Mon ordi est assailli de pub

Résolu
Bonjour à toutes et à tous,

Cela fait un moment que j'ai sollicité l'aide de ce forum en ce qui concerne ce raport ci-dessous, mais malheureuresement je n'ai pas encore reçu des réponses. Veuillez m'aider s'ils vous plait, mon ordi est assailli de pub intempésptive et qu'il est devenu trés lourd.

Merci d'avance pour votre aide.

Logfile of HijackThis v1.99.1
Scan saved at 18:08:26, on 31/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\Seemi\LOCALS~1\Temp\Répertoire temporaire 2 pour hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60107
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ONE MEMO PURE PLAN] C:\Documents and Settings\All Users\Application Data\BlueKindOneMemo\bonebend.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
O4 - Global Startup: E-Compagnon.lnk = C:\Program Files\ColiPoste\e-COMO\e-COMO.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?e766757d3726471688d1b0886357a388
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?e766757d3726471688d1b0886357a388
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061023/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
Configuration: Windows XP
Internet Explorer 7.0

9 réponses

  1. Bonjour,

    Peux tu me définir ton anti-virus et ton pare-feu ??

    On va començer avec ce log pour les pubs

    Télécharge Blacklight(de F-Secure) a l’une des 2 adresses :
    https://www.f-secure.com/en
    https://www.f-secure.com/en

    et sauvegarde le sur ton Bureau.

    Double-clique blbeta.exeet accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next

    Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

    Copie/colle le rapport

    Bon courage

    A++

    0
    1. Merci Marie,

      L'anti-virus est AVGfree edition, et le pare-feu est Windows.

      les deux fichiers sont:

      rebonjour#2007 01 15%2015%3A48%3A5701/15/07 16:19:49 [Info]: BlackLight Engine 1.0.55 initialized
      01/15/07 16:19:49 [Info]: OS: 5.1 build 2600 (Service Pack 2)
      01/15/07 16:19:49 [Note]: 7019 4
      01/15/07 16:19:49 [Note]: 7005 0
      01/15/07 16:19:49 [Note]: 7006 0
      01/15/07 16:20:02 [Note]: 7011 1976
      01/15/07 16:20:02 [Note]: 8001 2
      01/15/07 16:20:06 [Note]: FSRAW library version 1.7.1021

      01/15/07 16:17:34 [Info]: BlackLight Engine 1.0.55 initialized
      01/15/07 16:17:34 [Info]: OS: 5.1 build 2600 (Service Pack 2)
      01/15/07 16:17:35 [Note]: 7019 4
      01/15/07 16:17:35 [Note]: 7005 0
      01/15/07 16:17:35 [Note]: 7006 0
      01/15/07 16:17:36 [Note]: 7011 1976
      01/15/07 16:17:36 [Note]: 7026 0
      01/15/07 16:17:36 [Note]: 7026 0
      01/15/07 16:17:48 [Note]: FSRAW library version 1.7.1021
      01/15/07 16:20:02 [Note]: 7007 0
      0
      1. Ok

        Faut installer un pare-feu.
        Le pare-feu windows n'est pas efficace
        Faut trouver un pare-feu qui s'associe avec ton anti-viru

        Ensuite

        C:\DOCUME~1\Seemi\LOCALS~1\Temp\Répertoire temporaire 2 pour hijackthis.zip\HijackThis.exe
        Il est mal placé, faudra le refaire aussi.

        Fait le nettoyage qui suit

        Télécharge (sauf si tu les as) et colle les 3 rapports dans l’ordre

        A - ad-aware version 1.06
        (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
        voir demo
        http://pageperso.aol.fr/balltrap34/adwseflash.zip

        B - spybot version 1.4
        (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
        voir demo d utilisation
        http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

        C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
        Télécharge ici :
        https://www.ccleaner.com/ccleaner/download
        Tutorial ici:
        https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
        et
        http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

        D – Ewido – AVG
        AVG Anti-Spyware :
        https://www.avg.com/en-ww/free-antivirus-download
        Tu l'installes.
        Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente!

        Lance AVG Anti-Spyware
        Clique sur le bouton Analyse (de la barre d'outils)
        Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
        Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
        /!\ Si un fichier est infecté en fin d'analyse /!\
        choisis l'option " Appliquer toutes les actions " en bas.
        Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
        Enregistre ce fichier texte sur ton bureau.
        Copie/colle le rapport

        E - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)
        https://assiste.com/404_La_page_demandee_n_existe_pas.php
        http://www.bitdefender.fr/scan8/ie.html
        TUTO
        http://pageperso.aol.fr/rginformatique/mapage/defender.htm
        Copie/COLLE le rapport entier

        F - Hijackthis - Outil de diagnostic et réparation
        lire démo
        http://pageperso.aol.fr/balltrap34/Hijenr.gif
        http://pageperso.aol.fr/balltrap34/demohijack.htm
        Télécharge version française ici
        http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
        Copie/colle le rapport

        Bon courage

        A++
        0
        1. Bonsoir Marie,

          Je n'ai pas encore trouvé un autre pare-feu pour changer celui de pas éfficace de Windows.

          Concernant les différents rapports, je pense ,aprés avoir passé toute la journée sur les analyses, que je me perds!

          En éffet, j'ai suivé la procédure comme tu me l'as clairement éxpliqué, mais franchement, je suis.

          Pour Adware.
          *** Installation Started 01/15/2007 16:58 ***
          Title: Ad-Aware SE Personal
          Source: C:\Documents and Settings\Seemi\Bureau\aawsepersonal.exe
          Display Text: Uninstall complete.
          Made Dir: C:\Program Files\Lavasoft
          Made Dir: C:\Program Files\Lavasoft\Ad-Aware SE Personal
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\UNWISE.EXE
          RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
          RegDB Val: Ad-Aware SE Personal
          RegDB Name: DisplayName
          RegDB Root: 2
          RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
          RegDB Val: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
          RegDB Name: UninstallString
          RegDB Root: 2
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\alert.wav
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref
          Made Dir: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask
          Made Dir: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Plugins
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\license.txt
          Made Dir: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Lang
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Lang\default.awl
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\manual.chm
          File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\unregaaw.exe
          Shell Link: C:\Documents and Settings\All Users\Bureau\Ad-Aware SE Personal.lnk
          Made Dir: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Lavasoft Ad-Aware SE Personal
          Shell Link: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Lavasoft Ad-Aware SE Personal\Ad-Aware SE Personal.lnk
          Shell Link: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Lavasoft Ad-Aware SE Personal\Ad-Aware SE Manual.lnk
          Shell Link: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Lavasoft Ad-Aware SE Personal\Uninstall Ad-Aware SE Personal.lnk
          Shell Link: C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Aware SE Personal.lnk
          Shell Link: C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Aware SE Personal.lnk
          File Tree: C:\Documents and Settings\Seemi\Application Data\Lavasoft\Ad-Aware
          RegDB TREE: SOFTWARE\Lavasoft\Ad-Aware SE
          RegDB Root: 1
          RegDB TREE: SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Ad-Aware
          RegDB Root: 2
          RegDB TREE: SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Ad-Watch
          RegDB Root: 2
          RegDB TREE: SOFTWARE\Classes\Drive\shell\Scan with Ad-Aware
          RegDB Root: 1
          RegDB TREE: SOFTWARE\Classes\Directory\shell\Scan with Ad-Aware
          RegDB Root: 1
          RegDB TREE: SYSTEM\CurrentControlSet\Services\Eventlog\Application\Adwatch
          RegDB Root: 1
          File Tree: C:\Documents and Settings\Seemi\Application Data\Lavasoft\Ad-Aware
          File Tree: C:\PROGRA~1\Lavasoft\AD-AWA~1
          Execute Program: C:\PROGRA~1\Lavasoft\AD-AWA~1\unregaaw.exe
          RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
          RegDB Val: https://www.adaware.com/
          RegDB Name: HelpLink
          RegDB Root: 2
          RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
          RegDB Val: Lavasoft
          RegDB Name: Publisher
          RegDB Root: 2
          RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
          RegDB Val: C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Aware.exe,-0
          RegDB Name: DisplayIcon
          RegDB Root: 2
          RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
          RegDB Val: https://www.adaware.com/
          RegDB Name: URLInfoAbout
          RegDB Root: 2
          RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
          RegDB Val: 1.06
          RegDB Name: DisplayVersion
          RegDB Root: 2
          User Rights: Admin

          Pour Spybot:

          Pour Ccleaner:

          v1.36.430
          - Fixed bug with Hotfix and logfile cleaning.
          - Added Office 2007 cleaning.
          - Minor tweaks and optimizations.

          v1.35.424
          - Fixed IE7 Autocomplete form data cleaning.
          - Updated Vista detection routines.
          - Added code signing to program executable.
          - Fixed bug in Temporary folder detection.
          - Fixed some IE7 cookie handling issues.
          - Added additional error checking to folder routines.
          - Added Paint Shop Pro XI cleaning.
          - Updated French translation.
          - Minor display fixes.

