Trojan horse psw.onlineGame.x

voici le rapport.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:15:14, on 23/03/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\iTunesHelper.exe
C:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\Java\jre1.6.0_06\bin\jucheck.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer.com/worldwide/selection.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunesHelper.exe"
O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Media Player.lnk = D:\Adobe Media Player\Adobe Media Player.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://decbetaashakira.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - https://sdlc-esd.oracle.com/ESD42/JSCDL/jre/6u6-b90/jinstall-6u6-windows-i586-jc.cab?GroupName=JSC&FilePath=/ESD42/JSCDL/jre/6u6-b90/jinstall-6u6-windows-i586-jc.cab&BHost=javadl.sun.com&File=jinstall-6u6-windows-i586-jc.cab&AuthParam=1580964179_948ce1dd250aac19afc416e1e34a3af9&ext=.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

je te renvoi le rapport je sais pas si tu l'as recu la première fois

Initialisation GenProc 2.491 [23/03/2009] à [14:08:40]

*** Variables initiales SET et temporaires ***

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\C‚cile\Application Data
Arguments=C:\Documents and Settings\C‚cile\Bureau\Arguments
Canned=C:\Documents and Settings\C‚cile\Bureau\Canned
ChangeLog=C:\Documents and Settings\C‚cile\Bureau\ChangeLog
CheminBatch=C:\Documents and Settings\C‚cile\Bureau
CLASSPATH=.;C:\Program Files\QuickTime Alternative\QTSystem\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=ACER-79F6FF2248
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
GenProcVersion=2.491
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\C‚cile
LOGONSERVER=\\ACER-79F6FF2248
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
outil=C:\Documents and Settings\C‚cile\Bureau\outil
Page=C:\Documents and Settings\C‚cile\Bureau\Page
Path=C:\Program Files\WinRAR;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\QuickTime Alternative\QTSystem\;;C:\PROGRA~1\FICHIE~1\MUVEET~1\030625
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 13 Stepping 8, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0d08
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\QuickTime Alternative\QTSystem\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\CCILE\LOCALS~1\Temp
TMP=C:\DOCUME~1\CCILE\LOCALS~1\Temp
USERDOMAIN=ACER-79F6FF2248
USERNAME=C‚cile
USERPROFILE=C:\Documents and Settings\C‚cile
windir=C:\WINDOWS

