Antivirus soft

salut :

DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)

▶ Télécharge List_Kill'em

et enregistre le sur ton bureau

double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

Laisse coché :

♦ Executer Shortcut
♦ Executer List_Kill'em

une fois terminée , clic sur "terminer" et le programme se lancera seul

choisis l'option Search

▶ laisse travailler l'outil

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

Merci.

J'ai essayé par trois fois de suivre votre démarche et à chaque fois mon ordinateur s'éteint avant la fin du scan :(

salut au moment du passage à l'ecran en blanc je presume?

Oui, exactement.

ok tu dois avoir C:\List'em.txt tu peux me le poster stp ?

Le voici... en deux messages...

¤¤¤¤¤¤¤¤¤¤ List'em by g3n-h@ckm@n 2.0.0.4 ¤¤¤¤¤¤¤¤¤¤

User : Nicole (Administrateurs)
Update on 23/05/2010 by g3n-h@ckm@n ::::: 15.00
Start at: 20:12:31 | 2010-05-24

AMD Athlon(TM) XP 2000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : avast! Antivirus 5.0.83886625 [ Enabled | Updated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 35,59 Go (15,43 Go free) | NTFS
D:\ -> Disque fixe local | 19,5 Go (13,13 Go free) [Jeux] | NTFS
E:\ -> Disque fixe local | 19,47 Go (16,42 Go free) [Université] | NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
H:\ -> Disque CD-ROM
K:\ -> Disque CD-ROM
M:\ -> Disque amovible

Boot: Normal
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bell\Internet Service Advisor\ServicepointService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Bell\Internet Service Advisor\BISA.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Bell\Internet Service Advisor\BISAComHandler.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\List_Kill'em\List_Kill'em.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\List_Kill'em\pv.exe

======================
Keys "Run"
======================

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
voovtwvi REG_SZ C:\Documents and Settings\Nicole\Local Settings\Application Data\lfwghfhnt\hrnoidotssd.exe
pbuortew REG_SZ C:\Documents and Settings\Nicole\Local Settings\Application Data\wijbigmpx\huiywxjtssd.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
BISA.exe REG_SZ "C:\Program Files\Bell\Internet Service Advisor\BISA.exe" /AUTORUN
QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime
iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
avast5 REG_SZ C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)

===============

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoDriveTypeAutoRun REG_DWORD 145 (0x91)

===============

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
HonorAutoRunSetting REG_DWORD 1 (0x1)

===============

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

===============

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
AutoRestartShell REG_DWORD 1 (0x1)
DefaultDomainName REG_SZ NICOLE-394B48C3
DefaultUserName REG_SZ Nicole
LegalNoticeCaption REG_SZ
LegalNoticeText REG_SZ
PowerdownAfterShutdown REG_SZ 0
ReportBootOk REG_SZ 1
Shell REG_SZ Explorer.exe
ShutdownWithoutLogon REG_SZ 0
System REG_SZ
Userinit REG_SZ C:\WINDOWS\system32\userinit.exe,
VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
SfcQuota REG_DWORD -1 (0xffffffff)
allocatecdroms REG_SZ 0
allocatedasd REG_SZ 0
allocatefloppies REG_SZ 0
cachedlogonscount REG_SZ 10
forceunlocklogon REG_DWORD 0 (0x0)
passwordexpirywarning REG_DWORD 14 (0xe)
scremoveoption REG_SZ 0
AllowMultipleTSSessions REG_DWORD 0 (0x0)
UIHost REG_EXPAND_SZ logonui.exe
LogonType REG_DWORD 1 (0x1)
DebugServerCommand REG_SZ no
SFCDisable REG_DWORD 0 (0x0)
WinStationsDisabled REG_SZ 0
HibernationPreviouslyEnabled REG_DWORD 1 (0x1)
ShowLogonOptions REG_DWORD 1 (0x1)
AltDefaultUserName REG_SZ Nicole
AltDefaultDomainName REG_SZ NICOLE-394B48C3
ChangePasswordUseKerberos REG_DWORD 1 (0x1)
Background REG_SZ 0 0 0

===============

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AtiExtEvent]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WgaLogon]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon]

===============

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ
{B5A7F190-DDA6-4420-B3BA-52453494E6CD} REG_SZ Groove GFS Stub Execution Hook

