Win32:spyware-gen(TRI)

Merci Ezekielo pour ton support,

spybot a localisé et corrigé une dizaine d'erreurs, à présent ils ont tous une coche verte. J'ai refait le scan et "aucun mouchard n'a été trouvé".
Je vais redémarrer l'ordet voir sa réaction.
Merci encore.

Re-Bonjour

un message m'indique que Spybot a décelé qu'un élément import du Registre a été modifié. J'avais le choix, j'ai autorisé la modif. Curieux de savoir si le problème à déjà été résolu.

Bonjour Goffrey,

tu dis que mon PC est très infecté, je veut bien, ... mais que c'est qui te fait penser ça?
merci pour le soutien

voici le rapport:
a+

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Default System BIOS
USER : Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090121-0] 4.8.1296 (Not Activated)
C:\ (Local Disk) - NTFS - Total:53 Go (Free:8 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
K:\ (USB)
L:\ (CD or DVD) - CDFS - Total:2 Go (Free:0 Go)
M:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 21.01.2009|18:03 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\AskBarDis
C:\Program Files\AskBarDis\bar
C:\Program Files\AskBarDis\PopSwatter
C:\Program Files\AskBarDis\unins000.dat
C:\Program Files\AskBarDis\unins000.exe
C:\Program Files\AskBarDis\bar\bin
C:\Program Files\AskBarDis\bar\Cache
C:\Program Files\AskBarDis\bar\History
C:\Program Files\AskBarDis\bar\Settings
C:\Program Files\AskBarDis\bar\bin\askBar.dll
C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
C:\Program Files\AskBarDis\bar\bin\psvince.dll
C:\Program Files\AskBarDis\bar\Cache\00CA4501.bin
C:\Program Files\AskBarDis\bar\Cache\00CA46F5.bin
C:\Program Files\AskBarDis\bar\Cache\00CA48D9.bin
C:\Program Files\AskBarDis\bar\Cache\00CA4AED.bin
C:\Program Files\AskBarDis\bar\Cache\00CA4C16.bin
C:\Program Files\AskBarDis\bar\Cache\files.ini
C:\Program Files\AskBarDis\bar\History\search
C:\Program Files\AskBarDis\bar\Settings\config.dat
C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
C:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
C:\Program Files\AskBarDis\PopSwatter\History
C:\Program Files\AskBarDis\PopSwatter\History\notallow
C:\Program Files\Dealio
C:\Program Files\Dealio\kb126
C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings
C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings\kb126
C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings\kb126\res
C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings\kb126\temp
C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings\kb126\temp\ws-14262.log
C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings\kb126\temp\ws-14263.log
C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings\kb126\temp\ws-14264.log
C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings\kb126\temp\ws-14265.log
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb126
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Search Settings\kb126\res
C:\Program Files\Search Settings\kb126\SearchSettings.dll
C:\Program Files\Search Settings\kb126\temp
C:\WINDOWS\iun6002.exe

-----------\\ Extensions

(Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Propri‚taire) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper
(Propri‚taire) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.ch/?gws_rd=ssl"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q="
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 21.01.2009|18:03 - Option : [1]

-----------\\ Fin du rapport a 18:03:57.56

Voici le rapport de lopSD:

(NB: le PC est resté allumé, sans démarrer à nouveau)

Merci et @+
lulu1844



--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Default System BIOS
USER : Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090121-0] 4.8.1296 (Not Activated)
C:\ (Local Disk) - NTFS - Total:53 Go (Free:8 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
K:\ (USB)
L:\ (CD or DVD) - CDFS - Total:2 Go (Free:0 Go)
M:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 22.01.2009| 8:53 )

