Pubs intempestives

Salut,

Merci pour ton aide et ta rapidité à répondre.

En premier le résultat de la désinfection puis le scan de HijackThis.

Bonne soirée.

Clean Navipromo version 3.7.6 commencé le 14/04/2009 à 20:44:35,53

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Bienvenue ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1229 [VPS 090409-0] 4.8.1229 (Activated)


C:\ (Local Disk) - NTFS - Total:47 Go (Free:10 Go)
D:\ (Local Disk) - NTFS - Total:185 Go (Free:45 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)


Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\Windows\System32" *


* Suppression dans "C:\Users\Bienvenue\AppData\Local\Microsoft" *


* Suppression dans "C:\Users\Bienvenue\AppData\Local\virtualstore\windows\system32" *


* Suppression dans "C:\Users\Bienvenue\AppData\Local" *



*** Suppression dossiers dans "C:\Windows" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***


*** Suppression dossiers dans "C:\ProgramData" ***


*** Suppression dossiers dans c:\users\bienve~1\appdata\roaming\micros~1\windows\startm~1\programs ***


*** Suppression dossiers dans "C:\Users\Bienvenue\AppData\Local\virtualstore\Program Files" ***


*** Suppression dossiers dans "C:\Users\Bienvenue\AppData\Local" ***


*** Suppression dossiers dans "C:\Users\Bienvenue\AppData\Roaming" ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\BIENVE~1\AppData\Local\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\Windows\system32" *



* Dans "C:\Users\Bienvenue\AppData\Local\Microsoft" *



* Dans "C:\Users\Bienvenue\AppData\Local\virtualstore\windows\system32" *



* Dans "C:\Users\Bienvenue\AppData\Local" *


migeq.exe trouvé !
Copie migeq.exe réalisée avec succès !
migeq.exe supprimé !

migeq.dat trouvé !
Copie migeq.dat réalisée avec succès !
migeq.dat supprimé !

migeq_nav.dat trouvé !
Copie migeq_nav.dat réalisée avec succès !
migeq_nav.dat supprimé !

migeq_navps.dat trouvé !
Copie migeq_navps.dat réalisée avec succès !
migeq_navps.dat supprimé !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !


*** Recherche autres dossiers et fichiers connus ***



*** Nettoyage terminé le 14/04/2009 à 20:48:34,80 ***




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:05:35, on 14/04/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\notepad.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - (no file)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\orange\ToolbarFR\ToolbarContainer101000304.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [EPSON Stylus SX200 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE /FU "C:\Windows\TEMP\E_S903F.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\Users\BIENVE~1\AppData\Local\Temp\cce2F48.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: traduire la page - C:\Users\BIENVE~1\AppData\Local\Temp\cce2F37.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\Users\BIENVE~1\AppData\Local\Temp\cce2F38.html
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - (no file)
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader4.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe

Voilà le résultat :


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Bienvenue ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 090409-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:47 Go (Free:11 Go)
D:\ (Local Disk) - NTFS - Total:185 Go (Free:45 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 14/04/2009|22:11 )

