J'ai un virus

Bonjour,
avec la lenteur d'internet j'ai aucun doute.
Le rapport hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:14:54, on 27/09/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\PROGRA~1\Bandoo\BndCore.exe
C:\Users\admin\Documents\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vb32&d=0409&m=aspire_5735
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vb32&d=0409&m=aspire_5735
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll (file missing)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll (file missing)
O3 - Toolbar: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\Windows\WIDEST~1\FREEQU~1\QUICKA~1.DLL c:\progra~1\bandoo\bndhook.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bandoo Coordinator - Discordia Limited - C:\PROGRA~1\Bandoo\Bandoo.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Service Google Update (gupdate1c9c82bf41789f3) (gupdate1c9c82bf41789f3) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe (file missing)

--
End of file - 10565 bytes

J'ai déjà fais un scan avec avast mais il trouve rien.

merci
Configuration: Windows Vista
Firefox 3.5.3

38 réponses

Résumé de la discussion

Un rapport HijackThis sur Windows Vista révèle de nombreuses barres d'outils, des composants publicitaires et des services potentiellement indésirables qui accompagnent une lenteur générale et une utilisation élevée du processeur. Des échanges recommandent CCleaner en mode avancé, Navilog et Toolbar-S&D, puis redémarrage en mode sans échec et reanalyse pour vérifier les suppressions et obtenir un rapport nettoyé. En cas de détections persistantes, GenProc signale des éléments gênants et invite à relancer l’analyse, puis à tester des outils en ligne tels qu'ESET ou AD-Remover pour une étape finale.

Bobot (l’IA à votre service)
  1. Contributeur
    Bonjour,

    télécharge GenProc http://www.genproc.com/GenProc.exe

    double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre
    1. Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures" ; par la suite, laisse-le avec ses réglages par défaut. C'est tout.

      Etape 1/ Télécharge :

      Navilog1 (IL-MAFIOSO) sur ton Bureau.

      Toolbar-S&D (Team IDN) sur ton Bureau.

      important Redémarre en mode sans échec comme indiqué ICI ; Choisis ta session courante *** admin *** (pour retrouver le rapport, clique sur le raccourci "Rapport GenProc[1]" sur ton bureau).

      Etape 2/

      Fais un clic droit sur le raccourci Navilog1 sur le Bureau : "Executer en tant qu'Administrateur" et et choisis l'option 1 ; valide et patiente jusqu'au message "Scan terminé le......".

      Etape 3/

      Lance Toolbar-S&D situé sur le Bureau. Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.

      Etape 4/

      Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

      Etape 5/

      Redémarre normalement et poste, dans la même réponse :
      - Le contenu du rapport cleannavi.txt situé dans C:\ ;
      - Le contenu du rapport TB.txt situé dans C:\ ;
      - Un nouveau rapport HijackThis ;
      - Un nouveau rapport GenProc ;

      Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.
  2. ok

    j'ai aussi "List Uninstall" qui a été fait avec le logiciel GenProc :

    je ne pense pas que ça vous est utile mais je pose au cas où

    DisplayName=hex(2):45,00,53,00,45,00,54,00,20,00,4f,00,6e,00,6c,00,69,00,6e,\
    AbsoluCasino
    Acer Arcade Deluxe
    Acer Crystal Eye Webcam 2.0.8
    Acer eDataSecurity Management
    Acer Empowering Technology
    Acer ePower Management
    Acer eRecovery Management
    Acer eSettings Management
    Acer GameZone Console 2.0.1.1
    Acer GridVista
    Acer Mobility Center Plug-In
    Acer ScreenSaver
    Activation Assistant for the 2007 Microsoft Office suites
    Ad-Aware
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Reader 9.1.3 - Français
    Agere Systems HDA Modem
    Alice Greenfingers
    Apple Mobile Device Support
    Apple Software Update
    Assistant de connexion Windows Live
    Audacity 1.2.6
    avast! Antivirus
    Azada
    Bandoo
    Billiard Art
    Bonjour
    Cake Mania
    CamStudio 2.0 Fr
    CCleaner (remove only)
    Chicken Invaders 3
    Choice Guard
    Crawler Toolbar with Web Security Guard
    Dealio Toolbar v4.0
    Egypt Ball
    Encyclopédie Microsoft Encarta 2005
    eSobi v2
    EvJO Photo-Image Resizer v2.5
    Favorit
    FormatFactory 2.10
    Funny Bricks
    Galerie de photos Windows Live
    Google Chrome
    Google Desktop
    Google Toolbar for Internet Explorer
    Google Update Helper
    Google Earth
    HijackThis 2.0.2
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Installation Windows Live
    Intel(R) Graphics Media Accelerator Driver
    InterActual Player
    iTunes
    IVCsoft\\Internet Video Converter 1.41 FR
    Java(TM) 6 Update 15
    Java(TM) 6 Update 7
    Junk Mail filter update
    K-Lite Mega Codec Pack 4.9.0
    Kick N Rush
    Launch Manager
    LauncherMA
    LightScribe 1.4.142.1
    LimeWire 5.1.3
    LogMeIn
    Ma-Config.com
    Mad Medley Battle
    MahJongg Solitaire 3D
    Marvell Miniport Driver
    Messenger Plus! Live
    Microsoft .NET Framework 3.5 Language Pack SP1 - fra
    Microsoft .NET Framework 3.5 SP1
    Microsoft Application Error Reporting
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Works
    MobileMe Control Panel
    Module linguistique Microsoft .NET Framework 3.5 SP1- fra
    Mozilla Firefox (3.5.3)
    MSVCRT
    MSXML 4.0 SP2 (KB954430)
    Mystery Case Files - Huntsville
    Mystery Solitaire - Secret Island
    NTI Backup Now 5
    NTI Backup Now Standard
    NTI Media Maker 8
    OpenOffice.org 3.0
    Orion
    Outil de mise à jour Google
    Outil de téléchargement Windows Live
    PaperPort
    PC SECURITY TEST 2008
    PhotoFiltre
    PhotoNow!
    PlayFLV
    PowerDirector
    QuickTime
    Realtek High Definition Audio Driver
    Realtek USB 2.0 Card Reader
    Safari
    Search Settings 1.2.1
    Shockwave
    Skyrock Toolbar
    Softonic_France_FF Toolbar
    Solitaire V 1.0
    Spelling Dictionaries Support For Adobe Reader 9
    Streaming Video Recorder V2.0.1
    Sudoku 3D Pro
    SweetIM for Messenger 2.7
    SweetIM Toolbar for Internet Explorer 3.4
    Synaptics Pointing Device Driver
    Trial Bike Ultra
    Turbo Pizza
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    VirginMega.Fr Premium
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Mail
    Windows Live Messenger
    Windows Live Movie Maker Bêta
    Windows Live Sync
    Windows Live Writer
    Windows Media Player Firefox Plugin
    Wondershare FLV Downloader Pro(Build 1.4.1.16)
    Xfire (remove only)
    Your monster voice 1

    C:\Program Files\Acer
    C:\Program Files\Acer Arcade Deluxe
    C:\Program Files\Acer GameZone
    C:\Program Files\Acer Inc
    C:\Program Files\Acer Incorporated
    C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
    C:\Program Files\Adobe
    C:\Program Files\Advanced System Optimizer
    C:\Program Files\Alwil Software
    C:\Program Files\Apowersoft
    C:\Program Files\Apple Software Update
    C:\Program Files\ASCII Art Generator
    C:\Program Files\Astonsoft
    C:\Program Files\Audacity
    C:\Program Files\AviSynth 2.5
    C:\Program Files\AxBx
    C:\Program Files\Bandoo
    C:\Program Files\Big Kahuna Reef
    C:\Program Files\Bonjour
    C:\Program Files\BoontyGames
    C:\Program Files\Brother
    C:\Program Files\CamStudio
    C:\Program Files\CCleaner
    C:\Program Files\Common Files
    C:\Program Files\Conduit
    C:\Program Files\Convesoft
    C:\Program Files\Crawler
    C:\Program Files\Cyberlink
    C:\Program Files\data.llp
    C:\Program Files\Deenero
    C:\Program Files\DoremiSoft
    C:\Program Files\DoubleSafety
    C:\Program Files\eRightSoft
    C:\Program Files\ESET
    C:\Program Files\eSobi
    C:\Program Files\Eusing Free Registry Cleaner
    C:\Program Files\EvJOSoft
    C:\Program Files\ffdshow
    C:\Program Files\FormatFactory
    C:\Program Files\Free FLV Converter
    C:\Program Files\Games-Attack
    C:\Program Files\GfedEurofr18F
    C:\Program Files\Gold Wave Editor Pro
    C:\Program Files\Google
    C:\Program Files\HTV
    C:\Program Files\Intel
    C:\Program Files\InterActual
    C:\Program Files\Internet Download Manager
    C:\Program Files\Internet Explorer
    C:\Program Files\iPod
    C:\Program Files\iTunes
    C:\Program Files\IVCsoft
    C:\Program Files\Java
    C:\Program Files\JRE
    C:\Program Files\K-Lite Codec Pack
    C:\Program Files\Launch Manager
    C:\Program Files\Lavasoft
    C:\Program Files\LimeWire
    C:\Program Files\LogMeIn
    C:\Program Files\ma-config.com
    C:\Program Files\MahJongg Solitaire 3D
    C:\Program Files\Marvell
    C:\Program Files\Messenger Plus Live
    C:\Program Files\Micro Application
    C:\Program Files\Microsoft
    C:\Program Files\Microsoft Encarta
    C:\Program Files\Microsoft Games
    C:\Program Files\Microsoft Office
    C:\Program Files\Microsoft Silverlight
    C:\Program Files\Microsoft SQL Server Compact Edition
    C:\Program Files\Microsoft Works
    C:\Program Files\Movie Maker
    C:\Program Files\Mozilla Firefox
    C:\Program Files\MSBuild
    C:\Program Files\MSXML 4.0
    C:\Program Files\MyPlayCity.com
    C:\Program Files\NewTech Infosystems
    C:\Program Files\OpenOffice.org 3
    C:\Program Files\Panda Security
    C:\Program Files\Patch MsnCreative
    C:\Program Files\PhotoFiltre
    C:\Program Files\PlayFLV
    C:\Program Files\QUAD Utilities
    C:\Program Files\QuickMediaConverter
    C:\Program Files\QuickTime
    C:\Program Files\Real
    C:\Program Files\Realtek
    C:\Program Files\Reference Assemblies
    C:\Program Files\RegistryFix7
    C:\Program Files\S.N.Safe&Software
    C:\Program Files\Safari
    C:\Program Files\ScanSoft
    C:\Program Files\Search Settings
    C:\Program Files\skycorp
    C:\Program Files\skyrocktbar
    C:\Program Files\Softonic_France_FF
    C:\Program Files\Software Informer
    C:\Program Files\Solitaire
    C:\Program Files\SourceTec
    C:\Program Files\Sudoku 3D Pro
    C:\Program Files\SweetIM
    C:\Program Files\Synaptics
    C:\Program Files\Systweak
    C:\Program Files\Total Video Converter
    C:\Program Files\Uniblue
    C:\Program Files\VideoLAN
    C:\Program Files\VirginMega
    C:\Program Files\Windows Calendar
    C:\Program Files\Windows Collaboration
    C:\Program Files\Windows Defender
    C:\Program Files\Windows Live
    C:\Program Files\Windows Live SkyDrive
    C:\Program Files\Windows Mail
    C:\Program Files\Windows Media Player
    C:\Program Files\Windows NT
    C:\Program Files\Windows Photo Gallery
    C:\Program Files\Windows Sidebar
    C:\Program Files\Wondershare
    C:\Program Files\Xfire
    C:\Program Files\Your monster voice 1
    C:\Program Files\ZHPFix

    C:\Program Files\Common Files\Adobe
    C:\Program Files\Common Files\Apple
    C:\Program Files\Common Files\BOONTY Shared
    C:\Program Files\Common Files\InstallShield
    C:\Program Files\Common Files\Java
    C:\Program Files\Common Files\LightScribe
    C:\Program Files\Common Files\microsoft shared
    C:\Program Files\Common Files\muvee Technologies
    C:\Program Files\Common Files\Real
    C:\Program Files\Common Files\ScanSoft Shared
    C:\Program Files\Common Files\Services
    C:\Program Files\Common Files\Softwin
    C:\Program Files\Common Files\SpeechEngines
    C:\Program Files\Common Files\System
    C:\Program Files\Common Files\Windows Live
    C:\Program Files\Common Files\Wise Installation Wizard
    C:\Program Files\Common Files\xing shared

    C:\Users\admin\AppData\Roaming\Acer GameZone Console
    C:\Users\admin\AppData\Roaming\Adobe
    C:\Users\admin\AppData\Roaming\Any Video Converter
    C:\Users\admin\AppData\Roaming\Apowersoft
    C:\Users\admin\AppData\Roaming\Apple Computer
    C:\Users\admin\AppData\Roaming\Bandoo
    C:\Users\admin\AppData\Roaming\Broad Intelligence
    C:\Users\admin\AppData\Roaming\Brother
    C:\Users\admin\AppData\Roaming\DeepBurner
    C:\Users\admin\AppData\Roaming\Desktopicon
    C:\Users\admin\AppData\Roaming\DMCache
    C:\Users\admin\AppData\Roaming\Download Manager
    C:\Users\admin\AppData\Roaming\DreamDale
    C:\Users\admin\AppData\Roaming\dvdcss
    C:\Users\admin\AppData\Roaming\Games-Attack
    C:\Users\admin\AppData\Roaming\GetRightToGo
    C:\Users\admin\AppData\Roaming\Gold Wave Editor Pro
    C:\Users\admin\AppData\Roaming\Google
    C:\Users\admin\AppData\Roaming\GrabPro
    C:\Users\admin\AppData\Roaming\Identities
    C:\Users\admin\AppData\Roaming\IDM
    C:\Users\admin\AppData\Roaming\InstallShield
    C:\Users\admin\AppData\Roaming\LimeWire
    C:\Users\admin\AppData\Roaming\Macromedia
    C:\Users\admin\AppData\Roaming\MagicBall4
    C:\Users\admin\AppData\Roaming\Malwarebytes
    C:\Users\admin\AppData\Roaming\Media Player Classic
    C:\Users\admin\AppData\Roaming\Mozilla
    C:\Users\admin\AppData\Roaming\MP-Manager
    C:\Users\admin\AppData\Roaming\MPMAN
    C:\Users\admin\AppData\Roaming\OpenOffice.org
    C:\Users\admin\AppData\Roaming\Orbit
    C:\Users\admin\AppData\Roaming\PeerNetworking
    C:\Users\admin\AppData\Roaming\Real
    C:\Users\admin\AppData\Roaming\ScanSoft
    C:\Users\admin\AppData\Roaming\Systweak
    C:\Users\admin\AppData\Roaming\Template
    C:\Users\admin\AppData\Roaming\Uniblue
    C:\Users\admin\AppData\Roaming\URSE Games
    C:\Users\admin\AppData\Roaming\UserTile.png
    C:\Users\admin\AppData\Roaming\vlc
    C:\Users\admin\AppData\Roaming\WinAVI
    C:\Users\admin\AppData\Roaming\Windows Live Writer
    C:\Users\admin\AppData\Roaming\wklnhst.dat
    C:\Users\admin\AppData\Roaming\Xfire
    C:\Users\admin\AppData\Roaming\Xilisoft Corporation
    C:\Users\admin\AppData\Roaming\Zylom

    C:\ProgramData\Acer GameZone Console
    C:\ProgramData\Adobe
    C:\ProgramData\Apowersoft
    C:\ProgramData\Apple
    C:\ProgramData\Apple Computer
    C:\ProgramData\Bandoo
    C:\ProgramData\BOONTY
    C:\ProgramData\Brother
    C:\ProgramData\CyberLink
    C:\ProgramData\Downloaded Installations
    C:\ProgramData\eMule
    C:\ProgramData\ESET
    C:\ProgramData\eSobi
    C:\ProgramData\FloodLightGames
    C:\ProgramData\Games-Attack
    C:\ProgramData\GoBit Games
    C:\ProgramData\Google
    C:\ProgramData\Google Updater
    C:\ProgramData\Kaspersky Lab
    C:\ProgramData\Kaspersky Lab Setup Files
    C:\ProgramData\Lavasoft
    C:\ProgramData\LogMeIn
    C:\ProgramData\ma-config.com
    C:\ProgramData\Malwarebytes
    C:\ProgramData\McAfee
    C:\ProgramData\Messenger Plus
    C:\ProgramData\Micro Application
    C:\ProgramData\Microsoft
    C:\ProgramData\Microsoft Help
    C:\ProgramData\NtiDvdCopy
    C:\ProgramData\ScanSoft
    C:\ProgramData\SiteAdvisor
    C:\ProgramData\Spybot - Search & Destroy
    C:\ProgramData\SweetIM
    C:\ProgramData\Systweak
    C:\ProgramData\TEMP
    C:\ProgramData\tgioyvlx.pxu
    C:\ProgramData\Video Converter Studio
    C:\ProgramData\WindowsSearch
    C:\ProgramData\WLInstaller
    C:\ProgramData\Xfire
    C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

    C:\Users\admin\AppData\Local\Adobe
    C:\Users\admin\AppData\Local\Apple
    C:\Users\admin\AppData\Local\Apple Computer
    C:\Users\admin\AppData\Local\Apps
    C:\Users\admin\AppData\Local\Broad Intelligence
    C:\Users\admin\AppData\Local\d3d9caps.dat
    C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    C:\Users\admin\AppData\Local\Deployment
    C:\Users\admin\AppData\Local\Downloaded Installations
    C:\Users\admin\AppData\Local\edsinstaller.txt-20090427.log
    C:\Users\admin\AppData\Local\eMule
    C:\Users\admin\AppData\Local\ESET
    C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT
    C:\Users\admin\AppData\Local\Google
    C:\Users\admin\AppData\Local\LogMeIn
    C:\Users\admin\AppData\Local\Microsoft
    C:\Users\admin\AppData\Local\Microsoft Games
    C:\Users\admin\AppData\Local\Mozilla
    C:\Users\admin\AppData\Local\ociui.bat
    C:\Users\admin\AppData\Local\ociui.dat
    C:\Users\admin\AppData\Local\PlayMovie
    C:\Users\admin\AppData\Local\PowerCinema
    C:\Users\admin\AppData\Local\Temp
    C:\Users\admin\AppData\Local\VirtualStore
    C:\Users\admin\AppData\Local\WinAVI
    C:\Users\admin\AppData\Local\Windows Live Writer
    C:\Users\admin\AppData\Local\Zylom Games

    File : C:\Windows\Installer\11090b6.msi
    Title : Installation Database
    Author: Apple Inc.

    ======================
    File : C:\Windows\Installer\1109387.msi
    Title : Installation Database
    Author: Apple Inc.

    ======================
    File : C:\Windows\Installer\11096bb.msi
    Title : Installation Database
    Author: Apple Inc.

    ======================
    File : C:\Windows\Installer\11ce432.msi
    Title : Installation Database
    Author: Google Inc.

    ======================
    File : C:\Windows\Installer\13d33.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\152d4ec.msi
    Title : ADOBER~1.0|Adobe Reader 9
    Author: Adobe Systems Incorporated

    ======================
    File : C:\Windows\Installer\177256.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\17bf6.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\18a393.msi
    Title : Installation Database
    Author: NewTech Infosystems

    ======================
    File : C:\Windows\Installer\18a39a.msi
    Title : LightScribe
    Author: Hewlett-Packard Company

    ======================
    File : C:\Windows\Installer\18a39f.msi
    Title : Installation Database
    Author: Macrovision Corporation

    ======================
    File : C:\Windows\Installer\18a3a4.msi
    Title : Installation Database
    Author: CyberLink Corp.

    ======================
    File : C:\Windows\Installer\18a3a8.msi
    Title : Installation Database
    Author: CyberLink Corp.

    ======================
    File : C:\Windows\Installer\18a3ac.msi
    Title : Installation Database
    Author: CyberLink Corp.

    ======================
    File : C:\Windows\Installer\1a469e4.msi
    Title : Installation Database
    Author: SweetIM Technologies Ltd.

    ======================
    File : C:\Windows\Installer\1a469e9.msi
    Title : Installation Database
    Author: SweetIM Technologies Ltd.

    ======================
    File : C:\Windows\Installer\2055ee0.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2055ee5.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2087e94.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\29879a.msi
    Title : Spelling Dictionaries for Adobe Reader 9
    Author: Adobe Systems Incorporated

    ======================
    File : C:\Windows\Installer\2acd51.msi
    Title : Installation Database
    Author: Apple Inc.

    ======================
    File : C:\Windows\Installer\2c4ccd.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4cd2.msi
    Title : Installation Database
    Author: Microsoft

    ======================
    File : C:\Windows\Installer\2c4cd7.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4cdc.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4ce1.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4ce6.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4ceb.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4cf0.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4cfc.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4d01.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4d06.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4d0b.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4d10.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4d16.msi
    Title : Installation Database
    Author: Microsoft Corp.

    ======================
    File : C:\Windows\Installer\2c4d1b.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\2c4d26.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\3164b1.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\32a670.msi
    Title : LauncherMA
    Author: Micro Application

    ======================
    File : C:\Windows\Installer\3ef4de.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\40261.msi
    Title : Installation Database
    Author: Google Inc.

    ======================
    File : C:\Windows\Installer\40266.msi
    Title : Java(TM) SE Runtime Environment 6.0
    Author: Sun Microsystems, Inc.

    ======================
    File : C:\Windows\Installer\4026a.msi
    Title : Installation database
    Author: OpenOffice.org

    ======================
    File : C:\Windows\Installer\4026e.msi
    Title : Installation Database
    Author: LogMeIn, Inc.

    ======================
    File : C:\Windows\Installer\434fe2.msi
    Title : PaperPort 9,0
    Author: ScanSoft, Inc.

    ======================
    File : C:\Windows\Installer\55ab03.msi
    Title : Ad-Aware 2008
    Author: Lavasoft AB Sweden

    ======================
    File : C:\Windows\Installer\7863cc.msi
    Title : Installation Database
    Author: Apple Inc.

    ======================
    File : C:\Windows\Installer\7863d6.msi
    Title : Installation Database
    Author: Apple Inc.

    ======================
    File : C:\Windows\Installer\7ad77.msi
    Title : Orion
    Author: Convesoft

    ======================
    File : C:\Windows\Installer\7ad7d.msi
    Title : Acer eDataSecurity Management
    Author: Egis Inc.

    ======================
    File : C:\Windows\Installer\7ad82.msi
    Title : eSobi Setup
    Author: esobi Inc.

    ======================
    File : C:\Windows\Installer\7e7b30.msi
    Title : Installation Database
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\806da.msi
    Title : Java(TM) SE Runtime Environment 6.0
    Author: Sun Microsystems, Inc.

    ======================
    File : C:\Windows\Installer\84f5aa.msi
    Title : Installation Database
    Author: Apple Inc.

    ======================
    File : C:\Windows\Installer\8565c.msi
    Title : Installation Database
    Author: Microsoft Corp

    ======================
    File : C:\Windows\Installer\9a728.msi
    Title : Microsoft Works
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\9a72e.msi
    Title : Activation Assistant
    Author: Microsoft Corporation

    ======================
    File : C:\Windows\Installer\a2349d.msi
    Title : Installation Database
    Author: VirginMega.Fr

    ======================
    File : C:\Windows\Installer\bff10.msi
    Title : Installation Database
    Author: Google

    ======================
    File : C:\Windows\Installer\d09926.msi
    Title : Installation Database
    Author: Cybelsoft

    ======================
    File : C:\Windows\Installer\ebfe82.msi
    Title : Widgi Toolbar
    Author: Spigot, Inc.

    ======================
    File : C:\Windows\Installer\ebfe88.msi
    Title : Search Settings
    Author: Spigot, Inc.
    1. le scan navilog1 est en cours depuis 10 minutes

      je sais que ça prend du temps
      c'est juste pour que vous sachiez que j'ai pas abandonné le topic
      1. Contributeur
        d'accord, c'est gentil de prévenir, et d'ailleurs c'est assez rare

        par contre attention, il est précisé de lancer ces scans en mode sans échec. D'une part ça facilitera les suppressions, d'autre part ton ordi moulinera moins
        1. oui j'avais vraiment des saloperies :-(

          Fix Navipromo version 4.0.2 commencé le 27/09/2009 11:14:42,91

          !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
          !!! Postez ce rapport sur le forum pour le faire analyser !!!

          Outil exécuté depuis C:\Program Files\navilog1

          Mise à jour le 27.08.2009 à 11h00 par IL-MAFIOSO

          Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6002 ) Service Pack 2
          X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T3400 @ 2.16GHz )
          BIOS : Ver 1.00PARTTBL
          USER : admin ( Administrator )
          BOOT : Fail-safe boot

          C:\ (Local Disk) - NTFS - Total:223 Go (Free:148 Go)
          E:\ (CD or DVD)

          Recherche executée en mode sans échec

          Nettoyage executé en mode sans échec

          C:\Program Files\Games-Attack supprimé !
          c:\progra~2\micros~1\windows\startm~1\programs\Games-Attack supprimé !
          C:\ProgramData\Games-Attack supprimé !
          C:\Users\admin\AppData\Roaming\Games-Attack supprimé !
          C:\Users\admin\AppData\Local\ociui.dat supprimé !
          C:\Users\admin\AppData\Local\ociui.bat supprimé !

          Nettoyage contenu C:\Windows\Temp effectué !
          Nettoyage contenu C:\Users\admin\AppData\Local\Temp effectué !

          *** Sauvegarde du Registre vers dossier Safebackup ***

          sauvegarde du Registre réalisée avec succès !

          *** Nettoyage Registre ***

          Nettoyage Registre Ok

          *** Scan terminé 27/09/2009 11:17:25,97 ***

          En ce qui concerne ToolbarS&D le logiciel ne fonctionne pas. Je peux cliquer dessus puis je choisi français puis je choisi rechercher mais après il ne se passe rien du tout.
          1. .
            ======= RAPPORT D'AD-REMOVER 1.1.4.5_W | UNIQUEMENT XP/VISTA/7 =======
            .
            Mit à jour par C_XX le 27/09/2009 à 9:20 AM
            Contact: AdRemover.contact@gmail.com
            Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
            .
            Lancé à: 11:44:13, 27/09/2009 | Mode Normal | Option: SCAN
            Exécuté de: C:\Program Files\Ad-Remover\
            Système d'exploitation: Microsoft® Windows Vista™ Home Basic Service Pack 2 v6.0.6002
            Nom du PC: PC-DE-ADMIN | Utilisateur actuel: admin
            .
            ============== ÉLÉMENT(S) TROUVÉ(S) ==============
            .
            .
            HKCU\Software\AppDataLow\Software\Dealio
            HKCU\Software\CToolbar
            HKCU\Software\Microsoft\Internet Explorer\MenuExt\Crawler Search
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
            HKCU\Software\SweetIM
            HKLM\Software\Classes\CTBR.R404Pro
            HKLM\Software\Classes\CToolbar.TB4Client
            HKLM\Software\Classes\CToolbar.TB4Script
            HKLM\Software\Classes\CToolbar.TB4Server
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBF1B8D2-9A06-4174-A8B5-E38606DDB92B}
            HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
            HKLM\Software\microsoft\shared tools\msconfig\startupreg\SearchSettings
            HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\Crawler
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\CToolbar_UNINSTALL
            HKLM\Software\SweetIM
            HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\Registry\User\S-1-5-21-3190056787-1849804901-669965420-1000\Software\Sweetim
            HKU\S-1-5-21-3190056787-1849804901-669965420-1000\Software\Appdatalow\Software\Dealio
            HKLM\Software\Mozilla\Firefox\Extensions\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
            HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
            HKCU\software\microsoft\internet explorer\searchscopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
            HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{EEE6C35B-6118-11DC-9C72-001320C79847}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
            HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
            HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
            HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
            HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
            .
            C:\Program Files\Crawler
            C:\Program Files\Mozilla Firefox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
            C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
            C:\Program Files\Search Settings
            C:\Program Files\SweetIM
            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barre d'outils Crawler
            C:\ProgramData\SweetIM
            C:\Users\admin\AppData\LocalLow\Dealio
            C:\Users\admin\AppData\LocalLow\Search Settings
            C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hc3d5u55.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
            C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hc3d5u55.default\searchplugins\askcom.xml
            C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hc3d5u55.default\searchplugins\sweetim.xml
            C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hc3d5u55.default\SweetIMToolbarData
            C:\Users\admin\Desktop\AbsoluCasino.lnk
            C:\Windows\Installer\1a469e4.msi
            C:\Windows\Installer\1a469e9.msi
            C:\Windows\Installer\ebfe82.msi
            C:\Windows\Installer\ebfe88.msi
            C:\Windows\Prefetch\CASINO.EXE-0E4E187F.pf
            C:\Windows\Prefetch\CASINOSETUP.EXE-7A73F657.pf
            .
            ============== Scan additionnel ==============
            .
            .
            * Mozilla FireFox Version 3.5.3 *
            .
            Nom du profil: hc3d5u55.default (admin)
            .
            (Prefs.js) user_pref("browser.search.defaultenginename", "Fast Browser Search");
            (Prefs.js) user_pref("browser.search.selectedEngine", "Fast Browser Search");
            (Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=");
            (Prefs.js) user_pref("browser.startup.homepage", "hxxp://fr.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official");
            (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.1.3");
            .
            (prefs.js) TROUVÉ: user_pref("browser.search.defaultengine", "Ask.com");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.mode.debug", "false");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.previous.keyword.URL", "chrome://browser-region/locale/region.properties");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://search.yahoo.com/*\" param=\"p=\" /><EXTERNAL_SEARCH engine=\"hxxp://search.sweetim.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://*.live.*/*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://*youtube.com/\" param=\"search_query=\" /><EXTERNAL_SEARCH engine=\"hxxp://*.ebay.*/search/*\" param=\"satitle=\" /><EXTERNAL_SEARCH engine=\"hxxp://*.amazon.com/s/*\" param=\"field-keywords=\" /></TOOLBAR>");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.search.history.capacity", "10");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.simapp_id", "{CDBC8EF3-3431-11DE-ABE4-001D72EB9F34}");
            (prefs.js) TROUVÉ: user_pref("sweetim.toolbar.version", "1.0.0.8");
            .
            * Internet Explorer Version 8.0.6001.18813 *
            .
            [HKEY_CURRENT_USER\..\Internet Explorer\Main]
            .
            Default_Page_URL: hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vb32&d=0409&m=aspire_5735
            SearchAssistant:
            Start Page: hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vb32&d=0409&m=aspire_5735
            Search Page:
            Search Bar:
            .
            [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
            .
            Tabs: tbr:res?id=tabs&rep=1
            .
            ============== Suspect (Cracks, Serials ... ) ==============
            .
            C:\Users\admin\.housecall6.6\patch.exe
            .
            ===================================
            .
            12469 Octet(s) - C:\Ad-Report-SCAN.log
            .
            21 Fichier(s) - C:\Users\admin\AppData\Local\Temp
            1 Fichier(s) - C:\Windows\Temp
            .
            0 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
            0 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
            .
            Fin à: 12:16:41 | 27/09/2009
            .
            ============== E.O.F ==============
            .
            1. Contributeur
              ok relance le mais cette fois ci choisis l'option de suppression
              1. Etape 1/ Télécharge :

                Toolbar-S&D (Team IDN) sur ton Bureau.

                important Redémarre en mode sans échec comme indiqué ICI ; Choisis ta session courante *** admin *** (pour retrouver le rapport, clique sur le raccourci "Rapport GenProc[3]" sur ton bureau).

                Etape 2/

                Lance Toolbar-S&D situé sur le Bureau. Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.

                Etape 3/

                Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

                Etape 4/

                Redémarre normalement et poste, dans la même réponse :
                - Le contenu du rapport TB.txt situé dans C:\ ;
                - Un nouveau rapport HijackThis ;
                - Un nouveau rapport GenProc ;

                Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

                un nouveau rapport hijackthis :
                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 13:02:50, on 27/09/2009
                Platform: Windows Vista SP2 (WinNT 6.00.1906)
                MSIE: Internet Explorer v8.00 (8.00.6001.18813)
                Boot mode: Normal

                Running processes:
                C:\Windows\system32\Dwm.exe
                C:\Windows\Explorer.EXE
                C:\Program Files\Windows Defender\MSASCui.exe
                C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                C:\Program Files\Windows Media Player\wmpnscfg.exe
                C:\Program Files\LogMeIn\x86\LMIGuardian.exe
                C:\Windows\system32\taskeng.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                C:\Program Files\Windows Live\Contacts\wlcomm.exe
                C:\PROGRA~1\Bandoo\BndCore.exe
                C:\Windows\system32\conime.exe
                C:\Users\admin\Documents\HiJackThis.exe

                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                O1 - Hosts: ::1 localhost
                O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll (file missing)
                O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
                O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
                O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                O2 - BHO: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
                O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll
                O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
                O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
                O3 - Toolbar: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
                O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
                O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                O13 - Gopher Prefix:
                O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
                O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                O20 - AppInit_DLLs: C:\Windows\WIDEST~1\FREEQU~1\QUICKA~1.DLL c:\progra~1\bandoo\bndhook.dll
                O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
                O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                O23 - Service: Bandoo Coordinator - Discordia Limited - C:\PROGRA~1\Bandoo\Bandoo.exe
                O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
                O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                O23 - Service: Service Google Update (gupdate1c9c82bf41789f3) (gupdate1c9c82bf41789f3) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
                O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
                O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
                O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
                O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe (file missing)
                1. Contributeur
                  encore Toolbar ? poste le contenu du fichier C:\GenProc\Arguments\Arguments.txt
                  1. # Détections [1] GenProc 2.631 27/09/2009 à 10:25:53
                    Navipromo:le 27/09/2009 à 10:26:58 "C:\Users\admin\AppData\Roaming\Games-Attack"
                    Toolbar:le 27/09/2009 à 10:27:03 "C:\Program Files\Crawler"

                    # Détections [2] GenProc 2.631 27/09/2009 à 10:30:09
                    Navipromo:le 27/09/2009 à 10:31:19 "C:\Users\admin\AppData\Roaming\Games-Attack"
                    Toolbar:le 27/09/2009 à 10:31:25 "C:\Program Files\Crawler"

                    # Détections [3] GenProc 2.631 27/09/2009 à 12:59:26
                    Toolbar:le 27/09/2009 à 13:00:30 "C:\Program Files\Crawler"
                    1. Contributeur
                      donc c'est le dossier Crawler qui n'aurait pas été supprimé. Regarde dans C:\ il doit y avoir le rapport de suppression du programme, vérifions
                      • 1
                      • 2