USB) Recherche executé en mode normal *** Recherche dossiers dans "C:\Windows" *** *** Recherche dossiers dans "C:\Program Files" *** *** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" *** *** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" *** *** Recherche dossiers dans "C:\ProgramData" *** *** Recherche dossiers dans "c:\users\mathias\appdata\roaming\micros~1\windows\startm~1\programs" *** *** Recherche dossiers dans "C:\Users\Mathias\AppData\Local\virtualstore\Program Files" *** *** Recherche dossiers dans "C:\Users\Mathias\AppData\Local" *** *** Recherche dossiers dans "C:\Users\Mathias\AppData\Roaming" *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans "C:\Windows\system32" * * Recherche dans "C:\Users\Mathias\AppData\Local\Microsoft" * * Recherche dans "C:\Users\Mathias\AppData\Local\virtualstore\windows\system32" * * Recherche dans "C:\Users\Mathias\AppData\Local" * *** Recherche fichiers *** *** Recherche clés spécifiques dans le Registre *** !! Les clés trouvées ne sont pas forcément infectées !! [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ykakkiu"="\"c:\\users\\mathias\\appdata\\local\\ykakkiu.exe\" ykakkiu" *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans "C:\Windows\system32" : * Dans "C:\Users\Mathias\AppData\Local\Microsoft" : * Dans "C:\Users\Mathias\AppData\Local\virtualstore\windows\system32" : * Dans "C:\Users\Mathias\AppData\Local" : ykakkiu.exe trouvé ! ykakkiu.dat trouvé ! ykakkiu_nav.dat trouvé ! ykakkiu_navps.dat trouvé ! 3)Recherche Certificats : Certificat Egroup absent ! Certificat Electronic-Group absent ! Certificat Montorgueil absent ! Certificat OOO-Favorit absent ! Certificat Sunny-Day-Design-Ltd absent ! 4)Recherche autres dossiers et fichiers connus : *** Analyse terminée le 10/05/2009 à 12:47:22,86 ***

Je poste le premier rapport et puis le second dans ma deuxième réponse. -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel® Pentium® Dual CPU E2140 @ 1.60GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Mathias ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Activated) Firewall : Norton Internet Security 2007 (Not Activated) A:\ (Local Disk) - NTFS - Total:97 Go (Free:82 Go) C:\ (Local Disk) - NTFS - Total:230 Go (Free:148 Go) D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go) E:\ (CD or DVD) F:\ (USB) G:\ (USB) H:\ (USB) I:\ (USB) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [1] ( 10/05/2009|12:08 ) [ UAC => 1 ] -----------\\ Recherche de Fichiers / Dossiers ... C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Burn4Free CD and DVD C:\Program Files\Burn4Free C:\Program Files\Burn4Free\bass.dll C:\Program Files\Burn4Free\basscd.dll C:\Program Files\Burn4Free\bassflac.dll C:\Program Files\Burn4Free\basswma.dll C:\Program Files\Burn4Free\basswv.dll C:\Program Files\Burn4Free\bass_ape.dll C:\Program Files\Burn4Free\bass_mpc.dll C:\Program Files\Burn4Free\BURN4FREE.CFG C:\Program Files\Burn4Free\Burn4Free.exe C:\Program Files\Burn4Free\languages C:\Program Files\Burn4Free\license.txt C:\Program Files\Burn4Free\queue C:\Program Files\Burn4Free\temp C:\Program Files\Burn4Free\uninstall.exe C:\Program Files\Burn4Free\wav C:\Program Files\Burn4Free\languages\ARABIC.INI C:\Program Files\Burn4Free\languages\BELARUSSIAN.INI C:\Program Files\Burn4Free\languages\CATALAN.INI C:\Program Files\Burn4Free\languages\CHINESEBIG5.INI C:\Program Files\Burn4Free\languages\CHINESEGB.INI C:\Program Files\Burn4Free\languages\CROATIAN_FUN.INI C:\Program Files\Burn4Free\languages\CZECH.INI C:\Program Files\Burn4Free\languages\DUTCH.INI C:\Program Files\Burn4Free\languages\ENGLISH.INI C:\Program Files\Burn4Free\languages\FRENCH.INI C:\Program Files\Burn4Free\languages\GALEGO.INI C:\Program Files\Burn4Free\languages\GERMAN.INI C:\Program Files\Burn4Free\languages\GERMAN_2.INI C:\Program Files\Burn4Free\languages\HEBREW.INI C:\Program Files\Burn4Free\languages\HELLENIC.INI C:\Program Files\Burn4Free\languages\ITALIANO.INI C:\Program Files\Burn4Free\languages\JAPANESE.INI C:\Program Files\Burn4Free\languages\KOREAN.INI C:\Program Files\Burn4Free\languages\LITHUANIAN.INI C:\Program Files\Burn4Free\languages\MACEDONIAN.INI C:\Program Files\Burn4Free\languages\MAGYAR.INI C:\Program Files\Burn4Free\languages\NORSK.INI C:\Program Files\Burn4Free\languages\POLISH.INI C:\Program Files\Burn4Free\languages\PORTUGUESE.INI C:\Program Files\Burn4Free\languages\ROMANA.INI C:\Program Files\Burn4Free\languages\RUSSIAN.INI C:\Program Files\Burn4Free\languages\RUSSIAN_2.INI C:\Program Files\Burn4Free\languages\SERBIAN.INI C:\Program Files\Burn4Free\languages\SLOVAK.INI C:\Program Files\Burn4Free\languages\SLOVENIAN.INI C:\Program Files\Burn4Free\languages\SPANISH.INI C:\Program Files\Burn4Free\languages\SUOMI.INI