[ UAC => 0 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\ProgramData\GamesBar
C:\ProgramData\GamesBar\07-10-22-22-17-24
C:\ProgramData\GamesBar\07-10-22-22-17-24.xm_
C:\ProgramData\GamesBar\07-10-26-21-53-58
C:\ProgramData\GamesBar\07-10-26-21-53-58.xm_
C:\ProgramData\GamesBar\07-10-29-18-33-06
C:\ProgramData\GamesBar\07-10-29-18-33-06.xm_
C:\ProgramData\GamesBar\07-11-01-09-22-11
C:\ProgramData\GamesBar\07-11-01-09-22-11.xm_
C:\ProgramData\GamesBar\07-11-13-23-51-28
C:\ProgramData\GamesBar\07-11-13-23-51-28.xm_
C:\ProgramData\GamesBar\07-12-05-13-29-39
C:\ProgramData\GamesBar\07-12-05-13-29-39.xm_
C:\ProgramData\GamesBar\08-01-20-22-42-32
C:\ProgramData\GamesBar\08-01-20-22-42-32.xm_
C:\ProgramData\GamesBar\08-01-22-21-38-12
C:\ProgramData\GamesBar\08-01-22-21-38-12.xm_
C:\ProgramData\GamesBar\08-02-01-22-18-31
C:\ProgramData\GamesBar\08-02-01-22-18-31.xm_
C:\ProgramData\GamesBar\08-02-06-06-29-11
C:\ProgramData\GamesBar\08-02-06-06-29-11.xm_
C:\ProgramData\GamesBar\08-02-11-15-02-36
C:\ProgramData\GamesBar\08-02-11-15-02-36.xm_
C:\ProgramData\GamesBar\08-03-10-08-43-48
C:\ProgramData\GamesBar\08-03-10-08-43-48.xm_
C:\ProgramData\GamesBar\08-04-06-18-09-54
C:\ProgramData\GamesBar\08-04-06-18-09-54.xm_
C:\ProgramData\GamesBar\08-11-25-13-21-36
C:\ProgramData\GamesBar\08-11-25-13-21-36.xm_
C:\ProgramData\GamesBar\4_elements16x16.gif
C:\ProgramData\GamesBar\about.gif
C:\ProgramData\GamesBar\action.gif
C:\ProgramData\GamesBar\airport_mania_first_flight16x16.gif
C:\ProgramData\GamesBar\alice_greenfingers216x16.gif
C:\ProgramData\GamesBar\arcade.gif
C:\ProgramData\GamesBar\bejeweled_twist16x16.gif
C:\ProgramData\GamesBar\buy.gif
C:\ProgramData\GamesBar\call_of_atlantis16x16.gif
C:\ProgramData\GamesBar\cards.gif
C:\ProgramData\GamesBar\chicken_invaders_3_xmas16x16.gif
C:\ProgramData\GamesBar\color_cross16x16.gif
C:\ProgramData\GamesBar\deals.gif
C:\ProgramData\GamesBar\download.gif
C:\ProgramData\GamesBar\dream_day_wedding_216x16.gif
C:\ProgramData\GamesBar\feedback.gif
C:\ProgramData\GamesBar\help.gif
C:\ProgramData\GamesBar\highlight.gif
C:\ProgramData\GamesBar\jigsaw.gif
C:\ProgramData\GamesBar\kids.gif
C:\ProgramData\GamesBar\mahjong.gif
C:\ProgramData\GamesBar\mygames.gif
C:\ProgramData\GamesBar\mystery_pi_the_vegas_heist16x16.gif
C:\ProgramData\GamesBar\my_tribe16x16.gif
C:\ProgramData\GamesBar\newGames.gif
C:\ProgramData\GamesBar\oberonconfig.xm_
C:\ProgramData\GamesBar\obSearchHistory.dat
C:\ProgramData\GamesBar\partner.gif
C:\ProgramData\GamesBar\popup_off.gif
C:\ProgramData\GamesBar\popup_on.gif
C:\ProgramData\GamesBar\puzzle.gif
C:\ProgramData\GamesBar\saqqarah16x16.gif
C:\ProgramData\GamesBar\search.gif
C:\ProgramData\GamesBar\sendafriend.gif
C:\ProgramData\GamesBar\sherlock_holmes16x16.gif
C:\ProgramData\GamesBar\sports.gif
C:\ProgramData\GamesBar\treasures_of_mystery_island16x16.gif
C:\ProgramData\GamesBar\trial.gif
C:\ProgramData\GamesBar\uninstall.gif
C:\ProgramData\GamesBar\update.gif
C:\ProgramData\GamesBar\virtual_pool316x16.gif
C:\ProgramData\GamesBar\womens_murder_club_fr16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\7_wonders_216x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\about.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\action.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\AliceGreenfingers16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\arcade.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\Azada16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\buy.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\cards.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\caution.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\ChickRush_deluxe16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\deals.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\death_nile16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\download.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\feedback.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\feyruna16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\help.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\highlight.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\jigsaw.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\kids.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\mahjong.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\MCF_raven16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\multiplayer.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\mygames.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\newGames.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\partner.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\pathstorm16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\popup_off.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\popup_on.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\puzzle.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\search.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\sendafriend.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\sports.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\the_apprentice_LA16x16.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\trial.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\uninstall.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\update.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\webgame.gif
C:\ProgramData\GamesBar\07-10-22-22-17-24\zengems16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\7_wonders_216x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\about.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\action.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\AliceGreenfingers16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\arcade.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\Azada16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\buy.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\cards.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\caution.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\ChickRush_deluxe16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\deals.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\death_nile16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\download.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\feedback.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\feyruna16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\help.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\highlight.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\jigsaw.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\kids.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\mahjong.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\MCF_raven16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\multiplayer.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\mygames.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\newGames.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\partner.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\pathstorm16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\popup_off.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\popup_on.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\puzzle.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\search.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\sendafriend.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\sports.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\the_apprentice_LA16x16.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\trial.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\uninstall.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\update.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\webgame.gif
C:\ProgramData\GamesBar\07-10-26-21-53-58\zengems16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\7_wonders_216x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\about.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\action.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\AliceGreenfingers16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\arcade.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\Azada16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\buy.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\cards.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\caution.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\ChickRush_deluxe16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\deals.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\death_nile16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\download.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\feedback.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\feyruna16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\help.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\highlight.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\jigsaw.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\kids.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\mahjong.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\MCF_raven16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\multiplayer.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\mygames.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\newGames.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\partner.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\pathstorm16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\popup_off.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\popup_on.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\puzzle.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\search.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\sendafriend.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\sports.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\the_apprentice_LA16x16.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\trial.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\uninstall.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\update.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\webgame.gif
C:\ProgramData\GamesBar\07-10-29-18-33-06\zengems16x16.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\about.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\action.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\arcade.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\Azada16x16.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\buy.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\cards.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\caution.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\deals.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\death_nile16x16.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\download.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\feedback.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\help.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\highlight.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\jigsaw.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\kids.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\mahjong.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\multiplayer.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\mygames.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\newGames.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\partner.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\popup_off.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\popup_on.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\puzzle.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\search.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\sendafriend.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\sports.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\trial.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\uninstall.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\update.gif
C:\ProgramData\GamesBar\07-11-01-09-22-11\webgame.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\about.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\action.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\arcade.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\Azada16x16.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\buy.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\cards.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\caution.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\deals.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\death_nile16x16.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\download.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\feedback.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\help.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\highlight.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\jigsaw.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\kids.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\mahjong.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\multiplayer.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\mygames.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\newGames.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\partner.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\popup_off.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\popup_on.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\puzzle.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\search.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\sendafriend.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\sports.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\trial.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\uninstall.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\update.gif
C:\ProgramData\GamesBar\07-11-13-23-51-28\webgame.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\about.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\action.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\AliceGreenfingers16x16.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\arcade.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\Azada16x16.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\buy.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\cards.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\caution.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\deals.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\death_nile16x16.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\download.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\feedback.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\help.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\highlight.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\jigsaw.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\kids.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\mahjong.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\MCF_raven16x16.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\multiplayer.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\mygames.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\newGames.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\partner.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\popup_off.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\popup_on.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\puzzle.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\search.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\sendafriend.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\sports.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\trial.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\uninstall.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\update.gif
C:\ProgramData\GamesBar\07-12-05-13-29-39\webgame.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\about.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\action.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\arcade.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\Azada16x16.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\buy.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\cards.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\caution.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\deals.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\death_nile16x16.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\download.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\feedback.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\help.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\highlight.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\jigsaw.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\kids.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\mahjong.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\multiplayer.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\mygames.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\newGames.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\partner.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\popup_off.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\popup_on.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\puzzle.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\search.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\sendafriend.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\sports.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\trial.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\uninstall.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\update.gif
C:\ProgramData\GamesBar\08-01-20-22-42-32\webgame.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\about.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\action.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\arcade.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\Azada16x16.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\buy.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\cards.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\caution.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\deals.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\death_nile16x16.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\download.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\feedback.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\help.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\highlight.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\jigsaw.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\kids.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\mahjong.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\multiplayer.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\mygames.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\newGames.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\partner.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\popup_off.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\popup_on.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\puzzle.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\search.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\sendafriend.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\sports.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\trial.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\uninstall.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\update.gif
C:\ProgramData\GamesBar\08-01-22-21-38-12\webgame.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\about.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\action.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\arcade.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\Azada16x16.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\buy.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\cards.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\deals.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\death_nile16x16.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\download.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\feedback.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\help.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\highlight.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\jigsaw.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\kids.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\mahjong.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\multiplayer.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\mygames.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\newGames.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\partner.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\popup_off.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\popup_on.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\puzzle.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\search.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\sendafriend.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\sports.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\trial.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\uninstall.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\update.gif
C:\ProgramData\GamesBar\08-02-01-22-18-31\webgame.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\about.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\action.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\arcade.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\buy.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\cards.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\deals.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\death_nile16x16.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\download.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\feedback.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\help.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\highlight.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\jigsaw.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\kids.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\mahjong.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\multiplayer.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\mygames.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\newGames.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\partner.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\popup_off.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\popup_on.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\puzzle.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\search.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\sendafriend.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\sports.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\trial.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\uninstall.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\update.gif
C:\ProgramData\GamesBar\08-02-06-06-29-11\webgame.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\about.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\action.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\arcade.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\buy.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\cards.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\deals.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\death_nile16x16.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\download.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\feedback.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\help.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\highlight.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\jigsaw.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\kids.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\mahjong.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\multiplayer.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\mygames.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\newGames.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\partner.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\popup_off.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\popup_on.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\puzzle.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\search.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\sendafriend.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\sports.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\trial.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\uninstall.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\update.gif
C:\ProgramData\GamesBar\08-02-11-15-02-36\webgame.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\about.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\action.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\arcade.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\Azada16x16.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\buy.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\cards.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\deals.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\death_nile16x16.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\download.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\feedback.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\help.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\highlight.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\jigsaw.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\kids.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\mahjong.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\multiplayer.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\mygames.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\newGames.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\partner.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\popup_off.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\popup_on.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\puzzle.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\search.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\sendafriend.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\sports.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\trial.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\uninstall.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\update.gif
C:\ProgramData\GamesBar\08-03-10-08-43-48\webgame.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\about.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\action.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\arcade.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\Azada16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\buy.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\cards.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\caribbean_hideaway16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\cradle_of_persia16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\cradle_rome16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\deals.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\death_nile16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\deep_quest16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\download.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\dr_daisy_pet_vet16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\family_restaurant16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\farm_frenzy16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\fashion_craze16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\feedback.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\help.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\highlight.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\jigsaw.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\kids.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\mahjong.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\multiplayer.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\mygames.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\newGames.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\partner.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\pirate_poker16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\pirate_stories_kit_ellis16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\popup_off.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\popup_on.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\puzzle.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\search.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\seasonmatch16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\sendafriend.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\solitaire_cruise16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\sports.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\supercow16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\trial.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\Turbo_Subs16x16.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\uninstall.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\update.gif
C:\ProgramData\GamesBar\08-04-06-18-09-54\webgame.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\7_wonders_treasures_of_seven16x16.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\about.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\download.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\escape_from_the_museum16x16.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\feedback.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\help.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\highlight.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\home_sweet_home_216x16.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\newGames.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\partner.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\popup_off.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\popup_on.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\restoring_rhonda16x16.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\search.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\sendafriend.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\the_hidden_object_show16x16.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\the_pini_society16x16.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\uninstall.gif
C:\ProgramData\GamesBar\08-11-25-13-21-36\update.gif
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\GamesBar
C:\Program Files\GamesBar
C:\Program Files\GamesBar\Localization-French.ini
C:\Program Files\GamesBar\OBGet.exe
C:\Program Files\GamesBar\uninst.exe

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.orange.fr/portail"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\Windows\\System32\\blank.htm"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\BIENVE~1\AppData\Roaming\uTorrent\bookworm deluxe Fr+keygen.rar.torrent
C:\Users\BIENVE~1\AppData\Roaming\uTorrent\The Rise of Atlantis + Crack.torrent
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack
C:\Users\BIENVE~1\Documents\Downloads\Dynomite Deluxe v2.71 (full game)\crk\CrAcK.exe
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack\Crack
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack\The Rise of Atlantis + Crack
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack\Crack\the rise of atlantis.exe
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack\The Rise of Atlantis + Crack\en_riseofatlantis_inst.exe


[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 14/04/2009|22:12 - Option : [1]

-----------\\ Fin du rapport a 22:12:21,22

Le rapport de suppression suivi du nouveau scan de HijackThis.
J'ai supprimé les cracks après avoir lancé la suppression par toolbar SD.


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Bienvenue ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 090409-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:47 Go (Free:11 Go)
D:\ (Local Disk) - NTFS - Total:185 Go (Free:45 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 14/04/2009|22:29 )

[ UAC => 1 ]

-----------\\ SUPPRESSION

Supprime! - C:\ProgramData\GamesBar\07-10-22-22-17-24
Supprime! - C:\ProgramData\GamesBar\07-10-22-22-17-24.xm_
Supprime! - C:\ProgramData\GamesBar\07-10-26-21-53-58
Supprime! - C:\ProgramData\GamesBar\07-10-26-21-53-58.xm_
Supprime! - C:\ProgramData\GamesBar\07-10-29-18-33-06
Supprime! - C:\ProgramData\GamesBar\07-10-29-18-33-06.xm_
Supprime! - C:\ProgramData\GamesBar\07-11-01-09-22-11
Supprime! - C:\ProgramData\GamesBar\07-11-01-09-22-11.xm_
Supprime! - C:\ProgramData\GamesBar\07-11-13-23-51-28
Supprime! - C:\ProgramData\GamesBar\07-11-13-23-51-28.xm_
Supprime! - C:\ProgramData\GamesBar\07-12-05-13-29-39
Supprime! - C:\ProgramData\GamesBar\07-12-05-13-29-39.xm_
Supprime! - C:\ProgramData\GamesBar\08-01-20-22-42-32
Supprime! - C:\ProgramData\GamesBar\08-01-20-22-42-32.xm_
Supprime! - C:\ProgramData\GamesBar\08-01-22-21-38-12
Supprime! - C:\ProgramData\GamesBar\08-01-22-21-38-12.xm_
Supprime! - C:\ProgramData\GamesBar\08-02-01-22-18-31
Supprime! - C:\ProgramData\GamesBar\08-02-01-22-18-31.xm_
Supprime! - C:\ProgramData\GamesBar\08-02-06-06-29-11
Supprime! - C:\ProgramData\GamesBar\08-02-06-06-29-11.xm_
Supprime! - C:\ProgramData\GamesBar\08-02-11-15-02-36
Supprime! - C:\ProgramData\GamesBar\08-02-11-15-02-36.xm_
Supprime! - C:\ProgramData\GamesBar\08-03-10-08-43-48
Supprime! - C:\ProgramData\GamesBar\08-03-10-08-43-48.xm_
Supprime! - C:\ProgramData\GamesBar\08-04-06-18-09-54
Supprime! - C:\ProgramData\GamesBar\08-04-06-18-09-54.xm_
Supprime! - C:\ProgramData\GamesBar\08-11-25-13-21-36
Supprime! - C:\ProgramData\GamesBar\08-11-25-13-21-36.xm_
Supprime! - C:\ProgramData\GamesBar\4_elements16x16.gif
Supprime! - C:\ProgramData\GamesBar\about.gif
Supprime! - C:\ProgramData\GamesBar\action.gif
Supprime! - C:\ProgramData\GamesBar\airport_mania_first_flight16x16.gif
Supprime! - C:\ProgramData\GamesBar\alice_greenfingers216x16.gif
Supprime! - C:\ProgramData\GamesBar\arcade.gif
Supprime! - C:\ProgramData\GamesBar\bejeweled_twist16x16.gif
Supprime! - C:\ProgramData\GamesBar\buy.gif
Supprime! - C:\ProgramData\GamesBar\call_of_atlantis16x16.gif
Supprime! - C:\ProgramData\GamesBar\cards.gif
Supprime! - C:\ProgramData\GamesBar\chicken_invaders_3_xmas16x16.gif
Supprime! - C:\ProgramData\GamesBar\color_cross16x16.gif
Supprime! - C:\ProgramData\GamesBar\deals.gif
Supprime! - C:\ProgramData\GamesBar\download.gif
Supprime! - C:\ProgramData\GamesBar\dream_day_wedding_216x16.gif
Supprime! - C:\ProgramData\GamesBar\feedback.gif
Supprime! - C:\ProgramData\GamesBar\help.gif
Supprime! - C:\ProgramData\GamesBar\highlight.gif
Supprime! - C:\ProgramData\GamesBar\jigsaw.gif
Supprime! - C:\ProgramData\GamesBar\kids.gif
Supprime! - C:\ProgramData\GamesBar\mahjong.gif
Supprime! - C:\ProgramData\GamesBar\mygames.gif
Supprime! - C:\ProgramData\GamesBar\mystery_pi_the_vegas_heist16x16.gif
Supprime! - C:\ProgramData\GamesBar\my_tribe16x16.gif
Supprime! - C:\ProgramData\GamesBar\newGames.gif
Supprime! - C:\ProgramData\GamesBar\oberonconfig.xm_
Supprime! - C:\ProgramData\GamesBar\obSearchHistory.dat
Supprime! - C:\ProgramData\GamesBar\partner.gif
Supprime! - C:\ProgramData\GamesBar\popup_off.gif
Supprime! - C:\ProgramData\GamesBar\popup_on.gif
Supprime! - C:\ProgramData\GamesBar\puzzle.gif
Supprime! - C:\ProgramData\GamesBar\saqqarah16x16.gif
Supprime! - C:\ProgramData\GamesBar\search.gif
Supprime! - C:\ProgramData\GamesBar\sendafriend.gif
Supprime! - C:\ProgramData\GamesBar\sherlock_holmes16x16.gif
Supprime! - C:\ProgramData\GamesBar\sports.gif
Supprime! - C:\ProgramData\GamesBar\treasures_of_mystery_island16x16.gif
Supprime! - C:\ProgramData\GamesBar\trial.gif
Supprime! - C:\ProgramData\GamesBar\uninstall.gif
Supprime! - C:\ProgramData\GamesBar\update.gif
Supprime! - C:\ProgramData\GamesBar\virtual_pool316x16.gif
Supprime! - C:\ProgramData\GamesBar\womens_murder_club_fr16x16.gif
Supprime! - C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\GamesBar
Supprime! - C:\Program Files\GamesBar\Localization-French.ini
Supprime! - C:\Program Files\GamesBar\OBGet.exe
Supprime! - C:\Program Files\GamesBar\uninst.exe
Supprime! - C:\ProgramData\GamesBar
Supprime! - C:\Program Files\GamesBar

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.orange.fr/portail"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\Windows\\System32\\blank.htm"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\BIENVE~1\AppData\Roaming\uTorrent\bookworm deluxe Fr+keygen.rar.torrent
C:\Users\BIENVE~1\AppData\Roaming\uTorrent\The Rise of Atlantis + Crack.torrent
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack
C:\Users\BIENVE~1\Documents\Downloads\Dynomite Deluxe v2.71 (full game)\crk\CrAcK.exe
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack\Crack
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack\The Rise of Atlantis + Crack
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack\Crack\the rise of atlantis.exe
C:\Users\BIENVE~1\Documents\Downloads\The Rise of Atlantis + Crack\The Rise of Atlantis + Crack\en_riseofatlantis_inst.exe


[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 14/04/2009|22:12 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 14/04/2009|22:30 - Option : [2]

-----------\\ Fin du rapport a 22:30:36,57



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:43:08, on 14/04/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - (no file)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\orange\ToolbarFR\ToolbarContainer101000304.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [EPSON Stylus SX200 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE /FU "C:\Windows\TEMP\E_S903F.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\Users\BIENVE~1\AppData\Local\Temp\cceF56C.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: traduire la page - C:\Users\BIENVE~1\AppData\Local\Temp\cceF55A.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\Users\BIENVE~1\AppData\Local\Temp\cceF56B.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader4.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe

Bonjour,

Voici le rapport de malwarebytes :

Malwarebytes' Anti-Malware 1.36
Version de la base de données: 1985
Windows 6.0.6001 Service Pack 1

15/04/2009 14:17:05
mbam-log-2009-04-15 (14-17-05).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 287786
Temps écoulé: 1 hour(s), 7 minute(s), 38 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Download\CheckExeSignatures (Disabled.checkEXESignatures) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Windows\Build in Time\uninstall.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Les pubs intempestives ont disparu.
Merci pour l'article sur les toolbars.
Ok pour une analyse en profondeur.

Est-ce qu'il vaut mieux que je garde malwarebytes ou spybot ?

Comment supprimer internet explorer ?
D'avance merci.

Bonjour,

Voici le rapport :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Bienvenue at 2009-04-17 15:43:56
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 10 GB (21%) free of 48 GB
Total RAM: 1982 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:44:00, on 17/04/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\Bienvenue\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Bienvenue.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr/r/Ohome_accueil?ref=O_toolbar32_hook_defaultPage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - (no file)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\orange\ToolbarFR\ToolbarContainer101000304.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [EPSON Stylus SX200 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE /FU "C:\Windows\TEMP\E_S903F.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\Users\BIENVE~1\AppData\Local\Temp\cceB8D.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: traduire la page - C:\Users\BIENVE~1\AppData\Local\Temp\cceB7C.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\Users\BIENVE~1\AppData\Local\Temp\cceB8C.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe

pour le fichier <gras><gras>C:\Windows\system32\SetIEInstalledDate.exe </gras></gras>

Fichier SetIEInstalledDate.exe reçu le 2009.04.17 15:57:02 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE


Résultat: 0/40 (0%)
en train de charger les informations du serveur...
Votre fichier est dans la file d'attente, en position: 2.
L'heure estimée de démarrage est entre 44 et 63 secondes.
Ne fermez pas la fenêtre avant la fin de l'analyse.
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération.
Formaté Impression des résultats Votre fichier a expiré ou n'existe pas.
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.
Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée. Email:


Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.04.17 -
AhnLab-V3 5.0.0.2 2009.04.17 -
AntiVir 7.9.0.143 2009.04.17 -
Antiy-AVL 2.0.3.1 2009.04.17 -
Authentium 5.1.2.4 2009.04.17 -
Avast 4.8.1335.0 2009.04.16 -
AVG 8.5.0.287 2009.04.17 -
BitDefender 7.2 2009.04.17 -
CAT-QuickHeal 10.00 2009.04.17 -
ClamAV 0.94.1 2009.04.17 -
Comodo 1117 2009.04.17 -
DrWeb 4.44.0.09170 2009.04.17 -
eSafe 7.0.17.0 2009.04.13 -
eTrust-Vet 31.6.6455 2009.04.14 -
F-Prot 4.4.4.56 2009.04.16 -
F-Secure 8.0.14470.0 2009.04.17 -
Fortinet 3.117.0.0 2009.04.17 -
GData 19 2009.04.17 -
Ikarus T3.1.1.49.0 2009.04.17 -
K7AntiVirus 7.10.704 2009.04.15 -
Kaspersky 7.0.0.125 2009.04.17 -
McAfee 5586 2009.04.16 -
McAfee+Artemis 5586 2009.04.16 -
McAfee-GW-Edition 6.7.6 2009.04.17 -
Microsoft 1.4502 2009.04.17 -
NOD32 4016 2009.04.17 -
Norman 6.00.06 2009.04.17 -
nProtect 2009.1.8.0 2009.04.17 -
Panda 10.0.0.14 2009.04.17 -
PCTools 4.4.2.0 2009.04.17 -
Prevx1 V2 2009.04.17 -
Rising 21.25.44.00 2009.04.17 -
Sophos 4.40.0 2009.04.17 -
Sunbelt 3.2.1858.2 2009.04.17 -
Symantec 1.4.4.12 2009.04.17 -
TheHacker 6.3.4.0.309 2009.04.16 -
TrendMicro 8.700.0.1004 2009.04.17 -
VBA32 3.12.10.2 2009.04.12 -
ViRobot 2009.4.17.1698 2009.04.17 -
VirusBuster 4.6.5.0 2009.04.16 -
Information additionnelle
File size: 107008 bytes
MD5...: 85aaeaade50427a7184d6ca1c71c3ba3
SHA1..: 4bc6b8b48491070bc65bed628e48e4d79bb20884
SHA256: 6953af687e204cb0a241416d1780c7c5f112dce23d0d4b193bcfbbc580cb4368
SHA512: 3ca33abd25d8acb3e50bf2c9ba033b0076afd27cf38cc41be4e31b1c38b97d35
dd0a2aa66b824e4c94ece2e3e2e4a4a269a167debd51b1ca2e616caf3960d73c
ssdeep: 3072:8bQjrf81VIbVNUrutgrWM0iM8sbgUT1qIfZuU1V9TT9Ru7Gl1l:38sbgs1q
IfZhV9TDu7Gl

PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (75.0%)
Win32 Executable Generic (16.9%)
Generic Win/DOS Executable (3.9%)
DOS Executable Generic (3.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x788b
timedatestamp.....: 0x49b3acf9 (Sun Mar 08 11:33:13 2009)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x13d77 0x13e00 6.04 07d6eb49eeead8eaa38c43cc9f369ec2
.data 0x15000 0x3d40 0x3400 1.49 e1ef614825fd4cd6ea1abf4c6db50d83
.rsrc 0x19000 0x440 0x600 2.61 c1c7eb4853c270ba9adb782c4bb286d0
.reloc 0x1a000 0x2566 0x2600 3.98 09a4399c87737638c5b5251bf08ebb91

( 10 imports )
> KERNEL32.dll: GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, GetProcessHeap, HeapFree, VirtualQuery, MapViewOfFile, CreateFileMappingW, GetFileSize, UnmapViewOfFile, TlsAlloc, GetLocalTime, HeapReAlloc, TlsSetValue, HeapAlloc, TlsGetValue, SetLastError, LocalFree, FormatMessageW, RaiseException, ExitProcess, TlsFree, GetWindowsDirectoryA, CloseHandle, GetCurrentThread, ReleaseMutex, WaitForSingleObject, SetFilePointer, WriteFile, GetModuleFileNameA, CreateMutexW, CreateFileW, GetModuleFileNameW, DeleteFileW, GetVersion, GetSystemInfo, CreateMutexA, CreateFileMappingA, CreateFileA, DeleteFileA, LoadLibraryA, ExpandEnvironmentStringsA, GetProcAddress, GetModuleHandleW, FlushFileBuffers, GetWindowsDirectoryW, GetTickCount, OutputDebugStringA, IsDebuggerPresent, HeapCreate, HeapDestroy, DeviceIoControl, LocalAlloc, GetEnvironmentVariableW, CompareStringW, GetCommandLineW, WideCharToMultiByte, IsWow64Process, EncodePointer, DecodePointer, SetFileAttributesW, DuplicateHandle, GetDriveTypeW, GetLogicalDrives, GetLogicalDriveStringsW, MoveFileExW, GetCurrentProcessId, CopyFileW, GlobalSize, GlobalFree, GlobalUnlock, GlobalLock, GlobalAlloc, HeapWalk, HeapValidate, HeapCompact, GlobalMemoryStatus, GetVersionExW, ResetEvent, CreateThread, WaitForMultipleObjects, CreateEventW, FreeLibrary, SetEvent, RemoveDirectoryW, GetTempFileNameW, ReadFile, CreateDirectoryW, DebugBreak, HeapSize, GetVersionExA, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, FindFirstFileW, FindNextFileW, FindClose, GetFullPathNameW, SetErrorMode, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, GetLastError, Sleep, InterlockedExchange, GetTempPathW, GetShortPathNameW, CreateProcessW, CreateProcessA, OpenProcess, GetVolumeInformationW, SetFileTime, SetEndOfFile, OpenEventW, GetComputerNameW, GetOverlappedResult, GetFileType, GetDiskFreeSpaceW, GetDiskFreeSpaceExW, GetPrivateProfileStringW, LoadLibraryW, GetExitCodeProcess, GetLocaleInfoW, VirtualAlloc, VirtualFree, MoveFileW, GetCurrentThreadId, MultiByteToWideChar, ExpandEnvironmentStringsW, GetFileAttributesW
> msvcrt.dll: _exit, _XcptFilter, _ismbblead, exit, _acmdln, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__fmode, __set_app_type, _terminate@@YAXXZ, _except_handler4_common, _controlfp, _unlock, __dllonexit, _lock, _onexit, _vsnprintf, _vsnwprintf, __3@YAXPAX@Z, _cexit, __getmainargs, __2@YAPAXI@Z, __p__commode, __1type_info@@UAE@XZ, __CxxFrameHandler3, malloc, wcsrchr, memset, _purecall, memcpy, _wcsicmp, iswctype, swscanf_s, _wtoi, wcstok, fclose, feof, fgetws, _wfopen, _wcsnicmp, free, towlower
> ADVAPI32.dll: RegEnumValueW, SetSecurityDescriptorOwner, RegSetKeySecurity, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, CryptReleaseContext, CryptDestroyHash, CryptDestroyKey, CryptDecrypt, CryptEncrypt, CryptGetHashParam, CryptGenRandom, CryptDeriveKey, CryptHashData, CryptCreateHash, CryptAcquireContextW, SetSecurityInfo, GetSecurityInfo, IsValidSid, LookupAccountSidW, LookupAccountNameW, GetUserNameW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, SetSecurityDescriptorDacl, EqualSid, AddAccessAllowedAce, InitializeAcl, GetLengthSid, GetTokenInformation, OpenThreadToken, InitializeSecurityDescriptor, RegCloseKey, RegDeleteValueW, RegSetValueExW, RegCreateKeyExW, RegQueryValueExW, RegOpenKeyW, RegFlushKey, RegDeleteKeyW, RegEnumKeyExW, RegQueryInfoKeyW, RegOpenKeyExW, RegUnLoadKeyW, RegLoadKeyW, SetNamedSecurityInfoW
> SHELL32.dll: -, CommandLineToArgvW, ExtractIconExW, ShellExecuteExW
> dbghelp.dll: MiniDumpWriteDump
> OLEAUT32.dll: -, -, -
> USER32.dll: UnregisterClassA, LoadIconW, MessageBoxW, MessageBoxA
> IPHLPAPI.DLL: GetIpAddrTable
> ole32.dll: CreateStreamOnHGlobal, GetHGlobalFromStream, CoTaskMemFree, CoTaskMemAlloc, CoUninitialize, CoInitializeEx, CoInitialize, CoCreateInstance
> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, WSAIoctl, -, -

( 66 exports )
__0_$CDynamicArray@EPAE@@QAE@I@Z, __0_$CDynamicArray@EPAUSKey@@@@QAE@I@Z, __0_$CDynamicArray@EPAUSValue@@@@QAE@I@Z, __0_$CDynamicArray@GPAG@@QAE@I@Z, __0_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAE@I@Z, __0_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAE@I@Z, __0_$CDynamicArray@_KPA_K@@QAE@I@Z, __1_$CDynamicArray@EPAE@@QAE@XZ, __1_$CDynamicArray@EPAUSKey@@@@QAE@XZ, __1_$CDynamicArray@EPAUSValue@@@@QAE@XZ, __1_$CDynamicArray@GPAG@@QAE@XZ, __1_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAE@XZ, __1_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAE@XZ, __1_$CDynamicArray@_KPA_K@@QAE@XZ, __4_$CDynamicArray@EPAE@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@EPAUSKey@@@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@EPAUSValue@@@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@GPAG@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@_KPA_K@@QAEAAV0@ABV0@@Z, __A_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEAAPAUSEnumBinContext@@I@Z, __A_$CDynamicArray@_KPA_K@@QAEAA_KI@Z, __B_$CDynamicArray@EPAUSKey@@@@QBEPAUSKey@@XZ, __B_$CDynamicArray@EPAUSValue@@@@QBEPAUSValue@@XZ, __B_$CDynamicArray@GPAG@@QBEPAGXZ, __C_$CDynamicArray@EPAUSKey@@@@QBEPAUSKey@@XZ, __C_$CDynamicArray@EPAUSValue@@@@QBEPAUSValue@@XZ, ___F_$CDynamicArray@EPAE@@QAEXXZ, ___F_$CDynamicArray@EPAUSKey@@@@QAEXXZ, ___F_$CDynamicArray@EPAUSValue@@@@QAEXXZ, ___F_$CDynamicArray@GPAG@@QAEXXZ, ___F_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEXXZ, ___F_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEXXZ, ___F_$CDynamicArray@_KPA_K@@QAEXXZ, _Add@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEHAAPAUSEnumBinContext@@@Z, _Add@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEHAAUSKeeperEntry@CBlackboardFactory@@@Z, _Add@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEHAAUSKeeperEntry@CBlackboardFactory@@AAI@Z, _Add@_$CDynamicArray@_KPA_K@@QAEHAA_K@Z, _ElementAt@_$CDynamicArray@GPAG@@QAEAAGI@Z, _ElementAt@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEAAUSKeeperEntry@CBlackboardFactory@@I@Z, _GetBuffer@_$CDynamicArray@EPAE@@QAEPAEI@Z, _GetBuffer@_$CDynamicArray@EPAUSValue@@@@QAEPAUSValue@@I@Z, _GetBuffer@_$CDynamicArray@GPAG@@QAEPAGI@Z, _GetSize@_$CDynamicArray@EPAE@@QBEIXZ, _GetSize@_$CDynamicArray@GPAG@@QBEIXZ, _GetSize@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QBEIXZ, _GetSize@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QBEIXZ, _GetSize@_$CDynamicArray@_KPA_K@@QBEIXZ, _Init@_$CDynamicArray@EPAE@@IAEXI@Z, _Init@_$CDynamicArray@EPAUSKey@@@@IAEXI@Z, _Init@_$CDynamicArray@EPAUSValue@@@@IAEXI@Z, _Init@_$CDynamicArray@GPAG@@IAEXI@Z, _Init@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@IAEXI@Z, _Init@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@IAEXI@Z, _Init@_$CDynamicArray@_KPA_K@@IAEXI@Z, _RemoveAll@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEXXZ, _RemoveAll@_$CDynamicArray@_KPA_K@@QAEXXZ, _RemoveItemFromTail@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEXXZ, _SetSize@_$CDynamicArray@EPAE@@QAEHK@Z, _SetSize@_$CDynamicArray@EPAUSKey@@@@QAEHK@Z, _SetSize@_$CDynamicArray@EPAUSValue@@@@QAEHK@Z, _SetSize@_$CDynamicArray@GPAG@@QAEHK@Z, _SetSize@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEHK@Z, _SetSize@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEHK@Z, _SetSize@_$CDynamicArray@_KPA_K@@QAEHK@Z

RDS...: NSRL Reference Data Set
-



Pour le fichier C:\Windows\system32\RegisterIEPKEYs.exe


Fichier RegisterIEPKEYs.exe reçu le 2009.04.17 16:04:15 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE


Résultat: 0/40 (0%)
en train de charger les informations du serveur...
Votre fichier est dans la file d'attente, en position: 3.
L'heure estimée de démarrage est entre 50 et 72 secondes.
Ne fermez pas la fenêtre avant la fin de l'analyse.
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération.
Formaté Impression des résultats Votre fichier a expiré ou n'existe pas.
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.
Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée. Email:


Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.04.17 -
AhnLab-V3 5.0.0.2 2009.04.17 -
AntiVir 7.9.0.143 2009.04.17 -
Antiy-AVL 2.0.3.1 2009.04.17 -
Authentium 5.1.2.4 2009.04.17 -
Avast 4.8.1335.0 2009.04.16 -
AVG 8.5.0.287 2009.04.17 -
BitDefender 7.2 2009.04.17 -
CAT-QuickHeal 10.00 2009.04.17 -
ClamAV 0.94.1 2009.04.17 -
Comodo 1117 2009.04.17 -
DrWeb 4.44.0.09170 2009.04.17 -
eSafe 7.0.17.0 2009.04.13 -
eTrust-Vet 31.6.6455 2009.04.14 -
F-Prot 4.4.4.56 2009.04.16 -
F-Secure 8.0.14470.0 2009.04.17 -
Fortinet 3.117.0.0 2009.04.17 -
GData 19 2009.04.17 -
Ikarus T3.1.1.49.0 2009.04.17 -
K7AntiVirus 7.10.704 2009.04.15 -
Kaspersky 7.0.0.125 2009.04.17 -
McAfee 5586 2009.04.16 -
McAfee+Artemis 5586 2009.04.16 -
McAfee-GW-Edition 6.7.6 2009.04.17 -
Microsoft 1.4502 2009.04.17 -
NOD32 4016 2009.04.17 -
Norman 6.00.06 2009.04.17 -
nProtect 2009.1.8.0 2009.04.17 -
Panda 10.0.0.14 2009.04.17 -
PCTools 4.4.2.0 2009.04.17 -
Prevx1 V2 2009.04.17 -
Rising 21.25.44.00 2009.04.17 -
Sophos 4.40.0 2009.04.17 -
Sunbelt 3.2.1858.2 2009.04.17 -
Symantec 1.4.4.12 2009.04.17 -
TheHacker 6.3.4.0.309 2009.04.16 -
TrendMicro 8.700.0.1004 2009.04.17 -
VBA32 3.12.10.2 2009.04.12 -
ViRobot 2009.4.17.1698 2009.04.17 -
VirusBuster 4.6.5.0 2009.04.16 -
Information additionnelle
File size: 107520 bytes
MD5...: 50b3dc4e6b89a9ea2d62f95b519c6f13
SHA1..: 36689cc0ea53a9b9f4404ef4a694f4c98bc98776
SHA256: 97692b4a17120f6dee42e5b0e9635a52ae3b16500b4adbe084d0c36713b6b748
SHA512: 3d084c20777f5ac9146facbcb125f00a62dc7238e25632edb07845ed2c778535
e6cdd8dc012996559db2220d1d6f2c38687dd4e7414a1ab7656bfdc3b0fb7527
ssdeep: 3072:Irf81VIbVNUrutgrWM0iM8NOKhXyBJHN/v6fANiXXyN4PFadHRXqI:PQiXy
BJHF6fZXQ4PFadw

PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (75.0%)
Win32 Executable Generic (16.9%)
Generic Win/DOS Executable (3.9%)
DOS Executable Generic (3.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x73f2
timedatestamp.....: 0x49b3acf9 (Sun Mar 08 11:33:13 2009)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x13e44 0x14000 6.05 3d7c8f780faae47c4f8a9954a30be39e
.data 0x15000 0x3d40 0x3400 1.49 f346e24013d4b5f918e15e2ff3c6b4a0
.rsrc 0x19000 0x428 0x600 2.58 dba4d2b362ef27d4f804f4947a3b6441
.reloc 0x1a000 0x2596 0x2600 3.87 1b56a6e29e1a59d2052ffc2d76c44635

( 11 imports )
> KERNEL32.dll: GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, GetProcessHeap, HeapFree, VirtualQuery, MapViewOfFile, CreateFileMappingW, GetFileSize, UnmapViewOfFile, TlsAlloc, GetLocalTime, HeapReAlloc, TlsSetValue, HeapAlloc, TlsGetValue, SetLastError, FormatMessageW, RaiseException, ExitProcess, TlsFree, GetWindowsDirectoryA, CloseHandle, GetCurrentThread, ReleaseMutex, WaitForSingleObject, SetFilePointer, WriteFile, GetModuleFileNameA, CreateMutexW, CreateFileW, GetModuleFileNameW, DeleteFileW, GetVersion, GetSystemInfo, CreateMutexA, CreateFileMappingA, CreateFileA, DeleteFileA, LoadLibraryA, ExpandEnvironmentStringsA, GetProcAddress, GetModuleHandleW, FlushFileBuffers, GetWindowsDirectoryW, MultiByteToWideChar, OutputDebugStringA, IsDebuggerPresent, GetTickCount, HeapCreate, HeapDestroy, DeviceIoControl, LocalAlloc, GetEnvironmentVariableW, WideCharToMultiByte, EncodePointer, DecodePointer, GetDriveTypeW, GetLogicalDrives, GetLogicalDriveStringsW, MoveFileExW, MoveFileW, CopyFileW, GlobalSize, GlobalFree, GlobalUnlock, GetCurrentProcessId, GlobalAlloc, HeapWalk, HeapValidate, HeapCompact, GlobalMemoryStatus, GetVersionExW, ResetEvent, CreateThread, WaitForMultipleObjects, CreateEventW, FreeLibrary, SetEvent, RemoveDirectoryW, GetTempFileNameW, ReadFile, CreateDirectoryW, DebugBreak, HeapSize, GetVersionExA, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, FindFirstFileW, FindNextFileW, FindClose, GetFullPathNameW, SetErrorMode, GetFileAttributesW, ExpandEnvironmentStringsW, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, InterlockedExchange, DuplicateHandle, SetFileAttributesW, LocalFree, GetTempPathW, GetShortPathNameW, CreateProcessW, CreateProcessA, OpenProcess, GetVolumeInformationW, SetFileTime, SetEndOfFile, OpenEventW, GetComputerNameW, GetOverlappedResult, GetFileType, GetDiskFreeSpaceW, GetDiskFreeSpaceExW, GetPrivateProfileStringW, LoadLibraryW, GetExitCodeProcess, GetLocaleInfoW, VirtualAlloc, VirtualFree, IsWow64Process, GlobalLock, GetCurrentThreadId, GetLastError, GetCommandLineW
> msvcrt.dll: wcschr, _cexit, _exit, _XcptFilter, _ismbblead, exit, _acmdln, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__commode, __set_app_type, _terminate@@YAXXZ, _except_handler4_common, _controlfp, _unlock, __dllonexit, _lock, _onexit, _vsnprintf, _vsnwprintf, __3@YAXPAX@Z, __2@YAPAXI@Z, wcsrchr, __getmainargs, _wcsicmp, memset, __p__fmode, __1type_info@@UAE@XZ, _purecall, memcpy, iswctype, swscanf_s, _wtoi, wcstok, fclose, feof, fgetws, _wfopen, _wcsnicmp, free, towlower, malloc
> SHELL32.dll: CommandLineToArgvW, -, SHGetFolderPathW, ShellExecuteExW, ExtractIconExW
> ADVAPI32.dll: RegDeleteKeyW, SetSecurityDescriptorOwner, RegSetKeySecurity, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, CryptReleaseContext, CryptDestroyHash, CryptDestroyKey, CryptDecrypt, CryptEncrypt, CryptGetHashParam, CryptGenRandom, CryptDeriveKey, CryptHashData, CryptCreateHash, CryptAcquireContextW, SetSecurityInfo, GetSecurityInfo, IsValidSid, LookupAccountSidW, LookupAccountNameW, GetUserNameW, RegFlushKey, RegCloseKey, RegDeleteValueW, RegEnumValueW, RegSetValueExW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, SetSecurityDescriptorDacl, EqualSid, AddAccessAllowedAce, InitializeAcl, GetLengthSid, GetTokenInformation, OpenThreadToken, InitializeSecurityDescriptor, RegEnumKeyExW, RegQueryInfoKeyW, RegOpenKeyExW, RegCreateKeyExW, RegUnLoadKeyW, RegLoadKeyW, RegQueryValueExW, SetNamedSecurityInfoW
> dbghelp.dll: MiniDumpWriteDump
> OLEAUT32.dll: -, -, -
> ole32.dll: CreateStreamOnHGlobal, GetHGlobalFromStream, CoTaskMemFree, CoTaskMemAlloc, CoCreateInstance, CoUninitialize, CoInitializeEx, CoInitialize
> USER32.dll: UnregisterClassA, LoadIconW, MessageBoxA, MessageBoxW
> SHLWAPI.dll: PathRemoveFileSpecW, SHGetValueW
> IPHLPAPI.DLL: GetIpAddrTable
> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, WSAIoctl, -, -

( 66 exports )
__0_$CDynamicArray@EPAE@@QAE@I@Z, __0_$CDynamicArray@EPAUSKey@@@@QAE@I@Z, __0_$CDynamicArray@EPAUSValue@@@@QAE@I@Z, __0_$CDynamicArray@GPAG@@QAE@I@Z, __0_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAE@I@Z, __0_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAE@I@Z, __0_$CDynamicArray@_KPA_K@@QAE@I@Z, __1_$CDynamicArray@EPAE@@QAE@XZ, __1_$CDynamicArray@EPAUSKey@@@@QAE@XZ, __1_$CDynamicArray@EPAUSValue@@@@QAE@XZ, __1_$CDynamicArray@GPAG@@QAE@XZ, __1_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAE@XZ, __1_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAE@XZ, __1_$CDynamicArray@_KPA_K@@QAE@XZ, __4_$CDynamicArray@EPAE@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@EPAUSKey@@@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@EPAUSValue@@@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@GPAG@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEAAV0@ABV0@@Z, __4_$CDynamicArray@_KPA_K@@QAEAAV0@ABV0@@Z, __A_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEAAPAUSEnumBinContext@@I@Z, __A_$CDynamicArray@_KPA_K@@QAEAA_KI@Z, __B_$CDynamicArray@EPAUSKey@@@@QBEPAUSKey@@XZ, __B_$CDynamicArray@EPAUSValue@@@@QBEPAUSValue@@XZ, __B_$CDynamicArray@GPAG@@QBEPAGXZ, __C_$CDynamicArray@EPAUSKey@@@@QBEPAUSKey@@XZ, __C_$CDynamicArray@EPAUSValue@@@@QBEPAUSValue@@XZ, ___F_$CDynamicArray@EPAE@@QAEXXZ, ___F_$CDynamicArray@EPAUSKey@@@@QAEXXZ, ___F_$CDynamicArray@EPAUSValue@@@@QAEXXZ, ___F_$CDynamicArray@GPAG@@QAEXXZ, ___F_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEXXZ, ___F_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEXXZ, ___F_$CDynamicArray@_KPA_K@@QAEXXZ, _Add@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEHAAPAUSEnumBinContext@@@Z, _Add@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEHAAUSKeeperEntry@CBlackboardFactory@@@Z, _Add@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEHAAUSKeeperEntry@CBlackboardFactory@@AAI@Z, _Add@_$CDynamicArray@_KPA_K@@QAEHAA_K@Z, _ElementAt@_$CDynamicArray@GPAG@@QAEAAGI@Z, _ElementAt@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEAAUSKeeperEntry@CBlackboardFactory@@I@Z, _GetBuffer@_$CDynamicArray@EPAE@@QAEPAEI@Z, _GetBuffer@_$CDynamicArray@EPAUSValue@@@@QAEPAUSValue@@I@Z, _GetBuffer@_$CDynamicArray@GPAG@@QAEPAGI@Z, _GetSize@_$CDynamicArray@EPAE@@QBEIXZ, _GetSize@_$CDynamicArray@GPAG@@QBEIXZ, _GetSize@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QBEIXZ, _GetSize@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QBEIXZ, _GetSize@_$CDynamicArray@_KPA_K@@QBEIXZ, _Init@_$CDynamicArray@EPAE@@IAEXI@Z, _Init@_$CDynamicArray@EPAUSKey@@@@IAEXI@Z, _Init@_$CDynamicArray@EPAUSValue@@@@IAEXI@Z, _Init@_$CDynamicArray@GPAG@@IAEXI@Z, _Init@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@IAEXI@Z, _Init@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@IAEXI@Z, _Init@_$CDynamicArray@_KPA_K@@IAEXI@Z, _RemoveAll@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEXXZ, _RemoveAll@_$CDynamicArray@_KPA_K@@QAEXXZ, _RemoveItemFromTail@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEXXZ, _SetSize@_$CDynamicArray@EPAE@@QAEHK@Z, _SetSize@_$CDynamicArray@EPAUSKey@@@@QAEHK@Z, _SetSize@_$CDynamicArray@EPAUSValue@@@@QAEHK@Z, _SetSize@_$CDynamicArray@GPAG@@QAEHK@Z, _SetSize@_$CDynamicArray@PAUSEnumBinContext@@PAPAU1@@@QAEHK@Z, _SetSize@_$CDynamicArray@USKeeperEntry@CBlackboardFactory@@PAU12@@@QAEHK@Z, _SetSize@_$CDynamicArray@_KPA_K@@QAEHK@Z

RDS...: NSRL Reference Data Set
-

Pour le PC, c'est OK. Je n'ai plus de fenêtres publicitaires qui apparaissent.

En effet pour Acrobat Reader, il n'était pas à jour.
Je viens de le faire mais à chaque ouverture du programme, j'ai toujours un message comme quoi il présente des problème de compatibilité connus. Peut être à cause de vista.

J'ai beau faire des recherches de mises à jour, c'est toujours pareil (la seule proposée est une mise à jour des langues)

Je viens de passer sous firefox. Je viens de trouver la manip pour le mettre en programme par défaut, du coup je conserve IE pour les mises à jour.

Description
Acrobat Reader 7.* présente un problème de compatibilité connu avec cette version de Windows. Pour une mise à jour compatible avec cette version de Windows, contactez Adobe.

Signature du problème
Nom d’événement du problème : ApphelpSoftBlock
Signature du problème 01: {11111111-1111-1111-1111-111111111111}
Signature du problème 02: {f5352b91-2de6-46e4-a4bb-0ba25ce71513}
Version du système: 6.0.6001.2.1.0.768.3
Identificateur de paramètres régionaux: 1036

Informations complémentaires sur le problème
ID du récipient : 85762094

Est il nécessaire de conserver tous les logiciels installés pour la désinfection?

[ Rapport ToolsCleaner version 2.3.5 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\fixnavi.txt: trouvé !
C:\cleannavi.txt: trouvé !
C:\TB.txt: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
C:\Windows.old\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Windows.old\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
C:\Windows.old\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\Windows.old\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
C:\Windows.old\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Windows.old\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
C:\Windows.old\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Windows.old\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
C:\Windows.old\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\Windows.old\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
C:\Windows.old\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Windows.old\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
C:\Windows.old\ProgramData\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Windows.old\ProgramData\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Windows.old\ProgramData\Menu Démarrer\Programs\HijackThis: trouvé !
C:\Windows.old\ProgramData\Menu Démarrer\Programs\Navilog1: trouvé !
C:\Windows.old\ProgramData\Menu Démarrer\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Windows.old\ProgramData\Menu Démarrer\Programs\Navilog1\Navilog1.lnk: trouvé !
C:\Windows.old\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Windows.old\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
C:\Windows.old\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Windows.old\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Windows.old\ProgramData\Start Menu\Programmes\HijackThis: trouvé !
C:\Windows.old\ProgramData\Start Menu\Programmes\Navilog1: trouvé !
C:\Windows.old\ProgramData\Start Menu\Programs\HijackThis: trouvé !
C:\Windows.old\ProgramData\Start Menu\Programs\Navilog1: trouvé !
C:\Windows.old\ProgramData\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Windows.old\ProgramData\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
C:\Windows.old\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Windows.old\Users\All Users\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
C:\Windows.old\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\Windows.old\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
C:\Windows.old\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Windows.old\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !

---------------------------------
--> Suppression:

C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: supprimé !
C:\fixnavi.txt: supprimé !
C:\cleannavi.txt: supprimé !
C:\TB.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1: supprimé !

Encore merci pour ta patience et ton aide.
Tes explications étaient très claires et efficaces.

C'était la première fois que j'allais sur un forum, je ne suis pas déçu du résultat.

Peut être à une prochaine fois.

Je vais mettre le statut en résolu.