          --------------------------------------------
          www.ccleaner.com

          Pour AVG:
          AVG Anti-Spyware - Rapport d'analyse
          ---------------------------------------------------------

          + Créé à: 19:14:17 15/01/2007

          + Résultat de l'analyse:

          C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP388\A0056773.dll -> Adware.Minibug : Nettoyé et sauvegardé (mise en quarantaine).
          C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP388\A0056775.exe -> Dropper.DollarR.b : Nettoyé et sauvegardé (mise en quarantaine).
          C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP388\A0056774.exe -> Dropper.Small : Nettoyé et sauvegardé (mise en quarantaine).

          Fin du rapport

          Pour Bitdeffender:

          #
          # An unexpected error has been detected by HotSpot Virtual Machine:
          #
          # EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x7c9110f3, pid=2192, tid=2884
          #
          # Java VM: Java HotSpot(TM) Client VM (1.5.0_06-b05 mixed mode, sharing)
          # Problematic frame:
          # C [ntdll.dll+0x10f3]
          #

          --------------- T H R E A D ---------------

          Current thread (0x003377a0): JavaThread "AWT-EventQueue-17" [_thread_in_native, id=2884]

          siginfo: ExceptionCode=0xc0000005, writing address 0x0b7ecf74

          Registers:
          EAX=0x00000000, EBX=0x2b3462c8, ECX=0x0484f6b4, EDX=0x0b7ecf6c
          ESP=0x0484f6c4, EBP=0x0484f6fc, ESI=0x0b7ecf58, EDI=0x0b7ecf6c
          EIP=0x7c9110f3, EFLAGS=0x00010246

          Top of Stack: (sp=0x0484f6c4)
          0x0484f6c4: 6d0d7ce2 0b7ecf6c 003377a0 00337860
          0x0484f6d4: 6d0c80a3 003377a0 2aaf1ec0 2b3462c8
          0x0484f6e4: 21a60ab8 00000000 0484f6d8 0484fbe4
          0x0484f6f4: 6d0f34d0 00000000 0484f730 081e899c
          0x0484f704: 00337860 0484f740 00000011 21a60ab8
          0x0484f714: 0484f70c 00000000 0484f740 2b347238
          0x0484f724: 00000000 2b3462c8 0484f740 0484f760
          0x0484f734: 081e2923 00000000 081e6449 21a60ab8

          Instructions: (pc=0x7c9110f3)
          0x7c9110e3: 24 00 00 00 00 90 90 90 90 90 8b 54 24 04 33 c0
          0x7c9110f3: ff 4a 08 75 26 89 42 0c f0 ff 4a 04 7d 03 c2 04

          Stack: [0x04750000,0x04850000), sp=0x0484f6c4, free space=1021k
          Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
          C [ntdll.dll+0x10f3]
          j sun.awt.windows.WComponentPeer._dispose()V+0
          j sun.awt.windows.WComponentPeer.disposeImpl()V+23
          j sun.awt.windows.WObjectPeer.dispose()V+42
          j java.awt.Component.removeNotify()V+211
          j java.awt.Container.removeNotify()V+67
          j java.awt.Container.removeAll()V+82
          j sun.plugin.viewer.frame.IExplorerEmbeddedFrame.windowClosing(Ljava/awt/event/WindowEvent;)V+18
          j java.awt.Window.processWindowEvent(Ljava/awt/event/WindowEvent;)V+68
          j java.awt.Window.processEvent(Ljava/awt/AWTEvent;)V+69
          j java.awt.Component.dispatchEventImpl(Ljava/awt/AWTEvent;)V+477
          j java.awt.Container.dispatchEventImpl(Ljava/awt/AWTEvent;)V+42
          j java.awt.Window.dispatchEventImpl(Ljava/awt/AWTEvent;)V+19
          j java.awt.Component.dispatchEvent(Ljava/awt/AWTEvent;)V+2
          j java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V+46
          j java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z+233
          J java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V
          v ~RuntimeStub::alignment_frame_return Runtime1 stub
          j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
          j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
          j java.awt.EventDispatchThread.run()V+9
          v ~StubRoutines::call_stub
          V [jvm.dll+0x845a9]
          V [jvm.dll+0xd9317]
          V [jvm.dll+0x8447a]
          V [jvm.dll+0x841d7]
          V [jvm.dll+0x9ed69]
          V [jvm.dll+0x109fe3]
          V [jvm.dll+0x109fb1]
          C [msvcrt.dll+0x2a3b0]
          C [kernel32.dll+0xb50b]

          Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
          j sun.awt.windows.WComponentPeer._dispose()V+0
          j sun.awt.windows.WComponentPeer.disposeImpl()V+23
          j sun.awt.windows.WObjectPeer.dispose()V+42
          j java.awt.Component.removeNotify()V+211
          j java.awt.Container.removeNotify()V+67
          j java.awt.Container.removeAll()V+82
          j sun.plugin.viewer.frame.IExplorerEmbeddedFrame.windowClosing(Ljava/awt/event/WindowEvent;)V+18
          j java.awt.Window.processWindowEvent(Ljava/awt/event/WindowEvent;)V+68
          j java.awt.Window.processEvent(Ljava/awt/AWTEvent;)V+69
          j java.awt.Component.dispatchEventImpl(Ljava/awt/AWTEvent;)V+477
          j java.awt.Container.dispatchEventImpl(Ljava/awt/AWTEvent;)V+42
          j java.awt.Window.dispatchEventImpl(Ljava/awt/AWTEvent;)V+19
          j java.awt.Component.dispatchEvent(Ljava/awt/AWTEvent;)V+2
          j java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V+46
          j java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z+233
          J java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V
          v ~RuntimeStub::alignment_frame_return Runtime1 stub
          j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
          j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
          j java.awt.EventDispatchThread.run()V+9
          v ~StubRoutines::call_stub

          --------------- P R O C E S S ---------------

          Java Threads: ( => current thread )
          0x074352b8 JavaThread "Thread-133" [_thread_blocked, id=3996]
          0x07558a38 JavaThread "Keep-Alive-Timer" daemon [_thread_blocked, id=2492]
          0x075db3f0 JavaThread "Thread-125" [_thread_in_native, id=2864]
          =>0x003377a0 JavaThread "AWT-EventQueue-17" [_thread_in_native, id=2884]
          0x0b7aac20 JavaThread "thread applet-ChatApplet.class" [_thread_blocked, id=3376]
          0x04257a48 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=3288]
          0x0b710448 JavaThread "AWT-Shutdown" [_thread_blocked, id=3688]
          0x075447f8 JavaThread "Java Sound Event Dispatcher" daemon [_thread_blocked, id=2568]
          0x075b3008 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=2472]
          0x075a7e70 JavaThread "AWT-Windows" daemon [_thread_in_native, id=2224]
          0x07582e60 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=228]
          0x07530100 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=3948]
          0x07531bd8 JavaThread "CompilerThread0" daemon [_thread_blocked, id=2828]
          0x07530fa0 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3676]
          0x07490248 JavaThread "Finalizer" daemon [_thread_blocked, id=2356]
          0x07490a10 JavaThread "Reference Handler" daemon [_thread_blocked, id=272]
          0x07454a20 JavaThread "main" [_thread_in_native, id=488]

