VIRUS HOTAMAIL 1

PACHABO -  
pimprenelle27 Messages postés 22182 Statut Contributeur sécurité -
Bonjour,
ma messagerie envoyait des messages d'absence à ma place mais j'ai règlé le problème en suivant les consigne de TRYING2(merci).
Par contre 1)je suis envahie de messages de POSTMASTER et MAIL DELIVERY SUB...
ET 2)j'envoie involontairement des messages ,viraux, à mes contacts.
J'ai faitRSIT
donc voici le log

Logfile of random's system information tool 1.06 (written by random/random)
Run by Pat at 2009-10-15 11:42:20
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 92 GB (79%) free of 116 GB
Total RAM: 447 MB (23% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:42:41, on 15/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\SysMonitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\Acer TV-FM\PCMService.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Orange\Deskboard\deskboard.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Orange\browser\browser.exe
C:\Documents and Settings\Pat\Local Settings\Temporary Internet Files\Content.IE5\L4ZQU6YW\RSIT[1].exe
C:\Program Files\trend micro\Pat.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 10701 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-16 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-09-20 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-28 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4982D40A-C53B-4615-B15B-B5B5E98D167C} - AOL Toolbar - C:\Program Files\AOL Toolbar\toolbar.dll [2004-03-22 385024]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-16 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"ntiMUI"=C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-12 45056]
""= []
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-03 32768]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-05 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"SiSPower"=SiSPower.dll,ModeAgent []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-08-16 90112]
"Acer Empowering Technology Monitor"=C:\WINDOWS\system32\SysMonitor.exe [2006-04-18 49152]
"AspireService"=C:\Program Files\Acer\Acer eMode Management\AspireService.exe [2006-06-09 110592]
"MediaSync"=C:\Program Files\Acer\Acer eConsole\MediaSync.exe [2006-05-04 425984]
"PCMService"=C:\Program Files\Acer TV-FM\PCMService.exe [2006-03-29 143360]
"eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2006-06-01 413696]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-11-08 98304]
"AOLSAV"=C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe [2004-04-26 75776]
"SystrayORAHSS"=C:\Program Files\Orange\Systray\SystrayApp.exe [2007-09-25 94208]
"ORAHSSSessionManager"=C:\Program Files\Orange\SessionManager\SessionManager.exe [2007-09-25 102400]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-28 39408]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
Acer WLAN 11g USB Dongle.lnk - C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=95000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Acer\Acer eConsole\MediaSync.exe"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer"
"C:\Program Files\Acer\Acer eConsole\eConsole.exe"="C:\Program Files\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole"
"C:\Program Files\Acer\Acer eConsole\MediaServerService.exe"="C:\Program Files\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server"
"C:\Program Files\Acer TV-FM\PowerCinema.exe"="C:\Program Files\Acer TV-FM\PowerCinema.exe:*:Enabled:CyberLink PowerCinema"
"C:\Program Files\Acer TV-FM\PCMService.exe"="C:\Program Files\Acer TV-FM\PCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramètres"
"C:\Program Files\Orange\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2009-10-15 11:42:21 ----D---- C:\Program Files\trend micro
2009-10-15 11:42:20 ----D---- C:\rsit
2009-10-15 10:49:52 ----A---- C:\WINDOWS\system32\javaws.exe
2009-10-15 10:49:52 ----A---- C:\WINDOWS\system32\javaw.exe
2009-10-15 10:49:52 ----A---- C:\WINDOWS\system32\java.exe
2009-10-15 03:07:28 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-10-15 03:05:16 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-10-15 03:05:06 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-10-15 03:05:01 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-10-15 03:04:51 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-10-15 03:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-10-15 03:01:21 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-10-15 03:01:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-10-15 03:00:52 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-10-07 11:56:42 ----D---- C:\Documents and Settings\All Users\Application Data\eConsole

======List of files/folders modified in the last 1 months======

2009-10-15 11:42:21 ----RD---- C:\Program Files
2009-10-15 11:42:12 ----D---- C:\WINDOWS\Prefetch
2009-10-15 11:37:23 ----SD---- C:\WINDOWS\Tasks
2009-10-15 11:37:20 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-10-15 11:31:50 ----D---- C:\WINDOWS\temp
2009-10-15 10:49:57 ----SHD---- C:\WINDOWS\Installer
2009-10-15 10:49:57 ----HD---- C:\Config.Msi
2009-10-15 10:49:52 ----AD---- C:\WINDOWS\system32
2009-10-15 10:49:30 ----D---- C:\Program Files\Java
2009-10-15 03:25:52 ----AD---- C:\WINDOWS
2009-10-15 03:23:47 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-15 03:23:44 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-15 03:08:02 ----HD---- C:\WINDOWS\inf
2009-10-15 03:07:52 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-10-15 03:07:51 ----D---- C:\Program Files\Internet Explorer
2009-10-15 03:07:41 ----D---- C:\WINDOWS\ie8updates
2009-10-15 03:07:36 ----HD---- C:\WINDOWS\$hf_mig$
2009-10-15 03:07:32 ----A---- C:\WINDOWS\imsins.BAK
2009-10-15 03:07:28 ----D---- C:\WINDOWS\WinSxS