C:\Program Files\Burn4Free\languages\SVENSKA.INI C:\Program Files\Burn4Free\languages\TURKISH.INI C:\Program Files\Burn4Free\languages\UKRAINIAN.INI C:\Program Files\Burn4Free\languages\VALENCIAN.INI C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Burn4Free CD and DVD C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Barre d'outils Crawler C:\Program Files\Crawler C:\Program Files\Crawler\Download C:\Program Files\Crawler\Toolbar C:\Program Files\Crawler\Toolbar\adrkeys.dat C:\Program Files\Crawler\Toolbar\COMMON_FF.dat C:\Program Files\Crawler\Toolbar\confirm.dat C:\Program Files\Crawler\Toolbar\ctbcomm.dll C:\Program Files\Crawler\Toolbar\ctbr.dll C:\Program Files\Crawler\Toolbar\CTConf.dat C:\Program Files\Crawler\Toolbar\CTipsDef.dll C:\Program Files\Crawler\Toolbar\CToolbar.exe C:\Program Files\Crawler\Toolbar\CUpdate.exe C:\Program Files\Crawler\Toolbar\firefox C:\Program Files\Crawler\Toolbar\Languages C:\Program Files\Crawler\Toolbar\lookfor.dat C:\Program Files\Crawler\Toolbar\majorse.dat C:\Program Files\Crawler\Toolbar\rootmenu.dat C:\Program Files\Crawler\Toolbar\services.dat C:\Program Files\Crawler\Toolbar\STWSGLanguageAct C:\Program Files\Crawler\Toolbar\STWSG_FF.dat C:\Program Files\Crawler\Toolbar\TBR5LanguageAct C:\Program Files\Crawler\Toolbar\Update C:\Program Files\Crawler\Toolbar\WebSecurityGuard.dll C:\Program Files\Crawler\Toolbar\WSGData C:\Program Files\Crawler\Toolbar\firefox\chrome C:\Program Files\Crawler\Toolbar\firefox\chrome.manifest C:\Program Files\Crawler\Toolbar\firefox\components C:\Program Files\Crawler\Toolbar\firefox\install.ini C:\Program Files\Crawler\Toolbar\firefox\install.rdf C:\Program Files\Crawler\Toolbar\firefox\stwsg_ff.ini C:\Program Files\Crawler\Toolbar\firefox\chrome\common.jar C:\Program Files\Crawler\Toolbar\firefox\chrome\stwsg.jar C:\Program Files\Crawler\Toolbar\firefox\components\xcomm.dll C:\Program Files\Crawler\Toolbar\firefox\components\xplugin.xpt C:\Program Files\Crawler\Toolbar\firefox\components\xshared.dll C:\Program Files\Crawler\Toolbar\firefox\components\xshared.xpt C:\Program Files\Crawler\Toolbar\firefox\components\xsupport.dll C:\Program Files\Crawler\Toolbar\firefox\components\xsupport.xpt C:\Program Files\Crawler\Toolbar\firefox\components\xwsg.dll C:\Program Files\Crawler\Toolbar\Languages\STWSG_CS.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_DE.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_EN.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_ES.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_FF.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_FR.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_IT.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_NL.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_PT-BR.cab C:\Program Files\Crawler\Toolbar\Languages\STWSG_PT.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_CS.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_DE.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_EN.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_ES.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_FR.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_IT.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_NL.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_PL.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_PT-BR.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_PT.cab C:\Program Files\Crawler\Toolbar\Languages\TBR5_RU.cab C:\Program Files\Crawler\Toolbar\STWSGLanguageAct\info.ini C:\Program Files\Crawler\Toolbar\STWSGLanguageAct\language.ini C:\Program Files\Crawler\Toolbar\TBR5LanguageAct\info.ini C:\Program Files\Crawler\Toolbar\TBR5LanguageAct\language.ini C:\Program Files\Crawler\Toolbar\Update\domains.cab C:\Program Files\Crawler\Toolbar\WSGData\domains C:\Program Files\Crawler\Toolbar\WSGData\g_S-1-5-18.dat C:\Program Files\Crawler\Toolbar\WSGData\g_S-1-5-21-219577271-1366622661-2790460906-1000.dat C:\Program Files\Crawler\Toolbar\WSGData\p_S-1-5-18.dat C:\Program Files\Crawler\Toolbar\WSGData\p_S-1-5-21-219577271-1366622661-2790460906-1000.dat C:\Program Files\Crawler\Toolbar\WSGData\ud_S-1-5-21-219577271-1366622661-2790460906-1000.dat C:\Program Files\Crawler\Toolbar\WSGData\wfilter.dat C:\Program Files\Crawler\Toolbar\WSGData\w_S-1-5-18.dat C:\Program Files\Crawler\Toolbar\WSGData\w_S-1-5-21-219577271-1366622661-2790460906-1000.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_000.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_000_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_001.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_001_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_002.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_002_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_003.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_003_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_004.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_004_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_005.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_005_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_006.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_006_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_007.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_007_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_008.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_008_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_009.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_009_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_010.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_010_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_011.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_011_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_012.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_012_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_013.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_013_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_014.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_014_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_015.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_015_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_016.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_016_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_017.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_017_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_018.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_018_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_019.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_019_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_020.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_020_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_021.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_021_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_022.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_022_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_023.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_023_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_024.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_024_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_025.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_025_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_026.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_026_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_027.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_027_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_028.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_028_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_029.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_029_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_030.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_030_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_031.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_031_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_032.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_032_diff.dat C:\Program Files\Crawler\Toolbar\WSGData\domains\index.dat C:\Program Files\Search Settings C:\Program Files\Search Settings\kb127 C:\Program Files\Search Settings\SearchSettings.exe C:\Program Files\Search Settings\kb127\res C:\Program Files\Search Settings\kb127\SearchSettings.dll C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll C:\Program Files\Search Settings\kb127\temp C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml C:\Users\Mathias\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Burn4Free.lnk -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://http//www.portailneuf.fr/" "Search Page"="http://home.microsoft.com/access/allinone.asp" "Search Bar"="http://g.msn.fr/0SEFRFR/SAOS02" "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"'>http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"'>http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Url"="http://go.microsoft.com/fwlink/?LinkId=75720" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.ustart.org" "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Bar"="http://search.msn.com/spbasic.htm" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" --------------------\\ Recherche d'autres infections C:\Users\Mathias\AppData\Local\ykakkiu.dat C:\Users\Mathias\AppData\Local\ykakkiu.exe C:\Users\Mathias\AppData\Local\ykakkiu_nav.dat C:\Users\Mathias\AppData\Local\ykakkiu_navps.dat ==> EGDACCESS <== [ UAC => 1 ] 1 - "C:\ToolBar SD\TB_1.txt" - 10/05/2009|12:08 - Option : [1] -----------\\ Fin du rapport a 12:08:35,31

Merci de m'avoir répondu. Pour ce qui est des pubs se sont des pubs qui correspondent au site visité ou d'autres comme la redoute, ..... Je vous envoie le rapport générer. Logfile of random's system information tool 1.06 (written by random/random) Run by Mathias at 2009-05-10 11:33:41 Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1 System drive C: has 152 GB (64%) free of 236 GB Total RAM: 3070 MB (67% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:33:46, on 10/05/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18226) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\hp\support\hpsysdrv.exe C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\jureg.exe c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Windows\vVX1000.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Search Settings\SearchSettings.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Windows\system32\schtasks.exe C:\Windows\System32\mobsync.exe C:\Program Files\Common Files\microsoft shared\Works Shared\WkCalRem.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe c:\users\mathias\appdata\local\ykakkiu.exe C:\hp\kbd\kbd.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Mathias\Desktop\RSIT.exe C:\Program Files\trend micro\Mathias.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://http//www.portailneuf.fr/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file) R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll O1 - Hosts: ::1 localhost O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" O4 - HKLM\..\Run: [startCCC] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [sunJavaUpdateReg] "C:\Windows\system32\jureg.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe" O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [ykakkiu] "c:\users\mathias\appdata\local\ykakkiu.exe" ykakkiu O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Startup: WKCALREM.LNK = C:\Program Files\Common Files\microsoft shared\Works Shared\WkCalRem.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html O8 - Extra context menu item: Crawler Search - tbr:iemenu O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (file missing) O23 - Service: EasyBits Magic Desktop Services for Windows NT (ezntsvc) - EasyBits Software Corp. - C:\Windows\system32\ezNTSvc.exe O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- End of file - 8383 bytes ======Scheduled tasks folder====== C:\Windows\tasks\HPCeeScheduleForMathias.job C:\Windows\tasks\User_Feed_Synchronization-{281C8EAA-939A-419F-9F85-0912C2CB163B}.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}] C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2009-02-17 1192960] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}] SearchSettings Class - C:\Program Files\Search Settings\kb127\SearchSettings.dll [2008-06-12 1111904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - Barre d'outils &Crawler - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2009-02-17 1192960] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184] "hpsysdrv"=c:\hp\support\hpsysdrv.exe [2007-04-18 65536] "KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536] "OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784] "StartCCC"=c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240] "HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2007-05-24 71176] "SunJavaUpdateReg"=C:\Windows\system32\jureg.exe [2008-06-10 54672] "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152] ""= [] "LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912] "VX1000"=C:\Windows\vVX1000.exe [2007-04-10 709992] "hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2008-06-02 81920] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792] "IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2008-06-02 178712] "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000] "SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2008-06-12 991584] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"=C:\Windows\SMINST\launcher.exe [2007-04-03 44168] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HPAdvisor"=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2007-06-01 1783400] "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240] "ykakkiu"=c:\users\mathias\appdata\local\ykakkiu.exe [2009-05-10 360448] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\Mathias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup WKCALREM.LNK - C:\Program Files\Common Files\microsoft shared\Works Shared\WkCalRem.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\system32\EZUPBH~1.DLL [2007-11-25 49152] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableLockWorkstation"=0 "DisableTaskMgr"=0 "DisableChangePassword"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoLogoff"=0 "NoClose"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======List of files/folders created in the last 1 months====== 2009-05-10 11:28:52 ----D---- C:\rsit 2009-05-09 13:41:28 ----D---- C:\Program Files\Lavasoft 2009-05-09 13:41:27 ----D---- C:\ProgramData\Lavasoft 2009-05-01 15:11:54 ----D---- C:\Users\Mathias\AppData\Roaming\Apple Computer 2009-05-01 15:11:46 ----DC---- C:\Windows\system32\DRVSTORE 2009-05-01 15:10:04 ----D---- C:\Program Files\Apple Software Update 2009-05-01 15:09:07 ----D---- C:\Program Files\Common Files\Apple 2009-05-01 15:09:06 ----D---- C:\ProgramData\Apple 2009-04-30 18:45:04 ----D---- C:\Program Files\CamStudio 2009-04-23 18:17:18 ----D---- C:\Users\Mathias\AppData\Roaming\skypePM 2009-04-23 18:13:39 ----D---- C:\Users\Mathias\AppData\Roaming\Skype 2009-04-23 18:11:34 ----D---- C:\Program Files\Common Files\Skype 2009-04-23 18:11:32 ----RD---- C:\Program Files\Skype 2009-04-23 18:11:28 ----D---- C:\ProgramData\Skype 2009-04-17 11:05:47 ----A---- C:\Windows\system32\winhttp.dll 2009-04-17 11:05:46 ----A---- C:\Windows\system32\xolehlp.dll 2009-04-17 11:05:46 ----A---- C:\Windows\system32\msdtcprx.dll 2009-04-17 11:05:42 ----A---- C:\Windows\system32\mshtml.dll 2009-04-17 11:05:40 ----A---- C:\Windows\system32\ieframe.dll 2009-04-17 11:05:38 ----A---- C:\Windows\system32\urlmon.dll 2009-04-17 11:05:38 ----A---- C:\Windows\system32\iertutil.dll 2009-04-17 11:05:38 ----A---- C:\Windows\system32\iedkcs32.dll 2009-04-17 11:05:37 ----A---- C:\Windows\system32\wininet.dll 2009-04-17 11:05:37 ----A---- C:\Windows\system32\occache.dll 2009-04-17 11:05:37 ----A---- C:\Windows\system32\msfeeds.dll 2009-04-17 11:05:37 ----A---- C:\Windows\system32\ieUnatt.exe 2009-04-17 11:05:37 ----A---- C:\Windows\system32\ieaksie.dll 2009-04-17 11:05:36 ----A---- C:\Windows\system32\mstime.dll 2009-04-17 11:05:36 ----A---- C:\Windows\system32\ieencode.dll 2009-04-17 11:05:35 ----A---- C:\Windows\system32\jsproxy.dll 2009-04-17 11:05:20 ----A---- C:\Windows\system32\rpcss.dll 2009-04-17 11:05:19 ----A---- C:\Windows\system32\ntoskrnl.exe 2009-04-17 11:05:19 ----A---- C:\Windows\system32\ntkrnlpa.exe 2009-04-17 11:05:18 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe 2009-04-17 11:05:17 ----A---- C:\Windows\system32\sdohlp.dll 2009-04-17 11:05:17 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll 2009-04-17 11:05:17 ----A---- C:\Windows\system32\iasrecst.dll 2009-04-17 11:05:17 ----A---- C:\Windows\system32\iashost.exe 2009-04-17 11:05:17 ----A---- C:\Windows\system32\iasdatastore.dll 2009-04-17 11:05:17 ----A---- C:\Windows\system32\iasads.dll 2009-04-17 11:05:14 ----A---- C:\Windows\system32\lsasrv.dll 2009-04-17 11:05:14 ----A---- C:\Windows\system32\kernel32.dll 2009-04-17 11:05:13 ----A---- C:\Windows\system32\secur32.dll 2009-04-17 11:05:13 ----A---- C:\Windows\system32\apilogen.dll 2009-04-17 11:05:13 ----A---- C:\Windows\system32\amxread.dll ======List of files/folders modified in the last 1 months====== 2009-05-10 11:33:44 ----D---- C:\Windows\Temp 2009-05-10 11:33:42 ----D---- C:\Program Files\Trend Micro 2009-05-10 11:33:37 ----D---- C:\Windows\Prefetch 2009-05-10 11:28:52 ----D---- C:\Windows\tracing 2009-05-10 10:25:21 ----D---- C:\Users\Mathias\AppData\Roaming\Zylom 2009-05-10 10:25:21 ----D---- C:\Users\Mathias\AppData\Roaming\Identities 2009-05-10 10:25:17 ----HD---- C:\ProgramData 2009-05-10 07:55:29 ----D---- C:\Windows\System32 2009-05-10 07:55:29 ----D---- C:\Windows\inf 2009-05-10 07:55:29 ----A---- C:\Windows\system32\PerfStringBackup.INI 2009-05-10 07:50:48 ----D---- C:\Windows\SMINST 2009-05-10 07:50:15 ----HD---- C:\Config.Msi 2009-05-09 13:49:01 ----SHD---- C:\System Volume Information 2009-05-09 13:43:20 ----D---- C:\Program Files\Mozilla Firefox 2009-05-09 13:42:06 ----SHD---- C:\Windows\Installer 2009-05-09 13:42:06 ----D---- C:\Windows 2009-05-09 13:41:28 ----RD---- C:\Program Files 2009-05-09 13:41:28 ----D---- C:\Windows\system32\drivers 2009-05-09 13:40:14 ----D---- C:\Program Files\Common Files\Wise Installation Wizard 2009-05-08 09:13:33 ----D---- C:\Windows\system32\Tasks 2009-05-04 12:43:43 ----D---- C:\Windows\system32\catroot2 2009-05-01 15:11:47 ----D---- C:\Windows\system32\catroot 2009-05-01 15:10:53 ----D---- C:\Program Files\Internet Explorer 2009-05-01 15:09:07 ----D---- C:\Program Files\Common Files 2009-04-28 18:12:27 ----D---- C:\Windows\Debug 2009-04-24 21:19:25 ----A---- C:\Windows\win.ini 2009-04-17 20:41:08 ----D---- C:\Windows\winsxs 2009-04-17 18:40:00 ----D---- C:\Windows\system32\wbem 2009-04-17 18:40:00 ----D---- C:\Program Files\Windows Mail 2009-04-17 18:39:59 ----D---- C:\Windows\system32\manifeststore 2009-04-17 18:39:58 ----D---- C:\Windows\AppPatch 2009-04-14 19:59:04 ----D---- C:\Users\Mathias\AppData\Roaming\VSO ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-02-05 23152] R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-02-05 114768] R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-02-05 51376] R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352] R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560] R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-02-05 51792] R3 Afc;PPdus ASPI Shell; C:\Windows\system32\drivers\Afc.sys [2006-11-10 18688] R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-07-10 2769408] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-15 2047576] R3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072] R3 RTL8023xp;Pilote Realtek 10/100 NIC Family NDIS x86; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2006-11-02 47104] R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088] R3 VX1000;VX-1000; C:\Windows\system32\DRIVERS\VX1000.sys [2007-04-10 1966312] R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328] S3 61883;Pilote d'unité 61883; C:\Windows\system32\DRIVERS\61883.sys [2008-01-19 45696] S3 Avc;Périphérique AVC; C:\Windows\system32\DRIVERS\avc.sys [2008-01-19 40448] S3 CAM1210;USB Video Camera Driver v1.53; C:\Windows\System32\Drivers\cam1210.sys [2007-08-30 94080] S3 catchme;catchme; \??\C:\Users\Mathias\AppData\Local\Temp\catchme.sys [] S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584] S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864] S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2007-12-02 15352] S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632] S3 E100B;Pilote de carte Intel ® PRO; C:\Windows\system32\DRIVERS\e100b325.sys [2008-01-19 159744] S3 gtermddo;gtermddo; \??\C:\Users\Mathias\AppData\Local\Temp\gtermddo.sys [] S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2008-01-19 52608] S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192] S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888] S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016] S3 SE2Ebus;Sony Ericsson Device 046 Driver driver (WDM); C:\Windows\system32\DRIVERS\SE2Ebus.sys [2006-05-01 61600] S3 SE2Emdfl;Sony Ericsson Device 046 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\SE2Emdfl.sys [2006-05-01 9360] S3 SE2Emdm;Sony Ericsson Device 046 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\SE2Emdm.sys [2006-05-01 97184] S3 usb_rndis;Broadcom USB Remote NDIS Device Driver; C:\Windows\system32\DRIVERS\usb8023.sys [2008-01-19 15872] S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328] S3 xnacc;Contrôleur XBOX 360 pour le service de pilote Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2006-11-02 514560] S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2007-08-28 55808] S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2009-05-09 611664] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424] R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752] R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-07-10 606208] R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680] R2 ezntsvc;EasyBits Magic Desktop Services for Windows NT; C:\Windows\system32\ezNTSvc.exe [2007-11-25 33792] R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-05-24 61440] R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504] R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2008-06-02 354840] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-06-28 79136] R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504] R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040] R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504] S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504] S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [] S3 Boonty Games;Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe [] S3 IDriverT;InstallDriver Table Manager; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 RoxMediaDB9;RoxMediaDB9; c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-05-11 887544] S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-05-03 74656] S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-08-08 1174664] S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] -----------------EOF-----------------

Bonjour, depuis hier j'ai des fenêtres de pubs qui s'ouvrent avec mozilla. Je voudrais savoir comment je peux les faire disparaître, c'est énervant quand on est sur internet. J'ai Vista. Merci par avance.