          Other Threads:
          0x0742e540 VMThread [id=1220]
          0x0742e5e8 WatcherThread [id=592]

          VM state:not at safepoint (normal execution)

          VM Mutex/Monitor currently owned by a thread: None

          Heap
          def new generation total 1280K, used 975K [0x20a70000, 0x20bd0000, 0x211d0000)
          eden space 1152K, 83% used [0x20a70000, 0x20b61dd8, 0x20b90000)
          from space 128K, 5% used [0x20bb0000, 0x20bb1e60, 0x20bd0000)
          to space 128K, 0% used [0x20b90000, 0x20b90000, 0x20bb0000)
          tenured generation total 15656K, used 11883K [0x211d0000, 0x2211a000, 0x26a70000)
          the space 15656K, 75% used [0x211d0000, 0x21d6afa0, 0x21d6b000, 0x2211a000)
          compacting perm gen total 8192K, used 2218K [0x26a70000, 0x27270000, 0x2aa70000)
          the space 8192K, 27% used [0x26a70000, 0x26c9a8a0, 0x26c9aa00, 0x27270000)
          ro space 8192K, 63% used [0x2aa70000, 0x2af7b178, 0x2af7b200, 0x2b270000)
          rw space 12288K, 46% used [0x2b270000, 0x2b809fa8, 0x2b80a000, 0x2be70000)

          Dynamic libraries:
          0x00400000 - 0x00419000 C:\Program Files\Internet Explorer\iexplore.exe
          0x7c910000 - 0x7c9c7000 C:\WINDOWS\system32\ntdll.dll
          0x7c800000 - 0x7c904000 C:\WINDOWS\system32\kernel32.dll
          0x77be0000 - 0x77c38000 C:\WINDOWS\system32\msvcrt.dll
          0x77d10000 - 0x77da0000 C:\WINDOWS\system32\USER32.dll
          0x77ef0000 - 0x77f37000 C:\WINDOWS\system32\GDI32.dll
          0x77f40000 - 0x77fb6000 C:\WINDOWS\system32\SHLWAPI.dll
          0x77da0000 - 0x77e4c000 C:\WINDOWS\system32\ADVAPI32.dll
          0x77e50000 - 0x77ee1000 C:\WINDOWS\system32\RPCRT4.dll
          0x77720000 - 0x7788c000 C:\WINDOWS\system32\SHDOCVW.dll
          0x779e0000 - 0x77a76000 C:\WINDOWS\system32\CRYPT32.dll
          0x77a80000 - 0x77a92000 C:\WINDOWS\system32\MSASN1.dll
          0x76610000 - 0x76694000 C:\WINDOWS\system32\CRYPTUI.dll
          0x76be0000 - 0x76c0e000 C:\WINDOWS\system32\WINTRUST.dll
          0x76c40000 - 0x76c68000 C:\WINDOWS\system32\IMAGEHLP.dll
          0x770e0000 - 0x7716c000 C:\WINDOWS\system32\OLEAUT32.dll
          0x774a0000 - 0x775dd000 C:\WINDOWS\system32\ole32.dll
          0x6fee0000 - 0x6ff34000 C:\WINDOWS\system32\NETAPI32.dll
          0x77aa0000 - 0x77b47000 C:\WINDOWS\system32\WININET.dll
          0x76f10000 - 0x76f3d000 C:\WINDOWS\system32\WLDAP32.dll
          0x77bd0000 - 0x77bd8000 C:\WINDOWS\system32\VERSION.dll
          0x77390000 - 0x77492000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
          0x7c9d0000 - 0x7d1f3000 C:\WINDOWS\system32\SHELL32.dll
          0x58b50000 - 0x58be7000 C:\WINDOWS\system32\comctl32.dll
          0x5b090000 - 0x5b0c8000 C:\WINDOWS\system32\uxtheme.dll
          0x63000000 - 0x63014000 C:\WINDOWS\system32\SynTPFcs.dll
          0x74690000 - 0x746db000 C:\WINDOWS\system32\MSCTF.dll
          0x10000000 - 0x10008000 C:\WINDOWS\system32\TWVMHK.DLL
          0x76010000 - 0x76075000 C:\WINDOWS\system32\MSVCP60.dll
          0x75f10000 - 0x7600d000 C:\WINDOWS\system32\BROWSEUI.dll
          0x20000000 - 0x20013000 C:\WINDOWS\system32\browselc.dll
          0x77b50000 - 0x77b72000 C:\WINDOWS\system32\appHelp.dll
          0x76f80000 - 0x76fff000 C:\WINDOWS\system32\CLBCATQ.DLL
          0x77000000 - 0x770d4000 C:\WINDOWS\system32\COMRes.dll
          0x77170000 - 0x7720e000 C:\WINDOWS\system32\urlmon.dll
          0x77fc0000 - 0x77fd1000 C:\WINDOWS\system32\Secur32.dll
          0x778e0000 - 0x779d8000 C:\WINDOWS\system32\SETUPAPI.dll
          0x01cf0000 - 0x01e1d000 c:\program files\google\googletoolbar1.dll
          0x71a10000 - 0x71a1a000 C:\WINDOWS\system32\WSOCK32.dll
          0x719f0000 - 0x71a07000 C:\WINDOWS\system32\WS2_32.dll
          0x719e0000 - 0x719e8000 C:\WINDOWS\system32\WS2HELP.dll
          0x76ae0000 - 0x76b0f000 C:\WINDOWS\system32\WINMM.dll
          0x76310000 - 0x76315000 C:\WINDOWS\system32\MSIMG32.dll
          0x5d3f0000 - 0x5d491000 C:\WINDOWS\system32\DBGHELP.DLL
          0x76e90000 - 0x76ecc000 C:\WINDOWS\system32\RASAPI32.DLL
          0x76e40000 - 0x76e52000 C:\WINDOWS\system32\rasman.dll
          0x76e60000 - 0x76e8f000 C:\WINDOWS\system32\TAPI32.dll
          0x76e30000 - 0x76e3e000 C:\WINDOWS\system32\rtutils.dll
          0x77c40000 - 0x77c63000 C:\WINDOWS\system32\msv1_0.dll
          0x76d10000 - 0x76d29000 C:\WINDOWS\system32\iphlpapi.dll
          0x72220000 - 0x72225000 C:\WINDOWS\system32\sensapi.dll
          0x76960000 - 0x76a15000 C:\WINDOWS\system32\USERENV.dll
          0x0ffd0000 - 0x0fff8000 C:\WINDOWS\system32\rsaenh.dll
          0x76930000 - 0x76956000 C:\WINDOWS\system32\ntshrui.dll
          0x76ac0000 - 0x76ad1000 C:\WINDOWS\system32\ATL.DLL
          0x71a60000 - 0x71a72000 C:\WINDOWS\system32\MPR.dll
          0x75ef0000 - 0x75ef7000 C:\WINDOWS\System32\drprov.dll
          0x71b70000 - 0x71b7e000 C:\WINDOWS\System32\ntlanman.dll
          0x71c30000 - 0x71c47000 C:\WINDOWS\System32\NETUI0.dll
          0x71bf0000 - 0x71c30000 C:\WINDOWS\System32\NETUI1.dll
          0x71be0000 - 0x71be7000 C:\WINDOWS\System32\NETRAP.dll
          0x71b50000 - 0x71b63000 C:\WINDOWS\System32\SAMLIB.dll
          0x75f00000 - 0x75f09000 C:\WINDOWS\System32\davclnt.dll
          0x02080000 - 0x0212d000 C:\PROGRA~1\Crawler\ctbr.dll
          0x76340000 - 0x7638a000 C:\WINDOWS\system32\comdlg32.dll
          0x01e40000 - 0x01e4e000 C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
          0x02490000 - 0x0276a000 C:\WINDOWS\system32\xpsp2res.dll
          0x02970000 - 0x02c36000 C:\WINDOWS\system32\msi.dll
          0x77210000 - 0x772c1000 C:\WINDOWS\system32\SXS.DLL
          0x01ed0000 - 0x01ede000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          0x7c340000 - 0x7c396000 C:\WINDOWS\system32\MSVCR71.dll
          0x01ef0000 - 0x01f37000 C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
          0x7d4c0000 - 0x7d7a6000 C:\WINDOWS\system32\Mshtml.dll
          0x74630000 - 0x74657000 C:\WINDOWS\system32\msls31.dll
          0x032d0000 - 0x032ee000 C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
          0x03300000 - 0x0331c000 C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
          0x77650000 - 0x77671000 C:\WINDOWS\system32\NTMARTA.DLL
          0x03360000 - 0x0337f000 C:\WINDOWS\system32\dla\tfswshx.dll
          0x03380000 - 0x0338f000 C:\WINDOWS\system32\tfswapi.dll
          0x03390000 - 0x0342b000 C:\WINDOWS\system32\dla\tfswcres.dll
          0x6d600000 - 0x6d62d000 C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          0x5f140000 - 0x5f157000 C:\WINDOWS\system32\OLEPRO32.DLL
          0x03470000 - 0x034c4000 C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
          0x72f50000 - 0x72f76000 C:\WINDOWS\system32\WINSPOOL.DRV
          0x03710000 - 0x0379e000 C:\WINDOWS\system32\shdoclc.dll
          0x75d30000 - 0x75dc1000 C:\WINDOWS\system32\mlang.dll
          0x71990000 - 0x719d0000 C:\WINDOWS\system32\mswsock.dll
          0x62e40000 - 0x62e99000 C:\WINDOWS\system32\hnetcfg.dll
          0x719d0000 - 0x719d8000 C:\WINDOWS\System32\wshtcpip.dll
          0x037b0000 - 0x037ba000 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll
          0x037c0000 - 0x037d9000 c:\progra~1\mcafee.com\vso\McVSSkt.dll
          0x76ed0000 - 0x76ef7000 C:\WINDOWS\system32\DNSAPI.dll
          0x76f70000 - 0x76f76000 C:\WINDOWS\system32\rasadhlp.dll
          0x76320000 - 0x7633d000 C:\WINDOWS\system32\IMM32.DLL
          0x325c0000 - 0x325d2000 C:\Program Files\Microsoft Office\OFFICE11\msohev.dll
          0x75be0000 - 0x75c4e000 C:\WINDOWS\system32\jscript.dll
          0x73250000 - 0x732b7000 C:\WINDOWS\system32\vbscript.dll
          0x73d20000 - 0x73e1e000 C:\WINDOWS\system32\MFC42.DLL
          0x61d70000 - 0x61d7e000 C:\WINDOWS\system32\MFC42LOC.DLL
          0x72c70000 - 0x72c79000 C:\WINDOWS\system32\wdmaud.drv
          0x72c60000 - 0x72c68000 C:\WINDOWS\system32\msacm32.drv
          0x77bb0000 - 0x77bc5000 C:\WINDOWS\system32\MSACM32.dll
          0x77ba0000 - 0x77ba7000 C:\WINDOWS\system32\midimap.dll
          0x6d8f0000 - 0x6d8fa000 C:\WINDOWS\system32\ddrawex.dll
          0x736b0000 - 0x736f9000 C:\WINDOWS\system32\DDRAW.dll
          0x73b10000 - 0x73b16000 C:\WINDOWS\system32\DCIMAN32.dll
          0x761c0000 - 0x76231000 C:\WINDOWS\system32\mshtmled.dll
          0x71ca0000 - 0x71cbc000 C:\WINDOWS\system32\actxprxy.dll
          0x08190000 - 0x081a2000 C:\Program Files\Dell\QuickSet\dadkeyb.dll
          0x6d590000 - 0x6d5a2000 C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
          0x6d400000 - 0x6d417000 C:\Program Files\Java\jre1.5.0_06\bin\jpiexp32.dll
          0x76f60000 - 0x76f68000 C:\WINDOWS\System32\winrnr.dll
          0x6d450000 - 0x6d468000 C:\Program Files\Java\jre1.5.0_06\bin\jpishare.dll
          0x6d670000 - 0x6d804000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\client\jvm.dll
          0x6d280000 - 0x6d288000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\hpi.dll
          0x76ba0000 - 0x76bab000 C:\WINDOWS\system32\PSAPI.DLL
          0x6d640000 - 0x6d64c000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\verify.dll
          0x6d300000 - 0x6d31d000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\java.dll
          0x6d660000 - 0x6d66f000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\zip.dll
          0x6d000000 - 0x6d167000 C:\Program Files\Java\jre1.5.0_06\bin\awt.dll
          0x73890000 - 0x73960000 C:\WINDOWS\system32\D3DIM700.DLL
          0x6d240000 - 0x6d27d000 C:\Program Files\Java\jre1.5.0_06\bin\fontmanager.dll
          0x6d1f0000 - 0x6d203000 C:\Program Files\Java\jre1.5.0_06\bin\deploy.dll
          0x6d5d0000 - 0x6d5ef000 C:\Program Files\Java\jre1.5.0_06\bin\RegUtils.dll
          0x6d3e0000 - 0x6d3f5000 C:\Program Files\Java\jre1.5.0_06\bin\jpicom32.dll
          0x6d4c0000 - 0x6d4d3000 C:\Program Files\Java\jre1.5.0_06\bin\net.dll
          0x6d1c0000 - 0x6d1e3000 C:\Program Files\Java\jre1.5.0_06\bin\dcpr.dll
          0x6d4e0000 - 0x6d4e9000 C:\Program Files\Java\jre1.5.0_06\bin\nio.dll