MERCI DE M'AIDER
Patricia
Configuration: Windows XP Internet Explorer 7.0

9 réponses

  1. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    Bonjour,

    Le rapport RSIt n'est pas complet, pourrait me le faire comme ceci en y ajoutant le rapport info.txt :

    ( C:\RSIT\log.txt et C:\RSIT\info.txt )

    CTRL A pour sélectionner tout, CTRL C pour copier et puis CTRL V pour coller

    Petite chose à faire pour les rapports générés par RSIT avant de continuer

    ▶ Vous devez fusionner les deux rapports.
    ▶ C'est-à-dire, copier/coller le contenu du rapport info.txt à la suite du rapport log.txt dans un bloc note pour ne faire qu'un seul rapport.
    ▶ Ensuite enregistrer le rapport log.txt.

    Ensuite :

    ▶ Rendez-vous à cette adresse d'hébergement gratuit : http://www.cijoint.fr/

    ▶ Cliquez sur parcourir, chercher le rapport log.txt puis cliquez sur ici pour déposer le fichier

    ▶ Une fois le lien crée, faite un clique droit dessus et copier l'adresse du lien pour venir le coller dans votre réponse
    0
    1. PACHABO
       
      Bonjour Pimprenelle,

      j'ai refait le RSIT mais il ne me donne qu'un rapport log pas d'info text.
      Qu'ai-je donc fait et que dois-je faire?
      Bien à vous
      Patricia
      0
  2. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    Regarde là et donne moi les 2 rapports :

    ( C:\RSIT\log.txt et C:\RSIT\info.txt )

    CTRL A pour sélectionner tout, CTRL C pour copier et puis CTRL V pour coller
    0
    1. PACHABO
       
      Voilà et encore merci par avance

      info.txt logfile of random's system information tool 1.06 2009-10-15 11:42:49

      ======Uninstall list======

      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
      -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
      Acer eConsole-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EC028E6B-F3F1-4192-B63E-A7C97302ED5A}\setup.exe" -l0x40c
      Acer eMode Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65CDEC30-4BF4-48FB-8059-9FC480E4E94F}\setup.exe" -l0x40c
      Acer Empowering Technology-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0x40c -removeonly
      Acer ePerformance Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7057702F-6D71-4F30-8000-9E72BC771887}\setup.exe" -l0x40c -removeonly
      Acer WLAN 11g USB Dongle-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{0CB98AC0-D691-4B21-AD3D-95982517021D} /l1036
      Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
      Adobe Reader 7.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
      Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
      Ad-remover-->C:\Program Files\Ad-remover\Uninstall ADR.exe
      AOL Auto-diagnostic-->C:\Program Files\TechCity Solutions\AOLSAV\uninstall.exe
      AOL Toolbar-->"C:\Program Files\AOL Toolbar\UNWISE.EXE" /u "C:\Program Files\AOL Toolbar\INSTALL.LOG"
      avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
      Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
      Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
      Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
      Ecran de veille AOL Photos-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
      Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
      Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
      Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
      HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
      Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
      HP Deskjet 5900 series-->C:\Program Files\HP\Digital Imaging\{79546A5F-AE7C-4693-8670-A3401B43ABD2}\setup\hpzscr01.exe -datfile hpfscr05.dat
      HP Imaging Device Functions 5.0-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
      HP Software Update-->MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
      HP Solution Center & Imaging Support Tools 5.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
      J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
      Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
      Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
      Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
      LimeWire 5.1.2-->"C:\Program Files\LimeWire\uninstall.exe"
      livebox-->C:\Program Files\InstallShield Installation Information\{17342E3B-0818-4A6F-BFF8-99476605ADD6}\Setup.exe -runfromtemp -l0x040c -removeonly
      Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
      Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
      Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
      Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
      Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
      Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9111040C-6000-11D3-8CFE-0150048383C9}
      Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
      Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
      Mise à jour pour Windows Internet Explorer 8 (KB971180)-->"C:\WINDOWS\ie8updates\KB971180-IE8\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
      Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
      MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
      MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
      Navigateur Orange-->C:\Program Files\Orange\Uninstall\Browser\Shell.exe MainUninstall.shl
      NTI Backup NOW! 4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{385979FE-DC4F-4140-8EAD-A59625000D72} /l1036 BUN4
      NTI CD & DVD-Maker-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
      NTI HomeVideo-Maker-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B8A6F713-D72D-47AD-A92D-B5C0E13F98C1}\setup.exe" -l0x40c
      OCA Client history tool install-->"C:\WINDOWS\$UninstallOCA-X86Fre-ENU$\spuninst\spuninst.exe"
      Orange - Logiciels Internet-->C:\Program Files\Orange\installation\core\Installgui.exe -u
      Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
      PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
      QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
      RealPlayer Basic-->C:\Program Files\Fichiers communs\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
      Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x40c -removeonly
      SiS 900 PCI Fast Ethernet Adapter Driver-->C:\Progra~1\SiSLan\Uninst.exe
      SiSAGP driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC226AC9-0314-496C-BE6A-B6A132628466}\setup.exe" -l0x40c
      Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
      VLC media player 0.9.4-->C:\Program Files\VideoLAN\VLC\uninstall.exe
      Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
      Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
      Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
      Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
      Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