--------------------\\ Listing des dossiers dans APPLIC~1

[19.01.2009|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[06.01.2008|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[15.11.2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[05.01.2008|12:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[09.01.2009|16:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[09.01.2009|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[03.01.2009|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[10.12.2008|08:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[21.08.2008|21:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Elaborate Bytes
[05.01.2008|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EnterNHelp
[05.11.2008|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[05.01.2008|19:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[05.01.2008|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Guitar
[14.11.2008|00:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hps
[18.01.2009|10:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[09.01.2008|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06.01.2008|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[17.01.2008|10:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nikon
[11.01.2009|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\proDAD
[20.01.2009|10:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SearchIn1Step
[05.01.2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[22.01.2009|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[12.01.2009|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[05.01.2008|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ultima_T15
[06.01.2008|08:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[05.01.2008|10:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[05.01.2008|10:23] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[05.01.2008|10:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[04.01.2009|19:32] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

[05.01.2008|10:20] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


[06.01.2008|13:45] C:\DOCUME~1\PROPRI~1\APPLIC~1\ACD Systems
[08.12.2008|14:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[10.01.2008|15:35] C:\DOCUME~1\PROPRI~1\APPLIC~1\Ahead
[10.01.2009|16:47] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
[11.01.2008|22:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\AV Stumpfl
[03.01.2009|22:59] C:\DOCUME~1\PROPRI~1\APPLIC~1\AVS4YOU
[09.01.2008|21:08] C:\DOCUME~1\PROPRI~1\APPLIC~1\Brother
[22.12.2008|22:11] C:\DOCUME~1\PROPRI~1\APPLIC~1\FFSO
[05.01.2008|20:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\FotoWire
[15.01.2008|07:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
[05.01.2008|10:35] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help
[05.01.2008|10:25] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[06.01.2008|11:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\InterTrust
[05.01.2008|12:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\InterVideo
[06.01.2008|18:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[18.01.2009|10:17] C:\DOCUME~1\PROPRI~1\APPLIC~1\Malwarebytes
[28.05.2008|14:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[24.06.2008|13:51] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla
[06.01.2008|19:08] C:\DOCUME~1\PROPRI~1\APPLIC~1\muvee Technologies
[15.01.2008|08:08] C:\DOCUME~1\PROPRI~1\APPLIC~1\NASA
[05.01.2008|20:22] C:\DOCUME~1\PROPRI~1\APPLIC~1\Nikon
[22.12.2008|22:11] C:\DOCUME~1\PROPRI~1\APPLIC~1\NOS
[11.01.2009|12:31] C:\DOCUME~1\PROPRI~1\APPLIC~1\proDAD
[28.02.2008|12:57] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real
[03.03.2008|12:23] C:\DOCUME~1\PROPRI~1\APPLIC~1\Roxio
[22.01.2009|08:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
[22.01.2009|08:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\skypePM
[05.01.2008|10:23] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[12.01.2009|15:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\Ulead Systems
[28.06.2008|19:37] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
[14.01.2008|16:57] C:\DOCUME~1\PROPRI~1\APPLIC~1\WinRAR
[12.01.2009|19:34] C:\DOCUME~1\PROPRI~1\APPLIC~1\XnView

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[09.01.2009 16:11][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[22.01.2009 07:49][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05.08.2004 13:00][---------] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[10.12.2008|08:48] C:\Program Files\ABBYY FineReader 6.0
[06.01.2008|13:44] C:\Program Files\ACD Systems
[15.11.2008|11:20] C:\Program Files\Adobe
[05.01.2008|12:22] C:\Program Files\Ahead
[05.01.2008|10:56] C:\Program Files\Alwil Software
[09.01.2009|16:11] C:\Program Files\Apple Software Update
[09.11.2008|09:53] C:\Program Files\AskSearch
[05.01.2008|11:42] C:\Program Files\ATI Technologies
[31.03.2008|08:24] C:\Program Files\Audacity
[11.01.2008|22:50] C:\Program Files\AV Stumpfl
[04.01.2009|18:04] C:\Program Files\AVS4YOU
[09.01.2009|16:14] C:\Program Files\Bonjour
[05.01.2008|14:38] C:\Program Files\Brother
[05.01.2008|14:41] C:\Program Files\Brownie
[18.01.2009|09:41] C:\Program Files\CCleaner
[05.01.2008|10:18] C:\Program Files\ComPlus Applications
[04.01.2009|18:01] C:\Program Files\Conduit
[05.01.2009|14:51] C:\Program Files\DVDVideoSoft
[21.08.2008|21:56] C:\Program Files\Elaborate Bytes
[10.12.2008|08:48] C:\Program Files\FaxTools
[13.01.2009|13:20] C:\Program Files\Fichiers communs
[04.01.2009|18:01] C:\Program Files\forumswatcher.com
[04.01.2009|17:56] C:\Program Files\Free Audio Pack
[17.11.2008|20:24] C:\Program Files\Getty Images
[29.08.2008|15:15] C:\Program Files\Google
[07.02.2008|15:24] C:\Program Files\I.T.WORKS
[12.01.2009|15:24] C:\Program Files\InstallShield Installation Information
[05.01.2008|10:21] C:\Program Files\Internet Explorer
[05.01.2008|12:42] C:\Program Files\InterVideo
[19.01.2009|17:02] C:\Program Files\iPod
[19.01.2009|17:03] C:\Program Files\iTunes
[18.12.2008|09:31] C:\Program Files\Java
[05.01.2008|10:42] C:\Program Files\LightSurf
[05.01.2008|20:28] C:\Program Files\Logitech
[21.03.2008|15:49] C:\Program Files\Longgame
[15.11.2008|11:04] C:\Program Files\MagicDisc
[15.11.2008|11:03] C:\Program Files\MagicISO
[18.01.2009|10:22] C:\Program Files\Malwarebytes' Anti-Malware
[11.01.2009|14:43] C:\Program Files\MapCreator 2
[05.01.2008|10:17] C:\Program Files\Messenger
[05.01.2008|10:23] C:\Program Files\microsoft frontpage
[05.01.2008|14:47] C:\Program Files\Microsoft Office
[06.11.2008|08:14] C:\Program Files\Microsoft Silverlight
[14.11.2008|00:18] C:\Program Files\Migros
[04.01.2009|11:35] C:\Program Files\Morgan
[05.01.2008|10:18] C:\Program Files\Movie Maker
[22.01.2009|08:50] C:\Program Files\Mozilla Firefox
[25.10.2008|09:01] C:\Program Files\MP3 Player Utilities 4.15
[05.01.2008|10:17] C:\Program Files\MSN
[05.01.2008|10:17] C:\Program Files\MSN Gaming Zone
[05.01.2008|20:20] C:\Program Files\MSXML 4.0
[15.01.2008|08:06] C:\Program Files\NASA
[05.01.2008|10:18] C:\Program Files\NetMeeting
[05.01.2008|20:19] C:\Program Files\Nikon
[05.01.2008|10:17] C:\Program Files\Online Services
[05.01.2008|10:18] C:\Program Files\Outlook Express
[29.08.2008|15:58] C:\Program Files\PDFCreator
[29.08.2008|15:58] C:\Program Files\PDFCreator Toolbar
[05.01.2008|13:05] C:\Program Files\PowerQuest
[11.01.2009|12:12] C:\Program Files\proDAD
[09.01.2009|16:13] C:\Program Files\QuickTime
[28.02.2008|12:52] C:\Program Files\Real
[09.01.2008|23:20] C:\Program Files\SafeNet Sentinel
[14.01.2009|11:10] C:\Program Files\SearchIn1Step
[05.01.2008|10:18] C:\Program Files\Services en ligne
[12.11.2008|08:12] C:\Program Files\Skype
[21.01.2009|08:40] C:\Program Files\Spybot - Search & Destroy
[06.08.2008|15:39] C:\Program Files\Sun
[17.01.2009|09:45] C:\Program Files\Trend Micro
[05.01.2008|10:25] C:\Program Files\Uninstall Information
[15.08.2008|08:56] C:\Program Files\VaudTax2007
[28.06.2008|19:29] C:\Program Files\VideoLAN
[06.01.2008|09:00] C:\Program Files\Windows Media Connect 2
[06.01.2008|09:00] C:\Program Files\Windows Media Player
[05.01.2008|10:17] C:\Program Files\Windows NT
[05.01.2008|10:18] C:\Program Files\WindowsUpdate
[23.05.2008|08:58] C:\Program Files\WinRAR
[05.01.2008|10:23] C:\Program Files\xerox
[28.01.2008|08:42] C:\Program Files\XnView
[10.12.2008|09:28] C:\Program Files\Zattoo
[14.08.2008|13:35] C:\Program Files\Zero G Registry

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[06.01.2008|13:44] C:\Program Files\Fichiers communs\ACD Systems
[16.11.2008|17:40] C:\Program Files\Fichiers communs\Adobe
[05.01.2008|12:19] C:\Program Files\Fichiers communs\Ahead
[19.01.2009|17:02] C:\Program Files\Fichiers communs\Apple
[05.01.2008|11:45] C:\Program Files\Fichiers communs\ATI Technologies
[04.01.2009|18:04] C:\Program Files\Fichiers communs\AVSMedia
[07.02.2008|15:24] C:\Program Files\Fichiers communs\Borland Shared
[06.01.2008|23:08] C:\Program Files\Fichiers communs\Control Panels
[05.01.2008|14:47] C:\Program Files\Fichiers communs\Designer
[05.01.2009|14:51] C:\Program Files\Fichiers communs\DVDVideoSoft
[05.01.2008|20:28] C:\Program Files\Fichiers communs\FotoWire
[05.01.2008|14:37] C:\Program Files\Fichiers communs\InstallShield
[05.01.2008|10:22] C:\Program Files\Fichiers communs\Java
[05.01.2008|20:26] C:\Program Files\Fichiers communs\Logitech
[06.01.2008|22:46] C:\Program Files\Fichiers communs\Macrovision Shared
[14.11.2008|00:22] C:\Program Files\Fichiers communs\Microsoft Shared
[05.01.2008|10:18] C:\Program Files\Fichiers communs\MSSoap
[05.01.2008|20:19] C:\Program Files\Fichiers communs\muvee Technologies
[05.01.2008|20:22] C:\Program Files\Fichiers communs\Nikon
[05.01.2008|10:07] C:\Program Files\Fichiers communs\ODBC
[28.02.2008|12:52] C:\Program Files\Fichiers communs\Real
[09.01.2008|23:20] C:\Program Files\Fichiers communs\SafeNet Sentinel
[05.01.2008|10:18] C:\Program Files\Fichiers communs\Services
[07.07.2008|12:26] C:\Program Files\Fichiers communs\Skype
[05.01.2008|10:07] C:\Program Files\Fichiers communs\SpeechEngines
[05.01.2008|14:47] C:\Program Files\Fichiers communs\System
[28.02.2008|12:52] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 39 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-22 08:54:06
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:55][D:8]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
[F:3][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies
[F:76][D:4]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 22.01.2009| 8:54 - Option : [1]

--------------------\\ Fin du rapport a 8:54:42

Voilà:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:54:39, on 22.01.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LightSurf\Common\IconMgr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\LightSurf\Colorific\hgcctl95.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Program Files\LightSurf\Color Indicator\TICIcon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.genericdomainmarket.com/domain/speedapps.com?utm_source=speedapps.com&utm_medium=redirect&utm_campaign=redirect
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
R3 - URLSearchHook: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb126\SearchSettings.dll (file missing)
O2 - BHO: snappyads - {05be6fa5-7657-7de4-09af-57be64ec31c6} - C:\WINDOWS\system32\nsz10.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: snappyads browser enhancer - {EA670F0F-E158-0708-C76A-7CDCD89FD151} - C:\WINDOWS\system32\rlrlzksrfbve.dll (file missing)
O3 - Toolbar: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: LightSurf.lnk = C:\Program Files\LightSurf\Common\IconMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\System32\dmloader32.dll
O20 - Winlogon Notify: 8176c9517 - C:\WINDOWS\System32\dmloader32.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/PROPRI~1/LOCALS~1/Temp/msohtml1/01/clip_image002.gif

Salut,

j'admire ta patience!

voici le rapport:


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Default System BIOS
USER : Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090122-0] 4.8.1296 (Not Activated)
C:\ (Local Disk) - NTFS - Total:53 Go (Free:8 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
F:\ (Local Disk) - NTFS - Total:148 Go (Free:38 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
K:\ (USB)
L:\ (CD or DVD) - CDFS - Total:2 Go (Free:0 Go)
M:\ (USB)
N:\ (Local Disk) - NTFS - Total:98 Go (Free:9 Go)
O:\ (Local Disk) - NTFS - Total:180 Go (Free:42 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 22.01.2009|23:33 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings

-----------\\ Extensions

(Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Propri‚taire) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper
(Propri‚taire) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.ch/?gws_rd=ssl"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q="
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 21.01.2009|18:03 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 22.01.2009| 8:42 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 22.01.2009|23:33 - Option : [1]

-----------\\ Fin du rapport a 23:33:54.31

Ici tu trouve le rapport deTolbaar S&D,

hijackthis va suivre dans quelques instants



-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Default System BIOS
USER : Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090122-0] 4.8.1296 (Not Activated)
C:\ (Local Disk) - NTFS - Total:53 Go (Free:8 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
F:\ (Local Disk) - NTFS - Total:148 Go (Free:38 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
K:\ (USB)
L:\ (CD or DVD) - CDFS - Total:2 Go (Free:0 Go)
M:\ (USB)
N:\ (Local Disk) - NTFS - Total:98 Go (Free:9 Go)
O:\ (Local Disk) - NTFS - Total:180 Go (Free:42 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 23.01.2009| 9:26 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ Extensions

(Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Propri‚taire) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper
(Propri‚taire) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.ch/?gws_rd=ssl"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q="
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 21.01.2009|18:03 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 22.01.2009| 8:42 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 22.01.2009|23:33 - Option : [1]
4 - "C:\ToolBar SD\TB_4.txt" - 23.01.2009| 9:27 - Option : [2]

-----------\\ Fin du rapport a 9:27:39.09

et voilà le 2xiéme rapport:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:30:29, on 23.01.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LightSurf\Common\IconMgr.exe
C:\Program Files\LightSurf\Colorific\hgcctl95.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Program Files\LightSurf\Color Indicator\TICIcon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.genericdomainmarket.com/domain/speedapps.com?utm_source=speedapps.com&utm_medium=redirect&utm_campaign=redirect
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
R3 - URLSearchHook: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
O2 - BHO: snappyads - {05be6fa5-7657-7de4-09af-57be64ec31c6} - C:\WINDOWS\system32\nsz10.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: snappyads browser enhancer - {EA670F0F-E158-0708-C76A-7CDCD89FD151} - C:\WINDOWS\system32\rlrlzksrfbve.dll (file missing)
O3 - Toolbar: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: LightSurf.lnk = C:\Program Files\LightSurf\Common\IconMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\System32\dmloader32.dll
O20 - Winlogon Notify: 8176c9517 - C:\WINDOWS\System32\dmloader32.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/PROPRI~1/LOCALS~1/Temp/msohtml1/01/clip_image002.gif

Bonsoir,

désolé, des que je veux exécuter RegCleaner, il y a le message:

Error opening file for writing: C:\Program Files\RegCleaner\RegClenr.exe
Hit abort to abort ..... .....

Abandonner Recommencer Ignorer

Si je click sur ignore, il s' installe mais ne se laisse pas exécuter. Doube-click sur l'icône, le sablier tourne quelque seconde, puis plus rien.

Je n'arrive à continuer.

Re-bonsoir,

bon, j'ai réussi a lancer le programme, toutefois lors que je lance le nettoyage de registre automatique, il s'arrête chaque fois au bout de quelque seconde, après :

valeurs analysées: 20
clés analysées: 12
entrées invalides: 0
entrées ignorés: 0
arborescence: 1
méthode: automatique

(ça représente environ le 10%)

quoi faire?

Voilà.

j'ai nettoyé avec Ccleaner et voici le rapport de Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:56:46, on 23.01.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LightSurf\Common\IconMgr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\LightSurf\Colorific\hgcctl95.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Program Files\LightSurf\Color Indicator\TICIcon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.speedapps.com/search.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
R3 - URLSearchHook: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
O2 - BHO: snappyads - {05be6fa5-7657-7de4-09af-57be64ec31c6} - C:\WINDOWS\system32\nsz10.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: snappyads browser enhancer - {EA670F0F-E158-0708-C76A-7CDCD89FD151} - C:\WINDOWS\system32\rlrlzksrfbve.dll (file missing)
O3 - Toolbar: forumswatcher.com Toolbar - {50d0cd27-d4ef-4a21-917e-a1573771def4} - C:\Program Files\forumswatcher.com\tbforu.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: LightSurf.lnk = C:\Program Files\LightSurf\Common\IconMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\System32\dmloader32.dll
O20 - Winlogon Notify: 8176c9517 - C:\WINDOWS\System32\dmloader32.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/PROPRI~1/LOCALS~1/Temp/msohtml1/01/clip_image002.gif

et voilà le rapport de ccleaner:

je n'ai pas lancé de nettoyage.

ANALYSE COMPLETE - (11.481 secs)
------------------------------------------------------------------------------------------
35.5MB ont été supprimés. (Taille approximative)
------------------------------------------------------------------------------------------

Détails des fichiers à supprimer (Note: AUCUN fichier n'a pour l'instant été supprimé)
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 95) 12.3MB
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@serviceswitching[1].txt 147 bytes
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@youtube[2].txt 211 bytes
Marqué pour l'effacement: C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Propriétaire\Cookies\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012009011920090120\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012009012020090121\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012009012120090122\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012009012220090123\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012009012320090124\index.dat
C:\Documents and Settings\Propriétaire\Recent\Bonjour.lnk 773 bytes
C:\Documents and Settings\Propriétaire\Recent\CARTA GEOGRAFICA.lnk 494 bytes
C:\Documents and Settings\Propriétaire\Recent\City_Stress.lnk 645 bytes
C:\Documents and Settings\Propriétaire\Recent\Davos Flyers.lnk 703 bytes
C:\Documents and Settings\Propriétaire\Recent\Div.Ideas.lnk 355 bytes
C:\Documents and Settings\Propriétaire\Recent\Diverse.lnk 623 bytes
C:\Documents and Settings\Propriétaire\Recent\Documents.lnk 455 bytes
C:\Documents and Settings\Propriétaire\Recent\drums.lnk 943 bytes
C:\Documents and Settings\Propriétaire\Recent\Facture Champittet.lnk 900 bytes
C:\Documents and Settings\Propriétaire\Recent\Facture Migros Vaud.lnk 905 bytes
C:\Documents and Settings\Propriétaire\Recent\Factures_Rechnungen --Diaporama.lnk 565 bytes
C:\Documents and Settings\Propriétaire\Recent\Halo 3 Soundtrack- The Storm- This Is Our Land.lnk 699 bytes
C:\Documents and Settings\Propriétaire\Recent\Ikebana.lnk 623 bytes
C:\Documents and Settings\Propriétaire\Recent\INTERVIEW, August 2008.lnk 759 bytes
C:\Documents and Settings\Propriétaire\Recent\INTERVIEW, Januar 2009.lnk 759 bytes
C:\Documents and Settings\Propriétaire\Recent\Isabelle.lnk 352 bytes
C:\Documents and Settings\Propriétaire\Recent\Isabelle3.lnk 468 bytes
C:\Documents and Settings\Propriétaire\Recent\it_1.lnk 671 bytes
C:\Documents and Settings\Propriétaire\Recent\it_6.lnk 671 bytes
C:\Documents and Settings\Propriétaire\Recent\Japan305.lnk 881 bytes
C:\Documents and Settings\Propriétaire\Recent\Japan_Map1.lnk 882 bytes
C:\Documents and Settings\Propriétaire\Recent\Japan_route.lnk 710 bytes
C:\Documents and Settings\Propriétaire\Recent\Japan_variante8.lnk 839 bytes
C:\Documents and Settings\Propriétaire\Recent\Japan_variante9.lnk 839 bytes
C:\Documents and Settings\Propriétaire\Recent\JAP_0377.lnk 934 bytes
C:\Documents and Settings\Propriétaire\Recent\JAP_4043.lnk 888 bytes
C:\Documents and Settings\Propriétaire\Recent\Jokoso_Japan.lnk 539 bytes
C:\Documents and Settings\Propriétaire\Recent\Karl Unterkircher 'The secret of Genyen' - New DVD Trailer.lnk 889 bytes
C:\Documents and Settings\Propriétaire\Recent\Kitaro - Day light moon light - Koi.lnk 774 bytes
C:\Documents and Settings\Propriétaire\Recent\Lettre St. Marie Martigny.lnk 665 bytes
C:\Documents and Settings\Propriétaire\Recent\Lisa Gerrard & Pieter Bourke 'Sacrifice'.lnk 799 bytes
C:\Documents and Settings\Propriétaire\Recent\Map.lnk 599 bytes
C:\Documents and Settings\Propriétaire\Recent\Musik4Japan.lnk 408 bytes
C:\Documents and Settings\Propriétaire\Recent\Musik_Bruitages.lnk 665 bytes
C:\Documents and Settings\Propriétaire\Recent\Nouveau dossier (2).lnk 448 bytes
C:\Documents and Settings\Propriétaire\Recent\Portrait_Tibet.lnk 726 bytes
C:\Documents and Settings\Propriétaire\Recent\Portrait_Tibet_web.lnk 746 bytes
C:\Documents and Settings\Propriétaire\Recent\Poster Château de Chillon.lnk 665 bytes
C:\Documents and Settings\Propriétaire\Recent\Presse_D.lnk 450 bytes
C:\Documents and Settings\Propriétaire\Recent\Puidoux_Flyers.lnk 824 bytes
C:\Documents and Settings\Propriétaire\Recent\Readme (2).lnk 694 bytes
C:\Documents and Settings\Propriétaire\Recent\readme.lnk 694 bytes
C:\Documents and Settings\Propriétaire\Recent\Regart.ch (2).lnk 455 bytes
C:\Documents and Settings\Propriétaire\Recent\RegCleaner.lnk 535 bytes
C:\Documents and Settings\Propriétaire\Recent\Reservationsliste_Aschi.lnk 771 bytes
C:\Documents and Settings\Propriétaire\Recent\Route_Bicycle.lnk 485 bytes
C:\Documents and Settings\Propriétaire\Recent\Rural_06.lnk 888 bytes
C:\Documents and Settings\Propriétaire\Recent\Spybot.lnk 497 bytes
C:\Documents and Settings\Propriétaire\Recent\Street_Life.lnk 645 bytes
C:\Documents and Settings\Propriétaire\Recent\SUI_5248.lnk 465 bytes
C:\Documents and Settings\Propriétaire\Recent\Traduction_Manuscript.lnk 515 bytes
C:\Documents and Settings\Propriétaire\Recent\Untitled-1.lnk 621 bytes
C:\Documents and Settings\Propriétaire\Recent\Untitled-7.lnk 621 bytes
C:\Documents and Settings\Propriétaire\Recent\Untitled-8.lnk 621 bytes
C:\Documents and Settings\Propriétaire\Recent\Velo.lnk 606 bytes
C:\Documents and Settings\Propriétaire\Recent\Velojournal_13.lnk 911 bytes
C:\Documents and Settings\Propriétaire\Recent\VERALUC.lnk 785 bytes
C:\Documents and Settings\Propriétaire\Recent\VERALUC_1.lnk 785 bytes
C:\Documents and Settings\Propriétaire\Recent\world.lnk 676 bytes
Poubelle vidée (2 fichiers) 17.4MB
C:\WINDOWS\TEMP\Perflib_Perfdata_524.dat 16.00KB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 31.39KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 469 bytes
C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ 64.07KB
C:\WINDOWS\0.log 0 bytes
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 0.48MB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp 44.57KB
Cache Internet de Firefox/Mozilla (26 fichiers) 5.09MB
Cookie supprimé: commentcamarche.net
Cookie supprimé: google.ch
Cookie supprimé: www.avstumpfl.com
Cookie supprimé: media-maier.de
Cookie supprimé: google.com
Cookie supprimé: yahoo.com
Cookie supprimé: www.yahoo.com
Cookie supprimé: mail.yahoo.com
Cookie supprimé: repubblica.it
Cookie supprimé: youtube.com
Cookie supprimé: www.01net.com
Cookie supprimé: 01net.com
Cookie supprimé: sensagent.com
Cookie supprimé: dictionnaire.sensagent.com
Cookie supprimé: google.fr
Cookie supprimé: google.it
Cookie supprimé: alice.it
Cookie supprimé: adv.alice.it
Cookie supprimé: www.sapere.it
Cookie supprimé: clubic.com
Cookie supprimé: www.clubic.com
Cookie supprimé: www.googleadservices.com
Cookie supprimé: pctools.com
Cookie supprimé: softonic.fr
Cookie supprimé: bcv.ch
Cookie supprimé: www.malekal.com
Cookie supprimé: filehippo.com
C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\h7kyh6p7.default\downloads.sqlite 2.00KB
C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\h7kyh6p7.default\GoogleToolbarData\searchhistory.xml 21.80KB
C:\Documents and Settings\Propriétaire\Application Data\Sun\Java\Deployment\cache\6.0\53\5dc0c2b5-163c7dff 5.39KB
C:\Documents and Settings\Propriétaire\Application Data\Sun\Java\Deployment\cache\6.0\53\5dc0c2b5-163c7dff.idx 592 bytes
C:\Documents and Settings\Propriétaire\Application Data\Sun\Java\Deployment\cache\6.0\lastAccessed 1 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\bin.clearspring.com\clearspring.sol 61 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\cdn.widgetserver.com\com.quantserve.sol 72 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\cdn1.ustream.tv\com.quantserve.sol 70 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\cdn1.ustream.tv\viewer.sol 59 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\flash.quantserve.com\com.quantserve.sol 72 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\launch.zattoo.com\splash.swf\z.sol 36 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\login.yahoo.com\loginCache.sol 158 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\media.scanscout.com\SS_ARE_CatFreqHist.sol 168 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\media.scanscout.com\SS_ARE_UserData.sol 149 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\media1.break.com\break.sol 49 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\pub.widgetbox.com\wbx_cookie.sol 42 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\s.ytimg.com\soundData.sol 58 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\s.ytimg.com\videostats.sol 199 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\skype.com\#ui\preferences.sol 233 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\static.nzz.ch\#sParkFolder\ID.sol 102 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\us.mg1.mail.yahoo.com\cookies.sol 67 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\www.deezer.com\deezer.sol 138 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\www.deezer.com\dzSearch.sol 1.35KB
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\www.welt.de\flash\welt_inline.swf\statsIdent.sol 50 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\www.youtube.com\soundData.sol 58 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\KRXPW8EY\www.youtube.com\videostats.sol 199 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol 89 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.widgetserver.com\settings.sol 90 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn1.ustream.tv\settings.sol 85 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.quantserve.com\settings.sol 90 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flv.kataweb.it\settings.sol 84 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#launch.zattoo.com\settings.sol 87 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#login.yahoo.com\settings.sol 85 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.scanscout.com\settings.sol 89 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media1.break.com\settings.sol 86 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pub.widgetbox.com\settings.sol 87 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol 81 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.nzz.ch\settings.sol 83 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#us.mg1.mail.yahoo.com\settings.sol 91 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.deezer.com\settings.sol 84 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.welt.de\settings.sol 81 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol 85 bytes
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 757 bytes
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\14\7e5cd8ee-998243fb-16e352ca-4cc36c95.qtch 1.74KB
C:\Documents and Settings\Propriétaire\Application Data\Real\RealPlayer\realplayer.ste 38.32KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.090121-0841.log 334 bytes
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.090121-0854.txt 1.86KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Fixes.090121-0855.txt 1.86KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.log 1.96KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Update downloads.log 1.34KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Statistics.ini 143 bytes
------------------------------------------------------------------------------------------