===============

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\Messenger\msmsgs.exe REG_SZ C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
D:\Azureus\Azureus.exe REG_SZ D:\Azureus\Azureus.exe:*:Enabled:Azureus
%windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
C:\Program Files\Winamp Remote\bin\Orb.exe REG_SZ C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb
C:\Program Files\Winamp Remote\bin\OrbTray.exe REG_SZ C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray
C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe REG_SZ C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client
C:\Office12\OUTLOOK.EXE REG_SZ C:\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook
C:\Office12\GROOVE.EXE REG_SZ C:\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove
C:\Office12\ONENOTE.EXE REG_SZ C:\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Disabled:backWeb-8876480
C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\AVG\AVG8\avgupd.exe REG_SZ C:\Program Files\AVG\AVG8\avgupd.exe:*:Disabled:avgupd.exe
C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Disabled:Windows Live Call
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Disabled:Windows Live FolderShare
C:\Program Files\Skype\Phone\Skype.exe REG_SZ C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype
C:\Program Files\Bell\Internet Service Advisor\ServicepointService.exe REG_SZ C:\Program Files\Bell\Internet Service Advisor\ServicepointService.exe:*:Enabled:Servicepoint Service
C:\Program Files\iTunes\iTunes.exe REG_SZ C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
%windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare

===============
ActivX controls
===============

[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{0CCA191D-13A6-4E29-B746-314DEE697D83}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{166B1BCA-3F9C-11CF-8075-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{4F1E5B1A-2A80-42CA-8532-2D05CB959537}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5F8469B4-B055-49DD-83F7-62B522420ECC}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{B020B534-4AA2-4B99-BD6D-5F6EE286DF5C}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{E77F23EB-E7AB-4502-8F37-247DBAF1A147}]

===============
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{0B1F9EF6-C3F3-8AAA-5C42-4A00E67415C4}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{1325db73-d9f1-48f8-8895-6d814ec58889}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{233C1507-6A77-46A4-9443-F871F945D258}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2A202491-F00D-11cf-87CC-0020AFEECF20}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{411EDCF7-755D-414E-A74B-3DCD6583F589}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B508B3F1-A24A-32C0-B310-85786919EF28}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}]

==============
BHO :
======

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

===
DNS
===

HKLM\SYSTEM\CCS\Services\Tcpip\..\{B5524DB3-240D-4BA3-B19D-6DEF27F5353B}: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{B5524DB3-240D-4BA3-B19D-6DEF27F5353B}: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{B5524DB3-240D-4BA3-B19D-6DEF27F5353B}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS3\Services\Tcpip\..\{B5524DB3-240D-4BA3-B19D-6DEF27F5353B}: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1

================
Internet Explorer :
================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr/?ocid=iehp
Local Page REG_SZ C:\WINDOWS\system32\blank.htm
Default_Search_URL REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL REG_SZ https://www.msn.com/fr-fr/?ocid=iehp
Search Page REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.meteomedia.com/ca/meteo/quebec/saguenay
Local Page REG_SZ C:\WINDOWS\system32\blank.htm
Search Page REG_SZ https://www.google.com/?gws_rd=ssl

========
Services
========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3 ( OK = 3 )
EapHost : 0x3 ( OK = 2 )
SharedAccess : 0x2 ( OK = 2 )
wuauserv : 0x2 ( OK = 2 )

========
Safemode
========

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot : OK !!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal : OK !!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network : OK !!

=========
Atapi.sys
=========

C:\WINDOWS\$NtServicePackUninstall$\atapi.sys :
MD5 :: [cdfe4411a69c224bd1d11b2da92dac51]
SHA256 :: [0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d]

C:\WINDOWS\ServicePackFiles\i386\atapi.sys :
MD5 :: [9f3a2f5aa6875c72bf062c712cfa2674]
SHA256 :: [b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9]

C:\WINDOWS\system32\drivers\atapi.sys :
MD5 :: [9f3a2f5aa6875c72bf062c712cfa2674]
SHA256 :: [b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9]

Référence :
==========

Win 2000_SP2 : ff953a8f08ca3f822127654375786bbe
Win 2000_SP4 : 8c718aa8c77041b3285d55a0ce980867
Win XP_32b : a64013e98426e1877cb653685c5c0009
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C
Windows 7_32b_Ultimate : 338c86357871c167a96ab976519bf59e

ET la dernière partie...
=======
Drive :
=======

D'fragmenteur de disque Windows
Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

Rapport d'analyse
35,59 Go total, 15,44 Go libre (43%), 18% fragment' (fragmentation du fichier 36%)

Vous devriez d'fragmenter ce volume.