*** Liste des composants GenProc ***

C:\Documents and Settings\C‚cile\Bureau\vrac
C:\Documents and Settings\C‚cile\Bureau\rec.txt
C:\Documents and Settings\C‚cile\Bureau\SetupLCL.exe
C:\Documents and Settings\C‚cile\Bureau\wep.txt
C:\Documents and Settings\C‚cile\Bureau\Spider Solitaire.lnk
C:\Documents and Settings\C‚cile\Bureau\cARNAVAL vENISE
C:\Documents and Settings\C‚cile\Bureau\tro.txt
C:\Documents and Settings\C‚cile\Bureau\celin.txt
C:\Documents and Settings\C‚cile\Bureau\noel
C:\Documents and Settings\C‚cile\Bureau\LimeWire 4.18.3.lnk
C:\Documents and Settings\C‚cile\Bureau\Funhouse
C:\Documents and Settings\C‚cile\Bureau\ALBI
C:\Documents and Settings\C‚cile\Bureau\encore.txt
C:\Documents and Settings\C‚cile\Bureau\spaceball.gif
C:\Documents and Settings\C‚cile\Bureau\tutu.exe
C:\Documents and Settings\C‚cile\Bureau\COMPTE.txt
C:\Documents and Settings\C‚cile\Bureau\carte pour hub
C:\Documents and Settings\C‚cile\Bureau\tailles_US_UK_FR4.jpg
C:\Documents and Settings\C‚cile\Bureau\liste.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc.zip
C:\Documents and Settings\C‚cile\Bureau\GenProc
C:\Documents and Settings\C‚cile\Bureau\Debug.txt
C:\Documents and Settings\C‚cile\Bureau\DE SEB
C:\Documents and Settings\C‚cile\Bureau\CCleaner
C:\Documents and Settings\C‚cile\Bureau\Neige
C:\Documents and Settings\C‚cile\Bureau\ccsetup217.exe
C:\Documents and Settings\C‚cile\Bureau\code.txt
C:\Documents and Settings\C‚cile\Bureau\CCleaner.lnk
C:\Documents and Settings\C‚cile\Bureau\HijackThis.lnk
C:\Documents and Settings\C‚cile\Bureau\hijackthis.log
C:\Documents and Settings\C‚cile\Bureau\logiciel
C:\Documents and Settings\C‚cile\Bureau\Poste de travail.lnk
C:\Documents and Settings\C‚cile\Bureau\vrac\d8e68bde5f9f186ba6e13e46d8fe94f9.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\cecile[1].mathurin-laposte.net_4fff6687.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\lastsmoke.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\clochette-1.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\5d874591d10bd6c12d3ee5796e4c6f971230808696.png
C:\Documents and Settings\C‚cile\Bureau\vrac\dad.bmp
C:\Documents and Settings\C‚cile\Bureau\vrac\IMG_1063.JPG
C:\Documents and Settings\C‚cile\Bureau\vrac\IMG_1021.JPG
C:\Documents and Settings\C‚cile\Bureau\vrac\IMG_1087.JPG
C:\Documents and Settings\C‚cile\Bureau\vrac\PA120019.JPG
C:\Documents and Settings\C‚cile\Bureau\vrac\n701057669_1283624_7057[1].jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\alloquentin23demi 040.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\DSCN2465.JPG
C:\Documents and Settings\C‚cile\Bureau\vrac\img-1635543ef1k.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\100_1988.JPG
C:\Documents and Settings\C‚cile\Bureau\vrac\100_1893.JPG
C:\Documents and Settings\C‚cile\Bureau\vrac\BonDeCommandeElephant.pdf
C:\Documents and Settings\C‚cile\Bureau\vrac\etoiles.gif
C:\Documents and Settings\C‚cile\Bureau\vrac\rubyshoes1.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\hihi.txt
C:\Documents and Settings\C‚cile\Bureau\vrac\380908_c183261818_m.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\emilie-grille,883fba657fe2d4e2580ba5ad63e688fd.jpg.htm
C:\Documents and Settings\C‚cile\Bureau\vrac\nat sup.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\img_0025-copie.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\img_9896.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\blanche-neige.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\littledays.zip
C:\Documents and Settings\C‚cile\Bureau\vrac\3346544873_6d2438f47f_m.jpg
C:\Documents and Settings\C‚cile\Bureau\vrac\sleeping-beauty.jpg
C:\Documents and Settings\C‚cile\Bureau\cARNAVAL vENISE\Venise-Carnaval 2009 320.jpg
C:\Documents and Settings\C‚cile\Bureau\cARNAVAL vENISE\Venise-Carnaval 2009 231.jpg
C:\Documents and Settings\C‚cile\Bureau\cARNAVAL vENISE\Venise-Carnaval 2009 146.jpg
C:\Documents and Settings\C‚cile\Bureau\cARNAVAL vENISE\Venise-Carnaval 2009 163.jpg
C:\Documents and Settings\C‚cile\Bureau\cARNAVAL vENISE\Venise-Carnaval 2009 158.jpg
C:\Documents and Settings\C‚cile\Bureau\cARNAVAL vENISE\Venise-Carnaval 2009 174.jpg
C:\Documents and Settings\C‚cile\Bureau\noel\TinkerBell-christmas.jpg
C:\Documents and Settings\C‚cile\Bureau\noel\No‰l_fichiers
C:\Documents and Settings\C‚cile\Bureau\noel\No‰l.htm
C:\Documents and Settings\C‚cile\Bureau\noel\Blank-Christmas-Gift-Tags.jpg
C:\Documents and Settings\C‚cile\Bureau\noel\Christmas-Gift-Tags.jpg
C:\Documents and Settings\C‚cile\Bureau\noel\Christmas-Santa-Mickey-Mouse-Card.jpg
C:\Documents and Settings\C‚cile\Bureau\noel\acceuil_Joyeux-Noel0.jpg
C:\Documents and Settings\C‚cile\Bureau\noel\Sans titre.bmp
C:\Documents and Settings\C‚cile\Bureau\noel\No‰l_fichiers\eti.gif
C:\Documents and Settings\C‚cile\Bureau\noel\No‰l_fichiers\eti2.gif
C:\Documents and Settings\C‚cile\Bureau\noel\No‰l_fichiers\eti3.gif
C:\Documents and Settings\C‚cile\Bureau\noel\No‰l_fichiers\eti16.gif
C:\Documents and Settings\C‚cile\Bureau\noel\No‰l_fichiers\eti4.gif
C:\Documents and Settings\C‚cile\Bureau\noel\No‰l_fichiers\eti5.gif
C:\Documents and Settings\C‚cile\Bureau\Funhouse\01 So What.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\02 Sober.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\03 I Don't Believe You.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\04 One Foot Wrong.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\05 Please Don't Leave Me.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\06 Bad Influence.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\07 Funhouse.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\08 Crystal Ball.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\09 Mean.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\10 It's All Your Fault.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\11 Ave Mary A.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\12 Glitter In The Air.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\13 This Is How It Goes Down.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\14 Could've Had Everything.mp3
C:\Documents and Settings\C‚cile\Bureau\Funhouse\15 Boring.mp3
C:\Documents and Settings\C‚cile\Bureau\ALBI\Albi 2009[1].02. 264.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Albi 2009[1].02. 233.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Albi 2009[1].02. 280.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Albi 2009[1].02. 182.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1273183102_30277517_9670.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1273183102_30277520_338.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n577482419_1389147_9534.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable
C:\Documents and Settings\C‚cile\Bureau\ALBI\DSC_4543-border_785.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\DSC_4544-border_258.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0267a.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0282a.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0284.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0294a.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0303.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0307.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0315.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0393a.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Img2009-02-15-0595.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\2008_05172008NOEL0180.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\2008_05172008NOEL0182.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\2008_05172008NOEL0183.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\2008_05172008NOEL0184.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\2008_05172008NOEL0188.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\2008_05172008NOEL0178.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\2008_05172008NOEL0179.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\2008_05172008NOEL0181.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304696_7674449.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304697_2375068.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304698_3531232.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304699_4987786.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304700_6233666.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304701_1722868.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304702_3268991.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304703_1445085.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304704_5597226.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304705_3972643.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304706_7120788.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\n1407933909_30304707_1603971.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\14022009930.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0006.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0010.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0011.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0012.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0013.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0014.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0015.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0016.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0017.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0018.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0019.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Portable\Photo0021.jpg
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670025.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670026.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670001.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670002.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670003.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670004.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670005.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670006.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670007.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670008.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670009.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670010.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670011.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670013.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670015.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670016.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670017.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670018.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670019.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670020.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670021.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670023.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670012.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670014.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670022.JPG
C:\Documents and Settings\C‚cile\Bureau\ALBI\Jetable\47670024.JPG
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\1766_batman_batman__batman_1989_9.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\Sans titre.bmp
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\matrix_L.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\Superman2.png
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\1601-1-spiderman.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\spiderman.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\ORIG_1165069017_Superman-ReturnsPoster.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\gladiator_006.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\cine_helsing_wall4_1024_768800.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\X-Men_film_movie_wallpaper_fond_d_ecran.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\x3xmen3poster.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\oss117lecaireniddespionaff.jpg
