S,agit-t,il d,un virus - Page 2

allo
j,utilise les liens du sujet mais quand je clic sur parcourir ca ne s,ouvre pas et je me demande quel fichier je doit faire analyser. suis pas tres bonne pourtant tes explications sont tres claires.

re

clic sur ce lien => http://www.cijoint.fr/cjlink.php?file=cj200906/cijr860CMA.txt

tu auras un autre lien au milieu de cette page nommé OTM.txt clic dessus et suit les indications que je t'ai mit et poste le rapport

ensuite

execute ce fichier C:\Program Files\Trend Micro\HijackThis\ Client.exe

choisit do a scan only et coche les cases a gauche des lignes :

O4 - HKLM\..\RunOnce: [WMC_0] C:\WINDOWS\system32\cmd.exe /c """""C:\WINDOWS\inf\unregmp2.exe"" /ShowWMP"""
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O18 - Filter hijack: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)

puis clic sur fix checked

au fait sa va tu te sent en securité avec 4 antivirus ?

tu as panda + AVG + bitdefender + avira

IL FAUT AVOIR UN SEUL ANTIVIRUS SINON IL RENTRE EN CONFLIT ET TE PROTEGE MOINS

si tu en paye aucun garde uniquement antivir et desinstalle les autres

puis telecharge CCleaner

Decoche la yahoo toolbar durant l'installation, une fois installé lance le va dans option/avancé et decoche la premiere ligne

puis

va dans les onglet nettoyeur et registre et nettoie plusieurs fois jusqu'a trouver 0erreurs

après tous sa redemarre ton PC et poste moi un nouveau RSIT

allo
tu est tres patient merci
voici le rapport
Error: Unable to interpret <-----------------------------> in the current context!
========== PROCESSES ==========
Unable to kill process: explorer
========== FILES ==========
File/Folder C:\DOCUME~1\Client\APPLIC~1\BOOBDE~1\inside acid.exe not found.
File/Folder C:\Program Files\A-ToolBar not found.
File/Folder C:\PROGRA~1\ALLOCA~1\allocam.exe not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\2 Fork\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\A-ToolBar\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Totocam\\ deleted successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DF4D69.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DF4E53.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DF5083.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DF5174.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DF53AA.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DF54ED.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DF8F24.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DF90BF.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DFC897.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Client\LOCALS~1\Temp\~DFCA1C.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\01[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ads[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ads[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ads[3].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ToastFull[3].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ToastMini[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\O32OTD3L\ads[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\O32OTD3L\cjlink[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\O32OTD3L\conficker-f25s48355[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\ads[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\default[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\fr-ca[4].js scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\gtl_sitegeneric[1].css scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\home[1].aspx scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\imp-349760044[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\im[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\InboxLight[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\s_code[3].js scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\zz-zz[1].css scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\A13GWWK1\ads[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\A13GWWK1\ads[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\A13GWWK1\OTM[1].exe scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_740.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTM by OldTimer - Version 2.1.0.1 log created on 06212009_114713

Files moved on Reboot...
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DF4D69.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DF4E53.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DF5083.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DF5174.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DF53AA.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DF54ED.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DF8F24.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DF90BF.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DFC897.tmp not found!
File C:\DOCUME~1\Client\LOCALS~1\Temp\~DFCA1C.tmp not found!
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\01[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ads[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ads[2].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ads[3].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ToastFull[3].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\UFL8AV0X\ToastMini[2].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\O32OTD3L\ads[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\O32OTD3L\cjlink[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\O32OTD3L\conficker-f25s48355[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\ads[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\default[2].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\fr-ca[4].js moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\gtl_sitegeneric[1].css moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\home[1].aspx moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\imp-349760044[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\im[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\InboxLight[2].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\s_code[3].js moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\JXIAEX0I\zz-zz[1].css moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\A13GWWK1\ads[1].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\A13GWWK1\ads[2].htm moved successfully.
C:\Documents and Settings\Client\Local Settings\Temporary Internet Files\Content.IE5\A13GWWK1\OTM[1].exe moved successfully.
File C:\WINDOWS\temp\Perflib_Perfdata_740.dat not found!

Registry entries deleted on Reboot...

re bonjour
voici rsti
Logfile of random's system information tool 1.06 (written by random/random)
Run by Client at 2009-06-21 13:31:33
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 11 GB (37%) free of 29 GB
Total RAM: 256 MB (21% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:32:06, on 2009-06-21
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Client\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Client.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: www.king.com
O15 - Trusted Zone: https://www.king.com/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} - http://www.facebook.com/controls/contactx.dll
O18 - Filter hijack: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

tu n'as pas desinstallé tes antivirus tu en as 4...

fait un scan complet avec antivir et poste le rapport supprime si des choses sont trouvées

puis

telecharge et installe superantispyware http://www.infos-du-net.com/telecharger/SUPERAntiSpyware,0301-7377.html
, met le a jour et fait un scan complet, supprime tout ce qu'il trouve et poste le rapport

voici mon rapport antivir

Avira AntiVir Personal
Date de création du fichier de rapport : 21 juin, 2009 14:33

La recherche porte sur 1479393 souches de virus.

Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
Numéro de série : 0000149996-ADJIE-0000001
Plateforme : Windows XP
Version de Windows : (Service Pack 3) [5.1.2600]
Mode Boot : Démarré normalement
Identifiant : Client
Nom de l'ordinateur : JEAN-J

Informations de version :
BUILD.DAT : 9.0.0.65 17959 Bytes 22/04/2009 12:06:00
AVSCAN.EXE : 9.0.3.6 466689 Bytes 21/04/2009 19:20:54
AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 16:21:02
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 17:35:11
LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 16:21:31
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 18:30:36
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 02:33:26
ANTIVIR2.VDF : 7.1.4.87 2982912 Bytes 12/06/2009 22:10:45
ANTIVIR3.VDF : 7.1.4.118 227328 Bytes 20/06/2009 22:07:29
Version du moteur : 8.2.0.193
AEVDF.DLL : 8.1.1.1 106868 Bytes 18/06/2009 22:10:56
AESCRIPT.DLL : 8.1.2.9 409978 Bytes 18/06/2009 22:10:55
AESCN.DLL : 8.1.2.3 127347 Bytes 18/06/2009 22:10:54
AERDL.DLL : 8.1.1.3 438645 Bytes 30/10/2008 00:24:41
AEPACK.DLL : 8.1.3.18 401783 Bytes 18/06/2009 22:10:54
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 18/06/2009 22:10:52
AEHEUR.DLL : 8.1.0.133 1798520 Bytes 18/06/2009 22:10:51
AEHELP.DLL : 8.1.3.6 205174 Bytes 18/06/2009 22:10:49
AEGEN.DLL : 8.1.1.46 348533 Bytes 19/06/2009 22:10:31
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 20:32:40
AECORE.DLL : 8.1.6.12 180599 Bytes 18/06/2009 22:10:47
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 20:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 14:47:30
AVPREF.DLL : 9.0.0.1 43777 Bytes 03/12/2008 17:39:26
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 20:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 21:24:42
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 21:05:22
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 16:36:37
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 21:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 14:20:57
NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 21:40:59
RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 17/02/2009 19:49:32
RCTEXT.DLL : 9.0.37.0 88321 Bytes 15/04/2009 16:07:05

Configuration pour la recherche actuelle :
Nom de la tâche...............................: Recherche de Rootkits
Fichier de configuration......................: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\PROFILES\rootkit.avp
Documentation.................................: élevé
Action principale.............................: interactif
Action secondaire.............................: ignorer
Recherche sur les secteurs d'amorçage maître..: marche
Recherche sur les secteurs d'amorçage.........: marche
Recherche dans les programmes actifs..........: arrêt
Recherche en cours sur l'enregistrement.......: arrêt
Recherche de Rootkits.........................: marche
Contrôle d'intégrité de fichiers système......: arrêt
Fichier mode de recherche.....................: Tous les fichiers
Recherche sur les archives....................: marche
Limiter la profondeur de récursivité..........: 20
Archive Smart Extensions......................: marche
Heuristique de macrovirus.....................: marche
Heuristique fichier...........................: élevé
Catégories de dangers divergentes.............: +GAME,
Paramètres étendus de recherche...............: 0x00300922

Début de la recherche : 21 juin, 2009 14:33

La recherche d'objets cachés commence.
'415084' objets ont été contrôlés, '0' objets cachés ont été trouvés.