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
Present !! : C:\Program Files\INSTALL.LOG
Present !! : C:\WINDOWS\002761_.tmp
Present !! : C:\WINDOWS\SET3.tmp
Present !! : C:\WINDOWS\SET4.tmp
Present !! : C:\WINDOWS\SET8.tmp
Present !! : C:\WINDOWS\_delis32.ini
Present !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
Present !! : C:\WINDOWS\System32\SET3E.tmp
Present !! : C:\WINDOWS\System32\SET40.tmp
Present !! : C:\WINDOWS\System32\SET4C.tmp
Present !! : C:\WINDOWS\System32\setb4.tmp
Present !! : C:\WINDOWS\Temp\ab23216a-71a6-4f9a-a776-125208789f37.tmp
Present !! : C:\WINDOWS\Temp\JET16CF.tmp
Present !! : C:\WINDOWS\Temp\JET1EBE.tmp
Present !! : C:\WINDOWS\Temp\JET3217.tmp
Present !! : C:\WINDOWS\Temp\JET3A16.tmp
Present !! : C:\WINDOWS\Temp\JET501E.tmp
Present !! : C:\WINDOWS\Temp\JET65F8.tmp
Present !! : C:\WINDOWS\Temp\JET6637.tmp
Present !! : C:\WINDOWS\Temp\JET678E.tmp
Present !! : C:\WINDOWS\Temp\JET6963.tmp
Present !! : C:\WINDOWS\Temp\JET78.tmp
Present !! : C:\WINDOWS\Temp\JET78E4.tmp
Present !! : C:\WINDOWS\Temp\JET7E19.tmp
Present !! : C:\WINDOWS\Temp\JET9814.tmp
Present !! : C:\WINDOWS\Temp\JETAD18.tmp
Present !! : C:\WINDOWS\Temp\JETAF6A.tmp
Present !! : C:\WINDOWS\Temp\JETB769.tmp
Present !! : C:\WINDOWS\Temp\JETB97C.tmp
Present !! : C:\WINDOWS\Temp\JETBE3F.tmp
Present !! : C:\WINDOWS\Temp\JETC042.tmp
Present !! : C:\WINDOWS\Temp\JETC8CE.tmp
Present !! : C:\WINDOWS\Temp\JETD476.tmp
Present !! : C:\WINDOWS\Temp\JETD7A3.tmp
Present !! : C:\WINDOWS\Temp\JETD949.tmp
Present !! : C:\WINDOWS\Temp\JETDADA.tmp
Present !! : C:\WINDOWS\Temp\JETDBF8.tmp
Present !! : C:\WINDOWS\Temp\JETE290.tmp
Present !! : C:\WINDOWS\Temp\JETE3C8.tmp
Present !! : C:\WINDOWS\Temp\JETE455.tmp
Present !! : C:\WINDOWS\Temp\JETE658.tmp
Present !! : C:\WINDOWS\Temp\JETE9D3.tmp
Present !! : C:\WINDOWS\Temp\JETEE09.tmp
Present !! : C:\WINDOWS\Temp\JETF201.tmp
Present !! : C:\WINDOWS\Temp\JETF230.tmp
Present !! : C:\WINDOWS\Temp\JETF2CC.tmp
Present !! : C:\WINDOWS\Temp\JETFCBF.tmp
Present !! : C:\WINDOWS\Temp\JETFD1C.tmp
Present !! : C:\WINDOWS\Temp\MST20.tmp
Present !! : C:\WINDOWS\Temp\MST42.tmp
Present !! : C:\WINDOWS\Temp\SEP40.tmp
Present !! : C:\WINDOWS\Temp\ZKT{001CD899-91D0-4DBA-A740-084DAB7F2432}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{020CA509-3E20-45D4-B6C6-705F8FE36E20}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{04484194-7255-424A-B2D3-5CAA4DDA1EB7}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{063D1748-A39B-49EE-A7E2-AA8C2088658A}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{0753EDEA-F6CC-4DFF-9DAD-7EA7F1675B8E}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{086E9079-529C-4A84-BD48-880020DEDCC2}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{09723651-DC96-427A-893A-2ACBE2305F5C}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{09E7B18F-9E9A-436A-96DF-3C0A9D7D53A9}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{0A842342-385E-4385-B135-406E989E79F4}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{119C0752-AF7D-4217-9640-5DE127388819}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{1241D194-7D38-477E-9D6E-C03A93B2F3D3}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{13F8EFF7-2482-420F-97F9-891F596A6AFF}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{1428090B-E7A7-49BD-A7DA-B05DC17EA8E2}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{161DDB10-E3D3-46E1-B93E-DF8AB01F0EE1}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{168C003E-6345-45EB-B20A-DBA6028C27AA}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{1737E42D-0CAD-4D7B-A45F-E167C8015CCD}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{1947EA3E-E869-416C-8E14-A0D3897EBDB8}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{194EE0B4-E7FA-45B6-BB8F-3E92BB268FE0}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{1A84ABD1-88C3-42BD-8EDD-62D0C71F4BA9}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{1C88DBEE-917B-4003-AEA1-21753C946331}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{20FB14F8-0AE8-4EDE-A9D7-2BA6D644BFA1}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{22D97462-33B0-4256-888D-4B90CA231A69}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{2368C1C8-8350-4D21-A25B-284425408D82}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{245074D2-F0AD-49D2-81B7-893D999F1C29}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{248813F1-8236-4BDE-A336-3322C2436D89}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{25721105-EBA8-467F-A91D-1537F26F7BF6}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{25CD5151-A082-4142-AC12-175928A7037B}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{26CC1389-A096-46E8-8D69-83A734EDC2D3}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{2AF1C791-AC27-462B-9CF1-EF263552AD29}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{2CFAD27F-CC85-4C52-95F6-B176D094127B}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{2F375A02-6929-43EA-BC5E-D2A023A4422F}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{327137E4-5291-4FAA-B46A-6B4A667EFD44}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{32E3A2CE-B108-4BD6-8992-6CFA0B0F599F}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{33A80AA2-9E2F-4D1D-82B3-8134D7844A7A}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{34BCFB81-710D-42BD-B966-220F79FA03C3}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{3B13FC4F-09CB-4C85-8937-C40FAA0A8E88}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{3DA9DBDC-162A-4392-B928-CD3CBD06E20E}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{3DFBD880-A84E-41EC-B9D1-6E8AE54989B2}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{40108FE4-E537-4D85-93D9-58A09F69FAAC}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{442269CE-9770-4ADF-9979-0EFCB997C2A6}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{44B0C82A-A28F-460A-9C63-3441E1BD5F95}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{45CF0D39-FA3C-40AE-A255-7AAFAA05E437}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{46574928-201A-4BEE-B83F-4A56B14DC2F9}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{46B9E7AE-EB14-423F-9798-1EC28EA1BFD6}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{47FCB65A-9A69-4511-B729-CBF904BF640D}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{48BBA6F9-6C0C-4B3F-B0C2-612D2889FB5F}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{49FD7E1E-9B6D-4F16-8B72-4191EC707D22}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{4E7BF29C-63D1-4984-817F-D976656FD1C5}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{504553CD-2CD8-42B7-B53B-2BD7364B2FD4}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{512CF95F-2BF0-4F6F-B4E9-A5F861ED66AF}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{51C1FCD1-7967-415B-BE2A-0EDBE9373736}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{51F46B14-B49C-4ED7-8881-CB5BA616B858}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{52A43425-4CBB-4DB5-B096-07FC6B197D11}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{533B6063-0454-4528-ACD3-778C3490C4E7}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{5BC08B00-0311-46CC-8032-44398CD59800}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{5CF7C35C-1867-48C6-9E33-5CF4FCD8F3D3}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{5ED242DB-120B-46BC-A646-F8357065CC1B}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{611B3076-28A0-4A55-ABC0-FC03EE5AC2C9}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{696E372C-0E60-4E18-A79C-7F8EC48BA73B}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{6AA14C05-A50D-4FF7-9085-D366DCF75005}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{6DF6158E-BAB5-48EE-B7AE-9F3872E09E71}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{6E04AB54-7A75-467E-A623-0B6D0D92AA5A}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{6F2927A4-9F06-436E-826C-1555F75EABFB}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{71EC728B-0CCE-4818-981E-D7B00AB99774}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{75B8EA61-29B7-4DE3-993B-C0F0DE7A584E}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{78E04230-D8B7-422B-BD38-4855DEAB6CE2}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{7B3B23DC-DA7B-4128-87F2-D6BB18AB7111}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{7E17FA22-45E1-4BFC-840C-927658463B3E}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{8134B2DA-91A5-46BC-B229-1FF8595070B0}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{83A7FAE5-A2A5-4C8E-91B2-6C438AED4184}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{83AF5C10-7BED-4A66-B880-1F763B885930}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{8A450387-1ADC-4FC4-AF17-C166106998FF}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{8B3BB17C-6498-42BD-AC6C-328A59FDCB7D}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{8BCE2A30-6F55-4422-95E2-0E895C270C3B}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{8D97577A-7115-431D-8000-5550131755B6}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{8FC713F9-766B-4048-83A6-808FF8ABBBA0}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{909DED6D-EF17-42AC-B43F-8C01ED2948AA}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{91A4FDFB-BD14-41BA-90E6-BCA02F315289}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{938C8E91-6BA2-4B3C-972B-93EC2C9E4D90}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{93CE09C3-BD92-4154-B4E1-88EB86F4A4C1}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{9662D130-9A8E-4BA8-A0D8-2BA4CCA589FA}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{982C194B-4E82-4984-BB36-8C4D2B6D132A}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{9897295F-7B04-4D5A-BB2B-CFA4D8226CEC}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{9A969177-BDD1-461D-B1E6-9DA86916AA88}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{9BB04456-04AA-4EB1-A651-7BDBE604DC08}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{9C3792A0-68F6-48A6-90DD-7A23EE56A509}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{9F3A8EE1-EFDC-4969-9421-1DDF155B196D}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{9FD51141-4C47-44AA-A8E3-225D4511CA7B}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{A09FDD31-712C-4EBA-A058-E3175ECB4D93}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{A0F99E81-ED36-46CE-BBD5-9795155C21B7}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{A1498AB0-C8FF-4159-8E52-B4FBFDEA9936}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{A34FEF5D-7CDD-4492-9576-803EB0286092}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{A52860AE-153E-4522-879F-1BECF1B7263F}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{A7EAE773-988A-425D-A2A6-63D6432BAEEB}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{AB2EDFE6-928E-4405-AF9D-2E6FA07A6A7E}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{ABC5CC74-286C-4330-9804-49373AA5656B}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{AF6070A6-85DE-4FA7-9F2E-B8D50AEB3BF6}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{AF93C2EE-D5DC-4408-BB41-A0D963E1DCCE}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{B08C5175-33C4-4E72-9E3B-0112CEA46826}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{B1C3CF9D-F033-43B0-A672-23FE429F25B9}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{B29A9661-1F4F-4B15-A803-92CA84988156}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{B446016E-B4F6-4332-96C3-FC91B92E578E}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{B54D5732-821A-448B-A4F2-6BE56DF7C872}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{B55ED976-AE23-4BF3-B1EA-ABCF5F47E2D7}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{B7152C14-CB7A-4CCB-BE25-DB96A32BBF54}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{BAE8E4D4-B98F-4C1B-B6FF-149BFD44DC79}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{BE89F378-74AF-4C0A-9D46-7223116659DC}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{BE931EF0-ACCA-412B-BAD5-E60F2C224076}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{BEB7E7A9-AC21-4D6B-ACB5-21073046859D}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{BEDC7630-50A1-4837-95B9-023E1B51FA9F}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{BF338F52-FAA3-4780-A665-9D8D7FFA79EA}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{BFEE1D0B-9981-41E3-8516-5568855FF55E}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{C1E8E841-57BD-47CA-9114-842C7BB1271C}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{C234585F-9E80-4170-B381-62A76A15B587}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{C2C63092-3086-4C0B-B86D-534C44FF9E24}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{C314E861-8557-4B20-894A-39262E4D0E8F}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{C63C4B08-D05A-4820-B9CE-2897D8AF2BC4}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{C80B0AA6-D445-4CA1-A047-8FA9F7B71612}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{CE66A4B5-B335-43EC-9E8E-C0F18EC0E791}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{CFEE8363-70B5-4923-B57C-15CF948B2A7F}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{D04656CB-0B5F-4B39-9C7B-1B0FAEB57955}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{D1EBC664-4DFE-4E6A-A0CC-9CADA9A845DF}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{D233668A-36BD-4F22-893B-EE8F1D9F9A43}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{D2551C90-32E8-4F8B-81D8-02E0D63CBD40}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{D3AE307C-5B50-45BE-9129-539DD510D27A}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{D4C57C05-1E20-4F5A-82CA-EC821612A304}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{DE42D159-8FE1-4EBC-A486-A20C629138AB}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{DE7FD1D5-C2C6-43A7-AC9B-991156AB62F7}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{E05ADA0C-D2B0-4C85-9DDA-4C30677BDBF7}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{E43AFE87-5815-49FD-AF3E-C4C4B23FCABD}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{E4D5970E-C102-4E5B-B086-7114C13EA195}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{E8224DA3-E294-4E2F-83E4-B20054351AB1}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{E82712D8-5A2E-4DDC-8672-97A551EA2030}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{E8B4D5E3-7EB0-4B19-A589-B543BB8E3784}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{E9F32669-1F65-433B-9104-2A073AFD3D9C}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{EAD3D091-D6FC-4DF2-B076-31CB54CB0CEA}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{ED28C1E0-B924-4527-8F80-0E49340C7C07}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{F1184BD9-90DC-4E38-82A7-F0A9230F05CD}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{F13FFCCD-DC20-42EE-BC25-DD5CC8819BC4}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{F1ABEFB2-9A45-4854-B864-2F165ED582EA}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{F1E20A69-5734-4A4F-A5ED-7A1D7437E5F3}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{F28B1C20-E092-4538-8775-049F1106ECF0}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{F5CECD3B-CCA3-4514-B217-CB578B930442}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{F6D9F157-DA13-4813-A7C0-8ED41CECA8EF}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{FBA5F9E1-D3A3-469F-AFE2-5BC75C228E81}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{FC47A38D-37BB-4444-AB0F-76AFBDD733E9}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{FC8BC21D-20C7-4BDB-9251-8CA6DFD2012C}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{FE484C5F-88A7-4758-9F23-7226C6E75771}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{FF378AD3-8301-4109-836C-8966114998D1}.tmp
Present !! : C:\WINDOWS\Temp\ZKT{FF72190F-312E-4304-9583-C143F979F49E}.tmp

¤¤¤¤¤¤¤¤¤¤ Keys :

▶ Relance List&Kill'em(soit en clic droit pour vista),avec le raccourci sur ton bureau.

mais cette fois-ci :

▶ choisis l'option Remove key

un document texte va s'ouvrir à l'apparition de : Text Please

▶copie/colle le texte en gras ci-dessous :

"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "voovtwvi"
"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "pbuortew"


ensuite onglet "Fichier" clic sur enregistrer , puis ferme ce bloc notes

Laisse travailler l'outil

à la fin un rapport s'ouvre ,

▶ poste le resultat

ensuite :

▶ Relance List&Kill'em(soit en clic droit pour vista),avec le raccourci sur ton bureau.

mais cette fois-ci :

▶ choisis l'option Manual delete

un document texte va s'ouvrir à l'apparition de : Text Please

▶copie/colle le texte en gras ci-dessous :

C:\Documents and Settings\Nicole\Local Settings\Application Data\lfwghfhnt
C:\Documents and Settings\Nicole\Local Settings\Application Data\wijbigmpx

ensuite onglet "Fichier" clic sur enregistrer , puis ferme ce bloc notes

Laisse travailler l'outil

à la fin un rapport s'ouvre ,

▶ poste le resultat

ensuite :

▶ Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
mais cette fois-ci :

▶ choisis l'Option Clean

ton PC va redemarrer,

laisse travailler l'outil.

en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

▶ colle le contenu dans ta reponse

Voici le deuxième texte :

¤¤¤¤¤¤¤¤¤¤ File | Folder

Quarantined & Deleted !! : C:\Documents and Settings\Nicole\Local Settings\Application Data\lfwghfhnt
Quarantined & Deleted !! : C:\Documents and Settings\Nicole\Local Settings\Application Data\wijbigmpx

Et la troisième et finale :

¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.0.0.4 ¤¤¤¤¤¤¤¤¤¤

User : Nicole (Administrateurs)
Update on 23/05/2010 by g3n-h@ckm@n ::::: 15.00
Start at: 20:14:20 | 2010-05-26

hello la troisieme est un peu courte ^^

Oups, excusez-moi. La voici.

¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.0.0.4 ¤¤¤¤¤¤¤¤¤¤

User : Nicole (Administrateurs)
Update on 23/05/2010 by g3n-h@ckm@n ::::: 15.00
Start at: 20:14:20 | 2010-05-26

AMD Athlon(TM) XP 2000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! Antivirus 5.0.83886625 [ Enabled | Updated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 35,59 Go (15,26 Go free) | NTFS
D:\ -> Disque fixe local | 19,5 Go (13,13 Go free) [Jeux] | NTFS
E:\ -> Disque fixe local | 19,47 Go (16,42 Go free) [Université] | NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
H:\ -> Disque CD-ROM
K:\ -> Disque CD-ROM
M:\ -> Disque amovible

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast5\setup\avast.setup
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bell\Internet Service Advisor\ServicepointService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\List_Kill'em\ERUNT.EXE
C:\Program Files\List_Kill'em\pv.exe

¤¤¤¤¤¤¤¤¤¤ Files/folders :

=======
Hosts :
=======

127.0.0.1 localhost

========
Registry
========

salut desolé depannage oblige....

c'est encore un peu court....

Salut,

Désolée du délais, mais j'étais en vacances. Donc voici le rapport au complet, j'ai vérifié deux fois :

¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.0.0.4 ¤¤¤¤¤¤¤¤¤¤

User : Nicole (Administrateurs)
Update on 23/05/2010 by g3n-h@ckm@n ::::: 15.00
Start at: 12:22:51 | 2010-07-23

AMD Athlon(TM) XP 2000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! Antivirus 5.0.83886674 [ Enabled | Updated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 35,59 Go (13,48 Go free) | NTFS
D:\ -> Disque fixe local | 19,5 Go (13,13 Go free) [Jeux] | NTFS
E:\ -> Disque fixe local | 19,47 Go (16,42 Go free) [Université] | NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
H:\ -> Disque CD-ROM
K:\ -> Disque CD-ROM
M:\ -> Disque amovible

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast5\setup\avast.setup
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bell\Internet Service Advisor\ServicepointService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\List_Kill'em\ERUNT.EXE
C:\Program Files\List_Kill'em\pv.exe

¤¤¤¤¤¤¤¤¤¤ Files/folders :

=======
Hosts :
=======

127.0.0.1 localhost

========
Registry
========
Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser : {0E5CBF21-D15F-11D0-8301-00AA005B4383}
Deleted : "HKCU\software\Fun Web Products"
Deleted : "HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}"
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
Deleted : HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
Deleted : HKCU\Software\AppDataLow\AskBarDis
Deleted : HKCU\SOFTWARE\avsoft
Deleted : HKCU\Software\avsuite
Deleted : HKCU\SOFTWARE\FunWebProducts
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d}
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca}
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca}
Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{09f1adac-76d8-4d0f-99a5-5c907dadb988}
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb}
Deleted : HKCU\software\MyWebSearch
Deleted : HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
Deleted : "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1"
=================
Internet Explorer
=================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr/?ocid=iehp
Local Page REG_SZ C:\WINDOWS\system32\blank.htm
Default_Search_URL REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL REG_SZ https://www.msn.com/fr-fr/?ocid=iehp
Search Page REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.google.com/?gws_rd=ssl
Local Page REG_SZ C:\WINDOWS\system32\blank.htm
Search Page REG_SZ http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

===============
Security Center
===============

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
FirstRunDisabled REG_DWORD 1 (0x1)
FirewallDisableNotify REG_DWORD 0 (0x0)
UpdatesDisableNotify REG_DWORD 0 (0x0)
AntiVirusOverride REG_DWORD 1 (0x1)
FirewallOverride REG_DWORD 1 (0x1)
AntiVirusDisableNotify REG_DWORD 0 (0x0)

========
Services
=========

Ndisuio : Start = 3
EapHost : Start = 2
Ip6Fw : Start = 2
SharedAccess : Start = 2
wuauserv : Start = 2
wscsvc : Start = 2

============
Disk Cleaned
anti-ver blaster : OK
Prefetch cleaned
================

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sptd.sys >>UNKNOWN [0x823768AC]<<
kernel: MBR read successfully
user & kernel MBR OK

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

oulaa deux mois apres...on recommence :

Télécharge ici :OTL de OLDTimer

▶ enregistre le sur ton Bureau.

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur OTL.exe pour le lancer.

▶ Coche les 2 cases Lop et Purity

▶ Coche la case devant tous les utilisateurs

▶ règle age du fichier sur "60 jours"

▶ dans la moitié gauche , mets tout sur "tous"

ne modifie pas ceci :

"fichiers créés" et "fichiers Modifiés"

▶Clic sur Analyse.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

▶▶▶ NE LE POSTE PAS SUR LE FORUM

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

▶ Clique sur Parcourir et cherche le fichier ci-dessus.

▶ Clique sur Ouvrir.

▶ Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

est ajouté dans la page.

▶ Copie ce lien dans ta réponse.

▶▶ Tu feras la meme chose avec le "Extra.txt" qui logiquement sera aussi sur ton bureau.

Voici le lien OTL

http://www.cijoint.fr/cjlink.php?file=cj201007/cijzDt0h0R.txt

Et le lien fichier EXTRA

http://www.cijoint.fr/cjlink.php?file=cj201007/cijX1OM0k0.txt

Merci et bonne journée.

salut

▶ Télécharge ici : Ad-remover ( de C_XX ) sur ton bureau :

▶ Déconnecte toi et ferme toutes applications en cours !

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

▶ sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

▶ clique le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

▶ Au menu principal choisis "option Nettoyer" et tape sur [entrée] .

▶ Laisse travailler l'outil et ne touche à rien ...

▶ Poste le rapport qui apparait à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

Et voilà...

Merci ;)

======= RAPPORT D'AD-REMOVER 2.0.0.1,D | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 26/07/10 à 12:00
Contact: AdRemover.contact[AT]gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 10:04:10 le 27/07/2010, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86)
Nicole@NICOLE-394B48C3 ( )

============== ACTION(S) ==============

0,Dossier supprimé: C:\Documents and Settings\Nicole\Local Settings\Application Data\Conduit
0,Dossier supprimé: C:\Program Files\Conduit
0,Fichier supprimé: C:\WINDOWS\system32\6ffdbcaf-f6c1-42d3-a4a9-c7957224a70b.dll

(!) -- Fichiers temporaires supprimés.

1,Clé supprimée: HKLM\Software\Classes\Interface\{115CCBAE-27B0-47C3-BA42-BAB708424393}
0,Clé supprimée: HKLM\Software\Classes\ToolBand.EasyHideBtn
0,Clé supprimée: HKLM\Software\Classes\ToolBand.EasyHideBtn.1
0,Clé supprimée: HKLM\Software\Classes\Toolband.EB_ExplorerBar
0,Clé supprimée: HKLM\Software\Classes\Toolband.EB_ExplorerBar.1
0,Clé supprimée: HKLM\Software\Classes\Toolband.IPM_PrintListItem
0,Clé supprimée: HKLM\Software\Classes\Toolband.IPM_PrintListItem.1
0,Clé supprimée: HKLM\Software\Classes\Toolband.PM_Launcher
0,Clé supprimée: HKLM\Software\Classes\Toolband.PM_Launcher.1
0,Clé supprimée: HKLM\Software\Classes\Toolband.PM_PrintManager
0,Clé supprimée: HKLM\Software\Classes\Toolband.PM_PrintManager.1
0,Clé supprimée: HKLM\Software\Classes\Toolband.PR_BindStatusCallback
0,Clé supprimée: HKLM\Software\Classes\Toolband.PR_BindStatusCallback.1
0,Clé supprimée: HKLM\Software\Classes\Toolband.PR_CancelButtonEventHandler
0,Clé supprimée: HKLM\Software\Classes\Toolband.PR_CancelButtonEventHandler.1
0,Clé supprimée: HKLM\Software\Classes\ToolBand.SkypeIEHelper
0,Clé supprimée: HKLM\Software\Classes\ToolBand.SkypeIEHelper.1
0,Clé supprimée: HKLM\Software\Classes\Toolband.TBToolband
0,Clé supprimée: HKLM\Software\Classes\Toolband.TBToolband.1
0,Clé supprimée: HKLM\Software\Classes\Toolband.UserOptions
0,Clé supprimée: HKLM\Software\Classes\Toolband.UserOptions.1
0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2504091
0,Clé supprimée: HKLM\Software\Conduit
0,Clé supprimée: HKLM\Software\Viewpoint
0,Clé supprimée: HKLM\Software\AppDataLow\AskBarDis
0,Clé supprimée: HKCU\Software\Conduit
0,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search

============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 1
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 4 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 27/07/2010 (726 Octet(s))

Fin à: 10:09:29, 27/07/2010

============== E.O.F ==============

Hello

▶---> Télécharge ToolsCleaner2sur ton Bureau.
* Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur ToolsCleaner2.exe pour le lancer.
* Clique sur Recherche et laisse le scan agir.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options Facultatives.
* Clique sur Quitter pour obtenir le rapport.
* Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
___________________________________________________

▶ Tu peux supprimer ToolCleaner
___________________________________________________

ensuite refais un scan OTL stp