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\Xmen.bmp
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\Superman.PNG
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\Matrix.JPG
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\James bond.bmp
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\Spidermann.JPG
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\Batman.JPG
C:\Documents and Settings\C‚cile\Bureau\carte pour hub\pour le pervers.bmp
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Arguments
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\GenProc.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Page
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Arguments\Argument.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Arguments\design.css
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\A-Squared.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Bagle2_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\bfu_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\CCleaner_48H.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\CCleaner_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\CCleaner_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\FixWebHancer_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\FixWebHancer_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Flash_Disinfector_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Flash_Disinfector_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\FxNdotN_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\FxNdotN_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Haxfix_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Look2me_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Look2me_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Lop_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Lop_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\MSNfix_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\MSNfix_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Navilog1_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Navilog1_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Purity_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Purity_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\RemGAIN_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\RemGAIN_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Rustock_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\ScanAntivirusNod32.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\ScanAntivirusPanda.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\SDfix_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\SDfix_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\SmitfraudFix_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\SmitfraudFix_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\SpywareTerminator.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\TeaTimer.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\ToolbarSD_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\ToolbarSD_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\ToolCleaner.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Vundo_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Vundo_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Vundo_Recovery_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Winsoftware_bfu_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\Winsoftware_bfu_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\WORT_Dl.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Canned\WORT_Exec.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\BagleLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\FixWebHancerLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\FlashLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\FxNdotNLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\HaxfixLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\Look2MeLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\LopLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\MSNFixLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\NaviLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\PurityLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\RemGainLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\RustockLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\SDfixLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\SmitLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\ToolbarSDLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\VundoLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\WareOutLog.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\ChangeLog\WinSoftware.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Arborescence.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\BlocageDate.vbs
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\commandes.sed
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\CompareDate.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\curl.exe
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Curl_HJT.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\EnableWSH.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Exclusions.txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\getmsiinfo.vbs
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\grep.exe
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\icon_genproc.ico
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\info.vbs
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Lancements.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\libiconv2.dll
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\libintl3.dll
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Norton.vbs
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\OSVers.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\pcre3.dll
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\regex2.dll
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\sed.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\sed.exe
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\sndrec32.exe
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Son.vbs
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\supprime.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Supprime_Du_Debut.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\swreg.exe
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\tasklist.exe
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Termine.wav
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\UAC.vbs
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Uninstall.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\uniq.exe
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\Var.bat
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\outil\[0].txt
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Page\GenProcPage
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Page\GenProcPage\1.gif
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Page\GenProcPage\2.gif
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Page\GenProcPage\4.gif
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Page\GenProcPage\aide.gif
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Page\GenProcPage\design.css
C:\Documents and Settings\C‚cile\Bureau\GenProc\GenProc\Page\GenProcPage\important.gif
C:\Documents and Settings\C‚cile\Bureau\DE SEB\Elsa - T'en Vas Pas.mp3
C:\Documents and Settings\C‚cile\Bureau\DE SEB\O_le_marseillais.3gp
C:\Documents and Settings\C‚cile\Bureau\DE SEB\La grosse bite … dudule.mp3
C:\Documents and Settings\C‚cile\Bureau\DE SEB\Marcel et son Orchestre - Chanson Paillarde - La Boite A Caca.mp3
C:\Documents and Settings\C‚cile\Bureau\DE SEB\Marcel et son Orchestre - La 7Eme Compagnie En Jamaique.mp3
C:\Documents and Settings\C‚cile\Bureau\CCleaner\CCleaner.exe
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang
C:\Documents and Settings\C‚cile\Bureau\CCleaner\uninst.exe
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1031.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1041.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1049.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1053.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1042.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1044.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1040.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-2070.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1043.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1036.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1034.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1045.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1028.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1030.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1035.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1046.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1038.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1029.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-2052.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1027.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1037.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1032.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1055.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1025.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1048.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1110.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1063.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1052.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-3098.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-2074.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1051.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1071.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-5146.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1026.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1050.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1066.dll
C:\Documents and Settings\C‚cile\Bureau\CCleaner\Lang\lang-1058.dll
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009091.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009092.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009093.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009094.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009095.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009096.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009097.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009098.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009099.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009100.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009101.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009102.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009103.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009104.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009105.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009106.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009107.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009108.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009109.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009110.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009111.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009112.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009113.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009114.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009115.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009116.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009117.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009118.jpg
C:\Documents and Settings\C‚cile\Bureau\Neige\07012009119.jpg
C:\Documents and Settings\C‚cile\Bureau\logiciel\INSTALL_MSN_MESSENGER_NT.EXE
C:\Documents and Settings\C‚cile\Bureau\logiciel\eCarteBleue-LCL-CLEO.exe
C:\Documents and Settings\C‚cile\Bureau\logiciel\iTunes743Setup.exe