      ======Security center information======

      AV: avast! antivirus 4.8.1335 [VPS 091014-0]

      ======System event log======

      Computer Name: PATRICIA
      Event Code: 7035
      Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

      Record Number: 67644
      Source Name: Service Control Manager
      Time Written: 20091012103002.000000+120
      Event Type: Informations
      User: PATRICIA\Pat

      Computer Name: PATRICIA
      Event Code: 7036
      Message: Le service Pml Driver HPZ12 est entré dans l'état : arrêté.

      Record Number: 67643
      Source Name: Service Control Manager
      Time Written: 20091012102803.000000+120
      Event Type: Informations
      User:

      Computer Name: PATRICIA
      Event Code: 7036
      Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.

      Record Number: 67642
      Source Name: Service Control Manager
      Time Written: 20091012102803.000000+120
      Event Type: Informations
      User:

      Computer Name: PATRICIA
      Event Code: 7035
      Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

      Record Number: 67641
      Source Name: Service Control Manager
      Time Written: 20091012102803.000000+120
      Event Type: Informations
      User: PATRICIA\Pat

      Computer Name: PATRICIA
      Event Code: 7036
      Message: Le service Pml Driver HPZ12 est entré dans l'état : arrêté.

      Record Number: 67640
      Source Name: Service Control Manager
      Time Written: 20091012102603.000000+120
      Event Type: Informations
      User:

      =====Application event log=====

      Computer Name: PATRICIA
      Event Code: 34
      Message:
      Record Number: 923
      Source Name: ccEvtMgr
      Time Written: 20090125030712.000000+060
      Event Type: Informations
      User: AUTORITE NT\SYSTEM

      Computer Name: PATRICIA
      Event Code: 35
      Message:
      Record Number: 922
      Source Name: ccSetMgr
      Time Written: 20090125030712.000000+060
      Event Type: Informations
      User: AUTORITE NT\SYSTEM

      Computer Name: PATRICIA
      Event Code: 34
      Message:
      Record Number: 921
      Source Name: ccSetMgr
      Time Written: 20090125030712.000000+060
      Event Type: Informations
      User: AUTORITE NT\SYSTEM

      Computer Name: PATRICIA
      Event Code: 0
      Message:
      Record Number: 920
      Source Name: CLSched
      Time Written: 20090125030022.000000+060
      Event Type: Informations
      User:

      Computer Name: PATRICIA
      Event Code: 0
      Message:
      Record Number: 919
      Source Name: Acer Media Server
      Time Written: 20090125030020.000000+060
      Event Type: Informations
      User:

      ======Environment variables======

      "ComSpec"=%SystemRoot%\system32\cmd.exe
      "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
      "windir"=%SystemRoot%
      "FP_NO_HOST_CHECK"=NO
      "OS"=Windows_NT
      "PROCESSOR_ARCHITECTURE"=x86
      "PROCESSOR_LEVEL"=15
      "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
      "PROCESSOR_REVISION"=0409
      "NUMBER_OF_PROCESSORS"=1
      "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
      "TEMP"=%SystemRoot%\TEMP
      "TMP"=%SystemRoot%\TEMP

      -----------------EOF-----------------
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by Pat at 2009-10-18 10:09:41
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 92 GB (79%) free of 116 GB
      Total RAM: 447 MB (5% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 10:10:06, on 18/10/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\WINDOWS\system32\SysMonitor.exe
      C:\Program Files\Acer\Acer eMode Management\AspireService.exe
      C:\Program Files\Acer\Acer eConsole\MediaSync.exe
      C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
      C:\Program Files\Acer TV-FM\PCMService.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      C:\Program Files\Orange\Systray\SystrayApp.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Orange\Launcher\Launcher.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
      C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
      C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
      C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
      C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
      C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Orange\Deskboard\deskboard.exe
      C:\Program Files\Orange\connectivity\connectivitymanager.exe
      C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
      C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Orange\browser\browser.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\Documents and Settings\Pat\Local Settings\Temporary Internet Files\Content.IE5\L4ZQU6YW\RSIT[1].exe
      C:\Program Files\trend micro\Pat.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O4 - HKLM\..\Run: [LaunchApp] Alaunch
      O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
      O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
      O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
      O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
      O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Acer Empowering Technology.lnk = ?
      O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
      O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O15 - Trusted Zone: https://www.orange.fr/portail
      O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
      O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
      O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
      O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
      O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
      O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
      O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      0
  3. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    ▶ Télécharge MsnCleaner.zip de ElPiedra et décompresse le sur ton bureau. (Clic droit sur le fichier .zip puis Extraire tout).

    ▶ Redémarre le PC

    ▶ Démarrer en mode sans échec manuellement

    ▶ Tapez sur la touche F8 avant de voir apparaître la barre de progression, avant l'écran de logo Windows

    ▶ Sélectionnez alors le mode sans échec avec prise ne charge réseau et appuyez sur la touche entrée de votre clavier.

    ▶ Et connecte toi sous ton nom d'utilisateur

    ▶ Double-clique sur MsnCleaner.exe pour le lancer.

    ▶ Sous Language, clique sur la petite flèche et choisis French.

    ▶ Clique sur le bouton Analyse.

    ▶ A la fin du scan un rapport va être créé.

    ▶ Si l'outil trouve une infection, clique sur le bouton Supprimer.

    ▶ Redémarre en mode normal.

    ▶ Poste le rapport C:\MsnCleaner.txt dans ta prochaine réponse..
    0
    1. PACHABO
       
      Bonjour,

      j'ai tout fait mais n'ai pas eu de rapport et rien eu à supprimer.
      Je continue à recevoir ce type de mail:



      Delivery Status Notification (Failure)‏
      De : postmaster@mail.hotmail.com
      Envoyé : jeu. 22/10/09 17:28
      À : pbonnet@hotmail.fr
      2 pièces jointes | Télécharger toutes les pièces jointes (3,3 Ko)
      ATT00001 (0,5 Ko), REhi ...mht (2,8 Ko)


      This is an automatically generated Delivery Status Notification. Delivery to the following recipients failed. cartesa@mail.telepac.ptcartesb@mail.telepac.pt


      --Pièce jointe du message transmise--
      From: pbonnet@hotmail.fr
      To: cartertusm@hotmail.com
      Subject: RE:hi Y
      Date: Thu, 22 Oct 2009 17:27:45 +0200








      Hey,
      how are you doing recently?
      I would like to introduce you a very good company and its website is www.amabiz.com. It can offer you all kinds of electronic products that you may be in need,such as laptops,gps,TV LCD,cell phones,ps3,MP3/4,motorcycles and etc........
      Their products are original with very low price as wholesale business supplier,you can take some time to have a check,there must be something interesting you'd like to purchase.
      The contact email: amabiz@188.com MSN: amabiz@hotmail.com
      Hope you can enjoy yourself in shopping from that company !
      Regards
      T


      Que faire?
      Merci par avance
      Patricia
      0
  4. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    fait moi ceci :

    ▶ Télécharge malwarebyte's anti-malware

    ▶ Un tutoriel sera à ta disposition pour l'installer et l'utiliser correctement.

    ▶ Fais la mise à jour du logiciel (elle se fait normalement à l'installation)

    ▶ Lance une analyse complète en cliquant sur "Exécuter un examen complet"

    ▶ Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"

    ▶ L'analyse peut durer un bon moment.....

    ▶ Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"

    ▶ Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"

    ▶ Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum

    * Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Faites le en cliquant sur "oui" à la question posée
    0
    1. PACHABO
       
      Bonjour,
      est-ce normal que le site de telechergement soit payant:
      pour avoir le code de telechargement ,envoyer un sms payant à 3€?
      Merci pour réponse c'est pas pour les 3€ mais pour etre sure que je suios bien sur le bon site.
      patricia
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    c'est pas payant du tout tu as pas cliquer sur le téléchargement.
    0
    1. PACHABO
       
      Bonjour,

      ça y est j'ai tout fait bien !

      ci-après,le rapport (et merci)
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)
      0
  7. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    parfais tu peux vider la quarantaine de malware, Ensuite pour vérifier qu'il n'y est pas de spyware, adware, trojans, vers, keylogger, hijacker, dialer et toutes autres menaces destinées au vol d'informations confidentielles

    Télécharge Superantispyware (SAS)

    Choisis "enregistrer" et enregistre-le sur ton bureau.

    Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.

    Créé une icône sur le bureau.

    Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.

    - Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
    - Sous Configuration and Préférences, clique sur le bouton "Préférences"
    - Clique sur l'onglet "Scanning Control "
    - Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :

    Close browsers before scanning (Fermer Navigateur avant le scan)

    Scan for tracking cookies (Scan pour dépister les cookies)

    Terminate memory threats before quarantining (Terminez les menaces de mémoire avant de mettre en quarantaine)

    - Laisse les autres lignes décochées.

    - Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.

    - Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".

    Dans la colonne de gauche, coche C:\Fixed Drive.

    Dans la colonne de droite, sous "Complète scan", clique sur "Perform Complète Scan"

    Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.

    A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.

    Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".

    Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.

    Pour recopier les informations sur le forum, fais ceci :

    - après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
    - Clique sur "Préférences" puis sur l'onglet "Statistics/Logs ".
    - Dans "scanners logs", double-clique sur SuperAntiSpyware Scan Log.

    - Le rapport va s'ouvrir dans ton éditeur de texte par défaut.

    - Copie son contenu dans ta réponse.

    Regarde bien le tuto SuperAntiSpyware il est très bien expliqué.
    0
    1. PACHABO
       
      Bonjour du jeudi,

      voila le rapport SAS
      BONNE LECTURE

      SUPERAntiSpyware Scan Log
      https://www.superantispyware.com/

      Generated 10/28/2009 at 09:55 PM

      Application Version : 4.29.1004

      Core Rules Database Version : 4204
      Trace Rules Database Version: 2112

      Scan type : Complete Scan
      Total Scan Time : 02:26:53

      Memory items scanned : 736
      Memory threats detected : 0
      Registry items scanned : 5387
      Registry threats detected : 0
      File items scanned : 70005
      File threats detected : 294

      Adware.Tracking Cookie
      C:\Documents and Settings\Pat\Cookies\pat@statse.webtrendslive[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@adtech[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@virginmobile.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@boursoramabanque.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediaplex[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.at.atwola[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@tradedoubler[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@overture[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.shopreflex[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@golfdiscount[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.publicidees[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@zanox[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@tacoda[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adbrite[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserving.favorit-network[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.backads[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@techfluencers-media[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@cetelem.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@advertising[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@lascad.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.aol[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@adrevolver[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@advertstream[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@secure.discountlens[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@1936.stats.stats[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@imrworldwide[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@bluestreak[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fastclick[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[7].txt
      C:\Documents and Settings\Pat\Cookies\pat@xiti[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@msnportal.112.2o7[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@richmedia.yahoo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ww57.smartadserver[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@garnier2009.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@247realmedia[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@interflora2.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bs.serving-sys[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fnacmagasin.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.smartadserver[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@media.adrevolver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.madeinwork[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.sitestat[9].txt
      C:\Documents and Settings\Pat\Cookies\pat@fortuneopub.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@samsung.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@aimfar.solution.weborama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.yieldmanager[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.64.cte.clickintext[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@specificclick[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.doctissimo[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@content.yieldmanager[5].txt
      C:\Documents and Settings\Pat\Cookies\pat@atdmt[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stat.dealtime[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@lagarderefrance.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@www3.smartadserver[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.ratiatum[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@optimize.indieclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@doubleclick[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@himedia.individuad[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@questionmarket[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@serving-sys[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@at.atwola[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@intermarche2009.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.zanox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@medef.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@apmebf[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@bouyguestelecom.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@directtrack[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@bubblestat[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@estat[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@teleastral.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@movitex.122.2o7[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@wysistat[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@burstnet[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.magazine-video[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@eaeacom.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@sarbec.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@optimost[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@eas.apm.emediate[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediastay.directtrack[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@hitbox[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@gemeycolorsensational.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@discountlens[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@smartadserver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@nextag[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ehg-nokiafin.hitbox[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adviva[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@cnam.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@bnpparibasnet.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discountlens[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@infobebes.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@data.coremetrics[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.sitestat[10].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[5].txt
      C:\Documents and Settings\Pat\Cookies\pat@clickintext[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@globalvaluecommerce.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@247realmedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@2o7[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@814.stats.stats[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.caradisiac[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.doctissimo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.logaweb[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.supertoinette[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.yieldmanager[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adbrite[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adopt.euroclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adrevolver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.118000[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.adap[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.benegil[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.canalblog[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.networldmedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.pga[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.thema-web[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.twenga[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.umahe[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.us.e-planning[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.widgetbucks[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.aol[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.femiweb[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.marcie-media[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.pharmaceutiques[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adtech[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adv.surinter[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@advertising[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@advertstream[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adviva[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@aimfar.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@aolfr.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@apmebf[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@at.atwola[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@atdmt[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@azjmp[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@banners.ebabynetwork[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bizrate[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@bluestreak[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@bnpparibasnet.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bootslaboratories.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@boursoramabanque.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bouyguestelecom.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bs.serving-sys[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@buggy.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@burstnet[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@cdiscount[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@cetelem.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@chitika[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@clickintext[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@clickshift[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@clubmed.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@cnam.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@content.yieldmanager.edgesuite[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@content.yieldmanager[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@content.yieldmanager[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@counter.hitslink[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@creditcooperatif.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@dealtime[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@dekio.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@directtrack[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@discounteo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@discountlens[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@doubleclick[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ducrostoss.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@e-2dj6whliamc5wbp.stats.esomniture[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@eas.apm.emediate[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ehg-ioffer.hitbox[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ehg-nestlefr.hitbox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ehg-twi.hitbox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@elle.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fastclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@femina.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fl01.ct2.comclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@fnacmagasin.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fortuneopub.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.at.atwola[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@gemeyrenosuperstay.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@georgiapacificlotus.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@himedia.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@himedia.individuad[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@hotelscom.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@imrworldwide[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@infobebes.solution.weborama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@insightexpressai[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@interhome.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@intermarche2009.solution.weborama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@iv2.bluestreak[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@karavel.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@lagarderefrance.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@laredoute.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@laredoutebranding.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@lascad.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@looneov2.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@lorealparis.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@lorealpariselseve.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@media.adrevolver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediametrics.mpsa[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediaplex[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediastay.directtrack[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@mesexercices[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@microsoftinternetexplorer.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@mixabb.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@movitex.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@msnaccountservices.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@msnportal.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@neocounter.neoworx-blog-tools[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@nestle.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@networldmedia[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@nextag[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@notrefamille.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@onsexprime[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@opodo.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@optimost[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@overture[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@parents.solution.weborama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@paypal.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@philips.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@pierrefabre.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@promo.discounteo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@questionmarket[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@revsci[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@rm.piximedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@rotator.adjuggler[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@sales.liveperson[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@sales.liveperson[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@saletrack.co[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@samsung.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@sanofi.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@secure.discountlens[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@server.iad.liveperson[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@serving-sys[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@shop.zanox[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@shopping.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@smileycentral[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@specificclick[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@stat.blogorama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stat.dealtime[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@statcounter[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stats.bdv[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stats.canalblog[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stats.searchtrack[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@statse.webtrendslive[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tacoda[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@track.effiliation[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@track.effiliation[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracker.affistats[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.fastbooking[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.keywordmax[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.lengow[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.lsfinteractive[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.publicidees[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.quisma[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.veille-referencement[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@trackmon.itor[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@tradedoubler[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ttbmanutan.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@uk.at.atwola[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@upclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ushuaia.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@virginmobile.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@vitamine.networldmedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@waltdisneystudios.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@weba.cdiscount[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@webo.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@weboconnectiongroupe.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ww251.smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ww57.smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ww57.smartadserver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.billetsdiscount[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.burstnet[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discounteo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discounteo[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discounteo[4].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discountlens[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.etracker[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[6].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[9].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.liomedia[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.mesexercices[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.smartadserver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.smileycentral[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www2.visiostats[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www3.addfreestats[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www3.smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@xiti[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@yourmedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@zanox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@zbox.zanox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@zedo[2].txt

      Patricia
      0
    2. PACHABO
       
      Bonjour du jeudi,

      voila le rapport SAS
      BONNE LECTURE

      SUPERAntiSpyware Scan Log
      https://www.superantispyware.com/

      Generated 10/28/2009 at 09:55 PM

      Application Version : 4.29.1004

      Core Rules Database Version : 4204
      Trace Rules Database Version: 2112

      Scan type : Complete Scan
      Total Scan Time : 02:26:53

      Memory items scanned : 736
      Memory threats detected : 0
      Registry items scanned : 5387
      Registry threats detected : 0
      File items scanned : 70005
      File threats detected : 294

      Adware.Tracking Cookie
      C:\Documents and Settings\Pat\Cookies\pat@statse.webtrendslive[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@adtech[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@virginmobile.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@boursoramabanque.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediaplex[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.at.atwola[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@tradedoubler[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@overture[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.shopreflex[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@golfdiscount[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.publicidees[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@zanox[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@tacoda[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adbrite[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserving.favorit-network[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.backads[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@techfluencers-media[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@cetelem.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@advertising[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@lascad.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.aol[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@adrevolver[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@advertstream[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@secure.discountlens[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@1936.stats.stats[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@imrworldwide[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@bluestreak[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fastclick[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[7].txt
      C:\Documents and Settings\Pat\Cookies\pat@xiti[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@msnportal.112.2o7[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@richmedia.yahoo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ww57.smartadserver[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@garnier2009.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@247realmedia[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@interflora2.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bs.serving-sys[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fnacmagasin.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.smartadserver[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@media.adrevolver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.madeinwork[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.sitestat[9].txt
      C:\Documents and Settings\Pat\Cookies\pat@fortuneopub.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@samsung.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@aimfar.solution.weborama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.yieldmanager[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.64.cte.clickintext[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@specificclick[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.doctissimo[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@content.yieldmanager[5].txt
      C:\Documents and Settings\Pat\Cookies\pat@atdmt[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stat.dealtime[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@lagarderefrance.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@www3.smartadserver[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.ratiatum[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@optimize.indieclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@doubleclick[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@himedia.individuad[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@questionmarket[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@serving-sys[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@at.atwola[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@intermarche2009.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.zanox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@medef.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@apmebf[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@bouyguestelecom.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@directtrack[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@bubblestat[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@estat[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@teleastral.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@movitex.122.2o7[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@wysistat[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@burstnet[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.magazine-video[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@eaeacom.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@sarbec.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@optimost[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@eas.apm.emediate[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediastay.directtrack[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@hitbox[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@gemeycolorsensational.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@discountlens[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@smartadserver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@nextag[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ehg-nokiafin.hitbox[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adviva[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@cnam.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@bnpparibasnet.solution.weborama[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discountlens[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@infobebes.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@data.coremetrics[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.sitestat[10].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[5].txt
      C:\Documents and Settings\Pat\Cookies\pat@clickintext[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@globalvaluecommerce.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@247realmedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@2o7[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@814.stats.stats[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.caradisiac[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.doctissimo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.logaweb[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.supertoinette[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ad.yieldmanager[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adbrite[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adopt.euroclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adrevolver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.118000[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.adap[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.benegil[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.canalblog[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.networldmedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.pga[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.thema-web[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.twenga[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.umahe[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.us.e-planning[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ads.widgetbucks[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.aol[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.femiweb[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.marcie-media[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@adserver.pharmaceutiques[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adtech[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adv.surinter[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@advertising[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@advertstream[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@adviva[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@aimfar.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@aolfr.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@apmebf[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@at.atwola[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@atdmt[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@azjmp[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@banners.ebabynetwork[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bizrate[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@bluestreak[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@bnpparibasnet.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bootslaboratories.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@boursoramabanque.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bouyguestelecom.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@bs.serving-sys[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@buggy.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@burstnet[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@cdiscount[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@cetelem.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@chitika[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@clickintext[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@clickshift[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@clubmed.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@cnam.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@content.yieldmanager.edgesuite[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@content.yieldmanager[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@content.yieldmanager[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@counter.hitslink[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@creditcooperatif.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@dealtime[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@dekio.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@directtrack[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@discounteo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@discountlens[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@doubleclick[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ducrostoss.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@e-2dj6whliamc5wbp.stats.esomniture[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@eas.apm.emediate[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ehg-ioffer.hitbox[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ehg-nestlefr.hitbox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ehg-twi.hitbox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@elle.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fastclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@femina.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fl01.ct2.comclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@fnacmagasin.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fortuneopub.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@fr.at.atwola[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@gemeyrenosuperstay.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@georgiapacificlotus.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@himedia.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@himedia.individuad[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@hotelscom.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@imrworldwide[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@infobebes.solution.weborama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@insightexpressai[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@interhome.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@intermarche2009.solution.weborama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@iv2.bluestreak[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@karavel.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@lagarderefrance.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@laredoute.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@laredoutebranding.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@lascad.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@looneov2.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@lorealparis.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@lorealpariselseve.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@media.adrevolver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediametrics.mpsa[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediaplex[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@mediastay.directtrack[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@mesexercices[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@microsoftinternetexplorer.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@mixabb.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@movitex.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@msnaccountservices.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@msnportal.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@neocounter.neoworx-blog-tools[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@nestle.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@networldmedia[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@nextag[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@notrefamille.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@onsexprime[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@opodo.122.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@optimost[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@overture[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@parents.solution.weborama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@paypal.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@philips.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@pierrefabre.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@promo.discounteo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@questionmarket[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@revsci[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@rm.piximedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@rotator.adjuggler[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@sales.liveperson[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@sales.liveperson[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@saletrack.co[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@samsung.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@sanofi.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@secure.discountlens[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@server.iad.liveperson[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@serving-sys[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@shop.zanox[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@shopping.112.2o7[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@smileycentral[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@specificclick[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@stat.blogorama[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stat.dealtime[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@statcounter[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stats.bdv[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stats.canalblog[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@stats.searchtrack[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@statse.webtrendslive[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tacoda[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@track.effiliation[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@track.effiliation[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracker.affistats[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.fastbooking[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.keywordmax[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.lengow[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.lsfinteractive[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.publicidees[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.quisma[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@tracking.veille-referencement[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@trackmon.itor[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@tradedoubler[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ttbmanutan.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@uk.at.atwola[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@upclick[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ushuaia.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@virginmobile.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@vitamine.networldmedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@waltdisneystudios.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@weba.cdiscount[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@webo.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@weboconnectiongroupe.solution.weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@weborama[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@ww251.smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ww57.smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@ww57.smartadserver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.billetsdiscount[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.burstnet[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discounteo[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discounteo[3].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discounteo[4].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.discountlens[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.etracker[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[6].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.googleadservices[9].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.liomedia[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.mesexercices[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.smartadserver[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www.smileycentral[2].txt
      C:\Documents and Settings\Pat\Cookies\pat@www2.visiostats[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www3.addfreestats[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@www3.smartadserver[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@xiti[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@yourmedia[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@zanox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@zbox.zanox[1].txt
      C:\Documents and Settings\Pat\Cookies\pat@zedo[2].txt

      Patricia
      0
  8. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    Bonjour,

    Parfais tu peux supprimer tout ce qu'il à trouvé et vider la quarantaine, ensuite :

    Faire un scan en ligne un scan en ligne avec Bitdefender Scan Online afin de vérifier s'il reste encore des virus.

    Veuillez vous rendre à cette adresse avec Internet Explorer :


    Si vous êtes sous Vista (si vous avez XP ou 2000, passez à la suite), l’UAC doit être désactivée lors du scan.
    Vous pouvez vous aider de ce lien pour désactiver l'UAC : http://www.bibou0007.com/tutos-f45/tutorial-desactiver-l-uac-sur-vista-t132.htm


    1°) "Acceptez" l'accord de license :

    2) Une nouvelle fenêtre apparait et affiche un message concernant un contrôle activeX :

    # Sur cette page, une barre jaune apparait, faites un clic droit sur cette barre puis cliquez sur "Installer le contrôle activeX"

    Voir cette image

    3°) Une page d'avertissement s'ouvre, cliquez sur "Installer" :

    4°) Ensuite la procédure de scan va pouvoir commencer. Cliquez sur "Démarrer l'analyse " Bitdefender va alors se mettre à jour et commencer (si cela se solde par un échec, veuillez alors recommencer car cela peut arriver) :

    Soyez patient durant le scan, le temps indiqué n'est qu'une estimation.

    5°) Le scan terminé, cliquez sur "Cliquer ici pour exporter le rapport" :

    6°) Une page d'explorateur windows va alors s'ouvrir, nommez le rapport "Rapport Bitdefender " et enregistrez-le au format "HTML " sur le bureau :

    7°) Ensuite, ouvrez le rapport de Bitdefender, rapport Bitdefender 2 maintenant présent sur votre bureau et faites un copier/coller sur votre forum.

    0
    1. PACHABO
       
      ReBonjour,

      j'ai fait le scan bitdefender qui n'a trouvé aucune anomalie;
      Il n'y avait pas de 'rapport à exporter', seulement rapport à envoyer ce que j'ai fait;Puis la fenêtre s'est ferméeet puis c'était fini.
      Voilà
      Autre manip' ?
      Cordialement
      Patricia
      0
  9. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    Parfais une dernière vérif :

    Télécharge List&Kill'em (par Gen-Hackman) et enregistre l'exécutable sur ton bureau.

    ! Désactive ton antivirus le temps de la manip ainsi que ton Pare-feu si présent !

    ! Déconnecte toi ferme toutes tes applications en cours !

    ▶ Double-clic sur l'icône présente sur le bureau pour le lancer (sous vista : clic droit > "exécuter en tant qu'administrateur").

    ▶ Choisis la langue souhaitée et valide par "entrée".

    ▶ Au second menu choisis l'option 1 : Mode Recherche

    ▶ Laisse travailler l'outil.

    ▶ Une fois le scan Terminé ,un rapport s'ouvre .

    Ensuite héberger le rapport :

    ▶ Rendez-vous à cette adresse d'hébergement gratuit : http://www.cijoint.fr/

    ▶ Cliquez sur parcourir, chercher le rapport .txt puis cliquez sur ici pour déposer le fichier

    ▶ Une fois le lien crée en dessous de c'est ce même lien que vous devrez transmettre à vos correspondants, faite un clique droit dessus et copier l'adresse du lien pour venir le coller dans votre réponse

    0
    1. PACHABO
       
      BONJOUR PIMPRENELLE?
      je n'ai pas fait la manip' car ce de pire en pire sur ma messagerie,j'ai des rafales de mails de ce type,comment si rien n'avait été éradiqué:

      De : postmaster@mail.hotmail.com
      Envoyé : jeu. 29/10/09 18:27
      À : pbonnet@hotmail.fr
      2 pièces jointes | Télécharger toutes les pièces jointes (3,6 Ko)
      ATT00001 (0,3 Ko), hi.mht (3,3 Ko)


      This is an automatically generated Delivery Status Notification. Delivery to the following recipients failed. h.ba@voila.fr


      --Pièce jointe du message transmise--
      From: pbonnet@hotmail.fr
      To: gyno4835@hotmail.com
      Subject: hi
      Date: Thu, 29 Oct 2009 18:27:21 +0100








      Hello:
      my freinds,We are a large wholesale company doing business of electronic goods such as laptops,digital cameras,camcorders,videos,GPS,mobile phones,mp4,game consoles and many other electronic products, we have a legal agent with lawful business certification.
      we have a great deal of customers abroad, our high prestige was built 4years ago.
      We can supply high quality products at excellent price.
      Welcome to login on our website.
      www.evcbxd.com
      Please contact us when you find something you need:
      our E-mail is evcbxd@evcbxd.com and MSN is evcbxd@hotmail.com
      Hope new customers and old customers will enjoy doing business with us, your opinions and suggestions are always available. we will always make improvements.
      Expect for cooperation!


      Merci
      Patricia
      0
  10. pimprenelle27 Messages postés 22182 Statut Contributeur sécurité 2 503
     
    On peux finir le pc quand même avec le nettoyage on verra si c'est toujours là merci.
    0