La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:'
C:\
Ad-Report-CLEAN.log
Apr2005_d3dx9_25_x64.cab
Apr2005_d3dx9_25_x86.cab
Apr2006_d3dx9_30_x64.cab
Apr2006_d3dx9_30_x86.cab
Apr2006_MDX1_x86.cab
Apr2006_MDX1_x86_Archive.cab
[0] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2902.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2903.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2904.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2905.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2906.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2907.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2908.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2909.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
--> mdx_1.0.2910.0_x86.cab
[1] Type d'archive: CAB (Microsoft)
Apr2006_XACT_x64.cab
Apr2006_XACT_x86.cab
Apr2006_xinput_x64.cab
Apr2006_xinput_x86.cab
APR2007_d3dx10_33_x64.cab
APR2007_d3dx10_33_x86.cab
APR2007_d3dx9_33_x64.cab
APR2007_d3dx9_33_x86.cab
APR2007_XACT_x64.cab
APR2007_XACT_x86.cab
APR2007_xinput_x64.cab
APR2007_xinput_x86.cab
Aug2005_d3dx9_27_x64.cab
Aug2005_d3dx9_27_x86.cab
AUG2006_XACT_x64.cab
AUG2006_XACT_x86.cab
AUG2006_xinput_x64.cab
AUG2006_xinput_x86.cab
AUG2007_d3dx10_35_x64.cab
AUG2007_d3dx10_35_x86.cab
AUG2007_d3dx9_35_x64.cab
AUG2007_d3dx9_35_x86.cab
AUG2007_XACT_x64.cab
AUG2007_XACT_x86.cab
Aug2008_d3dx10_39_x64.cab
Aug2008_d3dx10_39_x86.cab
Aug2008_d3dx9_39_x64.cab
Aug2008_d3dx9_39_x86.cab
Aug2008_XACT_x64.cab
Aug2008_XACT_x86.cab
Aug2008_XAudio_x64.cab
Aug2008_XAudio_x86.cab
AUTOEXEC.BAT
autoruns.chm
autoruns.chm:Zone.Identifier
autorunsc.exe
autorunsc.exe:Zone.Identifier
BDANT.cab
BDAXP.cab
boot.ini
Bootfont.bin
cleannavi.txt
Dec2005_d3dx9_28_x64.cab
Dec2005_d3dx9_28_x86.cab
DEC2006_d3dx10_00_x64.cab
DEC2006_d3dx10_00_x86.cab
DEC2006_d3dx9_32_x64.cab
DEC2006_d3dx9_32_x86.cab
DEC2006_XACT_x64.cab
DEC2006_XACT_x86.cab
DSETUP.dll
dsetup32.dll
dxdllreg_x86.cab
dxnt.cab
--> dxdiag.chm
[1] Type d'archive: CHM
--> dxdiabrz.chm
[1] Type d'archive: CHM
--> dxdiachs.chm
[1] Type d'archive: CHM
--> dxdiacht.chm
[1] Type d'archive: CHM
--> dxdiacze.chm
[1] Type d'archive: CHM
--> dxdiadut.chm
[1] Type d'archive: CHM
--> dxdiafrn.chm
[1] Type d'archive: CHM
--> dxdiager.chm
[1] Type d'archive: CHM
--> dxdiaitn.chm
[1] Type d'archive: CHM
--> dxdiajpn.chm
[1] Type d'archive: CHM
--> dxdiakor.chm
[1] Type d'archive: CHM
--> dxdiapol.chm
[1] Type d'archive: CHM
--> dxdiarus.chm
[1] Type d'archive: CHM
--> dxdiaspa.chm
[1] Type d'archive: CHM
--> dxdiaswe.chm
[1] Type d'archive: CHM
DXSETUP.exe
dxupdate.cab
Eula.txt
Eula.txt:Zone.Identifier
Feb2005_d3dx9_24_x64.cab
Feb2005_d3dx9_24_x86.cab
Feb2006_d3dx9_29_x64.cab
Feb2006_d3dx9_29_x86.cab
Feb2006_XACT_x64.cab
Feb2006_XACT_x86.cab
FEB2007_XACT_x64.cab
FEB2007_XACT_x86.cab
fixnavi.txt
hiberfil.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
[REMARQUE] Ce fichier est un fichier système Windows.
[REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
IO.SYS
ioSpecial.ini
Jun2005_d3dx9_26_x64.cab
Jun2005_d3dx9_26_x86.cab
JUN2006_XACT_x64.cab
JUN2006_XACT_x86.cab
JUN2007_d3dx10_34_x64.cab
JUN2007_d3dx10_34_x86.cab
JUN2007_d3dx9_34_x64.cab
JUN2007_d3dx9_34_x86.cab
JUN2007_XACT_x64.cab
JUN2007_XACT_x86.cab
JUN2008_d3dx10_38_x64.cab
JUN2008_d3dx10_38_x86.cab
JUN2008_d3dx9_38_x64.cab
JUN2008_d3dx9_38_x86.cab
JUN2008_X3DAudio_x64.cab
JUN2008_X3DAudio_x86.cab
JUN2008_XACT_x64.cab
JUN2008_XACT_x86.cab
JUN2008_XAudio_x64.cab
JUN2008_XAudio_x86.cab
lop.txt
lopR.txt
Mar2008_d3dx10_37_x64.cab
Mar2008_d3dx10_37_x86.cab
Mar2008_d3dx9_37_x64.cab
Mar2008_d3dx9_37_x86.cab
Mar2008_X3DAudio_x64.cab
Mar2008_X3DAudio_x86.cab
Mar2008_XACT_x64.cab
Mar2008_XACT_x86.cab
Mar2008_XAudio_x64.cab
Mar2008_XAudio_x86.cab
MSDOS.SYS
Nov2007_d3dx10_36_x64.cab
Nov2007_d3dx10_36_x86.cab
Nov2007_d3dx9_36_x64.cab
Nov2007_d3dx9_36_x86.cab
NOV2007_X3DAudio_x64.cab
NOV2007_X3DAudio_x86.cab
NOV2007_XACT_x64.cab
NOV2007_XACT_x86.cab
Nov2008_d3dx10_40_x64.cab
Nov2008_d3dx10_40_x86.cab
Nov2008_d3dx9_40_x64.cab
Nov2008_d3dx9_40_x86.cab
Nov2008_X3DAudio_x64.cab
Nov2008_X3DAudio_x86.cab
Nov2008_XACT_x64.cab
Nov2008_XACT_x86.cab
Nov2008_XAudio_x64.cab
Nov2008_XAudio_x86.cab
NTDETECT.COM
ntldr
Oct2005_xinput_x64.cab
Oct2005_xinput_x86.cab
OCT2006_d3dx9_31_x64.cab
OCT2006_d3dx9_31_x86.cab
OCT2006_XACT_x64.cab
OCT2006_XACT_x86.cab
pagefile.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
[REMARQUE] Ce fichier est un fichier système Windows.
[REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
Profile.xml
prog.exe
[0] Type d'archive: RSRC
--> Object
[1] Type d'archive: CAB (Microsoft)
Sabrina-samy.mdi
TB.txt
TCleaner.txt
TV.TRV
YServer.txt
~GLHTTP1.TMP
C:\0191f9c57405a0a5bc3b\i386\
1394bus.sy_
4mmdat.sy_
61883.sy_
6to4svc.dl_
aaclient.dl_
aaclient.mu_
ac97ali.sy_
ac97via.sy_
acadproc.dl_
access.cp_
accwiz.ex_
acgenral.dl_
aclayers.dl_
aclua.dl_
aclui.dl_
acpi.sy_
acspecfc.dl_
actconn.ht_
actdone.ht_
acterror.ht_
activ.ht_
activate.ht_
activeds.dl_
activerr.ht_
activsvc.ht_
actlan.ht_
actmovie.ex_
actshell.ht_
actxprxy.dl_
act_plcy.ht_
acxtrnal.dl_
adcjavas.in_
adcvbs.in_
adeskerr.ht_
admexs.dl_
admin.dll
admin.exe
admjoy.sy_
admparse.dl_
admwprox.dl_
adojavas.in_
adovbs.in_
adrdyreg.ht_
adsiis51.dl_
adsldp.dl_
adsldpc.dl_
adsmsext.dl_
adsnt.dl_
adsnw.dl_
adv01nt5.dl_
adv02nt5.dl_
adv05nt5.dl_
adv07nt5.dl_
adv08nt5.dl_
adv09nt5.dl_
adv11nt5.dl_
advapi32.dl_
advpack.dl_
aec.sy_
afd.sy_
agentanm.dl_
agentctl.dl_
agentdp2.dl_
agentdpv.dl_
agentmpx.dl_
agentpsh.dl_
agentsr.dl_
agentsvr.ex_
agp440.sy_
agpcpq.sy_
agt0401.dl_
agt0401.hl_
agt0404.dl_
agt0404.hl_
agt0405.dl_
agt0405.hl_
agt0406.dl_
agt0406.hl_
agt0407.dl_
agt0407.hl_
agt0408.dl_
agt0408.hl_
agt0409.dl_
agt0409.hl_
agt040b.dl_
agt040b.hl_
agt040c.dl_
agt040c.hl_
agt040d.dl_
agt040d.hl_
agt040e.dl_
agt040e.hl_
agt0410.dl_
agt0410.hl_
agt0411.dl_
agt0411.hl_
agt0412.dl_
agt0412.hl_
agt0413.dl_
agt0413.hl_
agt0414.dl_
agt0414.hl_
agt0415.dl_
agt0415.hl_
agt0416.dl_
agt0416.hl_
agt0419.dl_
agt0419.hl_
agt041d.dl_
agt041d.hl_
agt041f.dl_
agt041f.hl_
agt0804.dl_
agt0804.hl_
agt0816.dl_
agt0816.hl_
agt0c0a.dl_
agt0c0a.hl_
agtcore.js_
agtctl15.tl_
agtinst.in_
agtintl.dl_
agtscrp2.js_
agtscrpt.js_
ahui.ex_
alg.ex_
alim1541.sy_
alrsvc.dl_
amdagp.sy_
amdk6.sy_
amdk7.sy_
amstream.dl_
an983.sy_
apolicy.ht_
appconf.dl_
apphelp.dl_
apphelp.sd_
apph_sp.sd_
appmgmts.dl_
appmgr.dl_
apps.ch_
[0] Type d'archive: CAB (Microsoft)
--> apps.chm
[1] Type d'archive: CHM
apps_sp.ch_
[0] Type d'archive: CAB (Microsoft)
--> apps_sp.chm
[1] Type d'archive: CHM
appwiz.cp_
aprvcyms.ht_
aqueue.dl_
archvapp.in_
areg1.ht_
aregdial.ht_
aregdone.ht_
aregsty2.cs_
aregstyl.cs_
arial.tt_
arialbd.tt_
ariblk.tt_
arp1394.sy_
arrow.gi_
asctrls.oc_
asferror.dl_
asp51.dl_
aspnet_filter.dll
aspnet_isapi.dll
aspnet_perf.h
aspnet_perf.ini
aspnet_perf2.ini
aspnet_regiis.exe
aspnet_state.exe
aspnet_wp.exe
asr_fmt.ex_
asycfilt.dl_
asyncmac.sy_
at.ex_
atapi.sy_
ati1btxx.sy_
ati1mdxx.sy_
ati1pdxx.sy_
ati1raxx.sy_
ati1rvxx.sy_
ati1snxx.sy_
ati1ttxx.sy_
ati1tuxx.sy_
ati1xbxx.sy_
ati1xsxx.sy_
ati1xwdm.in_
ati2cqag.dl_
ati2dvaa.dl_
ati2dvag.dl_
ati2mtaa.sy_
ati2mtag.sy_
ati3d1ag.dl_
ati3d2ag.dl_
ati3duag.dl_
atiixpaa.in_
atiixpag.in_
atinbtxx.sy_
atinmdxx.sy_
atinpdxx.sy_
atinraxx.sy_
atinrvxx.sy_
atinsnxx.sy_
atinttxx.sy_
atintuxx.sy_
atinxbxx.sy_
atinxsxx.sy_
ativdaxx.ax_
ativmc20.co_
ativmvxx.ax_
ativtmxx.dl_
ativvaxx.dl_
atixpwdm.in_
atl.dl_
atm.ch_
[0] Type d'archive: CAB (Microsoft)
--> atm.chm
[1] Type d'archive: CHM
atmadm.ex_
atmarpc.sy_
atmfd.dl_
atmlane.sy_
atmlib.dl_
attrib.ex_
atv01nt5.dl_
atv02nt5.dl_
atv04nt5.dl_
atv06nt5.dl_
atv10nt5.dl_
audiosrv.dl_
auditusr.ex_
ausrinfo.ht_
author.dll
author.exe
authz.dl_
autochk.exe
autoconv.ex_
autofmt.exe
autolfn.ex_
autoupdt.ht_
au_plcy.ht_
avc.sy_
avcstrm.sy_
avifil32.dl_
azroles.dl_
backdown.jp_
backoff.jp_
backover.jp_
backup.jp_
badeula.ht_
badpkey.ht_
basecred.xs_
baseeap.xs_
baseeap0.xs_
baseeap1.xs_
basesrv.dl_
batmeter.dl_
batt.dl_
battc.sy_
bdaplgin.ax_
bdasup.sy_
beethov9.wm_
bidispl.dl_
bitsprx2.dl_
bitsprx3.dl_
bitsprx4.dl_
bktr.gi_
bktrh.gi_
blackbox.dl_
blank.txt
blastcln.ex_
blutooth.ch_
[0] Type d'archive: CAB (Microsoft)
--> blutooth.chm
[1] Type d'archive: CHM
bootcfg.ex_
bridge.sy_
browselc.dl_
browser.dl_
browseui.dl_
browsewm.dl_
bth.in_
bthci.dl_
bthenum.sy_
bthmodem.sy_
bthpan.in_
bthpan.sy_
bthport.sy_
bthprint.in_
bthprint.sy_
bthprops.cp_
bthserv.dl_
bthspp.in_
bthusb.sy_
btn1.gi_
btn2.gi_
btn3.gi_
btpanui.dl_
bullet1.gi_
bulzano.jp_
bulzanom.jp_
but1_dwn.gi_
but1_idl.gi_
but1_up.gi_
but2_dwn.gi_
but2_idl.gi_
but2_up.gi_
but3_dwn.gi_
but3_idl.gi_
but3_up.gi_
but4_dwn.gi_
but4_idl.gi_
but4_up.gi_
cabinet.dll
cabview.dl_
cacls.ex_
callcont.dl_
camext30.dl_
camocx.dl_
capesnpn.dl_
caspol.exe
catsrv.dl_
catsrvps.dl_
catsrvut.dl_
ccdecode.sy_
cdfs.sy_
cdfview.dl_
cdm.dl_
cdosys.dl_
cdrom.sy_
certcli.dl_
certmgr.dl_
certwiz.oc_
cewmdm.dl_
cfgbkend.dl_
cfgmgr32.dl_
cfgwiz.exe
ch7xxnt5.dl_
changer.sy_
chimes.wa_
chord.wa_
cic.dl_
cimwin32.dl_
cimwin32.mf_
cimwin32.mo_
cinfo.xm_
ciodm.dl_
cipher.ex_
cisvc.ex_
classpnp.sy_
clbcatex.dl_
clbcatq.dl_
cleanmgr.ex_
cli.mo_
clickerx.wa_
clickhr.gi_
clicking.gi_
cliconfg.dl_
cliconfg.ex_
cliconfg.rl_
cliegali.mf_
cliegali.mo_
clipbrd.ex_
clipsrv.ex_
cloapp.gi_
cloapph.gi_
clusapi.dl_
cmbatt.sy_
cmcfg32.dl_
cmd.ex_
cmdial32.dl_
cmdl32.ex_
cmmon32.ex_
cmprops.dl_
cmsetacl.dl_
cmstp.ex_
cmutil.dl_
cnbjmon.dl_
cnbjmon2.dl_
cnfgprts.oc_
cnncterr.ht_
cnt.gi_
cntd.gi_
cnth.gi_
coadmin.dl_
cobramsg.dl_
colbact.dl_
comaddin.dl_
comadmin.dl_
comctl32.dl_
comdlg32.dl_
comexp.ch_
[0] Type d'archive: CAB (Microsoft)
--> comexp.chm
[1] Type d'archive: CHM
comic.tt_
comntwks.in_
compact.wm_
[0] Type d'archive: CAB (Microsoft)
--> compact.wmz
[1] Type d'archive: ZIP
compatui.dl_
compbatt.sy_
compfilt.dl_
compname.ht_
compstui.dl_
comrepl.dl_
comrepl.ex_
comrereg.ex_
comres.dl_
comsetup.dl_
comsnap.dl_
comsvcs.dl_
comuid.dl_
conf.ad_
conf.ch_
[0] Type d'archive: CAB (Microsoft)
--> conf.chm
[1] Type d'archive: CHM
conf.ex_
conf.hl_
conf1.ch_
[0] Type d'archive: CAB (Microsoft)
--> conf1.chm
[1] Type d'archive: CHM
confmrsl.dl_
confmsp.dl_
conime.ex_
connect.cn_
connect.hl_
contents.ht_
controls.cs_
controls.js_
copycd.wm_
corperfmonext.dll
corperfmonsymbols.ini
corpol.dl_
courtney.ac_
credssp.dl_
credui.dl_
crusoe.sy_
crypt32.dl_
cryptdlg.dl_
cryptdll.dl_
cryptext.dl_
cryptnet.dl_
cryptsvc.dl_
cryptui.dl_
csc.exe
cscdll.dl_
cscomp.dll
cscript.ex_
cscript.mu_
cscui.dl_
csrsrv.dl_
csrss.ex_
csv.xs_
ctfmon.ex_
ctmasetp.dl_
cu52178.nlp
custsat.dl_
cwrwdm.sy_
cxthsfs2.ct_
c_28603.nl_
c_g18030.dl_
d3d8.dl_
d3d8thk.dl_
d3d9.dl_
d3dim700.dl_
danim.dl_
dao360.dl_
dataclen.dl_
dataspec.xm_
datetime.ch_
[0] Type d'archive: CAB (Microsoft)
--> datetime.chm
[1] Type d'archive: CHM
datime.dl_
davcdata.ex_
davclnt.dl_
daxctle.oc_
dbghelp.dll
dbmsrpcn.dl_
dbnetlib.dl_
dbnmpntw.dl_
dcache.bi_
dcap32.dl_
dciman32.dl_
dcomcnfg.ex_
ddeshare.ex_
ddraw.dl_
ddrawex.dl_
defrag.ex_
desk.cp_
desktop3.gi_
devenum.dl_
devmgr.dl_
dfrgfat.ex_
dfrgntfs.ex_
dfrgsnap.dl_
dfrgui.dl_
[INFO] Code d'info : 0x0020
dfsshlex.dl_
dgnet.dl_
dhcpcsvc.dl_
dhcpmon.dl_
dhcpqec.dl_
dhtmled.oc_
dialer.ex_
dialmgr.js_
dialtone.gi_
dialtone.ht_
dialup.gi_
dialup.ht_
diantz.ex_
digcore.ex_
[0] Type d'archive: CAB (Microsoft)
--> digcore.exe
[1] Type d'archive: RSRC
--> Object
[2] Type d'archive: CAB (Microsoft)
digest.dl_
digopt.ms_
digreqex.ms_
dimsntfy.dl_
dimsroam.dl_
ding.wa_
dinput.dl_
dinput8.dl_
directdb.dl_
disk.sy_
diskcopy.dl_
diskdump.sy_
diskpart.ex_
dispex.dl_
dlimport.ex_
dllhost.ex_
dlttape.sy_
dmadmin.ex_
dmband.dl_
dmboot.sy_
dmcompos.dl_
dmdlgs.dl_
dmdskmgr.dl_
dmime.dl_
dmio.sy_
dmloader.dl_
dmremote.ex_
dmscript.dl_
dmserver.dl_
dmstyle.dl_
dmsynth.dl_
dmusic.dl_
dmusic.sy_
dmutil.dl_
dnsapi.dl_
dnsrslvr.dl_
docprop2.dl_
dosx.ex_
dot3api.dl_
dot3cfg.dl_
dot3clnt.dl_
dot3dlg.dl_
dot3msm.dl_
dot3svc.dl_
dot3ui.dl_
dot4.sy_
dplaysvr.ex_
dplayx.dl_
dpmodemx.dl_
dpnaddr.dl_
dpnet.dl_
dpnhpast.dl_
dpnhupnp.dl_
dpnlobby.dl_
dpnsvr.ex_
dpvacm.dl_
dpvoice.dl_
dpvsetup.ex_
dpvvox.dl_
dpwsockx.dl_
drdyisp.ht_
drdymig.ht_
drdyoem.ht_
drdyref.ht_
drm.in_
drmclien.dl_
drmk.sy_
drmkaud.sy_
drmstor.dl_
drmv2clt.dl_
drprov.dl_
drvmain.sdb
drvqry.ex_
ds16gt.dl_
ds32gt.dl_
dsdmo.dl_
dsdmoprp.dl_
dshowext.ax_
dskquop.ch_
[0] Type d'archive: CAB (Microsoft)
--> dskquop.chm
[1] Type d'archive: CHM
dskquota.dl_
dskquoui.dl_
dslmain.ht_
dslmain.js_
dsl_a.ht_
dsl_b.ht_
dsound.dl_
dsound3d.dl_
dsprop.dl_
dsprpres.dl_
dsquery.dl_
dssec.dl_
dssenh.dl_
dsuiext.dl_
dswave.dl_
dtcntwks.in_
dtiwait.ht_
dtsgnup.ht_
dumprep.ex_
duser.dl_
dvdupgrd.ex_
dwwin.ex_
dx7vb.dl_
dx8vb.dl_
dxdiag.ch_
[0] Type d'archive: CAB (Microsoft)
--> dxdiag.chm
[1] Type d'archive: CHM
dxdiag.ex_
dxdiagn.dl_
dxg.sy_
dxmasf.dl_
dxtmsft.dl_
dxtrans.dl_
eapcom.xs_
eapcon1.xs_
eapconf.xs_
eapcred.xs_
eapgen.xs_
eapolqec.dl_
eapp3hst.dl_
eappcfg.dl_
eappgnui.dl_
eapphost.dl_
eappprxy.dl_
eapqec.dl_
eapsvc.dl_
eaptls1.xs_
eaptlsv1.xs_
eapuser1.xs_
earl.ac_
ediskeer.dll
efsadu.dl_
els.dl_
empty.cat
empty.txt
encapi.dl_
encdec.dl_
ep9res.dl_
epcl5res.dl_
epn1600.gp_
error.js_
ersvc.dl_
es.dl_
esent.dl_
esscli.dl_
essm2e.sy_
eudcedit.ex_
evcon.ch_
[0] Type d'archive: CAB (Microsoft)
--> evcon.chm
[1] Type d'archive: CHM
evcreate.ex_
eventlog.dl_
eventlogmessages.dll
events.js_
evntagnt.dl_
evntcmd.ex_
evntrprv.dl_
evntwin.ex_
evtgprov.dl_
evtgprov.mo_
evtrig.ex_
explorer.ex_
expsrv.dl_
exstrace.dl_
extmgr.dl_
extrac32.ex_
exts.dll
f3ahvoas.dl_
faq.htm
fastfat.sy_
fastprox.dl_
faultrep.dl_
faxpatch.exe
fdc.sy_
fde.dl_
fdeploy.dl_
feclient.dl_
filelist.xm_
filemgmt.dl_
file_srv.ch_
[0] Type d'archive: CAB (Microsoft)
--> file_srv.chm
[1] Type d'archive: CHM
filters.xm_
findstr.ex_
fini.ht_
fips.sy_
firewall.cp_
flash.oc_
fldrclnr.dl_
flpydisk.sy_
fltlib.dl_
fltmc.ex_
fltmgr.sy_
fontext.dl_
fontsub.dl_
fontview.ex_
forcedos.ex_
forehe.sy_
format.co_
fp4.ca_
fp40ext.cab
--> fpmmc.chm
[1] Type d'archive: CHM
fp40ext.dl_
fp40ext.in_
fp4amsft.dll
fp4anscp.dll
fp4apws.dll
fp4areg.dll
fp4atxt.dll
fp4autl.dll
fp4avnb.dll
fp4avss.dll
fp4awebs.dll
fp4awel.dll
fp98sadm.exe
fp98swin.exe
fpadmcgi.exe
fpadmdll.dll
fpcount.exe
fpencode.dll
fpexedll.dll
fpmmc.dll
fpmmcsat.dll
fpremadm.exe
fpsrvadm.exe
framebuf.dl_
framedyn.dl_
fsquirt.ex_
ftp.ex_
ftpmib.dl_
ftpsv251.dl_
fusion.dll
fwcfg.dl_
fxsapi.dl_
fxsclnt.ex_
fxscom.dl_
fxscomex.dl_
fxscover.ex_
fxsdrv.dl_
fxsevent.dl_
fxsext32.dl_
fxsmon.dl_
fxsocm.dl_
fxsocm.in_
fxsperf.dl_
fxsres.dl_
fxsst.dl_
fxssvc.ex_
fxst30.dl_
fxstiff.dl_
fxsui.dl_
fxswzrd.dl_
fxsxp32.dl_
g400.in_
gagp30kx.sy_
gameenum.sy_
gckernel.sy_
gdi32.dl_
georgia.tt_
getmac.ex_
glu32.dl_
gpedit.dl_
gpkcsp.dl_
gpkrsrc.dl_
gprslt.ex_
gptext.dl_
greenshd.gi_
grn_btn.gi_
grpconv.ex_
grserial.sy_
guitrn.dl_
guitrna.dl_
gzip.dl_
h323.ts_
h323cc.dl_
h323msp.dl_
hal.dl_
halaacpi.dl_
halacpi.dl_
halapic.dl_
halmacpi.dl_
halmps.dl_
halsp.dl_
hand1.gi_
hand2.gi_
hardware.ch_
[0] Type d'archive: CAB (Microsoft)
--> hardware.chm
[1] Type d'archive: CHM
hardware.hl_
hccoin.dl_
hdaudbus.in_
hdaudbus.sy_
hdwwiz.cp_
heidelb.jp_
heidelbm.jp_
help.ex_
helpctr.ex_
helpsvc.ex_
hform.xs_
hh.ex_
hhctrl.oc_
hhsetup.dl_
hid.dl_
hidbatt.sy_
hidbth.in_
hidbth.sy_
hidclass.sy_
hidir.sy_
hidparse.sy_
hidphone.ts_
hidserv.dl_
hidusb.sy_
hlink.dl_
hmmapi.dl_
hndshake.ht_
hnetcfg.dl_
hnetwiz.dl_
hnwprmpt.ht_
homepage.in_
hostmib.dl_
hotplug.dl_
hp5000_7.pp_
hpcjrr.dl_
hpcjrrps.dl_
hpfud50.dl_
hpwm5250.gp_
hschelpp.ch_
[0] Type d'archive: CAB (Microsoft)
--> hschelpp.chm
[1] Type d'archive: CHM
hschelpw.ch_
[0] Type d'archive: CAB (Microsoft)
--> hschelpw.chm
[1] Type d'archive: CHM
hscupd.ex_
hsfbs2s2.sy_
hsfcisp2.dl_
hsfcxts2.sy_
hsfdpsp2.sy_
htable.xs_
html.ie_
html32.cn_
http.sy_
httpapi.dl_
httpext.dl_
httpmb51.dl_
httpod51.dl_
htui.dl_
hypertrm.dl_
i2omgmt.sy_
i2omp.sy_
i8042prt.sy_
i81xdnt5.dl_
i81xnt5.in_
i81xnt5.sy_
iac25_32.ax_
iasrad.dl_
icaapi.dl_
iccvid.dl_
icm32.dl_
icmp.dl_
icntlast.ht_
iconlib.dl_
iconn.ht_
iconnect.ht_
iconnect.js_
ics.ht_
icsdc.ht_
icsmgr.js_
icwconn.dl_
icwconn1.ex_
icwconn2.ex_
icwdial.ch_
[0] Type d'archive: CAB (Microsoft)
--> icwdial.chm
[1] Type d'archive: CHM
icwdial.dl_
icwdl.dl_
icwhelp.dl_
icwip.du_
icwphbk.dl_
icwrmind.ex_
icwutil.dl_
icwx25a.du_
icwx25b.du_
icwx25c.du_
ident1.ht_
ident2.ht_
idq.dl_
ie4uinit.ex_
ieakeng.dl_
ieaksie.dl_
iedkcs32.dl_
iedw.ex_
ieencode.dl_
ieexec.exe
ieexecremote.dll
iehost.dll
iepeers.dl_
iernonce.dl_
iesetup.dl_
ieuinit.in_
iexplore.ch_
[0] Type d'archive: CAB (Microsoft)
--> iexplore.chm
[1] Type d'archive: CHM
iexplore.ex_
iexpress.ex_
ifmon.dl_
igmpagnt.dl_
iis.dl_
iisadmin.dl_
iische51.dl_
iisext51.dl_
iisfecnv.dl_
iislog51.dl_
iismap.dl_
iisntw.ch_
[0] Type d'archive: CAB (Microsoft)
--> iisntw.chm
[1] Type d'archive: CHM
iisrstas.ex_
iisrtl.dl_
ilasm.exe
ils.dl_
imaadp32.ac_
imagehlp.dll
imapi.ex_
imapi.sy_
imeshare.dl_
imgutil.dl_
imm32.dl_
impact.tt_
ims.cat
imsinsnt.dl_
inetcfg.dl_
inetcomm.dl_
inetcpl.cp_
inetin51.ex_
inetmgr.dl_
inetmib1.dl_
inetpp.dl_
inetppui.dl_
inetpref.xm_
inetres.dl_
inetset.ad_
inetwiz.ex_
infoadmn.dl_
infocomm.dl_
infrared.ch_
[0] Type d'archive: CAB (Microsoft)
--> infrared.chm
[1] Type d'archive: CHM
initpki.dl_
input.ch_
[0] Type d'archive: CAB (Microsoft)
--> input.chm
[1] Type d'archive: CHM
input.dl_
input.hl_
inseng.dl_
installpersistsqlstate.sql
installsqlstate.sql
installsqlstatetemplate.sql
installutil.exe
instcat.sq_
intelide.sy_
intelppm.sy_
intl.cp_
intro.wm_
ip6fw.sy_
ipconf.ts_
ipconfig.ex_
ipevldpc.dl_
ipevlpid.dll
iphlpapi.dl_
ipinip.sy_
ipmontr.dl_
ipnat.sy_
ipnathlp.dl_
ippromon.dl_
ipp_0001.as_
ipp_0002.as_
ipp_0004.as_
ipp_0005.as_
ipp_0006.as_
ipp_0007.as_
ipp_0010.as_
ipp_0013.as_
ipp_0014.as_
ipp_util.in_
iprip.dl_
iprtrmgr.dl_
ipsec.sy_
ipseconp.ch_
[0] Type d'archive: CAB (Microsoft)
--> ipseconp.chm
[1] Type d'archive: CHM
ipseconw.ch_
[0] Type d'archive: CAB (Microsoft)
--> ipseconw.chm
[1] Type d'archive: CHM
ipsecsnp.dl_
ipsecsvc.dl_
ipseldpc.dl_
ipselpid.dll
ipsink.ax_
ipsmsnap.dl_
ipv6.ex_
ipv6mon.dl_
ipv6p.ch_
[0] Type d'archive: CAB (Microsoft)
--> ipv6p.chm
[1] Type d'archive: CHM
ipxroute.ex_
ipxwan.dl_
ir41_32.ax_
ir41_qc.dl_
ir41_qcx.dl_
ir50_32.dl_
ir50_qc.dl_
ir50_qcx.dl_
irda.sy_
irenum.sy_
irftp.ex_
irmon.dl_
irprops.cp_
isapnp.sy_
isatq.dl_
iscomlog.dl_
isdpc.dl_
isendpc.dl_
isenpid.dll
isign32.dl_
isp.ht_
isp2busy.ht_
ispcnerr.ht_
ispdtone.ht_
isphdshk.ht_
ispid.dll
ispins.ht_
ispnoanw.ht_
isppberr.ht_
ispphbsy.ht_
ispsbusy.ht_
isptype.ht_
isptype.js_
ispwait.ht_
isrdbg32.dl_
itircl.dl_
itss.dl_
iuengine.dl_
ivfsrc.ax_
ixsso.dl_
iyuv_32.dl_
jgdw400.dl_
jgpl400.dl_
jndomain.ht_
jndom_a.ht_
joy.cp_
jsc.exe
jscript.dl_
jscript.mu_
jsproxy.dl_
kartika.tt_
kbd101.dl_
kbd106.dl_
kbd106n.dl_
kbdax2.dl_
kbdbhc.dl_
kbdclass.sy_
kbdfi1.dl_
kbdhid.sy_
kbdibm02.dl_
kbdinbe1.dl_
kbdinben.dl_
kbdinmal.dl_
kbdiultn.dl_
kbdlk41a.dl_
kbdlk41j.dl_
kbdmaori.dl_
kbdmlt47.dl_
kbdmlt48.dl_
kbdnec.dll
kbdnepr.dl_
kbdno1.dl_
kbdpash.dl_
kbdsmsfi.dl_
kbdsmsno.dl_
kbdukx.dl_
kd1394.dl_
kdcsvc.dl_
kdsui.dl_
kdsusd.dl_
kerberos.dl_
kernel32.dl_
keybd.ht_
keybdcmt.ht_
keyboard.sy_
keymgr.dl_
kmddsp.ts_
kmixer.sy_
kmsvc.dl_
knhowtok.chm
knnewpk.chm
knnewwk.chm
knperdpc.dl_
knperpid.dll
knprodpc.dl_
knpropid.dll
knupdpk.chm
knupdwk.chm
koc.dl_
kperdpc.dl_
kperpid.dll
kprodpc.dl_
kpropid.dll
krnl386.ex_
krnlprov.dl_
ks.sy_
ksecdd.sys
ksproxy.ax_
kstvtune.ax_
ksuser.dl_
kswdmcap.ax_
ksxbar.ax_
l2store.dl_
l3codeca.ac_
langbar.ch_
[0] Type d'archive: CAB (Microsoft)
--> langbar.chm
[1] Type d'archive: CHM
lanpol.xs_
lanv1.xs_
laprxy.dl_
lbrtfdc.sy_
lcladvd.xm_
lcldocs.xm_
lclmm.xm_
lhmstsc.ch_
[0] Type d'archive: CAB (Microsoft)
--> lhmstsc.chm
[1] Type d'archive: CHM
lhmstsc.ex_
lhmstsc.mui
lhmstscx.dl_
lhmstscx.mu_
lhrdesk.ch_
[0] Type d'archive: CAB (Microsoft)
--> lhrdesk.chm
[1] Type d'archive: CHM
licdll.dll
licdll.dl_
license.ch_
[0] Type d'archive: CAB (Microsoft)
--> license.chm
[1] Type d'archive: CHM
licmgr10.dl_
licwmi.dl_
licwmi.mf_
licwmi.mof
licwmi.mo_
linkinfo.dl_
lmhsvc.dl_
lmmib2.dl_
lmrt.dl_
loadperf.dl_
locale.gp_
locale.nl_
localsec.dl_
localspl.dl_
localui.dl_
locator.ex_
log.dl_
logagent.ex_
login.cm_
logman.ex_
logon.sc_
logonui.ex_
logowin.gif
logui.oc_
lonsint.dl_
lpdsvc.dl_
lpk.dl_
lprhelp.dl_
lprmon.dl_
lsasrv.dl_
lsass.ex_
ltmdmnt.sy_
ltmdmntt.sy_
ltotape.sy_
luna.ms_
lvback.gif
lwadihid.sy_
magnify.ex_
magnify.gi_
makecab.ex_
market.ma_
mcastmib.dl_
mciavi32.dl_
mciqtz32.dl_
mciseq.dl_
mciwave.dl_
md5filt.dl_
mdlib.wm_
mdmbtmdm.in_
mdmcxsf2.in_
mdmetech.in_
mdmgen.in_
mdmhamrw.in_
mdminst.dl_
mdmirmdm.in_
mdmlt3.in_
mdmntstm.in_
mdmrpci.in_
mdmsuprv.in_
mdmusrk1.in_
mdmvv.in_
mdmxsdk.dl_
mdmxsdk.sy_
medctrro.cmd
memstpci.sy_
merlin.ac_
merlin.gi_
metada51.dl_
mf.sy_
mf3216.dl_
mfc40u.dl_
mfc42.dl_
mfc42u.dl_
mfcsubs.dl_
mgmtapi.dl_
microsoft.jscript.dll
microsoft.visualbasic.dll
micross.tt_
midimap.dl_
migapp.in_
migdial.ht_
migip.du_
migism.dl_
migism.in_
migisma.dl_
miglibnt.dl_
miglist.ht_
migload.ex_
migpage.ht_
migrate.ex_
migrate.is_
migrate.js_
migrate.ob_
migregdb.ex_
migsys.in_
miguser.in_
migwiz.ex_
migwiz.ht_
migwiz.in_
migwiz.ma_
migwiz2.ht_
migwiza.ex_
migx25a.du_
migx25b.du_
migx25c.du_
mimefilt.dl_
mlang.dl_
mmc.ex_
mmc30.dl_
mmc30r.dl_
mmcbase.dl_
mmcex.dl_
mmcexr.dl_
mmcfxc.dl_
mmcfxcr.dl_
mmcndmgr.dl_
mmcperf.ex_
mmcs.ch_
[0] Type d'archive: CAB (Microsoft)
--> mmcs.chm
[1] Type d'archive: CHM
mmcshext.dl_
mmfutil.dl_
mmssetup.cab
--> xpmsgr.chm
[1] Type d'archive: CHM
mmsys.cp_
mmsystem.dl_
mnmdd.dl_
mnmsrvc.ex_
mobsync.dl_
mobsync.ex_
modem.sy_
modemui.dl_
modew.ch_
[0] Type d'archive: CAB (Microsoft)
--> modew.chm
[1] Type d'archive: CHM
mof.xs_
mofcomp.ex_
mofd.dl_
monitor.gi_
monitor2.gi_
more.co_
moricons.dl_
mouclass.sy_
mountmgr.sy_
mouse.gi_
mouse.ht_
mouse4.gi_
mouseimg.gi_
mousetut.js_
mousewn1.gi_
mouse_a.ht_
mouse_b.ht_
mouse_c.ht_
mouse_d.ht_
mouse_e.ht_
mouse_f.ht_
mouse_g.ht_
mouse_h.ht_
mouse_i.ht_
mouse_j.ht_
mouse_k.ht_
moviemk.ch_
[0] Type d'archive: CAB (Microsoft)
--> moviemk.chm
[1] Type d'archive: CHM
moviemk.ex_
moviemk.in_
mp43dmod.dl_
mp4sdmod.dl_
mpe.sy_
mpg2data.ax_
mpg2splt.ax_
mpg4dmod.dl_
mpg4ds32.ax_
mplay32.ex_
mplayer2.cn_
mplayer2.ex_
mplayer2.hl_
mplayer2.in_
mplogo.gi_
mplogoh.gi_
mpr.dl_
mprapi.dl_
mprdim.dl_
mpvis.dl_
mqac.sy_
mqad.dl_
mqbkup.ex_
mqdscli.dl_
mqise.dl_
mqlogmgr.dl_
mqoa.dl_
mqqm.dl_
mqrt.dl_
mqrtdep.dl_
mqsec.dl_
mqsnap.dl_
mqsvc.ex_
mqtgsvc.ex_
mqtrig.dl_
mqupgrd.dl_
mqutil.dl_
mrxdav.sy_
mrxsmb.sy_
msacm32.dl_
msadce.dl_
msadcer.dl_
msadcf.dl_
msadcfr.dl_
msadco.dl_
msadcor.dl_
msadcs.dl_
msadds.dl_
msadds32.ax_
msaddsr.dl_
msader15.dl_
msado15.dl_
msado20.tl_
msado21.tl_
msado25.tl_
msado26.tl_
msado27.tl_
msadomd.dl_
msador15.dl_
msadox.dl_
msadp32.ac_
msadrh15.dl_
msafd.dl_
msapsspc.dl_
msasn1.dl_
msaud32.ac_
mscandui.dl_
mschap2.xs_
mschapv2.xs_
mscms.dl_
msconf.dl_
msconfig.ex_
msconv97.dl_
mscorcfg.dll
mscorcfg.msc
mscordbc.dll
mscordbi.dll
mscoree.dll
mscorie.dll
mscorjit.dll
mscorld.dll
mscorlib.dll
mscorlib.ldo
mscorlib.tlb
mscorpe.dll
mscorrc.chs.dll
mscorrc.cht.dll
mscorrc.dll
mscorrc.es.dll
mscorrc.fr.dll
mscorrc.ger.dll
mscorrc.it.dll
mscorrc.ja.dll
mscorrc.kor.dll
mscorsec.dll
mscorsn.dll
mscorsvr.dll
mscortim.dll
mscorwks.dll
mscpx32r.dl_
mscpxl32.dl_
msctf.dl_
msctfime.im_
msctfp.dl_
msdadc.dl_
msdadiag.dl_
msdaenum.dl_
msdaer.dl_
msdaipp.dll
msdaora.dl_
msdaorar.dl_
msdaosp.dl_
msdaprsr.dl_
msdaprst.dl_
msdaps.dl_
msdarem.dl_
msdaremr.dl_
msdart.dl_
msdasc.dl_
msdasql.dl_
msdasqlr.dl_
msdatl3.dl_
msdatsrc.tl_
msdatt.dl_
msdaurl.dl_
msdfmap.dl_
msdmo.dl_
msdtc.ex_
msdtclog.dl_
msdtcprx.dl_
msdtcstp.dl_
msdtctm.dl_
msdtctr.mo_
msdtcuiu.dl_
msdv.sy_
msdvbnp.ax_
msdxm.oc_
msdxmlc.dl_
msexch40.dl_
msexcl40.dl_
msfs.sy_
msftedit.dl_
msgina.dl_
msgpc.sy_
msgr3en.dl_
msgrocm.dl_
msgsc.dll
msgslang.dll
msgsvc.dl_
msh261.dr_
msh263.dr_
mshta.ex_
mshtml.dl_
mshtml.tl_
mshtmled.dl_
mshtmler.dl_
msi.dl_
msicw.is_
msident.dl_
msidle.dl_
msieftp.dl_
msiexec.ex_
msihnd.dl_
msimain.sd_
msimg32.dl_
msimn.ex_
msimsg.dl_
msimtf.dl_
msinfo.dl_
msinfo32.ch_
[0] Type d'archive: CAB (Microsoft)
--> msinfo32.chm
[1] Type d'archive: CHM
msircomm.sy_
msiregmv.ex_
msisip.dl_
msjet40.dl_
msjetol1.dl_
msjint40.dl_
msjro.dl_
msjter40.dl_
msjtes40.dl_
mskssrv.sy_
mslbui.dl_
mslogo.jp_
msltus40.dl_
mslwvtts.dl_
msmqconw.ch_
[0] Type d'archive: CAB (Microsoft)
--> msmqconw.chm
[1] Type d'archive: CHM
msmqocm.dl_
msmsgs.ca_
msmsgs.exe
msmsgs.in_
msn.is_
msn7.ca_
msn9.ca_
msncli.ex_
msnetmtg.in_
msnetobj.dl_
msnms.ic_
msnmsgs.ms_
msnmsn.in_
msnsspc.dl_
msnsusii.ex_
[0] Type d'archive: CAB (Microsoft)
--> msnsusii.exe
[1] Type d'archive: RSRC
--> Object
[2] Type d'archive: CAB (Microsoft)
mso.dll
msobcomm.dl_
msobdl.dl_
msobe.is_
msobmain.dl_
msobshel.dl_
msobshel.ht_
msobweb.dl_
msoe.ch_
[0] Type d'archive: CAB (Microsoft)
--> msoe.chm
[1] Type d'archive: CHM
--> /ieshared.chm
[2] Type d'archive: CHM
msoe.dl_
msoeacct.dl_
msoek.chm
--> /ieshared.chm
[1] Type d'archive: CHM
msoeres.dl_
msoert2.dl_
msoobe.ex_
msorc32r.dl_
msorcl32.dl_
mspaint.ch_
[0] Type d'archive: CAB (Microsoft)
--> mspaint.chm
[1] Type d'archive: CHM
mspaint.ex_
mspaint.hl_
mspatcha.dl_
mspbde40.dl_
mspclock.sy_
mspeap1.xs_
mspeapv1.xs_
mspmsnsv.dl_
mspmsp.dl_
mspqm.sy_
msprivs.dl_
msrating.dl_
msrd2x40.dl_
msrd3x40.dl_
msrepl40.dl_
msrle32.dl_
mssap.dl_
msscds32.ax_
msscp.dl_
msscript.mu_
msscript.oc_
mssha.dl_
msshamsg.dl_
mssmbios.sy_
mst120.dl_
mst123.dl_
mstape.sy_
mstask.dl_
mstaskw.ch_
[0] Type d'archive: CAB (Microsoft)
--> mstaskw.chm
[1] Type d'archive: CHM
mstee.sy_
mstext40.dl_
mstime.dl_
mstinit.ex_
mstlsapi.dl_
mstsweb.ca_
msutb.dl_
msv1_0.dl_
msvbvm60.dl_
msvcirt.dl_
msvcp60.dl_
msvcrt.dl_
msvcrt40.dl_
msvfw32.dl_
msvidctl.dl_
msw3prt.dl_
mswdat10.dl_
mswebdvd.dl_
mswmdm.dl_
mswrd6.wp_
mswrd8.wp_
mswsock.dl_
mswstr10.dl_
msxactps.dl_
msxbde40.dl_
msxml.dl_
msxml2.dl_
msxml3.dl_
msxml6.dl_
msxml6r.dl_
msyuv.dl_
mtlmnt5.sy_
mtlstrm.sy_
mtstocom.ex_
mtxclu.dl_
mtxdm.dl_
mtxex.dl_
mtxlegih.dl_
mtxoci.dl_
mtxparhd.dl_
mtxparhm.sy_
mup.sy_
mutohpen.sy_
mydocs.dl_
mymusic.in_
nabtsfec.sy_
nac.dl_
napipsec.dl_
napmontr.dl_
napprov.mo_
napschem.mo_
napstat.ex_
narrator.ex_
ncobjapi.dl_
ncprov.dl_
ncpsres.dl_
nddeapi.dl_
nddeapir.ex_
nddenb32.dl_
ndis.sy_
ndisip.sy_
ndisnpp.dl_
ndistapi.sy_
ndisuio.sy_
ndiswan.sy_
ndproxy.sy_
ndptsp.ts_
net.ex_
net1.ex_
netapi32.dl_
netbeac.in_
netbios.sy_
netbt.sy_
netcfgp.ch_
[0] Type d'archive: CAB (Microsoft)
--> netcfgp.chm
[1] Type d'archive: CHM
netcfgw.ch_
[0] Type d'archive: CAB (Microsoft)
--> netcfgw.chm
[1] Type d'archive: CHM
netcfgx.dl_
netdde.ex_
netfxupdate.exe
netid.dl_
netklsi.in_
netlogon.dl_
netman.dl_
netmeet.ht_
netnm.in_
netoc.dl_
netplwiz.dl_
netrap.dl_
netrndis.in_
netrtsnt.in_
netsetup.cp_
netsetup.exe
[0] Type d'archive: RSRC
--> Object
[1] Type d'archive: CAB (Microsoft)
netsh.ex_
netshell.dl_
netstat.ex_
nettun.in_
netui0.dl_
netui1.dl_
netwlan.in_
netwlan2.in_
netwlan5.im_
netwlan5.sy_
networkp.ch_
[0] Type d'archive: CAB (Microsoft)
--> networkp.chm
[1] Type d'archive: CHM
networkw.ch_
[0] Type d'archive: CAB (Microsoft)
--> networkw.chm
[1] Type d'archive: CHM
netwv48.in_
newalert.wav
newbtm1.jp_
newbtm8.jp_
newdev.dl_
newemail.wav
neweula.ht_
neweula2.ht_
newmark1.jp_
newmark8.jp_
news.pn_
newstrys.wm_
newtop1.jp_
newtop8.jp_
nextdown.jp_
nextoff.jp_
nextover.jp_
nextup.jp_
ngen.exe
nic1394.sy_
nlhtml.dl_
nmas.dl_
nmasnt.dl_
nmchat.dl_
nmcom.dl_
nmft.dl_
nmmkcert.dl_
nmnt.sy_
nmoldwb.dl_
nmpgmgrp.ex_
nmwb.dl_
nmwhiteb.ch_
[0] Type d'archive: CAB (Microsoft)
--> nmwhiteb.chm
[1] Type d'archive: CHM
noanswer.ht_
notepad.ex_
notify.wa_
npdrmv2.dl_
npdrmv2.zi_
[0] Type d'archive: CAB (Microsoft)
--> npdrmv2.zip
[1] Type d'archive: ZIP
npds.zi_
[0] Type d'archive: CAB (Microsoft)
--> npds.zip
[1] Type d'archive: ZIP
npdsplay.dl_
npfs.sy_
nppagent.ex_
npptools.dl_
npwmsdrm.dl_
nscirda.sy_
nsepm.dl_
nslookup.ex_
nt5.ca_
ntbackup.ex_
ntchowto.ch_
[0] Type d'archive: CAB (Microsoft)
--> ntchowto.chm
[1] Type d'archive: CHM
ntdefp.ch_
[0] Type d'archive: CAB (Microsoft)
--> ntdefp.chm
[1] Type d'archive: CHM
ntdefw.ch_
[0] Type d'archive: CAB (Microsoft)
--> ntdefw.chm
[1] Type d'archive: CHM
ntdetect.com
ntdll.dll
ntdsapi.dl_
ntevt.dl_
ntfs.sys
ntio.sy_
ntio404.sy_
ntio411.sy_
ntio412.sy_
ntio804.sy_
ntkrnlmp.ex_
ntkrnlpa.ex_
ntkrpamp.ex_
ntlanman.dl_
ntldr
ntlsapi.dl_
ntmarta.dl_
ntmsapi.dl_
ntmsdba.dl_
ntmsmgr.dl_
ntmssvc.dl_
ntmtlfax.sy_
ntoc.dl_
ntoskrnl.ex_
ntprint.cat
ntprint.dl_
ntshrui.dl_
ntvdm.ex_
ntvdmd.dl_
nuskin.wm_
nusrmgr.cp_
nusrmgrp.ch_
[0] Type d'archive: CAB (Microsoft)
--> nusrmgrp.chm
[1] Type d'archive: CHM
--> /ntshared.chm
[2] Type d'archive: CHM
nusrmgrw.ch_
[0] Type d'archive: CAB (Microsoft)
--> nusrmgrw.chm
[1] Type d'archive: CHM
--> /ntshared.chm
[2] Type d'archive: CHM
nv4_disp.dl_
nv4_disp.in_
nv4_mini.sy_
nvct.in_
nvdm.in_
nvts.in_
nwapi32.dl_
nwlnkipx.sy_
nwprovau.dl_
nwrdr.sy_
nwwks.dl_
oakley.dl_
obeip.du_
obelog.dl_
obemetal.dl_
obemtllc.dl_
obepopc.dl_
objsel.dl_
obrs040c.dl_
occache.dl_
ocgen.dl_
ocmanage.dl_
ocmsn.dl_
odbc16gt.dl_
odbc32.dl_
odbc32gt.dl_
odbcad32.ex_
odbcbcp.dl_
odbcconf.dl_
odbcconf.ex_
odbcconf.rs_
odbccp32.cp_
odbccp32.dl_
odbccr32.dl_
odbccu32.dl_
odbcint.dl_
odbcji32.dl_
odbcjt32.dl_
odbcp32r.dl_
odbctrac.dl_
oddbse32.dl_
odexl32.dl_
odfox32.dl_
odpdx32.dl_
odtext32.dl_
oeaccess.in_
oeimport.dl_
oemcoa.jp_
oemig50.ex_
oemiglib.dl_
oemlogo.gi_
oempriv.ht_
offfilt.dl_
ohci1394.sy_
ole32.dl_
oleaut32.dl_
olecli32.dl_
olecnv32.dl_
oledb32.dl_
oledb32r.dl_
oledlg.dl_
oleprn.dl_
olepro32.dl_
onex.dl_
onex_v1.xs_
online.wav
oobebaln.ex_
oobeinfo.in_
oobestyl.cs_
oobeutil.js_
opengl32.dl_
opnfiles.ex_
oschoice.exe
osk.ex_
osloader.ex_
osloader.nt_
osuninst.dl_
p2p.dl_
p2pgasvc.dl_
p2pgraph.dl_
p2pnetsh.dl_
p2psvc.dl_
p3.sy_
p6disp.gp_
p6font.gp_
packager.ex_
page1.as_
paint.pn_
parhmse.in_
paris.jp_
parism.jp_
parport.sy_
partmgr.sy_
passwrdp.ch_
[0] Type d'archive: CAB (Microsoft)
--> passwrdp.chm
[1] Type d'archive: CHM
passwrdw.ch_
[0] Type d'archive: CAB (Microsoft)
--> passwrdw.chm
[1] Type d'archive: CHM
pautoenr.dl_
pberr.ht_
pca200e.sy_
pchdt_p3.ca_
[0] Type d'archive: CAB (Microsoft)
--> pchdt_p3.cab
[1] Type d'archive: CAB (Microsoft)
--> newsgroups.cab
[2] Type d'archive: CAB (Microsoft)
--> pss.cab
[2] Type d'archive: CAB (Microsoft)
--> rcBuddy.cab
[2] Type d'archive: CAB (Microsoft)
pchdt_w3.ca_
[0] Type d'archive: CAB (Microsoft)
--> pchdt_w3.cab
[1] Type d'archive: CAB (Microsoft)
--> newsgroups.cab
[2] Type d'archive: CAB (Microsoft)
--> pss.cab
[2] Type d'archive: CAB (Microsoft)
--> rcBuddy.cab
[2] Type d'archive: CAB (Microsoft)
pchshell.dl_
pchsvc.dl_
pci.sy_
pciidex.sy_
pcl4res.dl_
pcl5eres.dl_
pcl5ures.dl_
pclxl.dl_
pclxl.gp_
pcmcia.sy_
pcx500.sy_
pdh.dl_
perfcounter.dll
perfctrs.dl_
perfdisk.dl_
perfmon.ex_
perfnet.dl_
perfos.dl_
perfproc.dl_
perm2.sy_
perm2dll.dl_
perm3.sy_
perm3dd.dl_
phone.ic_
phone.in_
phone.ob_
phone.ve_
photowiz.dl_
pid.dl_
pinball.ex_
ping.ex_
pisa.jp_
pisam.jp_
pjl.gp_
pjlmon.dl_
plotter.dl_
plotui.dl_
plylst1.wp_
plylst10.wp_
plylst11.wp_
plylst12.wp_
plylst13.wp_
plylst14.wp_
plylst15.wp_
plylst2.wp_
plylst3.wp_
plylst4.wp_
plylst5.wp_
plylst6.wp_
plylst7.wp_
plylst8.wp_
plylst9.wp_
plyr_err.ch_
[0] Type d'archive: CAB (Microsoft)
--> plyr_err.chm
[1] Type d'archive: CHM
pmh.dl_
pngfilt.dl_
pnrpnsp.dl_
policman.dl_
polstore.dl_
portcls.sy_
powercfg.cp_
powercfg.ex_
powerfil.sy_
powrprof.dl_
ppa3.sy_
prague.jp_
praguem.jp_
printp.ch_
[0] Type d'archive: CAB (Microsoft)
--> printp.chm
[1] Type d'archive: CHM
printui.dl_
printw.ch_
[0] Type d'archive: CAB (Microsoft)
--> printw.chm
[1] Type d'archive: CHM
processr.sy_
proctexe.oc_
prodkey.gi_
prodkey.ht_
profmap.dl_
progman.ex_
progress.gi_
proquota.ex_
provthrd.dl_
proxycfg.ex_
prvcyms.ht_
ps5333.in_
ps5ui.dl_
psapi.dl_
psbase.dl_
psched.sy_
pscript.hl_
pscript.nt_
pscript5.dl_
psisdecd.dl_
psisrndr.ax_
pstorec.dl_
pstorsvc.dl_
ps_schm.gd_
ptpusd.dl_
pulse.ht_
pwsdata.dl_
qagent.dl_
qagentrt.dl_
qasf.dl_
qcap.dl_
qcliprov.dl_
qdv.dl_
qdvd.dl_
qedit.dl_
qedwipes.dl_
qic157.sy_
qmark.ac_
qmark.gi_
qmgr.dl_
qmgr.in_
qmgrprxy.dl_
qprocess.ex_
quartz.dl_
query.dl_
qutil.dl_
racpldlg.dl_
ramdisk.in_
ramdisk.sy_
rasadhlp.dl_
rasapi32.dl_
rasauto.dl_
raschap.dl_
rasdlg.dl_
rasl2tp.sy_
rasman.dl_
rasmans.dl_
rasphone.ex_
rasppp.dl_
raspppoe.sy_
raspptp.sy_
rasqec.dl_
rassapi.dl_
rastapi.dl_
rastls.dl_
rawxml.xs_
rcbdyctl.dl_
rcimlby.ex_
rcnterr.ht_
rcp.ex_
rdbss.sy_
rdchost.dl_
rdpclip.ex_
rdpdd.dl_
rdpdr.sy_
rdpsnd.dl_
rdpwd.sy_
rdpwsx.dl_
rdsaddin.ex_
rdshost.ex_
rdsktpw.chm
rdtone.ht_
re52184.nlp
readmesp.htm
recagent.sy_
recycle.wa_
redbook.sy_
redir.ex_
redshd.gi_
refdial.ht_
reg.ex_
reg.is_
reg1.ht_
reg3.ht_
regapi.dl_
regasm.exe
regcode.dll
regdial.ht_
regedit.exe
regopt.ch_
[0] Type d'archive: CAB (Microsoft)
--> regopt.chm
[1] Type d'archive: CHM
regsvc.dl_
regsvcs.exe
regsvr32.ex_
regwizc.dl_
remasst.ch_
[0] Type d'archive: CAB (Microsoft)
--> remasst.chm
[1] Type d'archive: CHM
remasstk.chm
remotepg.dl_
remotesp.ts_
repdrvfs.dl_
resutils.dl_
revert.wm_
[0] Type d'archive: CAB (Microsoft)
--> revert.wmz
[1] Type d'archive: ZIP
rexec.ex_
rfcomm.sy_
rhndshk.ht_
rhttpaa.dl_
riafres.dl_
riafui1.dl_
riafui2.dl_
riched20.dl_
ringin.wa_
ringout.wa_
rmcast.sy_
rndismp.sy_
rndismpx.sy_
rnoansw.ht_
rnomdm.ht_
rocket.sy_
rpberr.ht_
rpcref.dl_
rpcrt4.dl_
rpcss.dl_
rpulse.ht_
rrcm.dl_
rsaenh.dl_
rsh.ex_
rshx32.dl_
rsmps.dl_
rsnotify.ex_
rsop.mo_
rsopw.ch_
[0] Type d'archive: CAB (Microsoft)
--> rsopw.chm
[1] Type d'archive: CHM
rstrui.ex_
rsvpsp.dl_
rtcshare.ex_
rtipxmib.dl_
rtl8139.sy_
rtoobusy.ht_
rtuner.wm_
rtutils.dl_
rundll32.ex_
runonce.ex_
rw001ext.dl_
rw330ext.dl_
rw430ext.dl_
rw450ext.dl_
s3gnb.dl_
s3gnbm.sy_
safemode.ht_
safrcdlg.dl_
safrdm.dl_
safrslv.dl_
samlib.dl_
sample1.jp_
sample2.jp_
samsrv.dl_
sapi.cp_
sapi.dl_
savedump.ex_
sbe.dl_
sbeio.dl_
sbp2port.sy_
scarddlg.dl_
scardsvr.ex_
sccbase.dl_
sccsccp.dl_
scecli.dl_
scesrv.dl_
schannel.dl_
schedsvc.dl_
sclgntfy.dl_
scntlast.ht_
sconnect.ht_
sconnect.js_
scrcons.ex_
script.dl_
scripta.dl_
scrnsave.sc_
scrobj.dl_
scrobj.mu_
scrrun.dl_
scrrun.mu_
scsiport.sy_
scsiscan.sy_
sctasks.ex_
sdbinst.ex_
sdbus.sy_
sdhcinst.dl_
secdrv.sy_
seclogon.dl_
secur32.dl_
security.dl_
security.ht_
sendcmsg.ch_
[0] Type d'archive: CAB (Microsoft)
--> sendcmsg.chm
[1] Type d'archive: CHM
sendcmsg.dl_
sendmail.dl_
sens.dl_
sensapi.dl_
serenum.sy_
serial.sy_
servdeps.dl_
services.ex_
sessmgr.ex_
sethc.ex_
setregni.exe
setup.ex_
setup50.ex_
setupapi.dl_
setupdd.sy_
setupldr.bin
setupldr.ex_
setupn.ex_
setupqry.dl_
setupqry.in_
setup_wm.ex_
sfc.dl_
sfcfiles.dl_
sfc_os.dl_
sffdisk.sy_
sffp_mmc.sy_
sffp_sd.sy_
sfloppy.sy_
shdoclc.dl_
shdocvw.dl_
shell32.dl_
shfolder.dl_
shgina.dl_
shimeng.dl_
shimgvw.dl_
shlwapi.dl_
shmedia.dl_
shmgrate.ex_
shrpubw.ex_
shscrap.dl_
shsvcs.dl_
shtml.dll
shtml.exe
shutdown.ex_
signup.ma_
sigtab.dl_
sigverif.ex_
siint5.dl_
simpdata.tl_
sisagp.sy_
sisnic.sy_
skeys.ex_
skins.in_
skipdown.jp_
skipoff.jp_
skipover.jp_
skipup.jp_
sla30nd5.sy_
slayerxp.dl_
slbcsp.dl_
slbiop.dl_
slcoinst.dl_
slextspk.dl_
slgen.dl_
slip.sy_
slnt7554.sy_
slntamr.sy_
slnthal.sy_
slrundll.ex_
slserv.ex_
slwdmsup.sy_
sl_anet.ac_
smartnav.htm
smartnav.js
smartnavie5.js
smbali.sy_
smbbatt.sy_
smbclass.sy_
smbinst.ex_
smi2smir.ex_
smlogcfg.dl_
smlogsvc.ex_
smss.ex_
smtpsvc.dl_
snd.ht_
sndrec32.ex_
sniffpol.dl_
snmp.ex_
snmpapi.dl_
snmpcl.dl_
snmpincl.dl_
snmpmib.dl_
snmpsmir.dl_
snmpsnap.dl_
snmpthrd.dl_
snmptrap.ex_
softkbd.dl_
sonyait.sy_
sonydcam.sy_
sort.ex_
sortkey.nl_
sorttbls.nl_
sp3.cab
--> blutooth.chm
[1] Type d'archive: CHM
sp3_uber.cat
spad.ch_
[0] Type d'archi

et antispyware
SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 06/21/2009 at 07:10 PM

Application Version : 4.26.1004

Core Rules Database Version : 3949
Trace Rules Database Version: 1891

Scan type : Complete Scan
Total Scan Time : 01:40:41

Memory items scanned : 511
Memory threats detected : 0
Registry items scanned : 7057
Registry threats detected : 4
File items scanned : 23280
File threats detected : 7

Unclassified.Unknown Origin
HKU\S-1-5-21-608057341-1465058494-1690550294-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D1C4E89-A32A-416B-BCDB-33B3EF3617D3}
HKCR\PROTOCOLS\Filter\text/html
HKCR\PROTOCOLS\Filter\text/html#CLSID

InstaFinderK BHO
HKU\S-1-5-21-608057341-1465058494-1690550294-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-90F0-F66AB581A933}

Adware.Tracking Cookie
C:\Documents and Settings\Client\Cookies\client@xiti[1].txt
C:\Documents and Settings\Client\Cookies\client@vitamine.networldmedia[2].txt
C:\Documents and Settings\Client\Cookies\client@networldmedia[1].txt
C:\Documents and Settings\Client\Cookies\client@vitamine.networldmedia[1].txt
C:\Documents and Settings\Client\Cookies\client@atdmt[1].txt

Trojan.Downloader-Gen/Suspicious
C:\GENPROC\OUTIL\MBR.EXE

Adware.Vundo/Variant-MSFake
C:\SYSTEM VOLUME INFORMATION\_RESTORE{1FF0E9E7-54B5-4E66-A717-2700B7D96318}\RP388\A0203405.EXE

Salut

as tu bien tout supprimer avec antispyware ?

antivir a trouvé des virus ou pas ? car il manque la fin du rapport peut tu la poster

puis poste moi un nouveau hijackthis stp

as tu encore des problems ?

re

Poste un dernier hijackthis c'est pas fini,

il faut faire sa aussi après le hijackthis :

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :

* Télécharge Toolscleaner sur ton Bureau
http://www.commentcamarche.net/telecharger/telechargement 34055291 toolscleaner
* Double-clique sur ToolsCleaner2.exe et laisse le travailler
* Clique sur Recherche et laisse le scan se terminer.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options facultatives.
* Clique sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta prochaine réponse

puis

on peut aussi verfier la vulnerabilité de windows et aussi d'autre produits

-
Soit par le biais de ce site internet il faut installer l'active X puis
clic start scan et le site montre d'une croix rouge les faille de
sécurité pour quelques produits important installé sur le PC comme
java, IE, windows, flashplayer, adobe...les + importantes
https://www.flexera.com/products/operations/software-vulnerability-management.html

-
Soit on peut aussi passer par un logiciel a installer qui scan le PC et
affiche TOUTES les mises a jour des logiciels et produits installé sur
le PC
https://filehippo.com/windows/tuning-utilities/

utilise les 2 outils

et met ton sujet en résolu

allo
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:48:35, on 2009-06-22
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: www.king.com
O15 - Trusted Zone: https://www.king.com/
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.serviceshub.microsoft.com/supportforbusiness/create
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} - http://www.facebook.com/controls/contactx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

voici tool cleaner
Fichiers temporaires nettoyés !
Corbeille vidée!

salut

ton hijackthis est impeccable, si tu as + de probleme c'est resolu pour moi

@+ ;)

P.S : fait bien les mises a jour pour eviter les failles de securité et te faire infecter

allo
merci infiniment mon ordinateur n,a jamais si bien ete tes genial
passe une belle journee.

de rien

bonne journée aussi et oublie pas de mettre ton sujet en résolu

merci @+