*** Liste des étapes franchies avec succès ***

si ce rapport avec des étapes c'est celui qu'il faut lancer avec genproc je ne sais pas comment faire

Voilà je pense que c'est le bon

Rapport GenProc 2.491 [1] - 24/03/2009 à 14:55:21 - Windows XP

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
- C:\Program Files\EsetOnlineScanner\log.txt

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

Voici le rapport

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1891
Windows 5.1.2600 Service Pack 2

24/03/2009 16:45:30
mbam-log-2009-03-24 (16-45-30).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 123464
Temps écoulé: 38 minute(s), 58 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Voici le rapport du scan

SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 03/24/2009 at 08:25 PM

Application Version : 4.25.1014

Core Rules Database Version : 3812
Trace Rules Database Version: 1766

Scan type : Complete Scan
Total Scan Time : 01:14:10

Memory items scanned : 493
Memory threats detected : 0
Registry items scanned : 4505
Registry threats detected : 0
File items scanned : 51194
File threats detected : 0

Voici


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.60GHz )
BIOS : Phoenix NoteBIOS 4.0 Release 6.0
USER : Cécile ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
C:\ (Local Disk) - FAT32 - Total:16 Go (Free:1 Go)
D:\ (Local Disk) - FAT32 - Total:16 Go (Free:8 Go)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 24/03/2009|20:50 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Search Page"="https://www.google.com/?gws_rd=ssl"
"Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.acer.com/worldwide/selection.html"
"Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 24/03/2009|20:51 - Option : [1]

-----------\\ Fin du rapport a 20:51:16,87

Voici,

Quatre virus ont été trouvés, et on été nettoyés

RemoveIT Pro v4 - SE (Build date: 6.6.2008) full information log file.
Generated at: 24/03/2009 on 21:43:41
Microsoft Windows XP Home Edition Service Pack 2 (Build 2600)
Author: Damjan Irgolic
https://www.incodesolutions.com/
support@incodesolutions.com


Running processes: (36)
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\iTunesHelper.exe
C:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\sistray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre1.6.0_06\bin\jucheck.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe

Startup files:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\CTFMON.EXE
[C:\WINDOWS\system32\ctfmon.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\MsnMsgr
["C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SUPERAntiSpyware
[C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\LaunchApp
[Alaunch]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SiSPower
[Rundll32.exe SiSPower.dll,ModeAgent]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SiS Windows KeyHook
[C:\WINDOWS\system32\keyhook.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SoundMan
[SOUNDMAN.EXE]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SynTPLpr
[C:\Program Files\Synaptics\SynTP\SynTPLpr.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SynTPEnh
[C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PCMService
["C:\Program Files\Arcade\PCMService.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\IMJPMIG8.1
["C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSPY2002
[C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PHIME2002ASync
[C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PHIME2002A
[C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\LManager
[C:\Program Files\Launch Manager\QtZgAcer.EXE]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\eRecoveryService
[C:\Acer\Empowering Technology\eRecovery\Monitor.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NeroFilterCheck
[C:\WINDOWS\system32\NeroCheck.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\QuickTime Task
["C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\iTunesHelper
["C:\iTunesHelper.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\eCarteBleue-CLEO
["C:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched
["C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\AVG8_TRAY
[C:\PROGRA~1\AVG\AVG8\avgtray.exe]