          VM Arguments:
          jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~2.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol vfprintf
          java_command: <unknown>
          Launcher Type: generic

          Environment Variables:
          PATH=C:\PROGRA~1\Java\JRE15~2.0_0\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;.
          USERNAME=Seemi
          OS=Windows_NT
          PROCESSOR_IDENTIFIER=x86 Family 6 Model 13 Stepping 6, GenuineIntel

          --------------- S Y S T E M ---------------

          OS: Windows XP Build 2600 Service Pack 2

          CPU:total 1 family 6, cmov, cx8, fxsr, mmx, sse, sse2

          Memory: 4k page, physical 515452k(229432k free), swap 1259452k(814520k free)

          vm_info: Java HotSpot(TM) Client VM (1.5.0_06-b05) for windows-x86, built on Nov 10 2005 11:12:14 by "java_re" with MS VC++ 6.0

          #
          # An unexpected error has been detected by HotSpot Virtual Machine:
          #
          # EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x7c9110f3, pid=300, tid=3852
          #
          # Java VM: Java HotSpot(TM) Client VM (1.5.0_06-b05 mixed mode)
          # Problematic frame:
          # C [ntdll.dll+0x10f3]
          #

          --------------- T H R E A D ---------------

          Current thread (0x0a12e308): JavaThread "thread applet-EIRC" [_thread_in_native, id=3852]

          siginfo: ExceptionCode=0xc0000005, writing address 0x0a019bcc

          Registers:
          EAX=0x00000000, EBX=0x161ac7a0, ECX=0x0a56f670, EDX=0x0a019bc4
          ESP=0x0a56f680, EBP=0x0a56f6b8, ESI=0x0a019bb0, EDI=0x0a019bc4
          EIP=0x7c9110f3, EFLAGS=0x00010246

          Top of Stack: (sp=0x0a56f680)
          0x0a56f680: 6d0d7ce2 0a019bc4 0a12e308 0a12e3c8
          0x0a56f690: 6d0c80a3 0a12e308 161ac7a0 161ac7a0
          0x0a56f6a0: 11878bd0 00000000 0a56f694 0a56fae4
          0x0a56f6b0: 6d0f34d0 00000000 0a56f6ec 06e8899c
          0x0a56f6c0: 0a12e3c8 0a56f6fc 00000001 11878bd0
          0x0a56f6d0: 0a56f6c8 00000000 0a56f6fc 161aee98
          0x0a56f6e0: 00000000 161ac7a0 0a56f6fc 0a56f71c
          0x0a56f6f0: 06e82923 00000000 06e86449 11878bd0

          Instructions: (pc=0x7c9110f3)
          0x7c9110e3: 24 00 00 00 00 90 90 90 90 90 8b 54 24 04 33 c0
          0x7c9110f3: ff 4a 08 75 26 89 42 0c f0 ff 4a 04 7d 03 c2 04

          Stack: [0x0a470000,0x0a570000), sp=0x0a56f680, free space=1021k
          Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
          C [ntdll.dll+0x10f3]
          j sun.awt.windows.WComponentPeer._dispose()V+0
          j sun.awt.windows.WComponentPeer.disposeImpl()V+23
          j sun.awt.windows.WObjectPeer.dispose()V+42
          j java.awt.Component.removeNotify()V+211
          j java.awt.Container.removeNotify()V+67
          j java.awt.Container.removeNotify()V+38
          j java.awt.Container.remove(I)V+43
          j java.awt.Container.remove(Ljava/awt/Component;)V+45
          j c.if(Ljava/lang/String;)V+46
          j EIRC.a(Lb/a/a/e/a/a;)V+15
          j b.a.a.e.f.a()V+22
          j b.a.a.e.f.int()V+14
          j EIRC.stop()V+26
          j sun.applet.AppletPanel.run()V+447
          j java.lang.Thread.run()V+11
          v ~StubRoutines::call_stub
          V [jvm.dll+0x845a9]
          V [jvm.dll+0xd9317]
          V [jvm.dll+0x8447a]
          V [jvm.dll+0x841d7]
          V [jvm.dll+0x9ed69]
          V [jvm.dll+0x109fe3]
          V [jvm.dll+0x109fb1]
          C [msvcrt.dll+0x2a3b0]
          C [kernel32.dll+0xb50b]

          Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
          j sun.awt.windows.WComponentPeer._dispose()V+0
          j sun.awt.windows.WComponentPeer.disposeImpl()V+23
          j sun.awt.windows.WObjectPeer.dispose()V+42
          j java.awt.Component.removeNotify()V+211
          j java.awt.Container.removeNotify()V+67
          j java.awt.Container.removeNotify()V+38
          j java.awt.Container.remove(I)V+43
          j java.awt.Container.remove(Ljava/awt/Component;)V+45
          j c.if(Ljava/lang/String;)V+46
          j EIRC.a(Lb/a/a/e/a/a;)V+15
          j b.a.a.e.f.a()V+22
          j b.a.a.e.f.int()V+14
          j EIRC.stop()V+26
          j sun.applet.AppletPanel.run()V+447
          j java.lang.Thread.run()V+11
          v ~StubRoutines::call_stub

          --------------- P R O C E S S ---------------

          Java Threads: ( => current thread )
          0x0b3d08a8 JavaThread "Thread-21" [_thread_blocked, id=2452]
          0x0552cbb8 JavaThread "Thread-9" [_thread_in_native, id=3008]
          0x05679de8 JavaThread "Image Animator 0" daemon [_thread_blocked, id=3288]
          0x04aea9f0 JavaThread "Java Sound Event Dispatcher" daemon [_thread_blocked, id=1220]
          0x056446a8 JavaThread "AWT-EventQueue-2" [_thread_blocked, id=3144]
          =>0x0a12e308 JavaThread "thread applet-EIRC" [_thread_in_native, id=3852]
          0x05577288 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=1240]
          0x05597c78 JavaThread "AWT-Shutdown" [_thread_blocked, id=456]
          0x055804f0 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3752]
          0x055776a8 JavaThread "AWT-Windows" daemon [_thread_in_native, id=220]
          0x055717f8 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=188]
          0x04a3f9c8 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=1884]
          0x04a63620 JavaThread "CompilerThread0" daemon [_thread_blocked, id=3304]
          0x04aa27c0 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3256]
          0x05520e18 JavaThread "Finalizer" daemon [_thread_blocked, id=2692]
          0x04a39198 JavaThread "Reference Handler" daemon [_thread_blocked, id=4088]
          0x04a2c538 JavaThread "main" [_thread_blocked, id=916]

          Other Threads:
          0x04a18d48 VMThread [id=3528]
          0x04a47ba8 WatcherThread [id=2632]

          VM state:not at safepoint (normal execution)

          VM Mutex/Monitor currently owned by a thread: None

          Heap
          def new generation total 3136K, used 1288K [0x10010000, 0x10370000, 0x10770000)
          eden space 2816K, 40% used [0x10010000, 0x1012b018, 0x102d0000)
          from space 320K, 48% used [0x102d0000, 0x102f7060, 0x10320000)
          to space 320K, 0% used [0x10320000, 0x10320000, 0x10370000)
          tenured generation total 40372K, used 39492K [0x10770000, 0x12edd000, 0x16010000)
          the space 40372K, 97% used [0x10770000, 0x12e010f0, 0x12e01200, 0x12edd000)
          compacting perm gen total 8448K, used 8328K [0x16010000, 0x16850000, 0x1a010000)
          the space 8448K, 98% used [0x16010000, 0x16832218, 0x16832400, 0x16850000)
          No shared spaces configured.

          Dynamic libraries:
          0x00400000 - 0x00419000 C:\Program Files\Internet Explorer\iexplore.exe
          0x7c910000 - 0x7c9c7000 C:\WINDOWS\system32\ntdll.dll
          0x7c800000 - 0x7c904000 C:\WINDOWS\system32\kernel32.dll
          0x77be0000 - 0x77c38000 C:\WINDOWS\system32\msvcrt.dll
          0x77d10000 - 0x77da0000 C:\WINDOWS\system32\USER32.dll
          0x77ef0000 - 0x77f37000 C:\WINDOWS\system32\GDI32.dll
          0x77f40000 - 0x77fb6000 C:\WINDOWS\system32\SHLWAPI.dll
          0x77da0000 - 0x77e4c000 C:\WINDOWS\system32\ADVAPI32.dll
          0x77e50000 - 0x77ee1000 C:\WINDOWS\system32\RPCRT4.dll
          0x77720000 - 0x7788e000 C:\WINDOWS\system32\SHDOCVW.dll
          0x779e0000 - 0x77a76000 C:\WINDOWS\system32\CRYPT32.dll
          0x77a80000 - 0x77a92000 C:\WINDOWS\system32\MSASN1.dll
          0x76610000 - 0x76694000 C:\WINDOWS\system32\CRYPTUI.dll
          0x76be0000 - 0x76c0e000 C:\WINDOWS\system32\WINTRUST.dll
          0x76c40000 - 0x76c68000 C:\WINDOWS\system32\IMAGEHLP.dll
          0x770e0000 - 0x7716c000 C:\WINDOWS\system32\OLEAUT32.dll
          0x774a0000 - 0x775dd000 C:\WINDOWS\system32\ole32.dll
          0x6fee0000 - 0x6ff34000 C:\WINDOWS\system32\NETAPI32.dll
          0x77aa0000 - 0x77b47000 C:\WINDOWS\system32\WININET.dll
          0x76f10000 - 0x76f3d000 C:\WINDOWS\system32\WLDAP32.dll
          0x77bd0000 - 0x77bd8000 C:\WINDOWS\system32\VERSION.dll
          0x77390000 - 0x77492000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
          0x7c9d0000 - 0x7d1f3000 C:\WINDOWS\system32\SHELL32.dll
          0x58b50000 - 0x58be7000 C:\WINDOWS\system32\comctl32.dll
          0x5b090000 - 0x5b0c8000 C:\WINDOWS\system32\uxtheme.dll
          0x651b0000 - 0x651d2000 C:\PROGRA~1\FICHIE~1\SYMANT~1\ANTISPAM\ASOEHOOK.DLL
          0x7c340000 - 0x7c396000 C:\WINDOWS\system32\MSVCR71.dll
          0x6af90000 - 0x6afee000 C:\Program Files\Fichiers communs\Symantec Shared\ccL40.dll
          0x7c3a0000 - 0x7c41b000 C:\WINDOWS\system32\MSVCP71.dll
          0x63000000 - 0x63014000 C:\WINDOWS\system32\SynTPFcs.dll
          0x74690000 - 0x746db000 C:\WINDOWS\system32\MSCTF.dll
          0x10000000 - 0x10008000 C:\WINDOWS\system32\TWVMHK.DLL
          0x76010000 - 0x76075000 C:\WINDOWS\system32\MSVCP60.dll
          0x75f10000 - 0x7600d000 C:\WINDOWS\system32\BROWSEUI.dll
          0x20000000 - 0x20013000 C:\WINDOWS\system32\browselc.dll
          0x77b50000 - 0x77b72000 C:\WINDOWS\system32\appHelp.dll
          0x76f80000 - 0x76fff000 C:\WINDOWS\system32\CLBCATQ.DLL
          0x77000000 - 0x770d4000 C:\WINDOWS\system32\COMRes.dll
          0x77170000 - 0x7720e000 C:\WINDOWS\system32\urlmon.dll
          0x77fc0000 - 0x77fd1000 C:\WINDOWS\system32\Secur32.dll
          0x765b0000 - 0x76606000 C:\WINDOWS\System32\cscui.dll
          0x76590000 - 0x765ad000 C:\WINDOWS\System32\CSCDLL.dll
          0x778e0000 - 0x779d8000 C:\WINDOWS\system32\SETUPAPI.dll
          0x6a1f0000 - 0x6a212000 C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
          0x0ffd0000 - 0x0fff8000 C:\WINDOWS\system32\rsaenh.dll
          0x01ef0000 - 0x021ca000 C:\WINDOWS\system32\xpsp2res.dll
          0x76960000 - 0x76a15000 C:\WINDOWS\system32\userenv.dll
          0x023f0000 - 0x023fe000 C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
          0x02450000 - 0x02486000 C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL
          0x024d0000 - 0x024de000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          0x024e0000 - 0x02527000 C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
          0x76e90000 - 0x76ecc000 C:\WINDOWS\system32\RASAPI32.DLL
          0x76e40000 - 0x76e52000 C:\WINDOWS\system32\rasman.dll
          0x719f0000 - 0x71a07000 C:\WINDOWS\system32\WS2_32.dll
          0x719e0000 - 0x719e8000 C:\WINDOWS\system32\WS2HELP.dll
          0x76e60000 - 0x76e8f000 C:\WINDOWS\system32\TAPI32.dll
          0x76e30000 - 0x76e3e000 C:\WINDOWS\system32\rtutils.dll
          0x76ae0000 - 0x76b0f000 C:\WINDOWS\system32\WINMM.dll
          0x7d4c0000 - 0x7d7a6000 C:\WINDOWS\system32\Mshtml.dll
          0x74630000 - 0x74657000 C:\WINDOWS\system32\msls31.dll
          0x71a10000 - 0x71a1a000 C:\WINDOWS\system32\wsock32.dll
          0x77c40000 - 0x77c63000 C:\WINDOWS\system32\msv1_0.dll
          0x76d10000 - 0x76d29000 C:\WINDOWS\system32\iphlpapi.dll
          0x72220000 - 0x72225000 C:\WINDOWS\system32\sensapi.dll
          0x02c30000 - 0x02c4e000 C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
          0x77210000 - 0x772c1000 C:\WINDOWS\system32\SXS.DLL
          0x02c70000 - 0x02c8c000 C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
          0x02cd0000 - 0x02cea000 C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
          0x02d10000 - 0x02d2f000 C:\WINDOWS\system32\dla\tfswshx.dll
          0x02d30000 - 0x02d3f000 C:\WINDOWS\system32\tfswapi.dll
          0x02d40000 - 0x02ddb000 C:\WINDOWS\system32\dla\tfswcres.dll
          0x6d600000 - 0x6d62d000 C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          0x5f140000 - 0x5f157000 C:\WINDOWS\system32\OLEPRO32.DLL
          0x66f70000 - 0x66f8a000 C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
          0x6b350000 - 0x6b367000 C:\Program Files\Fichiers communs\Symantec Shared\ccVrTrst.dll
          0x67160000 - 0x67163400 C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\SHEXTRES.DLL
          0x02e20000 - 0x02f49000 c:\program files\google\googletoolbar2.dll
          0x76310000 - 0x76315000 C:\WINDOWS\system32\MSIMG32.dll
          0x02f70000 - 0x03002000 C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
          0x03030000 - 0x0306d000 C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\mtbres.dll
          0x748f0000 - 0x74a20000 C:\WINDOWS\system32\msxml3.dll
          0x4d5e0000 - 0x4d638000 C:\WINDOWS\system32\WINHTTP.dll
          0x75d30000 - 0x75dc1000 C:\WINDOWS\system32\mlang.dll
          0x03980000 - 0x039d4000 C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
          0x72f50000 - 0x72f76000 C:\WINDOWS\system32\WINSPOOL.DRV
          0x039e0000 - 0x03a6e000 C:\WINDOWS\system32\shdoclc.dll
          0x71990000 - 0x719d0000 C:\WINDOWS\system32\mswsock.dll
          0x62e40000 - 0x62e99000 C:\WINDOWS\system32\hnetcfg.dll
          0x719d0000 - 0x719d8000 C:\WINDOWS\System32\wshtcpip.dll
          0x03850000 - 0x0385a000 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll
          0x04070000 - 0x04336000 C:\WINDOWS\system32\msi.dll
          0x76ed0000 - 0x76ef7000 C:\WINDOWS\system32\DNSAPI.dll
          0x76f70000 - 0x76f76000 C:\WINDOWS\system32\rasadhlp.dll
          0x74660000 - 0x7468a000 C:\WINDOWS\system32\msimtf.dll
          0x76320000 - 0x7633d000 C:\WINDOWS\system32\IMM32.DLL
          0x325c0000 - 0x325d2000 C:\Program Files\Microsoft Office\OFFICE11\msohev.dll
          0x75be0000 - 0x75c4e000 C:\WINDOWS\system32\jscript.dll
          0x672b0000 - 0x672f0000 C:\WINDOWS\system32\iepeers.dll
          0x761c0000 - 0x76231000 C:\WINDOWS\system32\mshtmled.dll
          0x04f60000 - 0x04f72000 C:\Program Files\Dell\QuickSet\dadkeyb.dll
          0x72c70000 - 0x72c79000 C:\WINDOWS\system32\wdmaud.drv
          0x72c60000 - 0x72c68000 C:\WINDOWS\system32\msacm32.drv
          0x77bb0000 - 0x77bc5000 C:\WINDOWS\system32\MSACM32.dll
          0x77ba0000 - 0x77ba7000 C:\WINDOWS\system32\midimap.dll
          0x73250000 - 0x732b7000 C:\WINDOWS\system32\vbscript.dll
          0x73d20000 - 0x73e1e000 C:\WINDOWS\system32\MFC42.DLL
          0x61d70000 - 0x61d7e000 C:\WINDOWS\system32\MFC42LOC.DLL
          0x30000000 - 0x30222000 C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx
          0x76340000 - 0x7638a000 C:\WINDOWS\system32\comdlg32.dll
          0x69000000 - 0x6900e000 C:\WINDOWS\system32\Macromed\Common\SwSupport.dll
          0x6d8f0000 - 0x6d8fa000 C:\WINDOWS\system32\ddrawex.dll
          0x736b0000 - 0x736f9000 C:\WINDOWS\system32\DDRAW.dll
          0x73b10000 - 0x73b16000 C:\WINDOWS\system32\DCIMAN32.dll
          0x5e430000 - 0x5e43d000 C:\WINDOWS\system32\PSTOREC.DLL
          0x76ac0000 - 0x76ad1000 C:\WINDOWS\system32\ATL.DLL
          0x71ca0000 - 0x71cbc000 C:\WINDOWS\system32\actxprxy.dll
          0x6d590000 - 0x6d5a2000 C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
          0x6d400000 - 0x6d417000 C:\Program Files\Java\jre1.5.0_06\bin\jpiexp32.dll
          0x76f60000 - 0x76f68000 C:\WINDOWS\System32\winrnr.dll
          0x6d450000 - 0x6d468000 C:\Program Files\Java\jre1.5.0_06\bin\jpishare.dll
          0x6d670000 - 0x6d804000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\client\jvm.dll
          0x6d280000 - 0x6d288000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\hpi.dll
          0x76ba0000 - 0x76bab000 C:\WINDOWS\system32\PSAPI.DLL
          0x6d640000 - 0x6d64c000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\verify.dll
          0x6d300000 - 0x6d31d000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\java.dll
          0x6d660000 - 0x6d66f000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\zip.dll
          0x6d000000 - 0x6d167000 C:\Program Files\Java\jre1.5.0_06\bin\awt.dll
          0x73890000 - 0x73960000 C:\WINDOWS\system32\D3DIM700.DLL

          VM Arguments:
          jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~2.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol vfprintf
          java_command: <unknown>
          Launcher Type: generic

          Environment Variables:
          PATH=C:\PROGRA~1\Java\JRE15~2.0_0\bin;C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;.
          USERNAME=Seemi
          OS=Windows_NT
          PROCESSOR_IDENTIFIER=x86 Family 6 Model 13 Stepping 6, GenuineIntel

          --------------- S Y S T E M ---------------

          OS: Windows XP Build 2600 Service Pack 2

          CPU:total 1 family 6, cmov, cx8, fxsr, mmx, sse, sse2

          Memory: 4k page, physical 515452k(129780k free), swap 1259452k(737504k free)

          vm_info: Java HotSpot(TM) Client VM (1.5.0_06-b05) for windows-x86, built on Nov 10 2005 11:12:14 by "java_re" with MS VC++ 6.0

          01/15/07 16:19:49 [Info]: BlackLight Engine 1.0.55 initialized
          01/15/07 16:19:49 [Info]: OS: 5.1 build 2600 (Service Pack 2)
          01/15/07 16:19:49 [Note]: 7019 4
          01/15/07 16:19:49 [Note]: 7005 0
          01/15/07 16:19:49 [Note]: 7006 0
          01/15/07 16:20:02 [Note]: 7011 1976
          01/15/07 16:20:02 [Note]: 8001 2
          01/15/07 16:20:06 [Note]: FSRAW library version 1.7.1021
          01/15/07 16:30:55 [Note]: 7007 0

          01/15/07 16:17:34 [Info]: BlackLight Engine 1.0.55 initialized
          01/15/07 16:17:34 [Info]: OS: 5.1 build 2600 (Service Pack 2)
          01/15/07 16:17:35 [Note]: 7019 4
          01/15/07 16:17:35 [Note]: 7005 0
          01/15/07 16:17:35 [Note]: 7006 0
          01/15/07 16:17:36 [Note]: 7011 1976
          01/15/07 16:17:36 [Note]: 7026 0
          01/15/07 16:17:36 [Note]: 7026 0
          01/15/07 16:17:48 [Note]: FSRAW library version 1.7.1021
          01/15/07 16:20:02 [Note]: 7007 0

          rebonjour#2007 01 15%2015%3A48%3A57Logfile of HijackThis v1.99.1
          Scan saved at 16:07:49, on 15/01/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.5730.0011)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\hkcmd.exe
          C:\Program Files\Dell\QuickSet\quickset.exe
          C:\WINDOWS\system32\WLTRAY.exe
          C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
          C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
          C:\WINDOWS\system32\dla\tfswctrl.exe
          C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
          C:\Program Files\BroadJump\Client Foundation\CFD.exe
          C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
          C:\WINDOWS\VM_STI.EXE
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
          C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\MSN Messenger\msnmsgr.exe
          C:\Program Files\Digital Line Detect\DLG.exe
          c:\progra~1\intern~1\iexplore.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
          C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
          C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
          C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
          C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
          C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
          C:\WINDOWS\System32\snmp.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
          C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
          C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
          C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\MSN Messenger\usnsvc.exe
          C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
          C:\DOCUME~1\Seemi\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis.zip\HijackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60107
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
          R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
          R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
          O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
          O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
          O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
          O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
          O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
          O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
          O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
          O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
          O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
          O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
          O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
          O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
          O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
          O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
          O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
          O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
          O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
          O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
          O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
          O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
          O4 - HKLM\..\Run: [ONE MEMO PURE PLAN] C:\Documents and Settings\All Users\Application Data\BlueKindOneMemo\bonebend.exe
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
          O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
          O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
          O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Digital Line Detect.lnk = ?
          O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
          O4 - Global Startup: E-Compagnon.lnk = C:\Program Files\ColiPoste\e-COMO\e-COMO.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
          O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
          O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
          O8 - Extra context menu item: Crawler Search - tbr:iemenu
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?e766757d3726471688d1b0886357a388
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?e766757d3726471688d1b0886357a388
          O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
          O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
          O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
          O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
          O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
          O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
          O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
          O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061023/qtinstall.info.apple.com/qtactivex/qtplugin.cab
          O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
          O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://support.norton.com/sp/en/us/home/current/info
          O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
          O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
          O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586-jc.cab
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
          O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
          O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
          O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
          O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
          O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
          O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
          O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
          O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

          01/15/07 16:17:34 [Info]: BlackLight Engine 1.0.55 initialized
          01/15/07 16:17:34 [Info]: OS: 5.1 build 2600 (Service Pack 2)
          01/15/07 16:17:35 [Note]: 7019 4
          01/15/07 16:17:35 [Note]: 7005 0
          01/15/07 16:17:35 [Note]: 7006 0
          01/15/07 16:17:36 [Note]: 7011 1976
          01/15/07 16:17:36 [Note]: 7026 0
          01/15/07 16:17:36 [Note]: 7026 0
          01/15/07 16:17:48 [Note]: FSRAW library version 1.7.1021
          01/15/07 16:20:02 [Note]: 7007 0
          0
      2. Slt

        Refais moi le rapport Bitdefender (regarde bien la démo)

        Ouvre ce lien (merci a S!RI pour ce programme)
        http://siri.urz.free.fr/Fix/SmitfraudFix.php
        et télécharge SmitfraudFix.exe.

        Regarde le tuto

        Exécute le en choisissant l’option 1,
        il va générer un rapport
        Copie/colle le sur le poste stp.
        0
        1. Bonsoir Marie,

          Voilà le rapport de BitDeffender ( je n'arrive pas à le coupier/coller) :
          Temps: 01:24:48
          Objets:360285
          Repértoires:4804
          Secteurs Boot:3
          Archives:4544
          Fichiers en paquets:35659
          Aucun virus trouvé

          SmitFraudFix v2.132

          Rapport fait à 21:41:20,67, 16/01/2007
          Executé à partir de C:\WINDOWS\BDOSCAN8\SmitfraudFix
          OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
          Le type du système de fichiers est NTFS
          Fix executé en mode normal

          »»»»»»»»»»»»»»»»»»»»»»»» C:\

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Seemi

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Seemi\Application Data

          »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

          »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Seemi\Favoris

          »»»»»»»»»»»»»»»»»»»»»»»» Bureau

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

          »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

          »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
          "Source"="About:Home"
          "SubscribedURL"="About:Home"
          "FriendlyName"="Ma page d'accueil"

          »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          SrchSTS.exe by S!Ri
          Search SharedTaskScheduler's .dll

          »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
          "AppInit_DLLs"=""

          »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
          "System"=""

          »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

          »»»»»»»»»»»»»»»»»»»»»»»» Fin

          Merci Marie.
          0
          1. Désolé Marie, c'est là le rapport de BitDefender:
            BitDefender Online Scanner - Rapport virus en temps réel

            Généré à: Tue, Jan 16, 2007 - 22:00:17

            --------------------------------------------------------------------------------

            Info d'analyse

            Fichiers scannés
            360782

            Infectés Fichiers
            0

            Virus Détectés

            Aucun virus trouvé.

            --------------------------------------------------------------------------------

            Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.

            Merci.
            0
            1. Re,

              Démarre en mode sans échec :
              Pour cela, tu tapotes la touche F8 ((Si F8 ne marche pas utilise la touche F5)).
              dès le début de l’allumage du pc sans t’arrêter.
              Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
              Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
              ----------------------------------------------------------------------------
              Relance le programme Smitfraud,
              Cette fois choisit l’option 2,
              répond oui a tous ;
              Sauvegarde le rapport,
              Redémarre en mode normal,
              copie/colle le rapport sauvegardé sur le forum

              Et un rapport HT

              A++
              0
            2. Salut Marie,

              Décidemment le flou de pub intempéstive ne veut toujours pas laisser tranquil mon pc!

              Here you are le rapport de SmitFraud aprés allumage sans échec ( quoi que je sens l'échec lol):

              SmitFraudFix v2.132

              Rapport fait à 13:27:58,39, 17/01/2007
              Executé à partir de C:\Documents and Settings\Seemi\Bureau\SmitfraudFix
              OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
              Le type du système de fichiers est NTFS
              Fix executé en mode sans echec

              »»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

              »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

              GenericRenosFix by S!Ri

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

              »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
              "System"=""

              »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

              Nettoyage terminé.

              »»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Fin

              Merci pour ta patience.
              0
            3. Revoilà me rattrapper,

              Si rapport HT est Highjackthis, ben le voilà lol :

              Logfile of HijackThis v1.99.1
              Scan saved at 14:05:37, on 17/01/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.5730.0011)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\system32\hkcmd.exe
              C:\Program Files\Dell\QuickSet\quickset.exe
              C:\WINDOWS\system32\WLTRAY.exe
              C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
              C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
              C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
              C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
              C:\WINDOWS\system32\dla\tfswctrl.exe
              C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
              C:\Program Files\BroadJump\Client Foundation\CFD.exe
              C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
              C:\WINDOWS\VM_STI.EXE
              C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
              C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
              C:\Program Files\QuickTime\qttask.exe
              C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
              C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\MSN Messenger\msnmsgr.exe
              C:\Program Files\Digital Line Detect\DLG.exe
              c:\progra~1\intern~1\iexplore.exe
              C:\Program Files\Internet Explorer\IEXPLORE.EXE
              C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
              C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
              C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
              C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
              C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
              C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
              C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
              C:\WINDOWS\System32\snmp.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
              C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
              C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
              C:\Program Files\Internet Explorer\iexplore.exe
              C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
              C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60107
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
              R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
              O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
              O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
              O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
              O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
              O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
              O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
              O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
              O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
              O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
              O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
              O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
              O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
              O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
              O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
              O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
              O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
              O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
              O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
              O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
              O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
              O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
              O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
              O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
              O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
              O4 - HKLM\..\Run: [ONE MEMO PURE PLAN] C:\Documents and Settings\All Users\Application Data\BlueKindOneMemo\bonebend.exe
              O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
              O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
              O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
              O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
              O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Digital Line Detect.lnk = ?
              O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
              O4 - Global Startup: E-Compagnon.lnk = C:\Program Files\ColiPoste\e-COMO\e-COMO.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
              O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
              O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
              O8 - Extra context menu item: Crawler Search - tbr:iemenu
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?e766757d3726471688d1b0886357a388
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?e766757d3726471688d1b0886357a388
              O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
              O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
              O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
              O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
              O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
              O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
              O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
              O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O11 - Options group: [INTERNATIONAL] International*
              O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061023/qtinstall.info.apple.com/qtactivex/qtplugin.cab
              O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
              O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586-jc.cab
              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
              O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
              O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
              O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
              O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
              O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
              O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
              O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
              O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
              O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

              Encore merci Marie.
              0
            4. @contempoBonjour Contempo,

              Tu as deux barres de tâches qui ne sont pas signé par un copyright.

              Il faut que tu les supprimes.

              - Redémarre ton pc

              - Fixes ces lignes avec HIJACKTHIS :

              O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
              O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)

              - Ensuite désactive la RESTAURATION DU SYSTEME

              - Nettoie ton registre en profondeur avec CCLEANER

              - Règle ton pare-feu sur une sensibilité moyenne
              OU ALORS règle ton bouclier AVG sur "élevé"

              - Redémarre ton pc

              - Fais une analyse antivirus

              Et dis moi ici même quel virus est détecté (ces deux barres de navigation internet doivent être incrustées de trojans backdoor, ceux là même qui ouvre des portes dérobées dans lesquelles s'engouffrent des fenêtres intempestives, des pubs et d'autres virus)
              0
            5. @contempoCotempo,
              Je repasserai dans la sirée
              Tu as un blème avec MSN

              A++
              0
          2. Bonjour,

            Méthode à suivre dans l'ordre...
            ----------------------------------------------------------------------------
            Télécharger ces logiciels (sauf si tu les as)
            A utiliser plus tard

            A - ad-aware version 1.06
            (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
            voir demo
            http://pageperso.aol.fr/balltrap34/adwseflash.zip

            B - spybot version 1.4
            (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
            voir demo d utilisation
            http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

            C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
            Télécharge ici :
            https://www.ccleaner.com/ccleaner/download
            Tutorial ici:
            https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

            D - Ewido
            https://www.malekal.com/tutorial-et-guide-ewido-v4/
            ----------------------------------------------------------------------------
            ¤Affiche tous les fichiers et dossiers :
            Clique sur démarrer/panneau de configuration/outil/option des dossiers/affichage

            Coche « afficher les fichiers et dossiers cachés »

            Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

            Décoche « masquer les extensions dont le type est connu »
            Puis fais «Ok» pour valider les changements.

            Et appliquer !
            =================================
            Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"
            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
            O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
            O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
            O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
            O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
            O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" –atboottime
            O4 - HKLM\..\Run: [ONE MEMO PURE PLAN] C:\Documents and Settings\All Users\Application Data\BlueKindOneMemo\bonebend.exe
            O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
            O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
            O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
            O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O4 - Global Startup: Digital Line Detect.lnk = ?
            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
            O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/
            O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)

            Supprime dans ajout / supp

            MSN SEARCH Toolbar
            Allocam Multi Vision

            Je dois vérifier
            O8 - Extra context menu item: Crawler Search - tbr:iemenu
            ============ ============================
            ¤Démarre en mode sans échec :
            Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
            Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
            Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
            (Si F8 ne marche pas utilise la touche F5).
            ----------------------------------------------------------------------------
            ¤Vide tes fichiers temps et temporary internet file:

            Maintenant tu lances
            A/ Ad-Aware supprime quarantaine
            B/ Spybot Supprime quarantaine
            C/ Ccleaner Ewido Copier/coller le rapport
            D/
            ----------------------------------------------------------------------------
            ¤ Vide ta Corbeille.
            ----------------------------------------------------------------------------
            ¤ Redémarre en mode normal, relance Hijackthis et copie/colle un nouveau rapport sur le forum.

            Tiens nous au courant

            A+
            0
            1. Bonjour Marie,

              j'ai suivé toutes la procédure, ce qui a permis de dégager une fois pour toute les charmants visages de telle ou tel éxpèrt des astres, de la roulette ou du bien roulée lol.

              Je tiens à te remercier pour le temps que tu m'as consacré, ton aide et ta patience. A travers toi, je remercie aussi le Ccm et tous ceux qui aident des nouvices du net comme moi.

              Here you are, le rapport:

              Logfile of HijackThis v1.99.1
              Scan saved at 12:45:53, on 20/01/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.5730.0011)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\system32\hkcmd.exe
              C:\WINDOWS\system32\WLTRAY.exe
              C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
              C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
              C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
              C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
              C:\WINDOWS\system32\dla\tfswctrl.exe
              C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
              C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
              C:\WINDOWS\VM_STI.EXE
              C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
              C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
              C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
              C:\WINDOWS\system32\ctfmon.exe
              c:\progra~1\intern~1\iexplore.exe
              C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
              C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
              C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
              C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
              C:\WINDOWS\System32\snmp.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Internet Explorer\iexplore.exe
              C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
              C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
              C:\WINDOWS\system32\wuauclt.exe
              C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
              C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60107
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
              R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
              O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
              O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
              O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
              O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
              O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
              O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
              O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
              O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
              O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
              O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
              O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
              O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
              O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
              O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
              O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
              O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
              O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
              O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
              O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
              O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
              O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
              O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
              O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
              O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
              O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
              O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O11 - Options group: [INTERNATIONAL] International*
              O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
              O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586-jc.cab
              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
              O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
              O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
              O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
              O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
              O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
              O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
              O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
              O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

              Thanks so much Marie and Ccm.
              0