info sur mon pcRésolu/Fermé

Question

Bonjour,pouvez vous m'aider concernant l'analyse hijackthis et voir si il y à un virus merci pour votre aide marc
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:38:00, on 10/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
C:\WINDOWS\system32\lxdvcoms.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\PcBoost\PcBoost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [PcBoost] "C:\Program Files\PcBoost\PcBoost.exe" /start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Pinnacle WebUpdater] "C:\Program Files\Pinnacle\Shared Files\Programs\WebUpdater\WebUpdater.exe" -s  -f=UpdateVersion.xml -url=http://cdn.pinnaclesys.com/SupportFiles
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.be/ImageUploader5.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} - http://www.extrafilm.be/ImageUploader4.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxdvCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
O23 - Service: lxdv_device -   - C:\WINDOWS\system32\lxdvcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

evasion60/PCA · Answer

Bonjour 

...analyse en cours, réponse dans un instant

V-X · Answer

Salut,

Ne quitter pas !!!!

evasion60/PCA · Answer

Re

... Effectivement infection AskBar 

Télécharge Toolbar-S&D d'Eric71, AngelDark, Sham_Rock et XmichouX sur ton Bureau,
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

Double-clique sur Toolbar-S&D afin de lancer l'installation, un raccourci sera ajouté sur le Bureau. 
Double-clique dessus pour démarrer l'outil; choisis la langue.
Sous Vista, faire un clic droit et "Exécuter en tant qu'administrateur" (Elévation des privilèges), puis -> Continuer.
Tape 1 puis sur la touche [Entrée] afin de lancer la recherche.
Patiente jusqu'à la fin de la recherche.
À la fin du scan, le rapport s'ouvrira dans le Bloc-notes.
Poste ce rapport, par copier/coller, dans ta prochaine réponse. 

Le rapport se trouve également sous : C:\TB.txt

A te lire

titicrominet · Answer

Re 
Comment fait ton pour une analyse parce que je n'y arrive pas, j'ai une fenetre bleu qui s'affiche avec plusieurs langues et une <_ et la petite barre qui cligniote et je sais rien lancer merci à toi pour ton aide marc

evasion60/PCA · Answer

Bonjour

... Aide toi de ce tuto :
Aide en image : https://sites.google.com/site/toolbarsd/aideenimages

Poste son rapport / STP
A te lire, et bon dimanche

titicrominet · Answer

Bonjour, merci pour tes infos ok ca marché je te poste l'analyse merci marc

   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU          6320  @ 1.86GHz )
   BIOS : BIOS Date: 09/05/06 13:40:52 Ver: 08.00.10
   USER : Admin ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1296 [VPS 090111-0] 4.8.1296 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:153 Go (Free:130 Go)
   D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
   E:\ (CD or DVD)
   F:\ (Local Disk) - NTFS - Total:149 Go (Free:144 Go)
   G:\ (USB)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( dim. 11/01/2009|16:58 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\AskBarDis
   C:\Program Files\AskBarDis\bar
   C:\Program Files\AskBarDis\PopSwatter
   C:\Program Files\AskBarDis\unins000.dat
   C:\Program Files\AskBarDis\unins000.exe
   C:\Program Files\AskBarDis\bar\bin
   C:\Program Files\AskBarDis\bar\Cache
   C:\Program Files\AskBarDis\bar\History
   C:\Program Files\AskBarDis\bar\Settings
   C:\Program Files\AskBarDis\bar\bin\askBar.dll
   C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
   C:\Program Files\AskBarDis\bar\bin\psvince.dll
   C:\Program Files\AskBarDis\bar\Cache\011C5B0B
   C:\Program Files\AskBarDis\bar\Cache\011C5D5D
   C:\Program Files\AskBarDis\bar\Cache\011C5F7F.bin
   C:\Program Files\AskBarDis\bar\Cache\011C60E7.bin
   C:\Program Files\AskBarDis\bar\Cache\011C624E.bin
   C:\Program Files\AskBarDis\bar\Cache\011C63B6.bin
   C:\Program Files\AskBarDis\bar\Cache\011C64BF.bin
   C:\Program Files\AskBarDis\bar\Cache\files.ini
   C:\Program Files\AskBarDis\bar\History\search
   C:\Program Files\AskBarDis\bar\Settings\config.dat
   C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
   C:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
   C:\Program Files\AskBarDis\PopSwatter\History
   C:\Program Files\AskBarDis\PopSwatter\History\allowed
   C:\Program Files\AskBarDis\PopSwatter\History
otallow
   C:\Program Files\Crawler
   C:\Program Files\Crawler\Toolbar
   C:\Program Files\Crawler\Toolbar\adrkeys.dat
   C:\Program Files\Crawler\Toolbar\Cache
   C:\Program Files\Crawler\Toolbar\COMMON_FF.dat
   C:\Program Files\Crawler\Toolbar\confirm.dat
   C:\Program Files\Crawler\Toolbar\ctbcomm.dll
   C:\Program Files\Crawler\Toolbar\ctbr.dll
   C:\Program Files\Crawler\Toolbar\CTConf.dat
   C:\Program Files\Crawler\Toolbar\CTipsDef.dll
   C:\Program Files\Crawler\Toolbar\CToolbar.exe
   C:\Program Files\Crawler\Toolbar\CUpdate.exe
   C:\Program Files\Crawler\Toolbar\firefox
   C:\Program Files\Crawler\Toolbar\Languages
   C:\Program Files\Crawler\Toolbar\lookfor.dat
   C:\Program Files\Crawler\Toolbar\majorse.dat
   C:\Program Files\Crawler\Toolbarootmenu.dat
   C:\Program Files\Crawler\Toolbar\services.dat
   C:\Program Files\Crawler\Toolbar\STWSGLanguageAct
   C:\Program Files\Crawler\Toolbar\STWSG_FF.dat
   C:\Program Files\Crawler\Toolbar\TBR5LanguageAct
   C:\Program Files\Crawler\Toolbar\Update
   C:\Program Files\Crawler\Toolbar\WebSecurityGuard.dll
   C:\Program Files\Crawler\Toolbar\WSGData
   C:\Program Files\Crawler\Toolbar\Cache\COMMON
   C:\Program Files\Crawler\Toolbar\Cache\STWSG
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\CLEANUP_BMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\CLEANUP_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\CLEANUP_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\DIRLIST_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\DIRLIST_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\ECARDS_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\ECARDS_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\EMAIL_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\GAMES_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\GAMES_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\SHOP_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\SPELL_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\TRAVEL_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\WAYBACK_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\WP_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\YP_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\STBUTTON_BMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\STBUTTON_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\STBUTTON_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\WSGBUTTON_BMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\WSGBUTTON_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\WSGBUTTON_MENU.dat
   C:\Program Files\Crawler\Toolbar\firefox\chrome
   C:\Program Files\Crawler\Toolbar\firefox\chrome.manifest
   C:\Program Files\Crawler\Toolbar\firefox\components
   C:\Program Files\Crawler\Toolbar\firefox\install.ini
   C:\Program Files\Crawler\Toolbar\firefox\install.rdf
   C:\Program Files\Crawler\Toolbar\firefox\stwsg_ff.ini
   C:\Program Files\Crawler\Toolbar\firefox\chrome\common.jar
   C:\Program Files\Crawler\Toolbar\firefox\chrome\stwsg.jar
   C:\Program Files\Crawler\Toolbar\firefox\components\xcomm.dll
   C:\Program Files\Crawler\Toolbar\firefox\components\xplugin.xpt
   C:\Program Files\Crawler\Toolbar\firefox\components\xshared.dll
   C:\Program Files\Crawler\Toolbar\firefox\components\xshared.xpt
   C:\Program Files\Crawler\Toolbar\firefox\components\xsupport.dll
   C:\Program Files\Crawler\Toolbar\firefox\components\xsupport.xpt
   C:\Program Files\Crawler\Toolbar\firefox\components\xwsg.dll
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_CS.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_DE.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_EN.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_ES.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_FF.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_FR.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_IT.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_NL.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_PT-BR.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_PT.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_CS.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_DE.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_EN.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_ES.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_FR.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_IT.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_NL.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_PL.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_PT-BR.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_PT.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_RU.cab
   C:\Program Files\Crawler\Toolbar\STWSGLanguageAct\info.ini
   C:\Program Files\Crawler\Toolbar\STWSGLanguageAct\language.ini
   C:\Program Files\Crawler\Toolbar\TBR5LanguageAct\info.ini
   C:\Program Files\Crawler\Toolbar\TBR5LanguageAct\language.ini
   C:\Program Files\Crawler\Toolbar\Update\domains.cab
   C:\Program Files\Crawler\Toolbar\WSGData\domains
   C:\Program Files\Crawler\Toolbar\WSGData\g_S-1-5-21-2025429265-73586283-725345543-1003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\p_S-1-5-21-2025429265-73586283-725345543-1003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\ud_S-1-5-21-2025429265-73586283-725345543-1003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\wfilter.dat
   C:\Program Files\Crawler\Toolbar\WSGData\w_S-1-5-21-2025429265-73586283-725345543-1003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_000.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_000_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_001.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_001_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_002.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_002_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_003_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_004.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_004_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_005.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_005_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_006.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_006_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_007.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_007_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_008.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_008_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_009.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_009_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_010.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_010_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_011.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_011_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_012.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_012_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_013.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_013_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_014.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_014_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_015.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_015_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_016.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_016_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_017.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_017_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_018.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_018_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_019.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_019_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_020.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_020_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_021.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_021_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_022.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_022_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_023.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_023_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_024.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_024_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_025.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_025_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_026.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_026_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_027.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_027_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_028.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_028_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_029.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_029_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\index.dat
   C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Barre d'outils Crawler
   C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml

   -----------\  Extensions

   (Admin) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (Admin) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (Admin) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327"
   "Start Page"="https://www.google.be/?gws_rd=ssl"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"
   "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="about:blank"
   "SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60327"
   "CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - dim. 11/01/2009|16:59 - Option : [1]

   -----------\  Fin du rapport a 16:59:36,45

evasion60/PCA · Answer

Re / OK

... Nous continuons :
Nettoyage :

Désactive ton antivirus, ton antipsyware résidant (spybot par exemple) durant la phase de nettoyage. Voir ici.
Double clique sur le raccourci de Toolbar-S&D présent sur ton bureau. Sous Vista : clic droit -> Exécuter en tant qu'administrateur.
Au menu principal, choisis l'option 2 et valide par la touche [Entrée]. 
/!\ Ne ferme pas la fenêtre lors de la suppression /!\ 

Un rapport sera généré. Poste ce rapport avec un nouveau rapport Hijackthis.
Note : Pour les utilisateurs de Vista, ToolBar-SD se charge de désactiver le "Contrôle des comptes utilisateurs" (UAC), il va redémarrer l'ordinateur et réactiver l'UAC.

Bonne réception, et à te lire

titicrominet · Answer

Re ok voici les deux rapports demandé merci encore pour ton aide

   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU          6320  @ 1.86GHz )
   BIOS : BIOS Date: 09/05/06 13:40:52 Ver: 08.00.10
   USER : Admin ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1296 [VPS 090111-0] 4.8.1296 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:153 Go (Free:130 Go)
   D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
   E:\ (CD or DVD)
   F:\ (Local Disk) - NTFS - Total:149 Go (Free:144 Go)
   G:\ (USB)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( dim. 11/01/2009|16:58 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\AskBarDis
   C:\Program Files\AskBarDis\bar
   C:\Program Files\AskBarDis\PopSwatter
   C:\Program Files\AskBarDis\unins000.dat
   C:\Program Files\AskBarDis\unins000.exe
   C:\Program Files\AskBarDis\bar\bin
   C:\Program Files\AskBarDis\bar\Cache
   C:\Program Files\AskBarDis\bar\History
   C:\Program Files\AskBarDis\bar\Settings
   C:\Program Files\AskBarDis\bar\bin\askBar.dll
   C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
   C:\Program Files\AskBarDis\bar\bin\psvince.dll
   C:\Program Files\AskBarDis\bar\Cache\011C5B0B
   C:\Program Files\AskBarDis\bar\Cache\011C5D5D
   C:\Program Files\AskBarDis\bar\Cache\011C5F7F.bin
   C:\Program Files\AskBarDis\bar\Cache\011C60E7.bin
   C:\Program Files\AskBarDis\bar\Cache\011C624E.bin
   C:\Program Files\AskBarDis\bar\Cache\011C63B6.bin
   C:\Program Files\AskBarDis\bar\Cache\011C64BF.bin
   C:\Program Files\AskBarDis\bar\Cache\files.ini
   C:\Program Files\AskBarDis\bar\History\search
   C:\Program Files\AskBarDis\bar\Settings\config.dat
   C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
   C:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
   C:\Program Files\AskBarDis\PopSwatter\History
   C:\Program Files\AskBarDis\PopSwatter\History\allowed
   C:\Program Files\AskBarDis\PopSwatter\History
otallow
   C:\Program Files\Crawler
   C:\Program Files\Crawler\Toolbar
   C:\Program Files\Crawler\Toolbar\adrkeys.dat
   C:\Program Files\Crawler\Toolbar\Cache
   C:\Program Files\Crawler\Toolbar\COMMON_FF.dat
   C:\Program Files\Crawler\Toolbar\confirm.dat
   C:\Program Files\Crawler\Toolbar\ctbcomm.dll
   C:\Program Files\Crawler\Toolbar\ctbr.dll
   C:\Program Files\Crawler\Toolbar\CTConf.dat
   C:\Program Files\Crawler\Toolbar\CTipsDef.dll
   C:\Program Files\Crawler\Toolbar\CToolbar.exe
   C:\Program Files\Crawler\Toolbar\CUpdate.exe
   C:\Program Files\Crawler\Toolbar\firefox
   C:\Program Files\Crawler\Toolbar\Languages
   C:\Program Files\Crawler\Toolbar\lookfor.dat
   C:\Program Files\Crawler\Toolbar\majorse.dat
   C:\Program Files\Crawler\Toolbarootmenu.dat
   C:\Program Files\Crawler\Toolbar\services.dat
   C:\Program Files\Crawler\Toolbar\STWSGLanguageAct
   C:\Program Files\Crawler\Toolbar\STWSG_FF.dat
   C:\Program Files\Crawler\Toolbar\TBR5LanguageAct
   C:\Program Files\Crawler\Toolbar\Update
   C:\Program Files\Crawler\Toolbar\WebSecurityGuard.dll
   C:\Program Files\Crawler\Toolbar\WSGData
   C:\Program Files\Crawler\Toolbar\Cache\COMMON
   C:\Program Files\Crawler\Toolbar\Cache\STWSG
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\CLEANUP_BMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\CLEANUP_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\CLEANUP_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\DIRLIST_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\DIRLIST_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\ECARDS_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\ECARDS_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\EMAIL_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\GAMES_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\GAMES_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\SHOP_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\SPELL_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\TRAVEL_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\WAYBACK_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\WP_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\COMMON\YP_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\STBUTTON_BMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\STBUTTON_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\STBUTTON_MENU.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\WSGBUTTON_BMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\WSGBUTTON_CHBMP.dat
   C:\Program Files\Crawler\Toolbar\Cache\STWSG\WSGBUTTON_MENU.dat
   C:\Program Files\Crawler\Toolbar\firefox\chrome
   C:\Program Files\Crawler\Toolbar\firefox\chrome.manifest
   C:\Program Files\Crawler\Toolbar\firefox\components
   C:\Program Files\Crawler\Toolbar\firefox\install.ini
   C:\Program Files\Crawler\Toolbar\firefox\install.rdf
   C:\Program Files\Crawler\Toolbar\firefox\stwsg_ff.ini
   C:\Program Files\Crawler\Toolbar\firefox\chrome\common.jar
   C:\Program Files\Crawler\Toolbar\firefox\chrome\stwsg.jar
   C:\Program Files\Crawler\Toolbar\firefox\components\xcomm.dll
   C:\Program Files\Crawler\Toolbar\firefox\components\xplugin.xpt
   C:\Program Files\Crawler\Toolbar\firefox\components\xshared.dll
   C:\Program Files\Crawler\Toolbar\firefox\components\xshared.xpt
   C:\Program Files\Crawler\Toolbar\firefox\components\xsupport.dll
   C:\Program Files\Crawler\Toolbar\firefox\components\xsupport.xpt
   C:\Program Files\Crawler\Toolbar\firefox\components\xwsg.dll
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_CS.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_DE.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_EN.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_ES.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_FF.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_FR.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_IT.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_NL.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_PT-BR.cab
   C:\Program Files\Crawler\Toolbar\Languages\STWSG_PT.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_CS.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_DE.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_EN.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_ES.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_FR.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_IT.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_NL.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_PL.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_PT-BR.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_PT.cab
   C:\Program Files\Crawler\Toolbar\Languages\TBR5_RU.cab
   C:\Program Files\Crawler\Toolbar\STWSGLanguageAct\info.ini
   C:\Program Files\Crawler\Toolbar\STWSGLanguageAct\language.ini
   C:\Program Files\Crawler\Toolbar\TBR5LanguageAct\info.ini
   C:\Program Files\Crawler\Toolbar\TBR5LanguageAct\language.ini
   C:\Program Files\Crawler\Toolbar\Update\domains.cab
   C:\Program Files\Crawler\Toolbar\WSGData\domains
   C:\Program Files\Crawler\Toolbar\WSGData\g_S-1-5-21-2025429265-73586283-725345543-1003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\p_S-1-5-21-2025429265-73586283-725345543-1003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\ud_S-1-5-21-2025429265-73586283-725345543-1003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\wfilter.dat
   C:\Program Files\Crawler\Toolbar\WSGData\w_S-1-5-21-2025429265-73586283-725345543-1003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_000.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_000_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_001.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_001_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_002.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_002_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_003.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_003_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_004.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_004_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_005.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_005_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_006.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_006_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_007.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_007_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_008.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_008_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_009.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_009_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_010.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_010_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_011.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_011_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_012.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_012_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_013.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_013_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_014.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_014_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_015.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_015_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_016.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_016_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_017.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_017_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_018.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_018_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_019.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_019_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_020.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_020_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_021.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_021_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_022.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_022_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_023.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_023_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_024.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_024_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_025.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_025_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_026.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_026_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_027.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_027_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_028.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_028_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_029.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\domains_029_diff.dat
   C:\Program Files\Crawler\Toolbar\WSGData\domains\index.dat
   C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Barre d'outils Crawler
   C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml

   -----------\  Extensions

   (Admin) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (Admin) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (Admin) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327"
   "Start Page"="https://www.google.be/?gws_rd=ssl"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"
   "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="about:blank"
   "SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60327"
   "CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - dim. 11/01/2009|16:59 - Option : [1]

   -----------\  Fin du rapport a 16:59:36,45

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:26:49, on 11/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
C:\WINDOWS\system32\lxdvcoms.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\PcBoost\PcBoost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Pinnacle\Shared Files\Programs\PclePvr\VideoControl.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [PcBoost] "C:\Program Files\PcBoost\PcBoost.exe" /start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Pinnacle WebUpdater] "C:\Program Files\Pinnacle\Shared Files\Programs\WebUpdater\WebUpdater.exe" -s  -f=UpdateVersion.xml -url=http://cdn.pinnaclesys.com/SupportFiles
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.be/ImageUploader5.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} - http://www.extrafilm.be/ImageUploader4.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxdvCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
O23 - Service: lxdv_device -   - C:\WINDOWS\system32\lxdvcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

evasion60/PCA · Answer

Re 

... Heummmm, tu sais pas lire ==> applique ma réponse avec l'option n°2 de l'outil / STP 

B.R. / à te lire

titicrominet · Answer

sory voici

   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU          6320  @ 1.86GHz )
   BIOS : BIOS Date: 09/05/06 13:40:52 Ver: 08.00.10
   USER : Admin ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1296 [VPS 090111-0] 4.8.1296 (Not Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:153 Go (Free:130 Go)
   D:\ (CD or DVD)
   E:\ (CD or DVD)
   F:\ (Local Disk) - NTFS - Total:149 Go (Free:144 Go)
   G:\ (USB)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [2] ( dim. 11/01/2009|17:40 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (Admin) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (Admin) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (Admin) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327"
   "Start Page"="https://www.google.be/?gws_rd=ssl"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"
   "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.msn.com/fr-fr/"
   "SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60327"
   "CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - dim. 11/01/2009|16:59 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - dim. 11/01/2009|17:26 - Option : [2]
   3 - "C:\ToolBar SD\TB_3.txt" - dim. 11/01/2009|17:40 - Option : [2]

   -----------\  Fin du rapport a 17:40:39,96

evasion60/PCA · Answer

Re / OK 

... Puis-je avoir un nouveau log HijackThis / STP

titicrominet · Answer

voici merci

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:34:24, on 11/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
C:\WINDOWS\system32\lxdvcoms.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\PcBoost\PcBoost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Pinnacle\Shared Files\Programs\PclePvr\VideoControl.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [PcBoost] "C:\Program Files\PcBoost\PcBoost.exe" /start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Pinnacle WebUpdater] "C:\Program Files\Pinnacle\Shared Files\Programs\WebUpdater\WebUpdater.exe" -s  -f=UpdateVersion.xml -url=http://cdn.pinnaclesys.com/SupportFiles
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.be/ImageUploader5.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} - http://www.extrafilm.be/ImageUploader4.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxdvCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
O23 - Service: lxdv_device -   - C:\WINDOWS\system32\lxdvcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

evasion60/PCA · Answer

Bonsoir

... Nous continuons 
Attention, tu as deux antispywares intallés, il y en a un de trop !

... Déconnecte toi du Web
Ferme toutes tes applications 
Lance HijackThis pour un " do a system scan only "
Coche à gauche les lignes ci dessous :

 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327      
 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =  
 R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)  
 O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll       
 O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll      
 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot         
 O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE       
 O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE      
 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime       
 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"      
 O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe       
 O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe      
 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')        
 O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')        
 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')      
 O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')   
 O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)  

Clique en bas sur " Fix checked "


... Ensuite, passe moi ce scanner en ligne :
https://www.bitdefender.fr/
Pas d'installation, mais juste utiliser la fonction : scanner 
 
Tuto en image : https://forum.pcastuces.com/default.asp

Bonne réception, et à te lire avec le rapport du scanner BitDefender

titicrominet · Answer

Re bonsoir me voici sorry pour retard voici le rapport
BitDefender Online Scanner
  
  
 
Rapport d'analyse généré à: Sun, Jan 11, 2009 - 22:07:39
 
 
  
  
 
Voie d'analyse: A:\;C:\;D:\;E:\;F:\;G:\;
  
  
 
 
  
  
 
Statistiques
 
Temps
 00:17:35
 
Fichiers
 87475
 
Directoires
 7331
 
Secteurs de boot
 0
 
Archives
 1135
 
Paquets programmes
 5796
 
  
  
 
Résultats
 
Virus identifiés
 1
 
Fichiers infectés
 2
 
Fichiers suspects
 0
 
Avertissements
 0
 
Désinfectés
 0
 
Fichiers effacés
 2
 
  
  
 
Info sur les moteurs
 
Définition virus
 2435930
 
Version des moteurs
 AVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008 17:19:14)
 
Analyse des plugins
 17
 
Archive des plugins
 45
 
Unpack des plugins
 7
 
E-mail plugins
 6
 
Système plugins
 4
 
  
  
 
Paramètres d'analyse
 
Première action
 Désinfecté
 
Seconde Action
 Supprimé
 
Heuristique
 Oui
 
Acceptez les avertissements
 Oui
 
Extensions analysées
 exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;
 
Excludez les extensions
  
 
Analyse d'emails
 Oui
 
Analyse des Archives
 Oui
 
Analyser paquets programmes
 Oui
 
Analyse des fichiers
 Oui
 
Analyse de boot
 Oui
 
  
  
 
  Fichier analysé
  Statut
 
C:\Program Files\Pinnacle\MediaCenter\Install\DivXPlayer\DivXPlay_ISV.exe
 Infecté par: DeepScan:Generic.Zlob.7.F2F715B7
 
C:\Program Files\Pinnacle\MediaCenter\Install\DivXPlayer\DivXPlay_ISV.exe
 Echec de la désinfection
 
C:\Program Files\Pinnacle\MediaCenter\Install\DivXPlayer\DivXPlay_ISV.exe
 Supprimé
 
C:\System Volume Information\_restore{CA4AF5D0-2410-49B7-8D9B-315309C3F7E9}\RP213\A0053017.exe
 Infecté par: DeepScan:Generic.Zlob.7.F2F715B7
 
C:\System Volume Information\_restore{CA4AF5D0-2410-49B7-8D9B-315309C3F7E9}\RP213\A0053017.exe
 Echec de la désinfection
 
C:\System Volume Information\_restore{CA4AF5D0-2410-49B7-8D9B-315309C3F7E9}\RP213\A0053017.exe
 Supprimé

titicrominet · Answer

j'ai oublier comme j'ai 2 antispywares que dois je bougé spyware doctor et spywares terminator et comme bon antivirus que dois je mettre meilleur gratuit ou un payant merci pour l 'info marc

evasion60/PCA · Answer

Re, juste de passage avant dodo 

... Tu peux désinstaller tes deux antimalwares via " ajout / suppression de programmes "

Tu peux si tu le souhaites suivre MalwareBytes' ( gratuit, sans protection résidente, mais oui en le payant )

C'est ci dessous que cela se passe :
https://forum.pcastuces.com/maj_logiciels_de_securite-f25s25842.htm
Tuto :
https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm

... Heummm, pour un antivirus free Antivir ( maintenant en français ) :
Désinstalle Avast
https://www.avast.com/fr-fr/uninstall-utility

Télécharger Antivir :
https://www.pcastuces.com/logitheque/antivir.htm

Installer/Configurer Antivir :
https://www.malekal.com/avira-free-security-antivirus-gratuit/

A demain, j'ai pas terminé avec toi // Bonne nuit , moi je suis HS => dodo

titicrominet · Answer

bonjour voici les analyses éffectué mode sans echec et normalement merci marc Avira AntiVir Personal Report file date: lundi 12 janvier 2009 08:59 Scanning for 1180145 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 3) [5.1.2600] Boot mode: Save mode Username: Admin Computer name: XPSP2-507301392 Version information: BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00 AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:26 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19 LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36 ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24/12/2008 22:33:56 ANTIVIR2.VDF : 7.1.1.88 726528 Bytes 8/01/2009 22:33:59 ANTIVIR3.VDF : 7.1.1.97 111104 Bytes 11/01/2009 22:34:00 Engineversion : 8.2.0.54 AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56 AESCRIPT.DLL : 8.1.1.24 340348 Bytes 11/01/2009 22:34:07 AESCN.DLL : 8.1.1.5 123251 Bytes 7/11/2008 15:06:41 AERDL.DLL : 8.1.1.3 438645 Bytes 4/11/2008 13:58:38 AEPACK.DLL : 8.1.3.5 393588 Bytes 11/01/2009 22:34:06 AEOFFICE.DLL : 8.1.0.33 196987 Bytes 11/01/2009 22:34:05 AEHEUR.DLL : 8.1.0.78 1532280 Bytes 11/01/2009 22:34:05 AEHELP.DLL : 8.1.2.0 119159 Bytes 11/01/2009 22:34:02 AEGEN.DLL : 8.1.1.8 323956 Bytes 11/01/2009 22:34:01 AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56 AECORE.DLL : 8.1.5.2 172405 Bytes 11/01/2009 22:34:00 AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56 AVWINLL.DLL : 1.0.0.12 15105 Bytes 9/07/2008 08:40:05 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01 AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15 AVREG.DLL : 8.0.0.1 33537 Bytes 9/05/2008 11:26:40 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, F:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: lundi 12 janvier 2009 08:59 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 11 processes with 11 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Master boot sector HD1 [INFO] No virus was found! Master boot sector HD2 [INFO] No virus was found! [WARNING] System error [21]: Le périphérique n'est pas prêt. Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'F:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '58' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! Begin scan in 'F:\' End of the scan: lundi 12 janvier 2009 09:41 Used time: 41:17 Minute(s) The scan has been done completely. 6967 Scanning directories 421120 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 421119 Files not concerned 2603 Archives were scanned 2 Warnings 0 Notes Avira AntiVir Personal Report file date: lundi 12 janvier 2009 09:54 Scanning for 1180145 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 3) [5.1.2600] Boot mode: Normally booted Username: SYSTEM Computer name: XPSP2-507301392 Version information: BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00 AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:26 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19 LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36 ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24/12/2008 22:33:56 ANTIVIR2.VDF : 7.1.1.88 726528 Bytes 8/01/2009 22:33:59 ANTIVIR3.VDF : 7.1.1.97 111104 Bytes 11/01/2009 22:34:00 Engineversion : 8.2.0.54 AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56 AESCRIPT.DLL : 8.1.1.24 340348 Bytes 11/01/2009 22:34:07 AESCN.DLL : 8.1.1.5 123251 Bytes 7/11/2008 15:06:41 AERDL.DLL : 8.1.1.3 438645 Bytes 4/11/2008 13:58:38 AEPACK.DLL : 8.1.3.5 393588 Bytes 11/01/2009 22:34:06 AEOFFICE.DLL : 8.1.0.33 196987 Bytes 11/01/2009 22:34:05 AEHEUR.DLL : 8.1.0.78 1532280 Bytes 11/01/2009 22:34:05 AEHELP.DLL : 8.1.2.0 119159 Bytes 11/01/2009 22:34:02 AEGEN.DLL : 8.1.1.8 323956 Bytes 11/01/2009 22:34:01 AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56 AECORE.DLL : 8.1.5.2 172405 Bytes 11/01/2009 22:34:00 AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56 AVWINLL.DLL : 1.0.0.12 15105 Bytes 9/07/2008 08:40:05 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01 AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15 AVREG.DLL : 8.0.0.1 33537 Bytes 9/05/2008 11:26:40 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, F:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: lundi 12 janvier 2009 09:54 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'searchfilterhost.exe' - '1' Module(s) have been scanned Scan process 'searchprotocolhost.exe' - '1' Module(s) have been scanned Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned Scan process 'WindowsSearch.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'PcBoost.exe' - '1' Module(s) have been scanned Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned Scan process 'hkcmd.exe' - '1' Module(s) have been scanned Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'searchindexer.exe' - '1' Module(s) have been scanned Scan process 'TUProgSt.exe' - '1' Module(s) have been scanned Scan process 'TosBtSrv.exe' - '1' Module(s) have been scanned Scan process 'HPZipm12.exe' - '1' Module(s) have been scanned Scan process 'MDM.EXE' - '1' Module(s) have been scanned Scan process 'lxdvcoms.exe' - '1' Module(s) have been scanned Scan process 'lxdvserv.exe' - '1' Module(s) have been scanned Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 38 processes with 38 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Master boot sector HD1 [INFO] No virus was found! Master boot sector HD2 [INFO] No virus was found! [WARNING] System error [21]: Le périphérique n'est pas prêt. Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'F:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '56' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! Begin scan in 'F:\' End of the scan: lundi 12 janvier 2009 10:18 Used time: 23:52 Minute(s) The scan has been done completely. 7318 Scanning directories 442264 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 442263 Files not concerned 2691 Archives were scanned 2 Warnings 0 Notes

titicrominet · Answer

RE j ai fait une analyse avec malwarebytes voici rapport sorry pas réponse après parce que je vais travaillé puffff
 Malwarebytes' Anti-Malware 1.32
Version de la base de données: 1643
Windows 5.1.2600 Service Pack 3

12/01/2009 13:15:27
mbam-log-2009-01-12 (13-15-24).txt

Type de recherche: Examen complet (C:\|F:\|G:\|)
Eléments examinés: 131026
Temps écoulé: 28 minute(s), 52 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> No action taken.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

evasion60/PCA · Answer

Bonsoir 

... C'est pas mal !
Comment se comporte ta machine ? 

A te lire 

** Faites ce que l'on vous dit : pas plus, pas moins **
** Allez jusqu'au bout de la désinfection, même si vous notez une amélioration rapide **

titicrominet · Answer

Re ok ca va et quoi maintenant plus de virus plus problème détecté pour toi.
Et pour antivir c'est mieux d'acheté la version à 20€ c'elle ci que tu ma conseillé est suffisante et pour les malwaresbytes c'est protection complet celle qui payer c'est mieux pour toi
Merci à toi pour tes infos et d'avoir pris de ton temps pour résoudre mon ptit pépin.

Marc

evasion60/PCA · Answer

Re Marc

... Une dernière pour la route, mais très importante !!!
* Ferme toutes les applications en cours, puis télécharge ToolsCleaner (de A.Rothstein et Dj Quiou) sur ton Bureau :

Double clique sur ToolsCleaner2.exe -> clique sur -> Recherche et laisse le scan se terminer. 
Clique sur -> Suppression pour finaliser 
Clique sur -> Quitter, pour que le rapport puisse se créer. 
Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 
Note : ton bureau va disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

Ctrl+Alt+Supp pour ouvrir le Gestionnaire des tâches. 
Puis rends toi à l'onglet "Processus", clique en haut à gauche sur "Fichiers" et choisis "Exécuter" 
Tape : explorer.exe et valide. Cela fera ré-apparaître ton Bureau. 
.
** Tu peux par contre, garder Malwarebytes'Anti-malware et CCleaner. Utilise CCleaner tous les soirs avant de couper le PC (ne prends que quelques secondes!)

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.



J'aimerais que tu fasses une petite chose pour moi; modifie le titre de ton sujet. Comme on connait l'infection, 
je te propose de le modifier afin de faciliter la lecture et la recherche, pour tous les autres astuciens/nes. 

Replace-toi sur ton premier message du sujet, clique sur ce bouton ->  et modifie ton titre de cette manière : 
GameBar/Crawler  et clique sur "Publier le message". Merci!


.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.



 Il est fortement recommandé d'avoir tous ses logiciels de sécurité à jour, afin d'éviter les failles par lesquelles s'engouffrent les infections.

Pour suivre l'évolution des mises à jour de quelques logiciels de protection, ainsi que de Java : https://forum.pcastuces.com/sujet.asp?f=25&s=25842 

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.



/!\ Maintenant que ton PC n'est plus infecté, désactive la "Restauration du système" afin de créer un point de restauration sain.

Pour désactiver ou activer la Restauration du système, tu dois ouvrir une session Administrateur sous Windows XP.

Désactivation :
Clique droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > coche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok.

Ré-activation :
Suivre le même chemin ; décoche la case "Désactiver la Restauration du système sur tous les lecteurs" 
> Appliquer et Ok. Redémarre l'ordinateur.

Comment faire pour : https://forum.pcastuces.com/desactiver_la_restauration_systeme-f31s7.htm


.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.


Je te conseille de défragmenter ton PC : http://www.coupdepoucepc.com/modules/news/article.php?storyid=218



.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.



/!\ Pour améliorer la sécurité de ton PC, prends quelques instants pour lire...

Sécuriser son PC +WIFI (versions "hot" & "light") : https://forum.pcastuces.com/default.asp

Prévention et protection - Comment vous prémunir : https://forum.pcastuces.com/sujet.asp?f=25&s=36131

Les risques sécuritaires du peer-to-peer en 10 points : http://www.libellules.ch/... 


Pourquoi éviter le P2P ? Point législatif et dangers : http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=1793 


LE CRACK dans toute sa splendeur : http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=65 



.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

... Pour Antivir, tu peux garder la version " Free ", pas de problème
... Pour MalwareBytes', il faut suivre ses mises à jour ( lien plus haut ), et scanner une fois par semaine ta machine 

Tu peux marquer ton sujet comme résolu, si tu le souhaites
Bonne continuation, et merci de nous avoir fait confiance

titicrominet · Answer

Re ptit question es que antivir security suite pour 39,95€ à tous meme un firewall et anti spam ou je garde antir prémium et malwaresbytes et je prend la protection merci
marc

titicrominet · Answer

Re merci pour tous ptite question avec ccleaner j'ai une analyse et je fais quoi te poste le rapport ainsi celui de tcleaner
ANALYSE COMPLETE - (32.031 secs)
------------------------------------------------------------------------------------------
1.783,7MB ont été supprimés. (Taille approximative)
------------------------------------------------------------------------------------------

Détails des fichiers à supprimer (Note: AUCUN fichier n'a pour l'instant été supprimé)
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 3742) 238,7MB
C:\Documents and Settings\Admin\Cookies\admin@3suisses[1].txt 732 bytes
C:\Documents and Settings\Admin\Cookies\admin@3suisses[3].txt 239 bytes
C:\Documents and Settings\Admin\Cookies\admin@7sur7[2].txt 390 bytes
C:\Documents and Settings\Admin\Cookies\admin@actu24[2].txt 462 bytes
C:\Documents and Settings\Admin\Cookies\admin@ad2.doublepimp[1].txt 112 bytes
C:\Documents and Settings\Admin\Cookies\admin@adhese[1].txt 102 bytes
C:\Documents and Settings\Admin\Cookies\admin@adtech[1].txt 206 bytes
C:\Documents and Settings\Admin\Cookies\admin@ask[2].txt 488 bytes
C:\Documents and Settings\Admin\Cookies\admin@atraxio[1].txt 127 bytes
C:\Documents and Settings\Admin\Cookies\admin@avast[2].txt 497 bytes
C:\Documents and Settings\Admin\Cookies\admin@avira.nexway[2].txt 714 bytes
C:\Documents and Settings\Admin\Cookies\admin@befr.ebayrtm[2].txt 1,10KB
C:\Documents and Settings\Admin\Cookies\admin@belgacom[2].txt 145 bytes
C:\Documents and Settings\Admin\Cookies\admin@benl.ebayrtm[2].txt 553 bytes
C:\Documents and Settings\Admin\Cookies\admin@bestofmicro[2].txt 177 bytes
C:\Documents and Settings\Admin\Cookies\admin@bimonline.insites[1].txt 93 bytes
C:\Documents and Settings\Admin\Cookies\admin@bitdefender[1].txt 248 bytes
C:\Documents and Settings\Admin\Cookies\admin@bitdefender[3].txt 133 bytes
C:\Documents and Settings\Admin\Cookies\admin@brandreachsys[2].txt 110 bytes
C:\Documents and Settings\Admin\Cookies\admin@bubblefoot[2].txt 449 bytes
C:\Documents and Settings\Admin\Cookies\admin@ccleaner[1].txt 339 bytes
C:\Documents and Settings\Admin\Cookies\admin@clearspring[1].txt 90 bytes
C:\Documents and Settings\Admin\Cookies\admin@click-fr[2].txt 169 bytes
C:\Documents and Settings\Admin\Cookies\admin@clubic[1].txt 527 bytes
C:\Documents and Settings\Admin\Cookies\admin@commentcamarche[2].txt 621 bytes
C:\Documents and Settings\Admin\Cookies\admin@cybermonitor[1].txt 94 bytes
C:\Documents and Settings\Admin\Cookies\admin@dailymotion[1].txt 86 bytes
C:\Documents and Settings\Admin\Cookies\admin@ebayobjects[2].txt 122 bytes
C:\Documents and Settings\Admin\Cookies\admin@ebayrtm[2].txt 164 bytes
C:\Documents and Settings\Admin\Cookies\admin@ebayrtm[3].txt 148 bytes
C:\Documents and Settings\Admin\Cookies\admin@ebay[1].txt 1,83KB
C:\Documents and Settings\Admin\Cookies\admin@ebay[3].txt 220 bytes
C:\Documents and Settings\Admin\Cookies\admin@edt02[2].txt 483 bytes
C:\Documents and Settings\Admin\Cookies\admin@estore.pinnaclesys[2].txt 131 bytes
C:\Documents and Settings\Admin\Cookies\admin@ext.infos-du-net[2].txt 107 bytes
C:\Documents and Settings\Admin\Cookies\admin@fl01.ct2.comclick[1].txt 337 bytes
C:\Documents and Settings\Admin\Cookies\admin@footgoal[1].txt 87 bytes
C:\Documents and Settings\Admin\Cookies\admin@fr.meetic[1].txt 417 bytes
C:\Documents and Settings\Admin\Cookies\admin@free-av[2].txt 331 bytes
C:\Documents and Settings\Admin\Cookies\admin@google[1].txt 329 bytes
C:\Documents and Settings\Admin\Cookies\admin@google[2].txt 132 bytes
C:\Documents and Settings\Admin\Cookies\admin@google[3].txt 136 bytes
C:\Documents and Settings\Admin\Cookies\admin@gratuit-videos-porno[1].txt 292 bytes
C:\Documents and Settings\Admin\Cookies\admin@himedia.individuad[2].txt 245 bytes
C:\Documents and Settings\Admin\Cookies\admin@host1.adhese[1].txt 84 bytes
C:\Documents and Settings\Admin\Cookies\admin@infos-du-net[2].txt 178 bytes
C:\Documents and Settings\Admin\Cookies\admin@intellitxt[1].txt 114 bytes
C:\Documents and Settings\Admin\Cookies\admin@lists.avira[1].txt 73 bytes
C:\Documents and Settings\Admin\Cookies\admin@meetic[1].txt 104 bytes
C:\Documents and Settings\Admin\Cookies\admin@metriweb[1].txt 98 bytes
C:\Documents and Settings\Admin\Cookies\admin@msn[2].txt 195 bytes
C:\Documents and Settings\Admin\Cookies\admin@notifier.avira[1].txt 358 bytes
C:\Documents and Settings\Admin\Cookies\admin@paypal.112.2o7[1].txt 117 bytes
C:\Documents and Settings\Admin\Cookies\admin@pcastuces[1].txt 97 bytes
C:\Documents and Settings\Admin\Cookies\admin@pinnaclesystems.122.2o7[1].txt 126 bytes
C:\Documents and Settings\Admin\Cookies\admin@pinnaclesys[2].txt 135 bytes
C:\Documents and Settings\Admin\Cookies\admin@pornhub[2].txt 345 bytes
C:\Documents and Settings\Admin\Cookies\admin@ptg[1].txt 71 bytes
C:\Documents and Settings\Admin\Cookies\admin@quantserve[2].txt 203 bytes
C:\Documents and Settings\Admin\Cookies\admin@s3s[2].txt 176 bytes
C:\Documents and Settings\Admin\Cookies\admin@sdc.hln[1].txt 229 bytes
C:\Documents and Settings\Admin\Cookies\admin@sdv[1].txt 164 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[1].txt 436 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[3].txt 176 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[4].txt 176 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[5].txt 183 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[6].txt 179 bytes
C:\Documents and Settings\Admin\Cookies\admin@secure.dolist[2].txt 271 bytes
C:\Documents and Settings\Admin\Cookies\admin@smartadserver[1].txt 403 bytes
C:\Documents and Settings\Admin\Cookies\admin@specificclick[1].txt 878 bytes
C:\Documents and Settings\Admin\Cookies\admin@standardliege[2].txt 304 bytes
C:\Documents and Settings\Admin\Cookies\admin@standard[1].txt 291 bytes
C:\Documents and Settings\Admin\Cookies\admin@store.digitalriver[1].txt 137 bytes
C:\Documents and Settings\Admin\Cookies\admin@tomsguide[2].txt 172 bytes
C:\Documents and Settings\Admin\Cookies\admin@tracking.publicidees[2].txt 292 bytes
C:\Documents and Settings\Admin\Cookies\admin@weborama[1].txt 271 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.3suisses[1].txt 152 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.3suisses[3].txt 80 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.7sur7[2].txt 159 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.actu24[1].txt 96 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.actu24[2].txt 236 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.actu24[3].txt 128 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.actu24[4].txt 91 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.avira[1].txt 73 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.bestofmicro[2].txt 173 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.bibit[1].txt 71 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.dessouscheri[2].txt 92 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.diaporamas-a-la-con[2].txt 304 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.euromillions[1].txt 76 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.googleadservices[1].txt 500 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.lotto[1].txt 178 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.ludokado[2].txt 77 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.pcastuces[1].txt 77 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.pixmania[1].txt 1,30KB
C:\Documents and Settings\Admin\Cookies\admin@www.pixmania[3].txt 1,65KB
C:\Documents and Settings\Admin\Cookies\admin@www.pornhub[2].txt 85 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.pornhub[3].txt 79 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.spywareterminator[1].txt 80 bytes
C:\Documents and Settings\Admin\Cookies\admin@xiti[1].txt 107 bytes
C:\Documents and Settings\Admin\Cookies\admin@yahoo[2].txt 173 bytes
Marqué pour l'effacement: C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Admin\Cookies\index.dat
Poubelle vidée (1270 fichiers) 1.529,8MB
C:\WINDOWS\TEMP\Cookies\admin@pctools[1].txt 627 bytes
C:\WINDOWS\TEMP\Cookies\admin@secure.pctools[2].txt 384 bytes
C:\WINDOWS\TEMP\Cookies\admin@yahoo[2].txt 172 bytes
C:\WINDOWS\TEMP\Cookies\index.dat 32,00KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\115_20030210120549[1].gif 1,47KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\4000001102_20080403211424[1].css 6,61KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\anti-virus_16x16[1].png 1,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\bg_cont_r_3[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\bg_head[1].gif 538 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\bg_menu1[1].gif 152 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\blue_blc[1].gif 203 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\box_tr[1].gif 652 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c2[1].gif 342 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c2[2].gif 342 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c2_1[1].gif 342 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c2_bg[1].gif 63 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c4_1[1].gif 181 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c4_1[2].gif 181 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\cont_r_1[1].gif 94 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\cont_r_4[1].gif 94 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\default[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\default[1].htm 28,19KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\filters[1].bin 74,50KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\guarantee-small[1].gif 5,29KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\httpErrorPagesScripts[1] 7,40KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\ie7[1].css 196 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\indicator[1].gif 1,75KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\infinity[1].png 581 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\info_48[1] 6,83KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\logo_amex[1].gif 1,32KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\m1[1].gif 45 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\m2[1].gif 599 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\mbox[1].js 23,57KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\mt1[1].gif 90 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\mt2[1].gif 90 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44
avcancl[1] 2,66KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\openWindow[1].js 2,41KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\pctools[1].js 11,23KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\POLi[1].js 4,61KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44enew_fr[1].gif 2,59KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\s4[1].gif 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\s4[2].gif 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\standard[1] 177 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\uniqueid[1].php 113 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\url[1].htm 23,53KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\weather[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\arrow3[1].gif 84 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\authenticate[1].js 3,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\bg_cont_r_4[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\bg_head[1].gif 538 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\blank[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\blue_brc[1].gif 202 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\blue_trcm[1].gif 995 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\bottom_menu_c1[1].gif 107 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\box_tl[1].gif 653 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c1_bg[1].gif 811 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c3[1].gif 2,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c3[2].gif 2,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c4_bg[1].gif 52 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c4_bg[2].gif 52 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\check.xml 6,75KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\check[1].cab 3,04KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\errorPageStrings[1] 955 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\ga[1].js 22,23KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\gcc_delta[1].gif 1,66KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\Generic[1].htm 17,32KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\Generic[1].xml 4,38KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\logo[1].png 3,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\map[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\mid_dot[1].gif 613 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\off_dot[1].gif 1,02KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\pctools[1].css 32,71KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\pctools[1].js 11,23KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\pcw_best_buy[1].gif 4,13KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\phone[1].htm 23,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\Popup[1].js 1,44KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0egistry-mechanic_16x16[1].png 1.015 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\s1[1].gif 1,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\s2[1].gif 9,83KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\s2[2].gif 9,83KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\secure[1].gif 144 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\secure[2].gif 144 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\softonic_sd[1].png 8,74KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\spyware-doctor_16x16[1].png 1,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\spyware-doctor_16x16[2].png 1,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\standard[1] 177 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\stocks[1].htm 25,43KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0	x[1].js 6,30KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\116_20080218101409[1].gif 1,48KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bg[1].gif 1,10KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bg_cont_4_1[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bg_menu[1].gif 152 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bg_menu[2].gif 152 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\blue_tm[1].gif 824 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\boxbg[1].gif 550 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bullet[1] 3,09KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\c1[1].gif 2,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\c1[2].gif 2,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\c3_bg[1].gif 811 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\c3_bg[2].gif 811 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\cart-header[1].gif 299 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\computer_shopper_06[1].gif 8,32KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\cont_r_2[1].gif 94 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\cont_r_3[1].gif 94 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\desktop-maestro_16x16[1].png 1.016 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\email[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\ErrorPageTemplate[1] 2,12KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\favicon[1].ico 1,37KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\firewall_16x16[1].png 1.017 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\FormValidation[1].js 26,66KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\ga[1].js 22,23KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\global-collect[1].js 12,06KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\internet-security_16x16[1].png 1,02KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\logo[1].png 3,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\logo_mc[1].gif 1,65KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\maps[1].htm 24,98KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\Modules[1].js 16,40KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\on_dot[1].gif 1,02KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\parameters[1].bin 53,71KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\pctools[1].css 32,71KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\pcw95[1].png 3,49KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\pcw_best_buy[1].gif 4,13KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\phone[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\s1[1].gif 1,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\s3[1].gif 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\s3[2].gif 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\start.xml 299 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\start[1].cab 7,00KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\stocks[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR	itle_doctor_fr[1].gif 15,24KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\uniqueid[1].php 111 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\index.dat 96,00KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\authenticate[1].js 3,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\background_gradient[1] 453 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\bg[1].gif 1,10KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\bg_cont_r_2[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\bg_mt[1].gif 49 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\blue_tlcm[1].gif 995 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\border_1pxdotted[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\bottom_menu_c2[1].gif 107 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\box_t[1].gif 161 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\Browser[1].js 4,83KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\btn_blue2[1].gif 1,04KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c1_bg[1].gif 811 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c2_1[1].gif 342 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c2_bg[1].gif 63 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c4[1].gif 181 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c4[2].gif 181 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\cart-header-active[1].gif 1,29KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\editorspick[1].gif 7,19KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\email[1].htm 23,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\gcc_electron[1].gif 1,19KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\global[1].css 3,03KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\help2[1].png 990 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\ie7[1].css 196 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\logo_visa[1].gif 1,22KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\m1[1].gif 45 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\m3[1].gif 570 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\mbox[1].js 23,57KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\menu[1].css 3,86KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\menu[2].css 3,86KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\pc-mag_feb_08[1].png 1,51KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\pcmag[1].png 10,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\p[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\p[2].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\SmaMenStrings[1].xml 4,52KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\softonic_sd[1].png 8,74KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\spyware-doctor-antivirus_16x16[1].png 1,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\String[1].js 1,69KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\subbg[1].gif 902 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF	xp1[1].js 3,76KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\url[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\weather[1].htm 24,39KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\whats_this[1].png 729 bytes
C:\WINDOWS\TEMP\History\History.IE5\desktop.ini 145 bytes
C:\WINDOWS\TEMP\History\History.IE5\index.dat 32,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_730.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_738.dat 16,00KB
C:\WINDOWS\TEMP\WGAErrLog.txt 483 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\Arabic.bin 20,48KB
C:\Documents and Settings\Admin\Local Settings\Temp\Czech.bin 23,74KB
C:\Documents and Settings\Admin\Local Settings\Temp\Danish.bin 22,24KB
C:\Documents and Settings\Admin\Local Settings\Temp\Dutch.bin 25,14KB
C:\Documents and Settings\Admin\Local Settings\Temp\English.bin 21,40KB
C:\Documents and Settings\Admin\Local Settings\Temp\Excel8.0\MSForms.exd 0,22MB
C:\Documents and Settings\Admin\Local Settings\Temp\Finnish.bin 22,32KB
C:\Documents and Settings\Admin\Local Settings\Temp\French.bin 26,60KB
C:\Documents and Settings\Admin\Local Settings\Temp\German.bin 25,14KB
C:\Documents and Settings\Admin\Local Settings\Temp\Greek.bin 24,49KB
C:\Documents and Settings\Admin\Local Settings\Temp\Hebrew.bin 19,09KB
C:\Documents and Settings\Admin\Local Settings\Temp\Hungarian.bin 25,46KB
C:\Documents and Settings\Admin\Local Settings\Temp\Italian.bin 26,77KB
C:\Documents and Settings\Admin\Local Settings\Temp\Japanese.bin 23,73KB
C:\Documents and Settings\Admin\Local Settings\Temp\jkos-Admin\binaries\FSSync.dll 37,50KB
C:\Documents and Settings\Admin\Local Settings\Temp\Korean.bin 19,66KB
C:\Documents and Settings\Admin\Local Settings\Temp\Norwegian.bin 21,44KB
C:\Documents and Settings\Admin\Local Settings\Temp\PMC\14028_633672254848125000_11.txt 1,22KB
C:\Documents and Settings\Admin\Local Settings\Temp\PMC\2960_633672254751250000_0.txt 251 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\PMC\2960_633672254845625000_1.txt 297 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\PMC\2960_633672254846875000_2.txt 250 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\Polish.bin 23,65KB
C:\Documents and Settings\Admin\Local Settings\Temp\Portuguese(Brazil).bin 24,48KB
C:\Documents and Settings\Admin\Local Settings\Temp\Portuguese.bin 25,64KB
C:\Documents and Settings\Admin\Local Settings\Temp\Russian.bin 25,51KB
C:\Documents and Settings\Admin\Local Settings\Temp\Set1.tmp 0,11MB
C:\Documents and Settings\Admin\Local Settings\Temp\Set14.tmp 0,11MB
C:\Documents and Settings\Admin\Local Settings\Temp\Set9.tmp 0,11MB
C:\Documents and Settings\Admin\Local Settings\Temp\SimChin.bin 16,02KB
C:\Documents and Settings\Admin\Local Settings\Temp\Spanish.bin 27,10KB
C:\Documents and Settings\Admin\Local Settings\Temp\SWEDISH.bin 23,52KB
C:\Documents and Settings\Admin\Local Settings\Temp\Thai.bin 21,46KB
C:\Documents and Settings\Admin\Local Settings\Temp\TradChin.bin 16,55KB
C:\Documents and Settings\Admin\Local Settings\Temp\Turkish.bin 21,72KB
C:\Documents and Settings\Admin\Local Settings\Temp\VBE\MSForms.exd 0,14MB
C:\Documents and Settings\Admin\Local Settings\Temp\VBE\RefEdit.exd 14,69KB
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn feed 0 3,63KB
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn update 358 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn upgrade status 109 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.windowslive.addbtn.btn upgrade status 109 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.windowslive.news.btn feed 0 1,76KB
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.windowslive.news.btn upgrade status 109 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd1.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd2.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd3.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd4.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd5.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd6.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd7.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd8.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\~DF1F5A.tmp 16,00KB
C:\Documents and Settings\Admin\Local Settings\Temp\~DF2885.tmp 16,00KB
C:\Documents and Settings\Admin\Local Settings\Temp\~DF5369.tmp 16,00KB
C:\Documents and Settings\Admin\Local Settings\Temp\~DFCE77.tmp 16,00KB
C:\WINDOWS\system32\wbem\Logs\FrameWork.log 19,51KB
C:\WINDOWS\system32\wbem\Logs\mofcomp.log 1,99KB
C:\WINDOWS\system32\wbem\Logs\wbemcore.log 14,12KB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 47,58KB
C:\WINDOWS\system32\wbem\Logs\wbemprox.log 460 bytes
C:\WINDOWS\system32\wbem\Logs\wmiadap.log 1,04KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 3,42KB
C:\WINDOWS\system32\wbem\Logs\wbemcore.lo_ 64,08KB
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\comsetup.log 10,22KB
C:\WINDOWS\FaxSetup.log 28,87KB
C:\WINDOWS\iis6.log 65,43KB
C:\WINDOWS\imsins.log 1,36KB
C:\WINDOWS\KB915800-v4.log 4,95KB
C:\WINDOWS\KB940157.log 24,56KB
C:\WINDOWS\KB943729.log 5,67KB
C:\WINDOWS\MedCtrOC.log 2,42KB
C:\WINDOWS\msgsocm.log 1,67KB
C:\WINDOWS\msmqinst.log 14,80KB
C:\WINDOWS
etfxocm.log 5,28KB
C:\WINDOWS
tdtcsetup.log 7,39KB
C:\WINDOWS\ocgen.log 22,49KB
C:\WINDOWS\ocmsn.log 1,82KB
C:\WINDOWS\setupact.log 0 bytes
C:\WINDOWS\setupapi.log 0,12MB
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS	abletoc.log 1,21KB
C:\WINDOWS	soc.log 16,21KB
C:\WINDOWS\updspapi.log 459 bytes
C:\WINDOWS\imsins.BAK 1,36KB
C:\WINDOWS
tbtlog.txt 0,15MB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 0,50MB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp 68,68KB
C:\WINDOWS\Debug\UserMode\userenv.log 8,36KB
C:\WINDOWS\SchedLgU.Txt 3,79KB
C:\WINDOWS\security\logs\scecomp.old 868 bytes
C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf 16,27KB
C:\WINDOWS\Prefetch\ASHDISP.EXE-0B874892.pf 25,21KB
C:\WINDOWS\Prefetch\ASHMAISV.EXE-12E27032.pf 72,70KB
C:\WINDOWS\Prefetch\ASHSERV.EXE-3B661600.pf 1,28KB
C:\WINDOWS\Prefetch\ASHWEBSV.EXE-0548EF0A.pf 21,13KB
C:\WINDOWS\Prefetch\AVAST.SETUP-032170A8.pf 58,51KB
C:\WINDOWS\Prefetch\CDSPEED.EXE-1B3E857C.pf 18,68KB
C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf 19,01KB
C:\WINDOWS\Prefetch\CTOOLBAR.EXE-30BB9B12.pf 23,22KB
C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf 18,35KB
C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf 15,64KB
C:\WINDOWS\Prefetch\DISKDOCTOR.EXE-1F701D19.pf 53,80KB
C:\WINDOWS\Prefetch\DRIVEDEFRAG.EXE-350E01A5.pf 54,36KB
C:\WINDOWS\Prefetch\DRVCTL.EXE-025D615A.pf 4,33KB
C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf 86,46KB
C:\WINDOWS\Prefetch\GOOGLEDESKTOP.EXE-3376B31F.pf 42,04KB
C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf 2,64KB
C:\WINDOWS\Prefetch\HELPCTR.EXE-3862B6F5.pf 61,65KB
C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf 57,02KB
C:\WINDOWS\Prefetch\HKCMD.EXE-1D05234B.pf 12,80KB
C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf 0,10MB
C:\WINDOWS\Prefetch\IGFXSRVC.EXE-2FB63FE8.pf 13,53KB
C:\WINDOWS\Prefetch\INTEGRATOR.EXE-0A7B7F59.pf 16,60KB
C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf 12,21KB
C:\WINDOWS\Prefetch\MEMOPTIMIZER.EXE-1E8AF6AD.pf 64,28KB
C:\WINDOWS\Prefetch\MMC.EXE-230DED8E.pf 36,30KB
C:\WINDOWS\Prefetch\MOBSYNC.EXE-173EDCEF.pf 19,83KB
C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf 13,21KB
C:\WINDOWS\Prefetch\MSIMN.EXE-38BA891D.pf 12,75KB
C:\WINDOWS\Prefetch\MSNTBUP.EXE-0D913FB9.pf 16,49KB
C:\WINDOWS\Prefetch\MSN_SL.EXE-18A18BC5.pf 25,34KB
C:\WINDOWS\Prefetch\NEROHOME.EXE-25AF858B.pf 33,76KB
C:\WINDOWS\Prefetch\NEROREMOTECTRLHANDLER.EXE-20002AA4.pf 20,77KB
C:\WINDOWS\Prefetch\NEROSTARTSMART.EXE-34F7076D.pf 61,28KB
C:\WINDOWS\Prefetch\NEROVISION.EXE-02880481.pf 44,36KB
C:\WINDOWS\Prefetch\NMINDEXSTORESVR.EXE-22A7DEEF.pf 33,81KB
C:\WINDOWS\Prefetch\NMTVWIZARD.EXE-371776A8.pf 44,48KB
C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf 16,73KB
C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf 1,13MB
C:\WINDOWS\Prefetch\ONECLICKSTARTER.EXE-31B195B2.pf 44,88KB
C:\WINDOWS\Prefetch\PCBOOST.EXE-3B119323.pf 18,99KB
C:\WINDOWS\Prefetch\PCTSGUI.EXE-281B8AB7.pf 41,27KB
C:\WINDOWS\Prefetch\PCTSSVC.EXE-3A239962.pf 37,37KB
C:\WINDOWS\Prefetch\PCTSTRAY.EXE-29391146.pf 41,64KB
C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf 15,64KB
C:\WINDOWS\Prefetch\REGISTRYDEFRAG.EXE-1F8BDCCD.pf 59,25KB
C:\WINDOWS\Prefetch\REGISTRYDEFRAGHELPER.EXE-21A4E51D.pf 43,85KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-147710F4.pf 28,08KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-311943EE.pf 20,43KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-3D97474F.pf 59,50KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-470F11BD.pf 18,63KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-47352368.pf 24,56KB
C:\WINDOWS\Prefetch\SDLOADER.EXE-21FADC9B.pf 15,00KB
C:\WINDOWS\Prefetch\SPEEDOPTIMIZER.EXE-1180577B.pf 68,14KB
C:\WINDOWS\Prefetch\SPYWARETERMINATOR.EXE-0C0A5116.pf 92,69KB
C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf 852 bytes
C:\WINDOWS\Prefetch\SYSOCMGR.EXE-31169C54.pf 50,08KB
C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf 18,14KB
C:\WINDOWS\Prefetch\TEATIMER.EXE-1F57E47A.pf 22,71KB
C:\WINDOWS\Prefetch\TUNEUPDEFRAGSERVICE.EXE-24FF2B48.pf 45,71KB
C:\WINDOWS\Prefetch\UPDATE.EXE-1A7E7F45.pf 43,13KB
C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf 17,43KB
C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf 17,49KB
C:\WINDOWS\Prefetch\WLLOGINPROXY.EXE-2D4B6027.pf 30,28KB
C:\WINDOWS\Prefetch\WMIADAP.EXE-2DF425B2.pf 23,21KB
C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf 66,44KB
C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf 10,40KB
C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf 47,48KB
C:\WINDOWS\Prefetch\ZCLIENTM.EXE-25C31104.pf 12,11KB
C:\WINDOWS\$NtUninstallKB915800-v4$\mimefilt.dll 29,00KB
C:\WINDOWS\$NtUninstallKB915800-v4$
lhtml.dll 96,00KB
C:\WINDOWS\$NtUninstallKB915800-v4$\offfilt.dll 0,18MB
C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe 0,22MB
C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.inf 7,72KB
C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.txt 551 bytes
C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\updspapi.dll 0,37MB
C:\WINDOWS\$NtUninstallKB940157$eg00005 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00006 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00007 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00015 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00017 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00019 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00022 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00027 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00028 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00029 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00030 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00031 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00032 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00033 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00042 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00048 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00049 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00052 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00053 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00054 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00059 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00069 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00085 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00086 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00087 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00088 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00089 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00091 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00104 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00105 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00106 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00107 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00108 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00109 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00121 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00132 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00139 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00140 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00141 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00142 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00143 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00147 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00148 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00153 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00178 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00221 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00231 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00235 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00236 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00237 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00238 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00422 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00423 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00424 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00427 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00442 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00443 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00545 8,00KB
C:\WINDOWS\$NtUninstallKB940157$eg00551 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe 0,21MB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.inf 79,89KB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.txt 3,84KB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\updspapi.dll 0,38MB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\wss_SpCustom.dll 0,25MB
C:\WINDOWS\$NtUninstallKB943729$\spuninst\spuninst.exe 0,21MB
C:\WINDOWS\$NtUninstallKB943729$\spuninst\spuninst.inf 12,26KB
C:\WINDOWS\$NtUninstallKB943729$\spuninst\spuninst.txt 434 bytes
C:\WINDOWS\$NtUninstallKB943729$\spuninst\updspapi.dll 0,38MB
C:\Documents and Settings\Admin\Application Data\Google\Local Search History\google%2Eweb.w 3,49KB
C:\Documents and Settings\Admin\Application Data\Sun\Java\Deployment\cache\6.0\45\18f20d2d-61a198e1 0,10MB
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\bin.clearspring.com\clearspring.sol 61 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\flvtools.spacash.com\ffc\flv_player_1227795738.swf\LiveFlvPlayerData.sol 57 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\fr.castyouporn.com\com.jeroenwijering.players.sol 66 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\fr.disneylandparis.be\_disney.sol 73 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\include.classistatic.com\include\c3js\classifiedsel1\FLASH\getMachId.swf\mach_data.sol 177 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pan.fotovista.com\pixmania\grafx\fr\fr\home_univers\player\player5.swf\LaMemoireDuVolume.sol 58 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pan2.fotovista.com\pixmania\grafx\multipays\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pan3.fotovista.com\pixmania\grafx\multipays\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pan9.fotovista.com\pixmania\grafx\multipays\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pixmania.com\pixsettings.sol 96 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pixmania.com\pixsettings_be.sol 99 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63capp.persgroep.be\epg.sol 90 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63capp.persgroep.be\poll\flash\swf\polling.swf\pollCookie561.sol 849 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\s.ytimg.com\soundData.sol 58 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\secureinclude.ebaystatic.com\ebayLSO.sol 160 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\secureinclude.ebaystatic.com\ebayT.sol 39 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\static.trialpay.com\swf\logo.swf\helpData.sol 119 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\wat.tv\images\v2.5\flash\player.swf\watPlayer.sol 60 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.dailymotion.com\flash\dmplayer\dmplayer-fr.swf\dmplayer.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.ikea.com\ms\flashooms_ideas\mpa\platform.swf\com.ikea.mpa.evolver_20083_evho01a.sol 90 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.ikea.com\ms\flashooms_ideas\mpa\platform.swf\com.ikea.mpa.twochoice_20081_itcs08a.sol 180 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.kewego.com\swf\p3\epix.swf\KewegoEPIX_userData.sol 277 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pinnaclesys.com\s_br.sol 35 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pixmania.com\dev\gui_web\shopping\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pixmania.com\dev\gui_web\shopping\flashAS\Mac_180_150.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\players\MX\v1\player_v1.4.swf\ph_options.sol 56 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\players\MX\v1\player_v1.5.1.swf\ph_options.sol 49 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\players\pornhub_2.swf\ph_options.sol 56 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\players\pornhub_embed_2.swf\ph_options.sol 49 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\xmoov_flv\player\index.php\xmoov.sol 36 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\xmoov_flv\player\index.php\xmoov_younoob.sol 73 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.redtube.com\_playerx\flash\client_playersedtube\xmoov-flv-player3.swf\xmoov.sol 78 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.redtube.com\_playerx\flash\client_playersedtube\xmoov-flv-player3.swf\xmoov_redtube_original.sol 78 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flvtools.spacash.com\settings.sol 90 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.castyouporn.com\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.disneylandparis.be\settings.sol 91 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#include.classistatic.com\settings.sol 94 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan.fotovista.com\settings.sol 87 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan2.fotovista.com\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan3.fotovista.com\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan9.fotovista.com\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pixmania.com\settings.sol 82 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#rcapp.persgroep.be\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol 81 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secureinclude.ebaystatic.com\settings.sol 98 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.trialpay.com\settings.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#wat.tv\settings.sol 76 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ikea.com\settings.sol 82 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.kewego.com\settings.sol 84 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pinnaclesys.com\settings.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pixmania.com\settings.sol 86 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pornhub.com\settings.sol 85 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.redtube.com\settings.sol 85 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 819 bytes
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.090102-0005.log 241 bytes
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.090102-0026.txt 2,00KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.log 14,25KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Statistics.ini 0 bytes
------------------------------------------------------------------------------------------
[ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\TB.txt: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\Admin\Bureau\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Admin\Mes documents\fichier analyse virus\TB.txt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\Admin\Bureau\ToolBarSD.exe: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\TB.txt: supprimé !
C:\Documents and Settings\Admin\Mes documents\fichier analyse virus\TB.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Toolbar SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

evasion60/PCA · Answer

Bonsoir 

... Avec CCleaner, pas de rapport " Analyse ", puis " lancer le nettoyage " et enfin confirmer !

Bonne réception

titicrominet · Answer

Bonjour, évasion me re voici merci à toi pour ton aide et d'avoir le temps pour m'expliqué comment je peut faire pour garder tous les détails pour résoudre mon problème comme ca si cela arive encore je pourrait refaire tous ce que tu ma dis faire si tu as adresse mail??je vais refaire une analyse hijac pour que tu puisse regardez si tous est ok vu quelque jour ce son passé merci encore à toi marc

titicrominet · Answer

RE me revoici pas problème de vous avoir fait confiance c'est génial de pouvoir conté sur quelqu'un pour m'aider parce que de nos jour c'est le top.J'ai fait une bouvelle analyse hijac comme dis dans msg précédent mais était plus sur mon bureau et meme plus dans mon pc c'est déinstallé voilà merci encore marc 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:26:45, on 17/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
C:\WINDOWS\system32\lxdvcoms.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\PcBoost\PcBoost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O4 - HKLM\..\Run: [PcBoost] "C:\Program Files\PcBoost\PcBoost.exe" /start
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.be/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} - http://www.extrafilm.be/ImageUploader4.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxdvCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
O23 - Service: lxdv_device -   - C:\WINDOWS\system32\lxdvcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

evasion60/PCA · Answer

Bonjour 

Relance HijackThis pour un " do a system  scan only "
Coche à gauche les lignes ci dessous :

 O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)  
 O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)  
 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe      
 O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')       
 O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')         
 O8 - Extra context menu item: Add to Windows &Live Favorites - <https://onedrive.live.com/?id=favorites     
 O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)  

Clique en bas sur " Fix checked " 

Fait ta mise à jour Java/Sun :
Java Sun/MicroSystem 
https://www.oracle.com/java/technologies/javase-downloads.html
1er lien...Java Runtime Environnement--->JRE:6u11--->Windows offline
03/12/08

Via " ajout/suppression d programmes ", désinstalle toutes les anciennes versions de Java/Sun, sauf celle d'aujourd'hui 

Voila, bonne continuation

titicrominet · Answer

Ok voilà merci cela étant fait merci à toi évasion es que tu pourrait me donné ton adresse mail pour m'aider si je trouve que mon pc ne va plus bien merci marc

titicrominet · Answer

Ok evasion pas problème merci quand meme à toi marc a bientot pour d'autre résolution

titicrominet · Answer

Re bonsoir Evasion Je viens de refaire un scan hyjack peux tu voir si j'ai encore quelque souci merci à toi pour ton aide marc 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:53:26, on 17/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
C:\WINDOWS\system32\lxdvcoms.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe
C:\Program Files\PcBoost\PcBoost.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [PcBoost] "C:\Program Files\PcBoost\PcBoost.exe" /start
O4 - HKLM\..\Run: [Pinnacle WebUpdater] "C:\Program Files\Pinnacle\Shared Files\Programs\WebUpdater\WebUpdater.exe" -s  -f=UpdateVersion.xml -url=http://cdn.pinnaclesys.com/SupportFiles
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PMCLoader] C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe -checktasks
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.5.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - http://www.eset.eu/OnlineScanner.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.be/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} - http://www.extrafilm.be/ImageUploader4.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Avira AntiVir Premium MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe
O23 - Service: Planificateur Avira AntiVir Premium (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe
O23 - Service: Avira AntiVir Premium Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe
O23 - Service: Avira AntiVir Premium WebGuard (antivirwebservice) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE
O23 - Service: Service d'assistance Avira AntiVir Premium MailGuard (AVEService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxdvCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
O23 - Service: lxdv_device -   - C:\WINDOWS\system32\lxdvcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

Info sur mon pc

30 réponses

Newsletters