Detail report: (98)
Clsid c:\program files\superantispyware\saswinlo.dll[972edede23ac8d59aac0c09799c6f18a][356352]
Clsid C:\WINDOWS\system32\avgrsstx.dll[0ac7886f80734680e3463780cedea4a4][10520]
Clsid C:\WINDOWS\system32\crypt32.dll[fd8631128e14583f135eb4b3f37ef626][604672]
Clsid C:\WINDOWS\system32\cryptnet.dll[344dcb5a0c57e0fc3714c5e5e5fbc232][63488]
Clsid C:\WINDOWS\system32\cscdll.dll[fbc2cd20b107b6525dfee9f6e41dcc8b][102912]
Clsid C:\WINDOWS\system32\sclgntfy.dll[83db3b831c845699ad4f6bfb37c4790c][22016]
Clsid c:\windows\system32\stobject.dll[abced4a936c93beff92f4b2c4650074e][122368]
Clsid C:\WINDOWS\system32\wlnotify.dll[8201bb13554a855cabd88bbf14b2166b][94208]
Clsid c:\windows\system32\wpdshserviceobj.dll[045e228f71c31901084b64be59093499][133632]
Proc C:\Acer\eManager\anbmServ.exe[9493a96d44cc1b9127917e40f2c83f4e][1273344]
Proc C:\Acer\Empowering Technology\eRecovery\Monitor.exe[4b62583a8b4c2fdadeb56fff2a7aed1b][393216]
Proc C:\iTunesHelper.exe[7bd9f0839e7f55dd66d3f9ce9c61d810][267064]
Proc C:\PROGRA~1\AVG\AVG8\aAvgApi.exe[d8c57b6ed78f4fc37c29b7ad6926ea90][555800]
Proc C:\PROGRA~1\AVG\AVG8\avgemc.exe[da3c6d8a8b81ab4031a7db3d0d66cb21][903960]
Proc C:\PROGRA~1\AVG\AVG8\avgnsx.exe[eb138c5a1adc2c8648e54e4abd492759][592128]
Proc C:\PROGRA~1\AVG\AVG8\avgrsx.exe[ac2589ede1924b59575dc3a747ef9831][484120]
Proc C:\PROGRA~1\AVG\AVG8\avgtray.exe[1fc8b35e97123a9df64f092da8784e4c][1601304]
Proc C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe[c661b44d8e12ea95f51baf2aeff6364b][298264]
Proc C:\Program Files\Arcade\PCMService.exe[46695588db7a33dd7ca9d57e364311b3][49152]
Proc C:\Program Files\AVG\AVG8\avgcsrvx.exe[f1391e9b019e8670ea9438af56e1a2f6][687896]
Proc C:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe[ed04656bdab64ea5c5dea7c759106042][200704]
Proc C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[3a4982df893f198a2dfbccd4ce10f93a][110592]
Proc C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe[44cded85b91eef32e9cbca348371f6bb][115024]
Proc C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe[5f3e76c6be90c901c7a3058f05a5dc33][550912]
Proc C:\Program Files\Internet Explorer\iexplore.exe[833e2b3f0e2484c0f2b804ae871b4381][93184]
Proc C:\Program Files\iPod\bin\iPodService.exe[97bad81620e9f115f86d79952c625916][503608]
Proc C:\Program Files\Java\jre1.6.0_06\bin\jucheck.exe[cf9be1f067b553eab5d217b0aeb91ba3][329104]
Proc C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe[e8c086da635eb410fef106cb279adfbf][144784]
Proc C:\Program Files\Launch Manager\QtZgAcer.EXE[30a74ea0d54131e8d3dc83848de183d9][315392]
Proc C:\Program Files\MSN Messenger\MsnMsgr.Exe[a7efc7ea7ef6fb022a8a95813edcbe5d][5674352]
Proc C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe[11afbca9eac51cf988918bffe935e6ee][1830128]
Proc C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[55582f239914c8efccf89bd632639542][688218]
Proc C:\Program Files\Synaptics\SynTP\SynTPLpr.exe[3665ba88b993554db062ff96542d85ff][98394]
Proc C:\WINDOWS\Explorer.EXE[d0288319660edcfed07c7e74c4ea38a5][1037312]
Proc C:\WINDOWS\SOUNDMAN.EXE[ae5b81948c6014caf6bc02aa9f9501b9][77824]
Proc C:\WINDOWS\system32\ctfmon.exe[5584247b568c2e53934873f4b655fe6a][15360]
Proc C:\WINDOWS\system32\keyhook.exe[a141351c191a65b66e067326bac0a190][32768]
Proc C:\WINDOWS\system32\lsass.exe[9f3744a5c6f49291a7a685040a013399][13312]
Proc C:\WINDOWS\system32\services.exe[732e0b1abaace15d80ec19056b0a2af9][108544]
Proc C:\WINDOWS\system32\sistray.exe[21cb0dfdd55db20b2c55ab241961ffe1][331776]
Proc C:\WINDOWS\system32\spoolsv.exe[da81ec57acd4cdc3d4c51cf3d409af9f][57856]
Proc C:\WINDOWS\system32\svchost.exe[1bd6c2f707a275cb7c16fd99fe0f31ca][14336]
Proc C:\WINDOWS\system32\wuauclt.exe[e654b78d2f1d791b30d0ed9a8195ec22][51224]
RegRun c:\acer\empowering technology\erecovery\monitor.exe[4b62583a8b4c2fdadeb56fff2a7aed1b][393216]
RegRun c:\ituneshelper.exe[7bd9f0839e7f55dd66d3f9ce9c61d810][267064]
RegRun c:\progra~1\avg\avg8\avgtray.exe[1fc8b35e97123a9df64f092da8784e4c][1601304]
RegRun c:\program files\arcade\pcmservice.exe[46695588db7a33dd7ca9d57e364311b3][49152]
RegRun c:\program files\e-carte bleue\lcl\e-carte bleue visa cleo\ecb-cleo.exe [ed04656bdab64ea5c5dea7c759106042][200704]
RegRun c:\program files\java\jre1.6.0_06\bin\jusched.exe[e8c086da635eb410fef106cb279adfbf][144784]
RegRun c:\program files\launch manager\qtzgacer.exe[30a74ea0d54131e8d3dc83848de183d9][315392]
RegRun c:\program files\msn messenger\msnmsgr.exe [a7efc7ea7ef6fb022a8a95813edcbe5d][5674352]
RegRun c:\program files\quicktime alternative\qttask.exe [49ccfbe5d5225b9d3cc78c09dee147d0][286720]
RegRun c:\program files\superantispyware\superantispyware.exe[11afbca9eac51cf988918bffe935e6ee][1830128]
RegRun c:\program files\synaptics\syntp\syntpenh.exe[55582f239914c8efccf89bd632639542][688218]
RegRun c:\program files\synaptics\syntp\syntplpr.exe[3665ba88b993554db062ff96542d85ff][98394]
RegRun c:\windows\ime\imjp8_1\imjpmig.exe [7bbe4cf421aecc7f0226edd75f12079f][208952]
RegRun C:\WINDOWS\soundman.exe[ae5b81948c6014caf6bc02aa9f9501b9][77824]
RegRun c:\windows\system32\ctfmon.exe[5584247b568c2e53934873f4b655fe6a][15360]
RegRun c:\windows\system32\ime\pintlgnt\imscinst.exe [1b17e09c1223f6d17336d2dd7a1af4f4][59392]
RegRun c:\windows\system32\ime\tintlgnt\tintsetp.exe [024dc0f68df5fd6ae9dd82dfbaf479d6][455168]
RegRun c:\windows\system32\keyhook.exe[a141351c191a65b66e067326bac0a190][32768]
RegRun c:\windows\system32\nerocheck.exe[3e4c03cefad8de135263236b61a49c90][155648]
Service c:\acer\emanager\anbmserv.exe[9493a96d44cc1b9127917e40f2c83f4e][1273344]
Service c:\progra~1\avg\avg8\avgemc.exe[da3c6d8a8b81ab4031a7db3d0d66cb21][903960]
Service c:\progra~1\avg\avg8\avgwdsvc.exe[c661b44d8e12ea95f51baf2aeff6364b][298264]
Service c:\program files\fichiers communs\apple\mobile device support\bin\applemobiledeviceservice.exe[3a4982df893f198a2dfbccd4ce10f93a][110592]
Service c:\program files\fichiers communs\microsoft shared\source engine\ose.exe[7a56cf3e3f12e8af599963b16f50fb6a][89136]
Service c:\program files\ipod\bin\ipodservice.exe[97bad81620e9f115f86d79952c625916][503608]
Service c:\program files\msn messenger\usnsvc.exe[c5b70a6aa947667ce0e5fc84a05ec8b6][97136]
Service c:\program files\windows media player\wmpnetwk.exe[c9bea742ce225cc993c9465fddae4656][918016]
Service c:\windows\system32\alg.exe[2fe681d10c5fc343dbbc0610b8dd4d24][44544]
Service c:\windows\system32\cisvc.exe[d24f6382f5171b07705364812e9459e2][5632]
Service c:\windows\system32\clipsrv.exe[711db3a49efde3e2640cdb782d478628][33280]
Service c:\windows\system32\dllhost.exe [d66259c3bcefc9caeb481ed52a4eac74][5120]
Service c:\windows\system32\dmadmin.exe [6fcca7a00b32681ec9928aa730bbdb75][225280]
Service c:\windows\system32\fxssvc.exe[312ad40e462bd61763b1166d6d8c1642][268800]
Service c:\windows\system32\imapi.exe[40432437bba5cd10b76a2d3b3cd5ad2d][150016]
Service c:\windows\system32\locator.exe[57cf313eb5cb2c9a0b3ff67437becdfa][75264]
Service c:\windows\system32\lsass.exe[9f3744a5c6f49291a7a685040a013399][13312]
Service c:\windows\system32\mnmsrvc.exe[75b66eb2a2fb8db29c838f1800cede90][32768]
Service c:\windows\system32\msdtc.exe[680639b08040cec24b8bd873b1f02f51][6144]
Service c:\windows\system32\msiexec.exe [f5f0146580e7023adb963879840777f8][78848]
Service c:\windows\system32\netdde.exe[9ce77f7a22c27366da628ed4ba7d4ff9][114176]
Service c:\windows\system32\rsvp.exe[414964844f4793acb868d057e8ed997e][132608]
Service c:\windows\system32\scardsvr.exe[781f04fbbe9e1abc0f4769809ccaefc3][100352]
Service c:\windows\system32\services.exe[732e0b1abaace15d80ec19056b0a2af9][108544]
Service c:\windows\system32\sessmgr.exe[3126d9d63cdef5e3244ee2d97fbad59d][142336]
Service c:\windows\system32\smlogsvc.exe[0151e81b0e42f55bccbb0136982e360f][93184]
Service c:\windows\system32\spoolsv.exe[da81ec57acd4cdc3d4c51cf3d409af9f][57856]
Service c:\windows\system32\svchost.exe [1bd6c2f707a275cb7c16fd99fe0f31ca][14336]
Service c:\windows\system32\ups.exe[55a7273aea6f3160fcfc4aa7394f5047][18432]
Service c:\windows\system32\vssvc.exe[0f5b203240184d34852936696df3e91d][295424]
Service c:\windows\system32\wbem\wmiapsrv.exe[77945ea0bfdd662203f07fe5513a409d][126464]
Startup c:\documents and settings\all users\menu démarrer\programmes\démarrage\desktop.ini[d6a6856702e3f0953e7246a9b4a9fe35][84]
Startup c:\documents and settings\cécile\menu démarrer\programmes\démarrage\desktop.ini[d6a6856702e3f0953e7246a9b4a9fe35][84]
Startup c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe[deb88aef013dd1eefb462d7cad642166][29696]
Startup c:\windows\system32\sistray.exe[21cb0dfdd55db20b2c55ab241961ffe1][331776]
System.ini c:\windows\system32\msiexec.exe [f5f0146580e7023adb963879840777f8][78848]

Startup folder: (5)
Startup name: desktop.ini
Command: C:\Documents and Settings\Cécile\Menu Démarrer\Programmes\Démarrage\desktop.ini
Startup name: Adobe Media Player.lnk
Command: D:\Adobe Media Player\Adobe Media Player.exe
Startup name: desktop.ini
Command: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini
Startup name: Utility Tray.lnk
Command: C:\WINDOWS\system32\sistray.exe
Startup name: Adobe Reader Speed Launch.lnk
Command: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

Win.ini Startup: (1)
Path: No additional driver found!

Win.ini Startup: (1)
Path: No additional driver found!

Keyboard drivers: (1)
Name: No Keyboard Filter driver found!

Services: (86)
Service Name: Accès du périphérique d'interface utilisateur [Stopped],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Acquisition d'image Windows (WIA) [Running],
Path: C:\WINDOWS\system32\svchost.exe -k imgsvc
Service Name: Affichage des messages [Stopped],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Aide et support [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Appel de procédure distante (RPC) [Running],
Path: C:\WINDOWS\system32\svchost -k rpcss
Service Name: Apple Mobile Device [Running],
Path: "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
Service Name: Application système COM+ [Stopped],
Path: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Service Name: Assistance TCP/IP NetBIOS [Running],
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Audio Windows [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Avertissement [Stopped],
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: AVG8 E-mail Scanner [Running],
Path: C:\PROGRA~1\AVG\AVG8\avgemc.exe
Service Name: AVG8 WatchDog [Running],
Path: C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
Service Name: Carte à puce [Stopped],
Path: C:\WINDOWS\System32\SCardSvr.exe
Service Name: Carte de performance WMI [Stopped],
Path: C:\WINDOWS\system32\wbem\wmiapsrv.exe
Service Name: Centre de sécurité [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Cliché instantané de volume [Stopped],
Path: C:\WINDOWS\System32\vssvc.exe
Service Name: Client de suivi de lien distribué [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Client DHCP [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Client DNS [Running],
Path: C:\WINDOWS\system32\svchost.exe -k NetworkService
Service Name: Compatibilité avec le Changement rapide d'utilisateur [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Configuration automatique sans fil [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Connexion secondaire [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Connexions réseau [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: DDE réseau [Stopped],
Path: C:\WINDOWS\system32\netdde.exe
Service Name: Détection matériel noyau [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Distributed Transaction Coordinator [Stopped],
Path: C:\WINDOWS\system32\msdtc.exe
Service Name: DSDM DDE réseau [Stopped],
Path: C:\WINDOWS\system32\netdde.exe
Service Name: Emplacement protégé [Running],
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Explorateur d'ordinateur [Stopped],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Fax [Stopped],
Path: C:\WINDOWS\system32\fxssvc.exe
Service Name: Fournisseur de la prise en charge de sécurité LM NT [Stopped],
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Gestion d'applications [Stopped],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de comptes de sécurité [Running],
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Gestionnaire de connexion automatique d'accès distant [Stopped],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de connexions d'accès distant [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de disque logique [Stopped],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Gestionnaire de l'Album [Stopped],
Path: C:\WINDOWS\system32\clipsrv.exe
Service Name: Gestionnaire de session d'aide sur le Bureau à distance [Stopped],
Path: C:\WINDOWS\system32\sessmgr.exe
Service Name: Horloge Windows [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Hôte de périphérique universel Plug-and-Play [Running],
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: HTTP SSL [Stopped],
Path: C:\WINDOWS\System32\svchost.exe -k HTTPFilter
Service Name: Infrastructure de gestion Windows [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Journal des événements [Running],
Path: C:\WINDOWS\system32\services.exe
Service Name: Journaux et alertes de performance [Stopped],
Path: C:\WINDOWS\system32\smlogsvc.exe
Service Name: Lanceur de processus serveur DCOM [Running],
Path: C:\WINDOWS\system32\svchost -k DcomLaunch
Service Name: Localisateur d'appels de procédure distante (RPC) [Stopped],
Path: C:\WINDOWS\system32\locator.exe
Service Name: Mises à jour automatiques [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: MS Software Shadow Copy Provider [Stopped],
Path: C:\WINDOWS\system32\dllhost.exe /Processid:{F03AF93D-C6C3-4FE8-8194-D6D1B5651DC1}
Service Name: NLA (Network Location Awareness) [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Notebook Manager Service [Running],
Path: C:\Acer\eManager\anbmServ.exe
Service Name: Notification d'événement système [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Office Source Engine [Stopped],
Path: "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
Service Name: Onduleur [Stopped],
Path: C:\WINDOWS\System32\ups.exe
Service Name: Ouverture de session réseau [Stopped],
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Pare-feu Windows / Partage de connexion Internet [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Partage de Bureau à distance NetMeeting [Stopped],
Path: C:\WINDOWS\system32\mnmsrvc.exe
Service Name: Planificateur de tâches [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Plug-and-Play [Running],
Path: C:\WINDOWS\system32\services.exe
Service Name: QoS RSVP [Stopped],
Path: C:\WINDOWS\system32\rsvp.exe
Service Name: Routage et accès distant [Stopped],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Serveur [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Service COM de gravage de CD IMAPI [Stopped],
Path: C:\WINDOWS\system32\imapi.exe
Service Name: Service d'administration du Gestionnaire de disque logique [Stopped],
Path: C:\WINDOWS\System32\dmadmin.exe /com
Service Name: Service d'approvisionnement réseau [Stopped],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Service de découvertes SSDP [Running],
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Service de la passerelle de la couche Application [Running],
Path: C:\WINDOWS\System32\alg.exe
Service Name: Service de l'iPod [Running],
Path: "C:\Program Files\iPod\bin\iPodService.exe"
Service Name: Service de numéro de série du lecteur multimédia portable [Stopped],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Service de rapport d'erreurs [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Service de restauration système [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Service de transfert intelligent en arrière-plan [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Service d'indexation [Stopped],
Path: C:\WINDOWS\system32\cisvc.exe
Service Name: Service Messenger Sharing Folders USN Journal Reader [Stopped],
Path: "C:\Program Files\MSN Messenger\usnsvc.exe"
Service Name: Service Partage réseau du Lecteur Windows Media [Stopped],
Path: "C:\Program Files\Windows Media Player\WMPNetwk.exe"
Service Name: Services de cryptographie [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Services IPSEC [Running],
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Services Terminal Server [Running],
Path: C:\WINDOWS\System32\svchost -k DComLaunch
Service Name: Spouleur d'impression [Running],
Path: C:\WINDOWS\system32\spoolsv.exe
Service Name: Station de travail [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Stockage amovible [Stopped],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Système d'événements de COM+ [Running],
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Téléphonie [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Thèmes [Running],
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: WebClient [Running],
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Windows Driver Foundation - User-mode Driver Framework [Stopped],
Path: C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
Service Name: Windows Installer [Stopped],
Path: C:\WINDOWS\system32\msiexec.exe /V
Finished...

Voici le raport

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Wednesday, March 25, 2009 1:30:57 PM
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version : 5.0.84.2
Dernière mise à jour de la base antivirus Kaspersky : 25/03/2009
Enregistrements dans la base antivirus Kaspersky : 1966019
-------------------------------------------------------------------------------

Paramètres d'analyse:
Analyser avec la base antivirus suivante: étendue
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
C:\
D:\
E:\

Statistiques de l'analyse:
Total d'objets analysés: 54795
Nombre de virus trouvés: 0
Nombre d'objets infectés: 0 / 0
Nombre d'objets suspects: 0
Durée de l'analyse: 01:42:27

Nom de l'objet infecté / Nom du virus / Dernière action
C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SYSTEM L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SOFTWARE L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\DEFAULT L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\scanlogs\I_00000053.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\emc\Log\emc.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcore.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgns.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgrs.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgsched.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgwd.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcfg.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgsrm.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcore.log.1 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgscan.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgldr.log L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\Local Settings\Temp\Acr10.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\Application Data\Adobe\Acrobat\7.0\Updater\udlog.txt L'objet est verrouillé ignoré
C:\Documents and Settings\Cécile\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-3-25-2009( 10-2-25 ).SDB L'objet est verrouillé ignoré
C:\System Volume Information\_restore{3FFD409C-A779-4E68-83FD-8EA2CEAF0EFF}\RP269\change.log L'objet est verrouillé ignoré

Analyse terminée.

C'est bon il a disparu!

Merci pour tout et bravo a toi!!

C'est résolu

voici le rappot :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:45:32, on 27/03/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\iTunesHelper.exe
C:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre1.6.0_06\bin\jucheck.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\AVG\AVG8\avgscanx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunesHelper.exe"
O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3398483116-2159317899-4118823825-501\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Invité')
O4 - HKUS\S-1-5-21-3398483116-2159317899-4118823825-501\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Invité')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Media Player.lnk = D:\Adobe Media Player\Adobe Media Player.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://decbetaashakira.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=21871
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe