Svchost.exe à 100%

Bonsoir,

1/ * Ouvrir l'explorateur windows (Démarrer>programmes>Accessoires>Explorateur windows ou Démarrer>programmes>Explorateur windows).
* Cliquer sur outils>options des dossiers>affichage.
* Sélectionner :
o afficher les fichiers et dossiers cachés,
o décocher "masquer les extensions des fichiers dont le type est connu",
o décocher masquer les fichiers protégés du système d'exploitation (recommandé)".

* "appliquer" et "ok"

2/ * Peux-tu tester ceci : C:\WINDOWS\SYSTEM32\ncxpnt32.dll
* Clique sur ce lien : http://www.virustotal.com/en/indexf.html
* Clique sur parcourir et indique le chemin du fichier que j’ai désigné.
* Clique sur send. Au bout de quelques minutes, un rapport est généré. Poste-le dans ta prochaine réponse.

FillPCA

Voici le rapport :

Fichier ncxpnt32.dll reçu le 2007.09.20 22:50:36 (CET)
Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2007.9.21.0 2007.09.20 -
AntiVir 7.6.0.15 2007.09.20 -
Authentium 4.93.8 2007.09.20 -
Avast 4.7.1043.0 2007.09.20 -
AVG 7.5.0.485 2007.09.20 -
BitDefender 7.2 2007.09.20 -
CAT-QuickHeal 9.00 2007.09.20 -
ClamAV 0.91.2 2007.09.20 -
DrWeb 4.33 2007.09.20 -
eSafe 7.0.15.0 2007.09.19 -
eTrust-Vet 31.2.5150 2007.09.20 -
Ewido 4.0 2007.09.20 -
FileAdvisor 1 2007.09.20 -
Fortinet 3.11.0.0 2007.09.20 -
F-Prot 4.3.2.48 2007.09.20 -
F-Secure 6.70.13030.0 2007.09.20 -
Ikarus T3.1.1.12 2007.09.20 -
Kaspersky 4.0.2.24 2007.09.20 -
McAfee 5124 2007.09.20 -
Microsoft 1.2803 2007.09.20 VirTool:Win32/Obfuscator.L
NOD32v2 2541 2007.09.20 -
Norman 5.80.02 2007.09.20 -
Panda 9.0.0.4 2007.09.20 -
Prevx1 V2 2007.09.20 -
Rising 19.41.32.00 2007.09.20 -
Sophos 4.21.0 2007.09.20 -
Sunbelt 2.2.907.0 2007.09.20 -
Symantec 10 2007.09.20 -
TheHacker 6.2.5.063 2007.09.20 -
VBA32 3.12.2.4 2007.09.20 -
VirusBuster 4.3.26:9 2007.09.20 -
Webwasher-Gateway 6.0.1 2007.09.20 Win32.UPXpacked.gen (suspicious)
Information additionnelle
File size: 7680 bytes
MD5: 115e9240345d209b529206c898ea8f96
SHA1: 9468ffad26abb19719400d94a33466c009cfea4a
packers: UPX
packers: UPX
packers: UPX

Re,

1/
* Télécharge OTMoveIt (de Old_Timer) sur ton bureau : http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe
* Double-clique sur OTMoveIt.exe pour lancer le programme,
* Copie la liste de fichiers ou de dossiers ci-dessous et colle-la dans la fenêtre du programme "Paste List Of Files/Folders to be moved" :

C:\WINDOWS\SYSTEM32\ncxpnt32.dll

* Clique sur MoveIt! pour lancer la suppression,
* Le résultat appraraîtra dans le cadre Results.
* Clique sur Exit pour fermer le programme.
* Poste le rapport qui est situé ici : C:\\\_OTMoveIt\MovedFiles
* Il te sera peut-être demandé de redémarrer ton PC. Dans ce cas, clique sur Yes.

2/ Place Hijackthis.exe dans un dossier spécifique et renomme-le en proi.exe.
3/ Ouvre Hijackthis>"Do a scan only" et coche ceci :
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O20 - Winlogon Notify: ncxpnt32 - C:\WINDOWS\SYSTEM32\ncxpnt32.dll

Clique sur fix/réparer.

4/ * Zippe le contenu de ce dossier : C:\_OTMoveIT
* Pour cela, ouvre le poste de travail>C:
* Fais un clic droit sur _OTMoveIT puis choisis envoyer vers>dossier compressé.
* Un fichier au format zip est alors créé.
* Clique sur ce lien : http://upload.malekal.com/
* Clique sur le bouton parcourir et indique le chemin du fichier zippé.
* Clique enfin sur "envoyer le fichier".

5/ Télécharge Ccleaner Basic https://www.ccleaner.com/ccleaner/download

Ouvre Ccleaner, clique sur "lancer le nettoyage".

6/ Télécharge AVGantispyware : https://www.avg.com/en-ww/free-antivirus-download
Tu l'installes.
Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente.

Clique sur le bouton Analyse (de la barre d'outils)
Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas. Ensuite.
Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

7/ Edite les rapports suivants :
OTMoveIt, AVGantispyware et Hijackthis.

A demain.

Salut,

Voici les trois rapports !

OTMoveIt :

DllUnregisterServer procedure not found in C:\WINDOWS\SYSTEM32\ncxpnt32.dll
C:\WINDOWS\SYSTEM32\ncxpnt32.dll NOT unregistered.
C:\WINDOWS\SYSTEM32\ncxpnt32.dll moved successfully.

Created on 09/20/2007 23:10:46

AVGAntispyware :

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 06:20:43 21/09/2007

+ Résultat de l'analyse:

:mozilla.108:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.109:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.111:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.112:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.113:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.114:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.115:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.116:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.182:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.403:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.62:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.63:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.64:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.65:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.6:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.465:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.466:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.467:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.468:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.469:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.470:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.471:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.472:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.473:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.474:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.475:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.476:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.477:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.478:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.479:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.480:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.481:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.482:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.483:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.484:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.485:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.486:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.516:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.517:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.518:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.648:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.669:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.670:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.671:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.672:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.673:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.674:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.675:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.704:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.705:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.705:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.706:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.706:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.707:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.707:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.708:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.708:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.709:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.709:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.710:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.710:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.711:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.739:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.802:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.935:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.254:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.255:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.256:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.301:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.302:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.303:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.316:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.317:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.347:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.348:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.349:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.351:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.362:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.363:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.607:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adengage : Nettoyé.
:mozilla.752:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adition : Nettoyé.
:mozilla.753:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adition : Nettoyé.
:mozilla.785:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adition : Nettoyé.
:mozilla.786:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adition : Nettoyé.
:mozilla.786:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adition : Nettoyé.
:mozilla.787:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adition : Nettoyé.
:mozilla.139:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adjuggler : Nettoyé.
:mozilla.140:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adjuggler : Nettoyé.
:mozilla.141:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adjuggler : Nettoyé.
:mozilla.352:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.353:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.354:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.355:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.356:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.358:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.359:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.444:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.445:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.446:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.447:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.448:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.450:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.451:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.483:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.484:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.485:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.486:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.487:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.489:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.490:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.493:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.494:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.495:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.496:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.497:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.499:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.500:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.104:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.105:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.14:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.15:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.55:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.56:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.75:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.76:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.84:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.85:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.273:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.274:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.275:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.276:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.277:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.320:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.321:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.322:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.323:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.324:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.334:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.335:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.336:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.337:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.337:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.338:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.338:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.339:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.340:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.341:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.415:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.416:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.417:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.418:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.419:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.34:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.373:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.44:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.61:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.9:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.176:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.229:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.240:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.270:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.382:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Thibob\Cookies\thibob@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.822:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Bfast : Nettoyé.
:mozilla.855:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Bfast : Nettoyé.
:mozilla.856:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Bfast : Nettoyé.
:mozilla.110:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.170:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.295:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.59:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.89:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.698:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Burstbeacon : Nettoyé.
:mozilla.360:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.361:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.362:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.452:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.453:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.454:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.491:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.492:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.493:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.501:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.502:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.503:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.564:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.565:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.567:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.291:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.293:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.294:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.295:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.296:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.300:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.301:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.302:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.336:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.338:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.339:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.340:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.341:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.345:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.346:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.347:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.349:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.351:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.352:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.353:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.354:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.358:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.359:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.360:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.416:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.417:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.418:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.419:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.420:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.691:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.692:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.693:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.694:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.695:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.696:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.697:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.238:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Clickbank : Nettoyé.
:mozilla.481:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Clickbank : Nettoyé.
:mozilla.520:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Clickbank : Nettoyé.
:mozilla.526:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Clickbank : Nettoyé.
:mozilla.599:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Clickbank : Nettoyé.
:mozilla.878:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Clickhype : Nettoyé.
:mozilla.361:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.400:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.400:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.413:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.241:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.242:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.243:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.269:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.270:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.271:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.316:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.317:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.318:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.330:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.331:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.332:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.96:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.97:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.98:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.605:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Connextra : Nettoyé.
:mozilla.606:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Connextra : Nettoyé.
:mozilla.265:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.266:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.267:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.268:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.312:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.313:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.314:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.315:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.326:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.327:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.328:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.329:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.406:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Cqcounter : Nettoyé.
:mozilla.528:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Cqcounter : Nettoyé.
:mozilla.109:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.128:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.152:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.63:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.94:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.181:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.39:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.69:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.71:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.93:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.161:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.162:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.163:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.164:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.165:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.166:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.167:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.168:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.169:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.205:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.206:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.207:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.208:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.209:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.210:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.211:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.212:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.213:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.257:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.258:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.30:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.401:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.402:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.403:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.404:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.405:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.406:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.42:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.43:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.44:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.45:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.46:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.47:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.48:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.49:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.50:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.51:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.223:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.224:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.225:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.274:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.275:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.276:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.290:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.291:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.292:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.365:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.368:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.369:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.370:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.371:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.407:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.410:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.411:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.414:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.455:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.456:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.457:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.494:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.495:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.496:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.504:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.505:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.506:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.598:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.599:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.600:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.601:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.627:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.815:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.848:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.849:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.935:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.967:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.153:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.154:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.403:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.404:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.442:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.443:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.455:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.456:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.611:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.612:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.421:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.821:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.794:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Ivwbox : Nettoyé.
:mozilla.827:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Ivwbox : Nettoyé.
:mozilla.828:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Ivwbox : Nettoyé.
:mozilla.314:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.315:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.531:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.534:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.568:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.571:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.572:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.575:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.195:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-1.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.259:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.260:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.306:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.307:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.320:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.321:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.555:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.556:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.748:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.781:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.782:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.100:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.143:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.144:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.144:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.145:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.145:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.146:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.146:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.209:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-4.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.428:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.429:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.430:C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.

Bonjour,
Peux-tu également éditer un rapport Hijackthis ? Je regarde cela en fin d'après-midi.

FillPCA

Oups, il me semblait que je l'avais déjà posté ce matin.. Pas assez réveillé surement :)

Voici le log :

Logfile of HijackThis v1.99.1
Scan saved at 17:54:52, on 21/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\Gamesurround Fortissimo 4 mixer\EnMixCPL.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MICROSTAR\Bluetooth Software\BTTray.exe
C:\PROGRA~1\MICROS~3\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Thibob\Bureau\hijackthis\proi.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\BitComet\tools\BitCometBHO_1.1.5.19.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [EnvyHFCPL] "C:\Program Files\Gamesurround Fortissimo 4 mixer\EnMixCPL.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LogitechVideoRepair] "C:\Program Files\Logitech\Video\ISStart.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Labtec\WebCam10\WebCam10.exe" /hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [PeerGuardian] "C:\Program Files\PeerGuardian2\pg2.exe"
O4 - HKCU\..\RunOnce: [FFTI] "C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath="C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles/ziqstwdo.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}"
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Download all links using BitComet - res://D:\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://D:\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://D:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\STARDOCK\OBJECT~1\WINDOW~1\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

Re,

OK. Le rapport est propre. Je voudrais vérifier une chose avant de faire un scan en ligne de contrôle. As-tu des soucis par ailleurs ?

Merci à Lazzzy

* Télécharger lopxpMH : http://www.alt-shift-return.org/Info/Fichiers/lopxpMH2.zip
* Dézippe-le au moyen d'un clic droit et extrais-le sur le bureau.
* Edite le rapport généré.

FillPCA

Oui apparemment j'ai toujours le même problème puisqu'après avoir redémarré la machine, svchost me bouffe encore 99% de l'UC...

Voici le rapport logxpMH :

Rapport lopxpMH2 version 2.0 fait à 18:13:48,87 le 21/09/2007
C:\Documents and Settings\Thibob\Bureau\lopxpMH2\lopxpMH2

******************************************
## Répertoires Application Data

Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\Default User\Application Data

03/05/2005 01:53 <REP> .
03/05/2005 01:53 <REP> ..
30/01/2007 02:32 <REP> Identities
03/05/2005 01:53 <REP> Microsoft
30/01/2007 02:32 <REP> Symantec
03/05/2005 01:54 62 desktop.ini
1 fichier(s) 62 octets
5 Rép(s) 58 343 096 320 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data

03/05/2005 01:54 <REP> .
03/05/2005 01:54 <REP> ..
03/05/2005 02:02 <REP> Microsoft
30/01/2007 02:32 1 416 876 IconCache.db
1 fichier(s) 1 416 876 octets
3 Rép(s) 58 343 096 320 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\All Users\Application Data

03/05/2005 01:53 <REP> .
03/05/2005 01:53 <REP> ..
03/05/2005 02:15 <REP> Adobe
30/01/2007 15:11 <REP> Adobe Systems
31/01/2007 22:22 <REP> Apple Computer
30/01/2007 15:53 <REP> CyberLink
20/09/2007 23:22 <REP> Grisoft
20/04/2007 17:19 <REP> Installations
30/01/2007 15:47 <REP> Kaspersky Lab
11/09/2007 23:49 <REP> Kaspersky Lab Setup Files
14/06/2007 06:28 <REP> LogiShrd
30/01/2007 16:42 <REP> Logitech
31/07/2007 18:30 <REP> Macromedia
31/01/2007 18:32 <REP> Messenger Plus!
03/05/2005 01:53 <REP> Microsoft
21/02/2007 22:46 <REP> Microsoft Help
17/06/2007 22:59 <REP> Nokia
09/09/2007 22:48 <REP> nView_Profiles
30/01/2007 15:40 <REP> PC Suite
03/08/2007 00:54 <REP> PY_Software
26/03/2007 21:44 <REP> Skype
19/06/2007 20:06 <REP> Spybot - Search & Destroy
03/05/2005 02:19 <REP> Symantec
09/02/2007 19:51 <REP> Trymedia
30/01/2007 03:12 <REP> Windows Genuine Advantage
12/06/2007 21:07 <REP> WindowsLiveInstaller
12/06/2007 21:06 <REP> WLInstaller
03/05/2005 01:54 62 desktop.ini
30/01/2007 16:05 820 hpzinstall.log
31/01/2007 22:25 1 747 QTSBandwidthCache
3 fichier(s) 2 629 octets
27 Rép(s) 58 343 096 320 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\NetworkService\Application Data

03/05/2005 02:07 <REP> .
03/05/2005 02:07 <REP> ..
03/05/2005 02:07 <REP> Microsoft
0 fichier(s) 0 octets
3 Rép(s) 58 343 096 320 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data

03/05/2005 02:07 <REP> .
03/05/2005 02:07 <REP> ..
03/05/2005 02:07 <REP> Microsoft
0 fichier(s) 0 octets
3 Rép(s) 58 343 063 552 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\LocalService\Application Data

03/05/2005 02:07 <REP> .
03/05/2005 02:07 <REP> ..
03/05/2005 02:07 <REP> Microsoft
0 fichier(s) 0 octets
3 Rép(s) 58 343 063 552 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data

03/05/2005 02:07 <REP> .
03/05/2005 02:07 <REP> ..
03/05/2005 02:07 <REP> Microsoft
14/02/2007 19:13 111 680 FontCache3.0.0.0.dat
1 fichier(s) 111 680 octets
3 Rép(s) 58 343 063 552 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\Thibob\Application Data

30/01/2007 02:33 <REP> .
30/01/2007 02:33 <REP> ..
30/01/2007 15:05 <REP> Adobe
08/02/2007 18:42 <REP> AdobeUM
30/01/2007 03:03 <REP> Ahead
31/01/2007 22:29 <REP> Apple Computer
06/02/2007 15:54 <REP> CyberLink
21/02/2007 20:29 <REP> Dev-Cpp
06/02/2007 15:50 <REP> DivX
09/04/2007 18:17 <REP> dvdcss
07/06/2007 21:44 <REP> GeoVid
11/09/2007 22:25 <REP> GetRightToGo
24/02/2007 01:30 <REP> Google
20/09/2007 23:23 <REP> Grisoft
30/01/2007 21:51 <REP> Help
30/01/2007 02:33 <REP> Identities
11/04/2007 22:37 <REP> IDMComp
27/06/2007 19:35 <REP> Leadertech
30/01/2007 03:06 <REP> Macromedia
14/02/2007 19:24 <REP> Media Player Classic
30/01/2007 02:33 <REP> Microsoft
30/01/2007 02:51 <REP> Mozilla
30/01/2007 15:40 <REP> Nokia
01/02/2007 20:40 <REP> Nokia Multimedia Player
30/01/2007 03:07 <REP> Notepad++
25/02/2007 17:07 <REP> Opera
30/01/2007 15:39 <REP> PC Suite
04/02/2007 20:57 <REP> PSPDocMaker
23/02/2007 20:27 <REP> Real
13/03/2007 16:09 <REP> Screenshot Sender
26/03/2007 21:45 <REP> Skype
31/01/2007 18:06 <REP> Sun
30/01/2007 02:33 <REP> Symantec
20/09/2007 22:27 <REP> teamspeak2
07/02/2007 20:28 <REP> TVU networks
09/07/2007 18:04 <REP> uTorrent
10/09/2007 20:41 <REP> vlc
31/01/2007 17:53 2 905 BestModePatch_RubenMain.log
30/01/2007 02:33 62 desktop.ini
02/08/2007 22:58 1 403 MQPreset.ini
02/08/2007 22:58 765 Multique.ini
18/05/2007 16:32 15 266 NMM-MetaData.db
5 fichier(s) 20 401 octets
37 Rép(s) 58 343 063 552 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Documents and Settings\Thibob\Local Settings\Application Data

30/01/2007 02:33 <REP> .
30/01/2007 02:33 <REP> ..
30/01/2007 02:35 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150020}
30/01/2007 15:05 <REP> Adobe
30/01/2007 03:09 <REP> Ahead
31/01/2007 22:25 <REP> Apple Computer
30/01/2007 16:52 <REP> ApplicationHistory
24/02/2007 01:30 <REP> Google
30/01/2007 21:51 <REP> Help
30/01/2007 16:53 <REP> HP
30/01/2007 16:54 <REP> IsolatedStorage
30/01/2007 16:43 <REP> Logitech
31/07/2007 18:39 <REP> Macromedia
30/01/2007 02:33 <REP> Microsoft
21/02/2007 22:52 <REP> Microsoft Help
30/01/2007 02:51 <REP> Mozilla
12/06/2007 23:17 <REP> PCHealth
09/09/2007 21:09 <REP> Steam
07/07/2007 11:52 <REP> WMTools Downloaded Files
08/02/2007 12:45 56 832 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
30/01/2007 16:52 129 fusioncache.dat
30/01/2007 02:57 43 904 GDIPFONTCACHEV1.DAT
11/03/2007 20:32 4 806 920 IconCache.db
4 fichier(s) 4 907 785 octets
19 Rép(s) 58 343 063 552 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data

03/05/2005 02:06 <REP> .
03/05/2005 02:06 <REP> ..
30/01/2007 02:32 <REP> Identities
03/05/2005 02:06 <REP> Microsoft
30/01/2007 02:32 <REP> Symantec
03/05/2005 02:06 62 desktop.ini
1 fichier(s) 62 octets
5 Rép(s) 58 343 063 552 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data

03/05/2005 02:06 <REP> .
03/05/2005 02:06 <REP> ..
03/05/2005 02:06 <REP> Microsoft
30/01/2007 02:32 1 416 876 IconCache.db
1 fichier(s) 1 416 876 octets
3 Rép(s) 58 343 063 552 octets libres

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
s €!× Œ : C : \ P r o g r a m F i l e s \ A p p l e S o f t w a r e U p d a t e \ S o f t w a r e U p d a t e . e x e - T a s k S Y S T E M 0 ×
******************************************
## Répertoires de C:\Program Files

Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Program Files

03/05/2005 01:54 <REP> .
03/05/2005 01:54 <REP> ..
04/05/2005 10:12 <REP> acer
03/05/2005 02:15 <REP> Adobe
01/08/2007 14:17 <REP> adslTV
08/05/2007 20:52 <REP> Alcohol Soft
31/01/2007 22:22 <REP> Apple Software Update
14/02/2007 18:50 <REP> AviSynth 2.5
18/06/2007 19:55 <REP> BB
14/04/2007 23:34 <REP> Blender Foundation
20/09/2007 23:14 <REP> CCleaner
03/07/2007 20:57 <REP> CubeTime
03/05/2005 02:18 <REP> CyberLink
30/01/2007 03:09 <REP> DAEMON Tools
30/01/2007 15:39 <REP> DIFX
30/01/2007 03:25 <REP> DivX
03/05/2007 20:34 <REP> EasyPHP1-8
12/09/2007 17:56 <REP> ESET
30/04/2007 01:31 <REP> Eurobarre
14/02/2007 18:50 <REP> ffdshow
03/05/2005 01:54 <REP> Fichiers communs
13/02/2007 14:51 <REP> FileZilla
30/01/2007 19:53 <REP> Gamesurround Fortissimo 4 mixer
16/07/2007 20:27 <REP> Giganology
02/08/2007 21:38 <REP> GoldWave
30/01/2007 03:33 <REP> Google
20/09/2007 23:22 <REP> Grisoft
16/03/2007 16:24 <REP> Guitar Pro 5
30/01/2007 16:15 <REP> Hewlett-Packard
06/08/2007 14:54 <REP> HexDecCharEditor V 1 02
30/01/2007 16:07 <REP> HP
11/04/2007 22:36 <REP> IDM Computer Solutions
03/05/2005 01:59 <REP> Internet Explorer
30/01/2007 02:35 <REP> Java
11/05/2007 16:31 <REP> Labtec
10/02/2007 13:15 <REP> Lavalys
30/01/2007 14:49 <REP> Logitech
19/03/2007 18:19 <REP> Maxis
03/05/2005 01:58 <REP> Messenger
30/01/2007 02:57 <REP> Messenger Plus! Live
13/06/2007 18:13 <REP> Microsoft CAPICOM 2.1.0.2
03/05/2005 02:02 <REP> microsoft frontpage
30/01/2007 15:30 <REP> Microsoft Office
30/01/2007 15:30 <REP> Microsoft.NET
30/01/2007 16:33 <REP> MICROSTAR
10/02/2007 14:05 <REP> mIRC
03/05/2005 02:00 <REP> Movie Maker
30/01/2007 02:51 <REP> Mozilla Firefox
14/02/2007 19:13 <REP> MSBuild
03/05/2005 01:58 <REP> MSN Gaming Zone
30/01/2007 02:56 <REP> MSN Messenger
23/02/2007 20:29 <REP> mSoft
16/08/2007 03:04 <REP> MSXML 4.0
16/08/2007 03:06 <REP> MSXML 6.0
02/08/2007 22:57 <REP> Multiquence
30/01/2007 03:02 <REP> Nero
03/05/2005 02:00 <REP> NetMeeting
03/05/2005 02:17 <REP> NewTech Infosystems
13/02/2007 17:12 <REP> Nmap
30/01/2007 15:39 <REP> Nokia
30/01/2007 03:07 <REP> Notepad++
03/05/2005 01:58 <REP> Online Services
03/05/2005 02:00 <REP> Outlook Express
20/04/2007 17:24 <REP> PC Connectivity Solution
05/08/2007 13:39 <REP> PeerGuardian2
30/01/2007 21:42 <REP> PiMPWare
19/06/2007 19:50 <REP> PowerISO
18/06/2007 19:59 <REP> PowerTracks DirectX Plugins
16/02/2007 18:41 <REP> PSP Brew
09/08/2007 19:40 <REP> PSPFreePlayer
12/07/2007 19:37 <REP> QuickTime
23/02/2007 20:28 <REP> Real
16/04/2007 22:49 <REP> Red Kawa
14/02/2007 19:05 <REP> Reference Assemblies
03/05/2005 02:00 <REP> Services en ligne
30/01/2007 01:29 <REP> SiSLan
26/03/2007 21:44 <REP> Skype
15/06/2007 19:44 <REP> Softwin
19/06/2007 20:06 <REP> Spybot - Search & Destroy
30/01/2007 17:05 <REP> Stardock
30/01/2007 02:58 <REP> StuffPlug3
12/09/2007 15:34 <REP> Sunbelt Software
31/07/2007 12:42 <REP> TablEdit32
20/09/2007 22:26 <REP> Teamspeak2_RC2
09/08/2007 15:58 <REP> The Privacy Guard
09/02/2007 22:07 <REP> Trapcode
09/07/2007 15:01 <REP> UltraStar
23/06/2007 13:46 <REP> Valve
30/01/2007 03:05 <REP> VideoLAN
23/02/2007 03:28 <REP> Webteh
07/06/2007 19:59 <REP> Windows Live
30/01/2007 03:15 <REP> Windows Media Connect 2
03/05/2005 01:58 <REP> Windows Media Player
03/05/2005 01:58 <REP> Windows NT
10/02/2007 12:58 <REP> WinHex
07/06/2007 20:33 <REP> WinHTTrack
14/02/2007 18:50 <REP> Winnydows
13/02/2007 16:09 <REP> WinPcap
30/01/2007 02:52 <REP> WinRAR
20/04/2007 23:42 <REP> World of Warcraft
03/05/2005 02:02 <REP> xerox
31/01/2007 22:35 <REP> Xilisoft
21/02/2007 18:13 <REP> XLink Kai Evolution VII
20/09/2007 23:15 <REP> Yahoo!
20/04/2007 22:32 <REP> Zone Dactylo
0 fichier(s) 0 octets
105 Rép(s) 58 343 030 784 octets libres

******************************************
## Popups autorisées

* Internet Explorer

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow

* Mozilla Firefox (1 autorisé 2 interdit)

---------- C:\DOCUMENTS AND SETTINGS\THIBOB\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZIQSTWDO.DEFAULT\HOSTPERM.1
host popup 1 eu.playstation.com
host popup 1 pspupdates.qj.net
host popup 1 mail.google.com
host popup 1 www.got2pay.com
host popup 1 www.gamespress.com

******************************************
## Registre

* [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
Search Bar REG_SZ http://www.google.com/toolbar/ie8/sidebar.html

* [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
PCSuiteTrayApplication REG_SZ "C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup

******************************************
## Zones de sécurité

* HKCU Domains (4)

* P3P History (5)

******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"

*************** Fin du rapport ****************

Re,

RAS ici.

* Fais un scan en ligne en cliquant ici : http://assiste.com.free.fr/...
* Choisis Panda.
* Tu dois réaliser le scan en utilisant Internet explorer. Une information apparait en haut, près de la barre d'état. Tu dois accepter et installer l'activeX proposé. La mise à jour de l'antivirus se lance.
* Réalise un scan complet du système.
* Sauvegarde le rapport en mode texte à l'issue du scan.

Edite le rapport Panda.

FillPCA

Re,

Le scan ne m'a révélé qu'un virus qui se trouvait dans un crackme...

Log :

Incident Status Location

Virus:Generic Malware Disinfected C:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant ++\CrackMe(2).exe
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Thibob\Cookies\thibob@atdmt[2].txt
Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Thibob\Cookies\thibob@weborama[2].txt
Spyware:Cookie/Comclick Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[fl01.ct2.comclick.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.doubleclick.net/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.adtech.de/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.xiti.com/]
Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.weborama.fr/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[ad.yieldmanager.com/]
Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.bluestreak.com/]
Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.adviva.net/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.statcounter.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.tradedoubler.com/]
Spyware:Cookie/Smartadserver Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.smartadserver.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.serving-sys.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.atdmt.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.com.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.247realmedia.com/]
Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[fe.lea.lycos.fr/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.tribalfusion.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[server.iad.liveperson.net/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.fastclick.net/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.advertising.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.overture.com/]
Spyware:Cookie/MetriWeb Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.metriweb.be/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.2o7.net/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.bravenet.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.mediaplex.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.realmedia.com/]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.burstnet.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.realmedia.com/]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.burstnet.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.realmedia.com/]
Spyware:Cookie/Clickbank Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.clickbank.net/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.apmebf.com/]
Spyware:Cookie/Yadro Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.yadro.ru/]
Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.adserver.easyad.info/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.casalemedia.com/]
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[www.burstbeacon.com/]
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[.revenue.net/]
Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[searchportal.information.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\COOKIES.TXT[statse.webtrendslive.com/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt[.xiti.com/]
Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-2.txt[fe.lea.lycos.fr/]
Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\cookies-3.txt[fe.lea.lycos.fr/]

Que faire ?

Re,

Toujours des problèmes ?
Evite les cracks...

1/ * Télécharge DiagHelp.zip sur ton bureau(Merci Malekal) : http://www.malekal.com/download/DiagHelp.zip
Tuto : http://www.malekal.com/DiagHelp/DiagHelp.php
* Ne double-clique pas dessus !! Fais un clic droit sur le fichier et extraire tout.
* Un nouveau dossier chercher va être créé.
* Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
* Une fenêtre va s'ouvrir, choisis l'option 1
* L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande.
* Pendant l'analyse après le rapport CATCHME sur l'écran rouge, tu dois appuyer sue entrée pour que l'outil continue ses recherches. Suis les consignes écrites.
* Une fenêtre avec le rapport s'ouvre alors. Copie/colle son contenu. (Il se trouve aussi ici : c:\resultat.txt)
* Double-clique sur ce fichier, Fais CTRL+A puis CTRL+C.
* Dans ta prochaine réponse, colle le rapport en faisant CTRL+V.

2/ * Télécharge SREng (de Smallfrogs) : http://www.kztechs.com/eng/download.html
* Dézippe tout son contenu sur ton bureau (clic droit >Extraire ici).
* Ouvre le dossier SReng2 et double-clique sur SREng.exe.
* Clique sur "smart scan".
* Clique sur le bouton "scan".
* Quand l'analyse est terminée, clique sur le bouton "save reports".
* Sauvegarde alors le rapport sur ton bureau.
* Copie/colle le contenu du rapport SREnglLOG.log dans ta prochaine réponse.

FillPCA

Le rapport DiagHelp :

DiagHelp version v1.2 - http://www.malekal.com
excute le 21/09/2007 à 20:45:11,90

Liste des derniers fichies modifies/crees dans windir\system32 et prefetch
C:\WINDOWS\prefetch\CHCP.COM-17EDBDC9.pf -->21/09/2007 20:45:12
C:\WINDOWS\prefetch\WINRAR.EXE-0AA31BB9.pf -->21/09/2007 20:44:52
C:\WINDOWS\prefetch\STEAM.EXE-0099A331.pf -->21/09/2007 20:31:44
C:\WINDOWS\prefetch\TASKMGR.EXE-06144C13.pf -->21/09/2007 20:00:04
C:\WINDOWS\prefetch\NOTEPAD.EXE-2F2D61E1.pf -->21/09/2007 19:54:20
C:\WINDOWS\prefetch\VERCLSID.EXE-28F52AD2.pf -->21/09/2007 19:37:22
C:\WINDOWS\prefetch\LOG VIEWER.EXE-367A4CA4.pf -->21/09/2007 19:31:36
C:\WINDOWS\prefetch\FIREFOX.EXE-06188867.pf -->21/09/2007 19:29:08
C:\WINDOWS\prefetch\REGEDIT.EXE-2AE3423E.pf -->21/09/2007 19:10:18
C:\WINDOWS\prefetch\DWWIN.EXE-2C373FB7.pf -->21/09/2007 18:30:26

C:\WINDOWS\System32\drivers\amon.sys -->12/09/2007 17:56:26
C:\WINDOWS\System32\drivers\nod32drv.sys -->12/09/2007 17:56:26
C:\WINDOWS\System32\drivers\AvgAsCln.sys -->30/05/2007 14:10:42
C:\WINDOWS\System32\drivers\LVUSBSta.sys -->12/05/2007 02:31:20
C:\WINDOWS\System32\drivers\LVMVdrv.sys -->11/05/2007 17:29:54
C:\WINDOWS\System32\drivers\Lvckap.sys -->11/05/2007 17:27:58
C:\WINDOWS\System32\drivers\sptd.sys -->08/05/2007 20:43:08

C:\WINDOWS\System32\asfiles.txt -->21/09/2007 18:39:30
C:\WINDOWS\System32\Uninstall.ico -->21/09/2007 18:27:44
C:\WINDOWS\System32\Help.ico -->21/09/2007 18:27:44
C:\WINDOWS\System32\pavas.ico -->21/09/2007 18:27:44
C:\WINDOWS\System32\eRLog.ini -->21/09/2007 18:09:34
C:\WINDOWS\System32\wpa.dbl -->21/09/2007 18:09:26
C:\WINDOWS\System32\nvapps.xml -->21/09/2007 18:09:12
C:\WINDOWS\System32\lhacm.acm -->20/09/2007 22:27:02
C:\WINDOWS\System32\lvcoinst.log -->14/09/2007 17:36:06
C:\WINDOWS\System32\imon.dll -->12/09/2007 17:56:28
C:\WINDOWS\System32\MRT.exe -->06/09/2007 04:50:42
C:\WINDOWS\System32\TZLog.log -->29/08/2007 17:47:12
C:\WINDOWS\System32\Pbpr01sw.dll -->06/08/2007 15:04:48
C:\WINDOWS\System32\jupdate-1.6.0_02-b06.log -->04/08/2007 14:17:12
C:\WINDOWS\System32\BASSMOD.dll -->03/08/2007 01:59:48
C:\WINDOWS\System32\44052a7f.dat -->03/08/2007 01:08:14
C:\WINDOWS\System32\bdod.bin -->02/08/2007 19:54:52
C:\WINDOWS\System32\bdss.log -->02/08/2007 13:50:40
C:\WINDOWS\System32\FNTCACHE.DAT -->02/08/2007 13:50:22
C:\WINDOWS\System32\wuaucpl.cpl.mui -->30/07/2007 19:20:06
C:\WINDOWS\System32\wuapi.dll.mui -->30/07/2007 19:19:52
C:\WINDOWS\System32\wuaueng.dll -->30/07/2007 19:19:42
C:\WINDOWS\System32\wuapi.dll -->30/07/2007 19:19:36
C:\WINDOWS\System32\wucltui.dll -->30/07/2007 19:19:32
C:\WINDOWS\System32\wuweb.dll -->30/07/2007 19:19:28

C:\WINDOWS\win.ini -->21/09/2007 18:37:14
C:\WINDOWS\setupapi.log -->21/09/2007 18:28:30
C:\WINDOWS\SchedLgU.Txt -->21/09/2007 18:13:24
C:\WINDOWS\WindowsUpdate.log -->21/09/2007 18:13:24
C:\WINDOWS\0.log -->21/09/2007 18:08:54
C:\WINDOWS\ModemLog_Bluetooth Modem.txt -->21/09/2007 18:08:52
C:\WINDOWS\ModemLog_Bluetooth Fax Modem.txt -->21/09/2007 18:08:50
C:\WINDOWS\wiadebug.log -->21/09/2007 18:08:46
C:\WINDOWS\bootstat.dat -->21/09/2007 18:08:10
C:\WINDOWS\wiaservc.log -->21/09/2007 18:07:14
C:\WINDOWS\setupapi.log.1.old -->17/09/2007 21:16:18
C:\WINDOWS\QTFont.qfn -->13/09/2007 21:04:48
C:\WINDOWS\NeroDigital.ini -->13/09/2007 20:52:00
C:\WINDOWS\w32dasm8.ini -->08/08/2007 23:58:48
C:\WINDOWS\mozver.dat -->08/08/2007 16:15:28

MD5 des fichiers sensibles
tcpip.sys 1dbf125862891817f374f407626967f4
ndis.sys 558635d3af1c7546d26067d5d9b6959e
null.sys 73c1e1f395918bc2c6dd67af7591a3ad
svchost.exe 1bd6c2f707a275cb7c16fd99fe0f31ca

Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\WINDOWS\system

24/12/1998 16:15 345 983 RCDSETUP.EXE
1 fichier(s) 345 983 octets
0 Rép(s) 58 230 669 312 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\WINDOWS\system32

05/08/2004 05:00 6 144 csrss.exe
1 fichier(s) 6 144 octets
0 Rép(s) 58 230 669 312 octets libres

Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\WINDOWS\Downloaded Program Files

03/05/2005 02:00 <REP> .
03/05/2005 02:00 <REP> ..
03/05/2005 02:00 65 desktop.ini
09/11/2006 14:36 5 019 swflash.inf
07/09/2007 11:29 2 305 kavwebscan.inf
24/08/2006 08:28 141 424 asinst.dll
22/08/2006 09:06 537 asinst.inf
5 fichier(s) 149 350 octets

Total des fichiers listés :
5 fichier(s) 149 350 octets
2 Rép(s) 58 230 669 312 octets libres

Recherche de rootkit! (Merci S!Ri)

Recherche d'infections connues

Export des clefs sensibles..

Liste des fichiers en exception sur le pare-feu XP SP2

"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\eMule\\emule.exe"="D:\\eMule\\emule.exe:*:Enabled:eMule"
"D:\\BitComet\\BitComet.exe"="D:\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\PiMPWare\\PiMPStreamer\\PimpStreamer.exe"="C:\\Program Files\\PiMPWare\\PiMPStreamer\\PimpStreamer.exe:*:Enabled:PimpStreamer, Streams video from PC to PSP Realtime!"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\TVUPlayer\\TVUPlayer.exe"="C:\\Program Files\\TVUPlayer\\TVUPlayer.exe:*:Enabled:TVU Player Component"
"C:\\Program Files\\PeerTV\\PeerCast.exe"="C:\\Program Files\\PeerTV\\PeerCast.exe:*:Enabled:PeerCast"
"C:\\Program Files\\adslTV\\adslTV.exe"="C:\\Program Files\\adslTV\\adslTV.exe:*:Enabled:adslTV"
"C:\\nIRC\\mirc.exe"="C:\\nIRC\\mirc.exe:*:Enabled:mIRC"
"C:\\Documents and Settings\\Thibob\\Bureau\\SuperScan4.exe"="C:\\Documents and Settings\\Thibob\\Bureau\\SuperScan4.exe:*:Enabled:SuperScan 4 Beta 1"
"C:\\Documents and Settings\\Thibob\\Bureau\\superscan4\\SuperScan4.exe"="C:\\Documents and Settings\\Thibob\\Bureau\\superscan4\\SuperScan4.exe:*:Enabled:SuperScan 4 Beta 1"
"C:\\StubInstaller.exe"="C:\\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\XLink Kai Evolution VII\\kaiLaunch.exe"="C:\\Program Files\\XLink Kai Evolution VII\\kaiLaunch.exe:*:Enabled:XLink Kai Evolution 7 Launcher"
"C:\\Program Files\\XLink Kai Evolution VII\\kaiEngine.exe"="C:\\Program Files\\XLink Kai Evolution VII\\kaiEngine.exe:*:Enabled:XLink Kai Evolution 7 Engine"
"C:\\Program Files\\MaxTV\\maxtv.exe"="C:\\Program Files\\MaxTV\\maxtv.exe:*:Enabled:MaxTV Online"
"C:\\Program Files\\FileZilla\\FileZilla.exe"="C:\\Program Files\\FileZilla\\FileZilla.exe:*:Enabled:FileZilla"
"C:\\Program Files\\HomePlayer1.5.0.2\\HomePlayer.exe"="C:\\Program Files\\HomePlayer1.5.0.2\\HomePlayer.exe:*:Enabled:HomePlayer"
"C:\\Program Files\\Webteh\\BSplayer\\bsplayer.exe"="C:\\Program Files\\Webteh\\BSplayer\\bsplayer.exe:*:Enabled:BSPlayer"
"C:\\WINDOWS\\System32\\dpvsetup.exe"="C:\\WINDOWS\\System32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\System32\\RUNDLL32.EXE"="C:\\WINDOWS\\System32\\RUNDLL32.EXE:*:Enabled:Exécuter une DLL en tant qu'application"
"C:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe"="C:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"="C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\\uTorrent\\utorrent.exe"="D:\\uTorrent\\utorrent.exe:*:Enabled:µTorrent"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. Take a deep breath "
"C:\\Program Files\\Active WebCam\\WebCam.exe"="C:\\Program Files\\Active WebCam\\WebCam.exe:*:Enabled:Active WebCam"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\thibob\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\thibob\\counter-strike source\\hl2.exe:*:Disabled:hl2"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"C:\\Program Files\\PSPFreePlayer\\VLC\\vlc.exe"="C:\\Program Files\\PSPFreePlayer\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"="C:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe:*:Enabled:Sunbelt Firewall GUI"

"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

Export de la clef SharedTaskScheduler

[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

exports des policies
REGEDIT4

[system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

Export des clefs sensibles..
Rechercher adresses sensibles dans le fichier HOSTS...
catchme 0.3.1160 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-21 20:46:22
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden services: 0
hidden files: 0

KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)

Process list by traversal of KiWaitListHead

4 - System
476 - BTTray.exe
516 - cmd.exe
688 - CSRSS.EXE
712 - winlogon.exe
756 - services.exe
768 - lsass.exe
904 - svchost.exe
1028 - BTSTAC~1.EXE
1328 - svchost.exe
1560 - Explorer.EXE
1780 - taskmgr.exe
1884 - guard.exe
1952 - NOD32KRN.EXE
1976 - HPZIPM12.EXE
2348 - alg.exe
2504 - Steam.exe
2544 - LGDCore.exe
2644 - LCDMon.exe
2920 - LCDPOP3.exe
2932 - LCDClock.exe
3072 - wscntfy.exe
3084 - EnMixCPL.exe
3096 - HPWuSchd2.exe
3120 - MsnMsgr.Exe
3156 - LaunchApplicati
3212 - ServiceLayer.ex
3276 - firefox.exe
3288 - ctfmon.exe
3336 - RUNDLL32.EXE
3408 - jusched.exe
3440 - nod32kui.exe
3452 - Communications_
3616 - Monitor.exe
3788 - LVComSX.exe
3924 - avgas.exe
3964 - svchost.exe

Total number of processes = 37
NOTE: Under WinXP, this will not show all processes.

KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)

Driver/Module list by traversal of PsLoadedModuleList

804D7000 - \WINDOWS\system32\ntoskrnl.exe
806EC000 - \WINDOWS\system32\hal.dll
F8A35000 - \WINDOWS\system32\KDCOM.DLL
F8945000 - \WINDOWS\system32\BOOTVID.dll
F843D000 - sptd.sys
F8A37000 - \WINDOWS\System32\Drivers\WMILIB.SYS
F8425000 - \WINDOWS\System32\Drivers\SCSIPORT.SYS
F83F6000 - ACPI.sys
F83E5000 - pci.sys
F8535000 - isapnp.sys
F8AFD000 - pciide.sys
F87B5000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
F8545000 - MountMgr.sys
F83C6000 - ftdisk.sys
F87BD000 - PartMgr.sys
F8555000 - VolSnap.sys
F83AE000 - atapi.sys
F8565000 - disk.sys
F8575000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
F838E000 - fltMgr.sys
F837C000 - sr.sys
F8585000 - PxHelp20.sys
F8359000 - Fastfat.sys
F8342000 - KSecDD.sys
F832F000 - WudfPf.sys
F8302000 - NDIS.sys
F8595000 - uagp35.sys
F85A5000 - SISAGPX.sys
F82E7000 - Mup.sys
F81D1000 - btkrnl.sys
F85D5000 - \SystemRoot\system32\DRIVERS\intelppm.sys
F7D19000 - \SystemRoot\system32\DRIVERS\nv4_mini.sys
F7D05000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
F85E5000 - \SystemRoot\system32\DRIVERS\imapi.sys
F89F1000 - \SystemRoot\System32\Drivers\UBHelper.SYS
F85F5000 - \SystemRoot\system32\DRIVERS\cdrom.sys
F8605000 - \SystemRoot\system32\DRIVERS\redbook.sys
F7CE2000 - \SystemRoot\system32\DRIVERS\ks.sys
F8A39000 - \SystemRoot\system32\DRIVERS\NTIDrvr.sys
F87D5000 - \SystemRoot\system32\DRIVERS\usbohci.sys
F7CBF000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS
F87DD000 - \SystemRoot\system32\DRIVERS\usbehci.sys
F87E5000 - \SystemRoot\system32\DRIVERS\sisnic.sys
F7C32000 - \SystemRoot\system32\drivers\Envy24HF.sys
F7C0E000 - \SystemRoot\system32\drivers\portcls.sys
F8625000 - \SystemRoot\system32\drivers\drmk.sys
F7BC4000 - \SystemRoot\System32\Drivers\ad32bkgm.SYS
F7B7A000 - \SystemRoot\System32\Drivers\azckf53n.SYS
F887D000 - \SystemRoot\system32\DRIVERS\fdc.sys
F7B69000 - \SystemRoot\system32\DRIVERS\serial.sys
F81A9000 - \SystemRoot\system32\DRIVERS\serenum.sys
F7B55000 - \SystemRoot\system32\DRIVERS\parport.sys
F8885000 - \SystemRoot\system32\DRIVERS\btaudio.sys
F8645000 - \SystemRoot\system32\DRIVERS\STREAM.SYS
F811B000 - \SystemRoot\system32\DRIVERS\audstub.sys
F8A51000 - \SystemRoot\System32\Drivers\RootMdm.sys
F888D000 - \SystemRoot\System32\Drivers\Modem.SYS
F86A5000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys
F81A5000 - \SystemRoot\system32\DRIVERS\ndistapi.sys
F7B3E000 - \SystemRoot\system32\DRIVERS\ndiswan.sys
F86B5000 - \SystemRoot\system32\DRIVERS\raspppoe.sys
F86C5000 - \SystemRoot\system32\DRIVERS\raspptp.sys
F8895000 - \SystemRoot\system32\DRIVERS\TDI.SYS
F7B2D000 - \SystemRoot\system32\DRIVERS\psched.sys
F86D5000 - \SystemRoot\system32\DRIVERS\msgpc.sys
F889D000 - \SystemRoot\system32\DRIVERS\ptilink.sys
F88A5000 - \SystemRoot\system32\DRIVERS\raspti.sys
F7B10000 - \SystemRoot\system32\DRIVERS\btwdndis.sys
F88AD000 - \SystemRoot\system32\DRIVERS\btport.sys
F86E5000 - \SystemRoot\system32\DRIVERS\termdd.sys
F88B5000 - \SystemRoot\system32\DRIVERS\kbdclass.sys
F88BD000 - \SystemRoot\system32\DRIVERS\mouclass.sys
F8A53000 - \SystemRoot\system32\DRIVERS\swenum.sys
F7A17000 - \SystemRoot\system32\DRIVERS\update.sys
F8195000 - \SystemRoot\system32\DRIVERS\mssmbios.sys
F86F5000 - \SystemRoot\System32\Drivers\NDProxy.SYS
F8705000 - \SystemRoot\system32\DRIVERS\usbhub.sys
F8A55000 - \SystemRoot\system32\DRIVERS\USBD.SYS
F8A57000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS
F80EE000 - \SystemRoot\System32\Drivers\Null.SYS
F8A59000 - \SystemRoot\System32\Drivers\Beep.SYS
F80EB000 - \SystemRoot\System32\DRIVERS\AvgAsCln.sys
F88DD000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
F88E5000 - \SystemRoot\System32\drivers\vga.sys
F8A5D000 - \SystemRoot\System32\Drivers\mnmdd.SYS
F8A5F000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys
F685E000 - \SystemRoot\system32\drivers\fwdrv.sys
F88ED000 - \SystemRoot\System32\Drivers\Msfs.SYS
F88F5000 - \SystemRoot\System32\Drivers\Npfs.SYS
F89F9000 - \SystemRoot\system32\DRIVERS\rasacd.sys
F684B000 - \SystemRoot\system32\DRIVERS\ipsec.sys
F67F3000 - \SystemRoot\system32\DRIVERS\tcpip.sys
F67D2000 - \SystemRoot\system32\DRIVERS\ipnat.sys
F8735000 - \SystemRoot\system32\DRIVERS\wanarp.sys
F67AA000 - \SystemRoot\system32\DRIVERS\netbt.sys
F8A0D000 - \SystemRoot\System32\drivers\ws2ifsl.sys
F6788000 - \SystemRoot\System32\drivers\afd.sys
F8745000 - \SystemRoot\system32\DRIVERS\netbios.sys
F675D000 - \SystemRoot\system32\DRIVERS\rdbss.sys
F8A61000 - \SystemRoot\system32\drivers\nod32drv.sys
F66EE000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys
F66DD000 - \SystemRoot\system32\drivers\khips.sys
F8755000 - \SystemRoot\System32\Drivers\Fips.SYS
F8A63000 - \SystemRoot\System32\Drivers\FileDisk.SYS
F8140000 - \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
F6600000 - \SystemRoot\System32\Drivers\Ntfs.SYS
F8775000 - \SystemRoot\System32\Drivers\Cdfs.SYS
F8905000 - \SystemRoot\system32\DRIVERS\usbccgp.sys
F79FF000 - \SystemRoot\system32\DRIVERS\hidusb.sys
F8785000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
F79FB000 - \SystemRoot\system32\DRIVERS\kbdhid.sys
F890D000 - \SystemRoot\system32\DRIVERS\USBSTOR.SYS
F8795000 - \SystemRoot\system32\drivers\LVUSBSta.sys
F62C0000 - \SystemRoot\system32\DRIVERS\LV302V32.SYS
F8A67000 - \SystemRoot\system32\DRIVERS\lv302af.sys
F87A5000 - \SystemRoot\system32\drivers\usbaudio.sys
F79F7000 - \SystemRoot\system32\DRIVERS\mouhid.sys
F6208000 - \SystemRoot\System32\Drivers\dump_atapi.sys
F8A69000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS
BF800000 - \SystemRoot\System32\win32k.sys
F68EB000 - \SystemRoot\System32\drivers\Dxapi.sys
F8915000 - \SystemRoot\System32\watchdog.sys
BF9C3000 - \SystemRoot\System32\drivers\dxg.sys
F8C44000 - \SystemRoot\System32\drivers\dxgthk.sys
BF9D5000 - \SystemRoot\System32\nv4_disp.dll
BFFA0000 - \SystemRoot\System32\ATMFD.DLL
BA4DC000 - \SystemRoot\system32\DRIVERS\ndisuio.sys
B922B000 - \SystemRoot\system32\drivers\wdmaud.sys
F8665000 - \SystemRoot\system32\drivers\sysaudio.sys
B901E000 - \SystemRoot\system32\DRIVERS\mrxdav.sys
B8F7B000 - \SystemRoot\system32\drivers\amon.sys
F8925000 - \??\C:\WINDOWS\system32\drivers\btserial.sys
B8F49000 - \??\C:\WINDOWS\system32\drivers\btslbcsp.sys
B8E2F000 - \SystemRoot\system32\DRIVERS\srv.sys
B8DB7000 - \SystemRoot\system32\DRIVERS\secdrv.sys
F8AE7000 - \??\C:\Program Files\CyberLink\PowerDVD\000.fcl
B8966000 - \SystemRoot\System32\Drivers\HTTP.sys
B7AD5000 - \??\C:\Program Files\acer\eRecovery\int15.sys
B2139000 - \SystemRoot\system32\drivers\kmixer.sys
F8C7D000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys

Total number of drivers = 140

Liste des programmes installes

1400
1400_Help
1400Trb
Adobe After Effects 7.0
Adobe After Effects 7.0
Adobe Bridge 1.0
Adobe Common File Installer
Adobe ExtendScript Toolkit 1.0
Adobe ExtendScript Toolkit 1.0
Adobe Flash Player 9 ActiveX
Adobe Flash Player Plugin
Adobe Help Center 2.0
Adobe Photoshop CS2
Adobe Photoshop CS2
Adobe Stock Photos 1.0
Adobe Stock Photos 1.0
adsl TV
AiO_Scan
AiOSoftware
nIRC v6.0
Apple Software Update
µTorrent
AutoUpdate
AVG Anti-Spyware 7.5
BitComet 0.89
Blender (remove only)
BSPlayer
BufferChm
CCleaner (remove only)
Copy
Correctif pour Lecteur Windows Media 11 (KB939683)
Correctif pour Windows XP (KB914440)
Correctif Windows XP - KB867282
Correctif Windows XP - KB873339
Correctif Windows XP - KB885250
Correctif Windows XP - KB885835
Correctif Windows XP - KB885836
Correctif Windows XP - KB886185
Correctif Windows XP - KB887472
Correctif Windows XP - KB888113
Correctif Windows XP - KB888302
Correctif Windows XP - KB890047
Correctif Windows XP - KB890175
Correctif Windows XP - KB890859
Correctif Windows XP - KB891781
CP_AtenaShokunin1Config
cp_dwShrek2Albums1
cp_dwShrek2Cards1
CreativeProjects
CreativeProjectsTemplates
CubeTime
CueTour
Destinations
Director
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
DocProc
DocumentViewer
EasyPHP 1.8
eMule
EVEREST Ultimate Edition v3.01
Fax
FileZilla (remove only)
GoldWave v5.06
Google Earth
Google Gmail Notifier
Guitar Pro 5.0
HexDecCharEditor V 1.02
HijackThis 1.99.1
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
HP Image Zone 4.7
HP Product Assistant
HP PSC & OfficeJet 4.7
HP Software Update
HPSystemDiagnostics
InstantShare
Java(TM) 6 Update 2
Java(TM) SE Runtime Environment 6 Update 1
Kaspersky Online Scanner
Knoll Light Factory 2
Labtec WebCam
Lecteur Windows Media 11
Logitech Audio Echo Cancellation Component
Logitech G-series Keyboard Software
Logitech Video Enumerator
Macromedia Flash Player 8
Messenger Plus! Live
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 French Language Pack
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0
Microsoft .NET Framework 3.0
Microsoft .NET Framework 3.0
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.5
mIRC
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)
Mise à jour de sécurité pour Windows XP (KB893756)
Mise à jour de sécurité pour Windows XP (KB896358)
Mise à jour de sécurité pour Windows XP (KB896423)
Mise à jour de sécurité pour Windows XP (KB896424)
Mise à jour de sécurité pour Windows XP (KB896428)
Mise à jour de sécurité pour Windows XP (KB899587)
Mise à jour de sécurité pour Windows XP (KB899591)
Mise à jour de sécurité pour Windows XP (KB900725)
Mise à jour de sécurité pour Windows XP (KB901017)
Mise à jour de sécurité pour Windows XP (KB901190)
Mise à jour de sécurité pour Windows XP (KB901214)
Mise à jour de sécurité pour Windows XP (KB902400)
Mise à jour de sécurité pour Windows XP (KB904706)
Mise à jour de sécurité pour Windows XP (KB905414)
Mise à jour de sécurité pour Windows XP (KB905749)
Mise à jour de sécurité pour Windows XP (KB908519)
Mise à jour de sécurité pour Windows XP (KB911562)
Mise à jour de sécurité pour Windows XP (KB911927)
Mise à jour de sécurité pour Windows XP (KB912919)
Mise à jour de sécurité pour Windows XP (KB913580)
Mise à jour de sécurité pour Windows XP (KB914388)
Mise à jour de sécurité pour Windows XP (KB914389)
Mise à jour de sécurité pour Windows XP (KB917344)
Mise à jour de sécurité pour Windows XP (KB917422)
Mise à jour de sécurité pour Windows XP (KB917953)
Mise à jour de sécurité pour Windows XP (KB918118)
Mise à jour de sécurité pour Windows XP (KB918439)
Mise à jour de sécurité pour Windows XP (KB919007)
Mise à jour de sécurité pour Windows XP (KB920213)
Mise à jour de sécurité pour Windows XP (KB920670)
Mise à jour de sécurité pour Windows XP (KB920683)
Mise à jour de sécurité pour Windows XP (KB920685)
Mise à jour de sécurité pour Windows XP (KB921398)
Mise à jour de sécurité pour Windows XP (KB921503)
Mise à jour de sécurité pour Windows XP (KB922616)
Mise à jour de sécurité pour Windows XP (KB922819)
Mise à jour de sécurité pour Windows XP (KB923191)
Mise à jour de sécurité pour Windows XP (KB923414)
Mise à jour de sécurité pour Windows XP (KB923689)
Mise à jour de sécurité pour Windows XP (KB923694)
Mise à jour de sécurité pour Windows XP (KB923789)
Mise à jour de sécurité pour Windows XP (KB923980)
Mise à jour de sécurité pour Windows XP (KB924191)
Mise à jour de sécurité pour Windows XP (KB924270)
Mise à jour de sécurité pour Windows XP (KB924496)
Mise à jour de sécurité pour Windows XP (KB924667)
Mise à jour de sécurité pour Windows XP (KB925454)
Mise à jour de sécurité pour Windows XP (KB925902)
Mise à jour de sécurité pour Windows XP (KB926255)
Mise à jour de sécurité pour Windows XP (KB926436)
Mise à jour de sécurité pour Windows XP (KB927779)
Mise à jour de sécurité pour Windows XP (KB927802)
Mise à jour de sécurité pour Windows XP (KB928255)
Mise à jour de sécurité pour Windows XP (KB928843)
Mise à jour de sécurité pour Windows XP (KB929123)
Mise à jour de sécurité pour Windows XP (KB930178)
Mise à jour de sécurité pour Windows XP (KB931261)
Mise à jour de sécurité pour Windows XP (KB931784)
Mise à jour de sécurité pour Windows XP (KB932168)
Mise à jour de sécurité pour Windows XP (KB935839)
Mise à jour de sécurité pour Windows XP (KB935840)
Mise à jour de sécurité pour Windows XP (KB936021)
Mise à jour de sécurité pour Windows XP (KB938829)
Mise à jour pour Windows XP (KB894391)
Mise à jour pour Windows XP (KB898461)
Mise à jour pour Windows XP (KB900485)
Mise à jour pour Windows XP (KB904942)
Mise à jour pour Windows XP (KB908531)
Mise à jour pour Windows XP (KB910437)
Mise à jour pour Windows XP (KB911280)
Mise à jour pour Windows XP (KB916595)
Mise à jour pour Windows XP (KB920872)
Mise à jour pour Windows XP (KB922582)
Mise à jour pour Windows XP (KB925720)
Mise à jour pour Windows XP (KB927891)
Mise à jour pour Windows XP (KB929338)
Mise à jour pour Windows XP (KB930916)
Mise à jour pour Windows XP (KB931836)
Mise à jour pour Windows XP (KB933360)
Mise à jour pour Windows XP (KB936357)
Mise à jour pour Windows XP (KB938828)
Mozilla Firefox (1.5)
Mozilla Firefox (2.0.0.7)
MSI Bluetooth Software
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 6.0 Parser (KB933579)
Multiquence v2.55
MVision
Nero 7 Demo
NOD32 Antivirus System
NOD32 FiX
Nokia Connectivity Cable Driver
Nokia PC Suite
Nokia PC Suite
Nokia Software Updater
Notepad++
NTI Backup NOW! 4
NTI Backup NOW! 4
NTI Burner Database
NTI Burner Database
NTI CD & DVD-Maker
NTI CD & DVD-Maker
NVIDIA Drivers
Package de pilotes Windows - Nokia Modem (11/03/2006 6.82.0.1)
Panda ActiveScan
PanoStandAlone
PC Connectivity Solution
PeerGuardian 2.0
PhotoGallery
PiMPStreamer
PiMPStreamer
PiMPStreamer
PowerDVD
ProductContext
Programme de gestion Camera de Labtec®
Programme de gestion Camera de Logitech®
PSP Brew 0.91
QFolder
QuickTime
Readme
Scan
ScannerCopy
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update pour Microsoft .NET Framework 2.0 (KB928365)
SiS 900 PCI Fast Ethernet Adapter Driver
SkinsHP1
Skype 3.1
Skype Plugin Manager
Source Dedicated Server
Steam(TM)
StuffPlug 3
Sunbelt Personal Firewall
TeamSpeak 2 RC2
TrayApp
UltraStar 0.5.2
UnInstall Gamesurround Fortissimo 4 Audio Device Driver
Unload
Video Converter 3
VideoLAN VLC media player pour PSPFreePlayer 0.8.5
WebFldrs XP
WebReg
WindowBlinds
Windows Communication Foundation
Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)
Windows Driver Package - Nokia Modem (02/15/2007 3.1)
Windows Genuine Advantage Notifications (KB905474)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live installer
Windows Live Messenger
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation
Windows Workflow Foundation
WinHTTrack Website Copier 3.41-2
winpcap-nmap 3.1
XLink Kai Evolution 7
XML Paper Specification Shared Components Pack 1.0
XviD4PSP by Winnydows
Yahoo! Install Manager
Yahoo! Toolbar
Yahoo! Toolbar avec bloqueur de fenêtres pop-up

Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Program Files

03/05/2005 01:54 <REP> .
03/05/2005 01:54 <REP> ..
04/05/2005 10:12 <REP> acer
03/05/2005 02:15 <REP> Adobe
01/08/2007 14:17 <REP> adslTV
08/05/2007 20:52 <REP> Alcohol Soft
31/01/2007 22:22 <REP> Apple Software Update
14/02/2007 18:50 <REP> AviSynth 2.5
18/06/2007 19:55 <REP> BB
14/04/2007 23:34 <REP> Blender Foundation
20/09/2007 23:14 <REP> CCleaner
03/07/2007 20:57 <REP> CubeTime
03/05/2005 02:18 <REP> CyberLink
30/01/2007 03:09 <REP> DAEMON Tools
30/01/2007 15:39 <REP> DIFX
30/01/2007 03:25 <REP> DivX
03/05/2007 20:34 <REP> EasyPHP1-8
12/09/2007 17:56 <REP> ESET
30/04/2007 01:31 <REP> Eurobarre
14/02/2007 18:50 <REP> ffdshow
03/05/2005 01:54 <REP> Fichiers communs
13/02/2007 14:51 <REP> FileZilla
30/01/2007 19:53 <REP> Gamesurround Fortissimo 4 mixer
16/07/2007 20:27 <REP> Giganology
02/08/2007 21:38 <REP> GoldWave
30/01/2007 03:33 <REP> Google
20/09/2007 23:22 <REP> Grisoft
16/03/2007 16:24 <REP> Guitar Pro 5
30/01/2007 16:15 <REP> Hewlett-Packard
06/08/2007 14:54 <REP> HexDecCharEditor V 1 02
30/01/2007 16:07 <REP> HP
11/04/2007 22:36 <REP> IDM Computer Solutions
03/05/2005 01:59 <REP> Internet Explorer
30/01/2007 02:35 <REP> Java
11/05/2007 16:31 <REP> Labtec
10/02/2007 13:15 <REP> Lavalys
30/01/2007 14:49 <REP> Logitech
19/03/2007 18:19 <REP> Maxis
03/05/2005 01:58 <REP> Messenger
30/01/2007 02:57 <REP> Messenger Plus! Live
13/06/2007 18:13 <REP> Microsoft CAPICOM 2.1.0.2
03/05/2005 02:02 <REP> microsoft frontpage
30/01/2007 15:30 <REP> Microsoft Office
30/01/2007 15:30 <REP> Microsoft.NET
30/01/2007 16:33 <REP> MICROSTAR
10/02/2007 14:05 <REP> mIRC
03/05/2005 02:00 <REP> Movie Maker
30/01/2007 02:51 <REP> Mozilla Firefox
14/02/2007 19:13 <REP> MSBuild
03/05/2005 01:58 <REP> MSN Gaming Zone
30/01/2007 02:56 <REP> MSN Messenger
23/02/2007 20:29 <REP> mSoft
16/08/2007 03:04 <REP> MSXML 4.0
16/08/2007 03:06 <REP> MSXML 6.0
02/08/2007 22:57 <REP> Multiquence
30/01/2007 03:02 <REP> Nero
03/05/2005 02:00 <REP> NetMeeting
03/05/2005 02:17 <REP> NewTech Infosystems
13/02/2007 17:12 <REP> Nmap
30/01/2007 15:39 <REP> Nokia
30/01/2007 03:07 <REP> Notepad++
03/05/2005 01:58 <REP> Online Services
03/05/2005 02:00 <REP> Outlook Express
20/04/2007 17:24 <REP> PC Connectivity Solution
05/08/2007 13:39 <REP> PeerGuardian2
30/01/2007 21:42 <REP> PiMPWare
19/06/2007 19:50 <REP> PowerISO
18/06/2007 19:59 <REP> PowerTracks DirectX Plugins
16/02/2007 18:41 <REP> PSP Brew
09/08/2007 19:40 <REP> PSPFreePlayer
12/07/2007 19:37 <REP> QuickTime
23/02/2007 20:28 <REP> Real
16/04/2007 22:49 <REP> Red Kawa
14/02/2007 19:05 <REP> Reference Assemblies
03/05/2005 02:00 <REP> Services en ligne
30/01/2007 01:29 <REP> SiSLan
26/03/2007 21:44 <REP> Skype
15/06/2007 19:44 <REP> Softwin
19/06/2007 20:06 <REP> Spybot - Search & Destroy
30/01/2007 17:05 <REP> Stardock
30/01/2007 02:58 <REP> StuffPlug3
12/09/2007 15:34 <REP> Sunbelt Software
31/07/2007 12:42 <REP> TablEdit32
20/09/2007 22:26 <REP> Teamspeak2_RC2
09/08/2007 15:58 <REP> The Privacy Guard
09/02/2007 22:07 <REP> Trapcode
09/07/2007 15:01 <REP> UltraStar
23/06/2007 13:46 <REP> Valve
30/01/2007 03:05 <REP> VideoLAN
23/02/2007 03:28 <REP> Webteh
07/06/2007 19:59 <REP> Windows Live
30/01/2007 03:15 <REP> Windows Media Connect 2
03/05/2005 01:58 <REP> Windows Media Player
03/05/2005 01:58 <REP> Windows NT
10/02/2007 12:58 <REP> WinHex
07/06/2007 20:33 <REP> WinHTTrack
14/02/2007 18:50 <REP> Winnydows
13/02/2007 16:09 <REP> WinPcap
30/01/2007 02:52 <REP> WinRAR
20/04/2007 23:42 <REP> World of Warcraft
03/05/2005 02:02 <REP> xerox
31/01/2007 22:35 <REP> Xilisoft
21/02/2007 18:13 <REP> XLink Kai Evolution VII
20/09/2007 23:15 <REP> Yahoo!
20/04/2007 22:32 <REP> Zone Dactylo
0 fichier(s) 0 octets
105 Rép(s) 58 227 523 584 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Program Files\fichiers communs

03/05/2005 01:54 <REP> .
03/05/2005 01:54 <REP> ..
03/05/2005 01:54 <REP> Microsoft Shared
03/05/2005 01:54 <REP> SpeechEngines
03/05/2005 01:54 <REP> ODBC
03/05/2005 01:59 <REP> System
03/05/2005 02:00 <REP> MSSoap
03/05/2005 02:00 <REP> Services
03/05/2005 02:10 <REP> InstallShield
03/05/2005 02:15 <REP> Adobe
03/05/2005 02:17 <REP> NewTech Infosystems
03/05/2005 02:17 <REP> muvee Technologies
30/01/2007 02:35 <REP> Java
30/01/2007 03:02 <REP> Ahead
30/01/2007 14:48 <REP> Labtec
30/01/2007 15:07 <REP> Adobe Systems Shared
30/01/2007 15:30 <REP> DESIGNER
30/01/2007 16:14 <REP> Hewlett-Packard
30/01/2007 16:20 <REP> HP
23/02/2007 20:28 <REP> Real
26/03/2007 21:45 <REP> Skype
20/04/2007 17:27 <REP> Nokia
20/04/2007 17:27 <REP> PCSuite
11/05/2007 16:34 <REP> LogiShrd
15/06/2007 17:42 <REP> Logitech
15/06/2007 19:42 <REP> Softwin
0 fichier(s) 0 octets
26 Rép(s) 58 228 539 392 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

03/05/2005 02:13 <REP> .
03/05/2005 02:13 <REP> ..
07/03/2001 07:00 127 033 MSOWS40c.DLL
03/06/1999 12:09 122 937 MSOWS409.DLL
30/01/2007 15:30 <REP> 1036
15/07/2003 10:52 35 896 MSOSV.DLL
30/01/2007 15:30 <REP> 1033
11/07/2003 14:15 1 292 872 MSONSEXT.DLL
11/07/2003 06:25 80 448 PKMWS.DLL
5 fichier(s) 1 659 186 octets
4 Rép(s) 58 228 539 392 octets libres
Le volume dans le lecteur C s'appelle ACER
Le numéro de série du volume est 320D-180E

Répertoire de C:\

09/08/2007 20:24 293 947 CisoPlus.exe
1 fichier(s) 293 947 octets
0 Rép(s) 58 228 539 392 octets libres

c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Nokia_PC_Suite_683_rel_14_1_fre.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstCCD.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstPCS.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstPCSFEMsi.exe
c:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 7.0.0.125\English\setup.exe
c:\Documents and Settings\Thibob\Local Settings\Temp\ycomp_setup.exe
c:\Documents and Settings\Thibob\Bureau\avgas-setup-7.5.1.43.exe
c:\Documents and Settings\Thibob\Bureau\ccsetup200.exe
c:\Documents and Settings\Thibob\Bureau\OTMoveIt.exe
c:\Documents and Settings\Thibob\Bureau\ts2_client_rc2_2032.exe
c:\Documents and Settings\Thibob\Bureau\Virtual Dub\auxsetup.exe
c:\Documents and Settings\Thibob\Bureau\Virtual Dub\vdub.exe
c:\Documents and Settings\Thibob\Bureau\Virtual Dub\VirtualDub.exe
c:\Documents and Settings\Thibob\Bureau\Virtual Dub\Conversor\Conversor.exe
c:\Documents and Settings\Thibob\Bureau\PSP\Pack Dev PSP.exe
c:\Documents and Settings\Thibob\Bureau\PSP\Custom\RCOEdit113\RCOEdit.exe
c:\Documents and Settings\Thibob\Bureau\PSP\PSPGen\News\Tuto Message Intro\pfs-setup.exe
c:\Documents and Settings\Thibob\Bureau\wdasm89\W32dsm89.exe
c:\Documents and Settings\Thibob\Bureau\Zone Dactylo\Zone Dactylo.exe
c:\Documents and Settings\Thibob\Bureau\sreng2\SREngPS.EXE
c:\Documents and Settings\Thibob\Bureau\odbg110\OLLYDBG.EXE
c:\Documents and Settings\Thibob\Bureau\odbg110\OLLYDBG_original.EXE
c:\Documents and Settings\Thibob\Bureau\Remote Joy\Fichiers\PSPGen.exe
c:\Documents and Settings\Thibob\Bureau\Remote Joy\Fichiers\pspsh.exe
c:\Documents and Settings\Thibob\Bureau\Remote Joy\Fichiers\remotejoy.exe
c:\Documents and Settings\Thibob\Bureau\Remote Joy\Fichiers\usbhostfs_pc.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\KEYGEN.EXE
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crackme sans message\WTF_CrackMe.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant +\due-cm2.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant +\KeyGenMe_#1_cLoNeTrOnE.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant +\KeyGenMe_#1_cLoNeTrOnE-cr.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant +\KeyGenMe_#1_cLoNeTrOnE-cr2.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crackme sans bouton OK\crackme3.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant ++\CRACKME.EXE
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant ++\CrackMe_Chronos.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\CrackIt.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\CRACKME.EXE
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\CrackMe01 Chronos.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\crackme0x1.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\CrackMe11.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\CrackMe2.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\Crackme3.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\crackmedos.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\KeyGen_PsYc0p4tH.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\Keygenme_atlantis.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\OllyDead.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me pour debutant\Unpack.cn Keygen Me.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me Compresse\0247.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me Compresse\CrackMe9.exe
c:\Documents and Settings\Thibob\Bureau\Crack-me\Crack-me Compresse\dare2crackme.exe
c:\Documents and Settings\Thibob\Bureau\Downloads\SpySweeper5-5v4SNRSetup_EN.exe
c:\Documents and Settings\Thibob\Bureau\basic\ALARME.EXE
c:\Documents and Settings\Thibob\Bureau\basic\BC.EXE
c:\Documents and Settings\Thibob\Bureau\basic\BRUN45.EXE
c:\Documents and Settings\Thibob\Bureau\basic\CLS.EXE
c:\Documents and Settings\Thibob\Bureau\basic\KEYGEN.EXE
c:\Documents and Settings\Thibob\Bureau\basic\KEYGEN1.EXE
c:\Documents and Settings\Thibob\Bureau\basic\Lancez-moi.exe
c:\Documents and Settings\Thibob\Bureau\basic\LIB.EXE
c:\Documents and Settings\Thibob\Bureau\basic\LINK.EXE
c:\Documents and Settings\Thibob\Bureau\basic\QB.EXE
c:\Documents and Settings\Thibob\Bureau\stud_PE1.7.1b\stud_PE.exe
c:\Documents and Settings\Thibob\Bureau\w32dsmv10\kWdsm.exe
c:\Documents and Settings\Thibob\Bureau\ResHacker\ResHacker.exe
c:\Documents and Settings\Thibob\Bureau\hijackthis\proi.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\catchme.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\diff.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\dumphive.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\find2.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\Fport.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\grep.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\KProcCheck.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\LFiles.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\md5sums.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\pslist.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\streams.exe
c:\Documents and Settings\Thibob\Bureau\DiagHelp\DiagHelp\swreg.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{14A99F26-D5FC-4C70-A034-49DA6193BFD5}\_18be6784.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{14A99F26-D5FC-4C70-A034-49DA6193BFD5}\_294823.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{14A99F26-D5FC-4C70-A034-49DA6193BFD5}\_2cd672ae.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{14A99F26-D5FC-4C70-A034-49DA6193BFD5}\_4ae13d6c.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{BEBDCB3E-D936-4C8D-86ED-11845A05B47A}\kaiLaunch.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{65362568-77D9-4116-90FD-CCB5C1FEEAC9}\_124305e.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{65362568-77D9-4116-90FD-CCB5C1FEEAC9}\_154754de.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{65362568-77D9-4116-90FD-CCB5C1FEEAC9}\_440d491c.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{65362568-77D9-4116-90FD-CCB5C1FEEAC9}\_4d064db7.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{A2F6CE74-DEDF-457F-95C8-41B871B305EF}\_124305e.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{A2F6CE74-DEDF-457F-95C8-41B871B305EF}\_154754de.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{A2F6CE74-DEDF-457F-95C8-41B871B305EF}\_440d491c.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{A2F6CE74-DEDF-457F-95C8-41B871B305EF}\_4d064db7.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{BEF726DD-4037-4214-8C6A-E625C02D2870}\ARPPRODUCTICON.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{35725FBC-A136-4A46-9F29-091759D9BB93}\ARPPRODUCTICON.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}\Icon048298C9.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{885A63EA-382B-4DD4-A755-14809B8557D6}\ARPPRODUCTICON.exe
c:\Documents and Settings\Thibob\Application Data\Microsoft\Installer\{EA516024-D84D-41F1-814F-83175A6188F2}\ARPPRODUCTICON.exe
c:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe
c:\Documents and Settings\Thibob\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_en_US.exe
c:\Documents and Settings\Thibob\Nmap\nmap.exe
c:\Documents and Settings\Thibob\Nmap\Uninstall.exe
c:\Documents and Settings\Thibob\Nmap\winpcap-nmap-3.1.B.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Grisoft\AVG Anti-Spyware 7.5\Downloads\help.dll
c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
c:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\extensions\{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e}\components\nstidy.dll
c:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}\components\ColorZilla.dll

****** Fin du rapport DiagHelp

Le rapport SREng :

[CODE]

2007-09-21,20:52:30

System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed

Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Winsock Provider
Autorun.Inf
HOSTS File
Process Privileges Scan

Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<msnmsgr><"C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<Steam><"c:\program files\valve\steam\steam.exe" -silent> [(Verified)Valve]
<PeerGuardian><"C:\Program Files\PeerGuardian2\pg2.exe"> [Methlabs]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
<FFTI><"C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath="C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles/ziqstwdo.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}"> [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<LaunchApp><Alaunch> [N/A]
<SiSUSBRG><C:\WINDOWS\SiSUSBrg.exe> [Silicon Integrated Systems Corp.]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<MSPY2002><"C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002ASync><"C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002A><"C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName> [(Verified)Microsoft Corporation]
<eRecoveryService><C:\Windows\System32\Check.exe> [acer Inc.]
<{0228e555-4f9c-4e35-a3ec-b109a192b4c2}><"C:\Program Files\Google\Gmail Notifier\gnotify.exe"> [Google Inc.]
<Launch LGDCore><"C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE> [Logitech Inc.]
<Launch LCDMon><"C:\Program Files\Logitech\G-series Software\LCDMon.exe"> [Logitech Inc.]
<EnvyHFCPL><"C:\Program Files\Gamesurround Fortissimo 4 mixer\EnMixCPL.exe"> [VIA Technologies, Inc]
<HP Software Update><"C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"> [Hewlett-Packard Co.]
<PCSuiteTrayApplication><"C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup> [Nokia]
<NvCplDaemon><"RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<nwiz><"nwiz.exe" /install> []
<NvMediaCenter><"RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [(Verified)Microsoft Windows XP Publisher]
<LogitechVideoRepair><"C:\Program Files\Logitech\Video\ISStart.exe"> [N/A]
<SunJavaUpdateSched><"C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"> [(Verified)"Sun Microsystems, Inc."]
<nod32kui><"C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE> [Eset ]
<LogitechCommunicationsManager><"C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"> [(Verified)Logitech Inc]
<LogitechQuickCamRibbon><"C:\Program Files\Labtec\WebCam10\WebCam10.exe" /hide> [(Verified)Logitech Inc]
<!AVG Anti-Spyware><"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [(Verified)GRISOFT LTD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll> [(Verified)GRISOFT LTD]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WBSrv]
<WinlogonNotify: WBSrv><C:\PROGRA~1\STARDOCK\OBJECT~1\WINDOW~1\wbsrv.dll> [Stardock]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
<WinlogonNotify: WgaLogon><WgaLogon.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows XP Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<Carnet d'adresses 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8b15971b-5355-4c82-8c07-7e181ea07608}]
<Fax><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<DAEMON Tools><; "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033> [(Verified)DAEMON Tools Code Signing Services]
<LanguageShortcut><; "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"> [(Verified)CyberLink]
<LogitechQuickCamRibbon><; "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide> [N/A]
<NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NudgeMania><; C:\Program Files\NudgeMania\NudgeMania.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<RemoteControl><; "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"> [(Verified)CyberLink]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Skype><; "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized> [(Verified)Skype Technologies SA]

==================================
Startup Folders
[BTTray]
<C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\BTTray.lnk --> C:\PROGRA~1\MICROS~3\BLUETO~1\BTTray.exe []><N>

==================================
Services
[Adobe LM Service / Adobe LM Service][Stopped/Manual Start]
<"C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Gestion d'applications / AppMgmt][Stopped/Manual Start]
<C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start]
<C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe><GRISOFT s.r.o.>
[Windows Presentation Foundation Font Cache 3.0.0.0 / FontCache3.0.0.0][Stopped/Manual Start]
<c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe><Microsoft Corporation>
[Windows CardSpace / idsvc][Stopped/Manual Start]
<"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"><Microsoft Corporation>
[LVSrvLauncher / LVSrvLauncher][Stopped/Auto Start]
<C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe><Logitech Inc.>
[Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled]
<"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"><Microsoft Corporation>
[NOD32 Kernel Service / NOD32krn][Running/Auto Start]
<"C:\Program Files\Eset\nod32krn.exe"><Eset>
[NVIDIA Display Driver Service / NVSvc][Stopped/Disabled]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start]
<C:\WINDOWS\system32\HPZipm12.exe><HP>
[Cyberlink RichVideo Service(CRVS) / RichVideo][Running/Auto Start]
<"C:\Program Files\CyberLink\Shared Files\RichVideo.exe"><>
[ServiceLayer / ServiceLayer][Running/Manual Start]
<"C:\Program Files\PC Connectivity Solution\ServiceLayer.exe"><Nokia.>
[Sunbelt Personal Firewall 4 / SPF4][Stopped/Auto Start]
<"C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe"><Sunbelt Software>
[StarWind iSCSI Service / StarWindService][Running/Auto Start]
<C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe><Rocket Division Software>
[Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start]
<"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"><>

==================================
Drivers
[Service for WDM 3D Audio Driver / ALCXSENS][Stopped/Manual Start]
<system32\drivers\ALCXSENS.SYS><N/A>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start]
<system32\drivers\ALCXWDM.SYS><N/A>
[AMON / AMON][Running/Auto Start]
<\SystemRoot\system32\drivers\amon.sys><Eset>
[AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start]
<\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys><N/A>
[AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
<System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
[BDFSDRV /

La suite du log :

BDFSDRV][Stopped/Manual Start]
<\??\C:\Program Files\Softwin\BitDefender10\bdfsdrv.sys><N/A>
[bdpredir / bdpredir][Stopped/System Start]
<\??\C:\Program Files\Softwin\BitDefender10\bdpredir.sys><N/A>
[BDRSDRV / BDRSDRV][Stopped/Auto Start]
<\??\C:\Program Files\Softwin\BitDefender10\bdrsdrv.sys><N/A>
[Bluetooth Audio / BtAudio][Running/Manual Start]
<system32\DRIVERS\btaudio.sys><>
[Bluetooth Virtual Communications Driver / BTDriver][Running/Manual Start]
<system32\DRIVERS\btport.sys><>
[Bluetooth Protocol Stack / BTKRNL][Running/Boot Start]
<\SystemRoot\system32\drivers\btkrnl.sys><>
[Bluetooth Serial Driver / BTSERIAL][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\btserial.sys><N/A>
[Bluetooth Port Client Driver / BTSLBCSP][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\btslbcsp.sys><>
[Bluetooth LAN Access Server / BTWDNDIS][Running/Manual Start]
<system32\DRIVERS\btwdndis.sys><>
[WIDCOMM USB Bluetooth Driver / BTWUSB][Stopped/Manual Start]
<System32\Drivers\btwusb.sys><>
[Gamesurround Fortissimo 4 Audio Controller WDM / Envy24HFS][Running/Manual Start]
<system32\drivers\Envy24HF.sys><VIA - IC Ensemble, Inc.>
[Firewall Driver / fwdrv][Running/System Start]
<\SystemRoot\system32\drivers\fwdrv.sys><Sunbelt Software>
[IEEE-1284.4 Driver HPZid412 / HPZid412][Stopped/Manual Start]
<system32\DRIVERS\HPZid412.sys><HP>
[Print Class Driver for IEEE-1284.4 HPZipr12 / HPZipr12][Stopped/Manual Start]
<system32\DRIVERS\HPZipr12.sys><HP>
[USB to IEEE-1284.4 Translation Driver HPZius12 / HPZius12][Stopped/Manual Start]
<system32\DRIVERS\HPZius12.sys><HP>
[InCD File System / InCDFs][Stopped/Disabled]
<system32\drivers\InCDFs.sys><N/A>
[InCDPass / InCDPass][Stopped/System Start]
<system32\drivers\InCDPass.sys><N/A>
[InCD Reader / InCDRm][Stopped/System Start]
<system32\drivers\InCDRm.sys><N/A>
[int15.sys / int15.sys][Running/Manual Start]
<\??\C:\Program Files\acer\eRecovery\int15.sys><N/A>
[Kerio HIPS Driver / khips][Running/System Start]
<\SystemRoot\system32\drivers\khips.sys><Sunbelt Software>
[LibUsb-Win32 - Kernel Driver 11/20/2005, 20051120 / libusb0][Stopped/Manual Start]
<system32\DRIVERS\libusb0.sys><http://libusb-win32.sourceforge.net>
[Logitech AEC Driver / LVcKap][Stopped/Manual Start]
<system32\DRIVERS\LVcKap.sys><>
[Logitech Machine Vision Engine Loader / LVMVDrv][Stopped/Manual Start]
<system32\DRIVERS\LVMVDrv.sys><Logitech Inc.>
[Logitech USB Monitor Filter / LVUSBSta][Running/Manual Start]
<system32\drivers\LVUSBSta.sys><Logitech Inc.>
[Nokia USB Phone Parent / nmwcd][Stopped/Manual Start]
<system32\drivers\nmwcd.sys><Nokia>
[Nokia USB Generic / nmwcdc][Stopped/Manual Start]
<system32\drivers\nmwcdc.sys><Nokia>
[Nokia USB Modem / nmwcdcm][Stopped/Manual Start]
<system32\drivers\nmwcdcm.sys><Nokia>
[nod32drv / nod32drv][Running/System Start]
<\SystemRoot\system32\drivers\nod32drv.sys><N/A>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
<system32\drivers\npf.sys><CACE Technologies>
[Upper Class Filter Driver / NTIDrvr][Running/Manual Start]
<system32\DRIVERS\NTIDrvr.sys><NewTech Infosystems, Inc.>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Volume Adapter / pepifilter][Running/Manual Start]
<system32\DRIVERS\lv302af.sys><Labtec Inc.>
[Labtec WebCam Pro(PID_08A0) / PID_08A0][Stopped/Manual Start]
<system32\DRIVERS\LV302AV.SYS><Labtec Inc.>
[Logitech QuickCam IM(PID_PEPI) / PID_PEPI][Running/Manual Start]
<system32\DRIVERS\LV302V32.SYS><Labtec Inc.>
[D-Link Air Wireless USB Adapter Driver / PRISM_USB][Stopped/Manual Start]
<system32\DRIVERS\PRISMUSB.sys><GlobespanVirata, Inc.>
[PsSdk30 / PsSdk30][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\Drivers\PsSdk30.drv><N/A>
[Pilote de liaison parallèle directe / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
<\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Secdrv / Secdrv][Running/Auto Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SiS AGP Filter / SISAGP][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\SISAGPX.sys><Silicon Integrated Systems Corporation>
[SiS PCI Fast Ethernet Adapter Driver / SISNIC][Running/Manual Start]
<system32\DRIVERS\sisnic.sys><SiS Corporation>
[sptd / sptd][Running/Boot Start]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[Codec Teletext standard / WSTCODEC][Stopped/Manual Start]
<system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[{95808DC4-FA4A-4c74-92FE-5B863F82066B} / {95808DC4-FA4A-4c74-92FE-5B863F82066B}][Running/Auto Start]
<\??\C:\Program Files\CyberLink\PowerDVD\000.fcl><N/A>

==================================
Browser Add-ons
[Yahoo! Toolbar Helper]
{02478D38-C3F9-4EFB-9B51-7695ECA05670} <C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll, Yahoo! Inc.>
[BitComet Helper]
{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <D:\BitComet\tools\BitCometBHO_1.1.5.19.dll, BitComet>
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_02]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll, Sun Microsystems, Inc.>
[WinHTTrackLauncher Class]
{36ECAF82-3300-8F84-092E-AFF36D6C7040} <C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll, >
[&Rechercher]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[]
{e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A>
[Yahoo! Toolbar avec bloqueur de fenêtres pop-up]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} <C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll, Yahoo! Inc.>
[CKAVWebScan Object]
{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} <C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll, Kaspersky Lab>
[YInstStarter Class]
{30528230-99f7-4bb4-88d8-fa1d4f56a2ab} <C:\PROGRA~1\YAHOO!\Common\yinsthelper.dll, Yahoo! Inc.>
[Java Plug-in 1.6.0_02]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll, Sun Microsystems, Inc.>
[ActiveScan Installer Class]
{9A9307A0-7DA4-4DAF-B042-5009F29E09E1} <C:\WINDOWS\Downloaded Program Files\asinst.dll, Panda Software>
[Java Plug-in 1.6.0_01]
{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_02]
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_02]
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Yahoo! Toolbar Helper]
{02478D38-C3F9-4EFB-9B51-7695ECA05670} <C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll, Yahoo! Inc.>
[CKAVWebScan Object]
{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} <C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll, Kaspersky Lab>
[InformationCardSigninHelper Class]
{19916E01-B44E-4E31-94A4-4696DF46157B} <C:\WINDOWS\system32\icardie.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[IconX Class]
{37C5D6EF-B34A-45E3-8529-B0443B8BAD3C} <C:\WINDOWS\system32\btxppanel.dll, >
[BitComet Helper]
{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <D:\BitComet\tools\BitCometBHO_1.1.5.19.dll, BitComet>
[Reporte Class]
{4A2A4430-3967-4461-94C7-BD95C419F3CF} <C:\WINDOWS\system32\ActiveScan\ascontrol.dll, Panda Software>
[CKAVReportCtrl Object]
{6117669B-8C2D-41FA-A6D9-9E484B999CF0} <C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll, Kaspersky Lab>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Seleccion Class]
{6CEC0297-FAFB-41FB-97EA-77E3081B1DFE} <C:\WINDOWS\system32\ActiveScan\ascontrol.dll, Panda Software>
[ControlConexion Class]
{6FDCDD41-6C97-4A3B-9E6D-0144B66A1CE4} <C:\WINDOWS\system32\ActiveScan\ascontrol.dll, Panda Software>
[Active Desktop Mover]
{72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll, Sun Microsystems, Inc.>
[Panda ActiveScan]
{96567F65-E04C-4611-AF29-7CDEA6FA6A84} <C:\WINDOWS\system32\ACTIVE~1\as.dll, Panda Software>
[ActiveScan Installer Class]
{9A9307A0-7DA4-4DAF-B042-5009F29E09E1} <C:\WINDOWS\Downloaded Program Files\asinst.dll, Panda Software>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[QuickTimeCheck Class]
{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} <C:\Program Files\QuickTime\QTSystem\QuickTimeCheck.ocx, Apple Inc.>
[]
{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL, Microsoft Corporation>
[XML HTTP Request]
{ED8C108E-4349-11D2-91A4-00C04F7969E8} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
[Yahoo! Toolbar avec bloqueur de fenêtres pop-up]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} <C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll, Yahoo! Inc.>
[XML HTTP]
{F6D90F16-9C73-11D3-B32E-00C04F990BB4} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
[Download all links using BitComet]
<res://D:\BitComet\BitComet.exe/AddAllLink.htm, N/A>
[Download all videos using BitComet]
<res://D:\BitComet\BitComet.exe/AddVideo.htm, N/A>
[Download link using &BitComet]
<res://D:\BitComet\BitComet.exe/AddLink.htm, N/A>
[E&xporter vers Microsoft Excel]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>

==================================
Running Processes
[PID: 616 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 688 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 712 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0017.0]
[C:\PROGRA~1\STARDOCK\OBJECT~1\WINDOW~1\wbsrv.dll] [Stardock, 5, 0, 0, 1]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll] [Stardock.Net, Inc, 5.0]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 756 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)]
[PID: 768 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 904 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 972 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 1108 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\windows\system32\wudfsvc.dll] [Microsoft Corporation, 6.0.5730.0 (winmain.060915-1845)]
[c:\windows\system32\WUDFPlatform.dll] [Microsoft Corporation, 6.0.5730.0 (winmain.060915-1845)]
[PID: 1328 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 1560 / Thibob][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\tray.dll] [N/A, ]
[C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Fichiers communs\Ahead\lib\NeroDigitalExt.dll] [Nero AG, 2, 0, 0, 8]
[C:\Program Files\Fichiers communs\Ahead\lib\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Fichiers communs\Ahead\lib\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Fichiers communs\Ahead\lib\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36]
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[C:\Program Files\Notepad++\nppcm.dll] [Burgaud.com, 1.2.1]
[C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [GRISOFT s.r.o., 7, 5, 1, 36]
[C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll] [Nero AG, 2, 0, 0, 6]
[C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Eset\nodshex.dll] [N/A, ]
[C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll] [Sun Microsystems, Inc., 6.0.20.6]
[PID: 1664 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[C:\WINDOWS\system32\bthcrp.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\WidcommSdk.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\wbtapi.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\hpzsnt12.dll] [HP, 2.335.5.0]
[C:\WINDOWS\system32\mdimon.dll] [Microsoft Corporation, 11.3.2175.0]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll] [Microsoft Corporation, 11.3.2175.0]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll] [Microsoft Corporation, 6.0.5824.16384 (winmain(wmbla).060911-0725)]
[PID: 1952 / SYSTEM][C:\Program Files\Eset\nod32krn.exe] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\nod32krr.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\ps_amon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_amon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\ps_dmon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_dmon.dll] [N/A, ]
[C:\Program Files\Eset\ps_emon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_emon.dll] [N/A, ]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\Program Files\Eset\ps_nod32.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_nod32.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\ps_upd.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_upd.dll] [N/A, ]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 1976 / SYSTEM][C:\WINDOWS\system32\HPZipm12.exe] [HP, 9, 0, 0, 0]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 2020 / SYSTEM][C:\Program Files\CyberLink\Shared Files\RichVideo.exe] [, 1.1.0808 ]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 348 / SYSTEM][C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe] [Rocket Division Software, 2.6.1 Build 0x20050401]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 692 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 2348 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2544 / Thibob][C:\Program Files\Logitech\G-series Software\LGDCore.exe] [Logitech Inc., 1.02.218]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\Logitech\G-series Software\LGDRes.dll] [Logitech Inc., 1.02.218]
[C:\Program Files\Logitech\G-series Software\LgLcdApi.dll] [Logitech Inc., 1.02.218]
[PID: 2644 / Thibob][C:\Program Files\Logitech\G-series Software\LCDMon.exe] [Logitech Inc., 1.02.218]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 2920 / Thibob][C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe] [Logitech Inc., 1.02.218]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\Logitech\G-series Software\LgLcdApi.dll] [Logitech Inc., 1.02.218]
[PID: 2932 / Thibob][C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe] [Logitech Inc., 1.02.218]
[C:\WINDOWS\system32\odbcbcp.dll] [Microsoft Corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\Logitech\G-series Software\LgLcdApi.dll] [Logitech Inc., 1.02.218]
[PID: 3084 / Thibob][C:\Program Files\Gamesurround Fortissimo 4 mixer\EnMixCPL.exe] [VIA Technologies, Inc, 5.12.1.3648]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\Gamesurround Fortissimo 4 mixer\e24rclib.dll] [VIA Technologies, Inc, 5, 12, 1, 3630]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Gamesurround Fortissimo 4 mixer\cplDll.dll] [QSound Labs, Inc., 2, 0, 6, 106]
[PID: 3096 / Thibob][C:\Program Files\HP\HP Software Update\HPWuSchd2.exe] [Hewlett-Packard Co., 50.0.146.000]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 3156 / Thibob][C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe] [Nokia, 6, 83, 75, 3]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] [Nokia, 6, 83, 92, 11]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Nokia\Nokia PC Suite 6\PCSSupportSetup.DLL] [Nokia, 6, 83, 20, 3]
[C:\Program Files\PC Connectivity Solution\ConnAPI.DLL] [Nokia., 6, 83, 80, 4]
[C:\WINDOWS\system32\MFC71U.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\PC Connectivity Solution\ConfServer.dll] [Nokia, 6, 83, 34, 2]
[C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL] [Microsoft Corporation, 11.0.5510]
[C:\Program Files\Nokia\Nokia PC Suite 6\Lang\LaunchApplication_fre.NLR] [Nokia, 6, 83, 77, 2]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 3212 / SYSTEM][C:\Program Files\PC Connectivity Solution\ServiceLayer.exe] [Nokia., 6, 83, 78, 3]
[C:\Program Files\PC Connectivity Solution\NclTools.dll] [Nokia, 6, 83, 31, 2]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\PC Connectivity Solution\Transports\NCLIrDAMM.dll] [Nokia Corp., 6, 83, 32, 1]
[C:\Program Files\PC Connectivity Solution\Transports\NCLRSMM.dll] [Nokia Corp., 6, 83, 40, 1]
[C:\Program Files\PC Connectivity Solution\Transports\NCLUSBMM.dll] [Nokia., 6, 83, 54, 2]
[C:\Program Files\PC Connectivity Solution\Transports\NclMSBTMM.dll] [Nokia Corp., 6, 83, 54, 1]
[PID: 3336 / Thibob][C:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.10.9371]
[C:\WINDOWS\system32\nvapi.dll] [N/A, ]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\WINDOWS\system32\NVRSFR.DLL] [NVIDIA Corporation, 6.14.10.9371]
[PID: 3408 / Thibob][C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe] [Sun Microsystems, Inc., 6.0.20.6]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll] [Stardock.Net, Inc, 5.0]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 3440 / Thibob][C:\Program Files\Eset\nod32kui.exe] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\nod32rui.dll] [N/A, ]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\Eset\pu_amon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_amon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pu_dmon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_dmon.dll] [N/A, ]
[C:\Program Files\Eset\pu_emon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_emon.dll] [N/A, ]
[C:\Program Files\Eset\pu_imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\Program Files\Eset\pu_nod32.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_nod32.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pu_upd.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_upd.dll] [N/A, ]
[PID: 3452 / Thibob][C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe] [Labtec Inc,, 1.4.7.1111]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\DevMngr.dll] [Labtec Inc,, 1.4.7.1111]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVMaEnum.dll] [Labtec Inc., 10.5.1.1130]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComCX.dll] [Labtec Inc., 10.5.1.1130]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Labtec\WebCam10\EFVal.dll] [Labtec Inc., 10.5.1.1130]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\BRSkypePlugin.dll] [Labtec Inc,, 1.4.7.1111]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\AolPlugin.dll] [Labtec Inc,, 1.4.7.1111]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\YahooPlugin.dll] [Labtec Inc,, 1.4.7.1111]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LCMServerPS.dll] [N/A, ]
[PID: 3616 / Thibob][C:\Program Files\acer\eRecovery\Monitor.exe] [acer Inc., 1, 2, 9, 0]
[C:\Program Files\acer\eRecovery\Cdrw32.dll] [NewTech Infosystems, Inc., 3, 1, 0, 57]
[C:\Program Files\acer\eRecovery\CdrMmc32.dll] [NewTech Infosystems, Inc., 3, 1, 0, 132]
[C:\Program Files\acer\eRecovery\CdrwEx32.dll] [NewTech Infosystems, Inc., 3, 1, 0, 73]
[C:\Program Files\acer\eRecovery\ImagFile.dll] [NewTech Infosystems, Inc., 1, 0, 0, 4]
[C:\Program Files\acer\eRecovery\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\acer\eRecovery\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\acer\eRecovery\BlockDll.dll] [Achieva Systems, Inc., 1, 0, 0, 2]
[C:\Program Files\acer\eRecovery\Data32.dll] [NewTech Infosystems, Inc., 2, 0, 0, 48]
[C:\Program Files\acer\eRecovery\DataEx32.dll] [NewTech Infosystems, Inc., 2, 1, 0, 23]
[C:\Program Files\acer\eRecovery\cximage.dll] [Pizzolato Davide - www.xdp.it, 5, 9, 9, a]
[C:\Program Files\acer\eRecovery\MFC71U.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\acer\eRecovery\extResource.dll] [acer, 1, 1, 7, 0]
[C:\Program Files\acer\eRecovery\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\acer\eRecovery\NtiAspi.dll] [NewTech Infosystems, Inc., 2, 5, 0, 1]
[C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 3788 / Thibob][C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe] [Labtec Inc., 10.5.1.1130]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVMaEnum.dll] [Labtec Inc., 10.5.1.1130]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComCX.dll] [Labtec Inc., 10.5.1.1130]
[PID: 3924 / Thibob][C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe] [GRISOFT s.r.o., 7, 5, 1, 43]
[C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\engine.dll] [GRISOFT s.r.o., 4, 2, 0, 19]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 3120 / Thibob][C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.5.1238.0601]
[C:\Program Files\Windows Live\Messenger\MSIMG32.dll] [Patchou, 4, 23, 0, 276]
[C:\Program Files\Windows Live\Messenger\MSNCore.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\Program Files\Windows Live\Messenger\msidcrl40.dll] [Microsoft Corporation, 4.100.313.1]
[C:\Program Files\Windows Live\Messenger\ContactsUX.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll] [Patchou, 4, 23, 0, 276]
[C:\Program Files\Messenger Plus! Live\Detoured.dll] [N/A, ]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\Program Files\Windows Live\Messenger\msgslang.8.5.1238.0601.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\Program Files\Windows Live\Messenger\msgsres.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\Program Files\Messenger Plus! Live\MsgPlusLiveRes.dll] [Patchou, 4, 23, 0, 276]
[C:\Program Files\Windows Live\Messenger\lcapi.dll] [Microsoft Corporation, 1.7.256.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\Program Files\Windows Live\Messenger\lcres.dll] [Microsoft Corp., 1.7.109.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)]
[C:\Program Files\Windows Live\Messenger\RTMPLTFM.dll] [Microsoft Corporation, 3.0.5774.0 built by: media_msn80]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\Program Files\Windows Live\Messenger\MSGSWCAM.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\WINDOWS\system32\sirenacm.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\Program Files\Windows Live\Messenger\lmcdata.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\Program Files\Windows Live\Messenger\contact.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\Program Files\Windows Live\Messenger\custsat.dll] [Microsoft Corporation, 9.0.3790.2428 (srv03_sp1_qfe.050422-1043)]
[C:\Program Files\Windows Live\Messenger\abssm.dll] [Microsoft Corporation, 8.5.1238.0601]
[C:\WINDOWS\system32\mfplat.dll] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)]
[C:\Program Files\Messenger Plus! Live\libsndfile.dll] [N/A, ]
[C:\Program Files\Messenger Plus! Live\lame_enc.dll] [N/A, ]
[PID: 3288 / Thibob][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 476 / Thibob][C:\Program Files\MICROSTAR\Bluetooth Software\BTTray.exe] [, 1.3.2.7]
[C:\WINDOWS\system32\wbtapi.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\btosif.dll] [, 1.3.2.7]
[C:\Program Files\MICROSTAR\Bluetooth Software\BtBalloon.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\btrez.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\CSH.dll] [Blue Sky Software Corporation, 2.00.039]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 1028 / Thibob][C:\PROGRA~1\MICROS~3\BLUETO~1\BTSTAC~1.EXE] [, 1.3.2.7]
[C:\WINDOWS\system32\btins.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\btosif.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\BtAudioHelper.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\btsec.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\btrez.dll] [, 1.3.2.7]
[C:\WINDOWS\system32\CSH.dll] [Blue Sky Software Corporation, 2.00.039]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 1668 / Thibob][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[C:\WINDOWS\system32\mucltui.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 3072 / Thibob][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 3964 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[PID: 3276 / Thibob][C:\Program Files\Mozilla Firefox\firefox.exe] [Mozilla Corporation, 1.8.1.7: 2007091417]
[C:\Program Files\Mozilla Firefox\js3250.dll] [Netscape Communications Corporation, 4.0]
[C:\Program Files\Mozilla Firefox\nspr4.dll] [Netscape Communications Corporation, 4.6.7]
[C:\Program Files\Mozilla Firefox\xpcom_core.dll] [Mozilla Foundation, 1.8.1.7: 2007091417]
[C:\Program Files\Mozilla Firefox\plc4.dll] [Netscape Communications Corporation, 4.6.7]
[C:\Program Files\Mozilla Firefox\plds4.dll] [Netscape Communications Corporation, 4.6.7]
[C:\Program Files\Mozilla Firefox\smime3.dll] [Mozilla Foundation, 3.11.5 Basic ECC]
[C:\Program Files\Mozilla Firefox\nss3.dll] [Mozilla Foundation, 3.11.5 Basic ECC]
[C:\Program Files\Mozilla Firefox\softokn3.dll] [Mozilla Foundation, 3.11.4 Basic ECC]
[C:\Program Files\Mozilla Firefox\ssl3.dll] [Mozilla Foundation, 3.11.5 Basic ECC]
[C:\Program Files\Mozilla Firefox\xpcom_compat.dll] [Mozilla Foundation, 1.8.1.7: 2007091417]
[C:\Program Files\Mozilla Firefox\components\myspell.dll] [Mozilla Foundation, 1.8.1.7: 2007091417]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\Program Files\Mozilla Firefox\components\jar50.dll] [Mozilla Foundation, 1.8.1.7: 2007091417]
[C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\extensions\{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e}\components\nstidy.dll] [Mozilla Foundation, Personal]
[C:\Program Files\Mozilla Firefox\xpcom.dll] [Mozilla Foundation, 1.8.1.7: 2007091417]
[C:\Program Files\Mozilla Firefox\components\spellchk.dll] [Mozilla Foundation, 1.8.1.7: 2007091417]
[C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}\components\ColorZilla.dll] [N/A, ]
[C:\Program Files\Mozilla Firefox\freebl3.dll] [Mozilla Foundation, 3.11.4 Basic ECC]
[C:\Program Files\Mozilla Firefox\nssckbi.dll] [Mozilla Foundation, 1.64]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[PID: 1780 / Thibob][C:\WINDOWS\system32\taskmgr.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2504 / Thibob][C:\Program Files\Valve\Steam\Steam.exe] [Valve Corporation, 1.0.0.0]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\Program Files\Valve\Steam\Steam.dll] [Valve Corporation, 2.0.0.0]
[C:\Program Files\Valve\Steam\SteamUI.dll] [Valve Corporation, 1, 0, 0, 1]
[C:\Program Files\Valve\Steam\vstdlib_s.dll] [Valve Corporation, 3, 0, 0, 1]
[C:\Program Files\Valve\Steam\tier0_s.dll] [Valve Corporation, 1, 0, 0, 1]
[C:\Program Files\Valve\Steam\bin\FileSystem_Steam.dll] [Valve Corporation, 3, 0, 0, 1]
[C:\Program Files\Valve\Steam\bin\vgui2.dll] [Valve Corporation, 3, 0, 0, 1]
[C:\Program Files\Valve\Steam\steamclient.dll] [Valve Corporation, 3, 0, 0, 1]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\Program Files\Valve\Steam\bin\p2pcore.dll] [Valve Corporation, 1, 0, 0, 1]
[C:\Program Files\Valve\Steam\bin\p2pvoice.dll] [Valve Corporation, 1, 0, 0, 1]
[C:\Program Files\Valve\Steam\mss32_s.dll] [N/A, ]
[C:\Program Files\Valve\Steam\bin\SteamService.dll] [Valve Corporation, 1, 0, 0, 1]
[C:\Program Files\Valve\Steam\dbghelp.dll] [Microsoft Corporation, 6.7.0005.0 (debuggers(dbg).070215-1229)]
[C:\Program Files\Valve\Steam\bin\vaudio_speex.dll] [N/A, ]
[c:\program files\valve\steam\bin\friendsUI.dll] [Valve Corporation, 3, 0, 0, 1]
[c:\program files\valve\steam\bin\serverbrowser.dll] [Valve Corporation, 1, 0, 0, 1]
[C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[PID: 2548 / Thibob][C:\Documents and Settings\Thibob\Bureau\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)]
[C:\Documents and Settings\Thibob\Bureau\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]

==================================
File Associations
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider
NOD32 protected [MSAFD Tcpip [TCP/IP]]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [MSAFD Tcpip [UDP/IP]]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [MSAFD Tcpip [RAW/IP]]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [RSVP UDP Service Provider]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [RSVP TCP Service Provider]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)

==================================
Autorun.Inf
N/A

==================================
HOSTS File
127.0.0.1 localhost

==================================
Process Privileges Scan
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2544, C:\PROGRAM FILES\LOGITECH\G-SERIES SOFTWARE\LGDCORE.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2644, C:\PROGRAM FILES\LOGITECH\G-SERIES SOFTWARE\LCDMON.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2920, C:\PROGRAM FILES\LOGITECH\G-SERIES SOFTWARE\APPLETS\LCDPOP3\LCDPOP3.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2932, C:\PROGRAM FILES\LOGITECH\G-SERIES SOFTWARE\APPLETS\LCDCLOCK.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3084, C:\PROGRAM FILES\GAMESURROUND FORTISSIMO 4 MIXER\ENMIXCPL.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3096, C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3156, C:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 6\LAUNCHAPPLICATION.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3212, C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\SERVICELAYER.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3440, C:\PROGRAM FILES\ESET\NOD32KUI.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3616, C:\PROGRAM FILES\ACER\ERECOVERY\MONITOR.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 476, C:\PROGRAM FILES\MICROSTAR\BLUETOOTH SOFTWARE\BTTRAY.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1028, C:\PROGRA~1\MICROS~3\BLUETO~1\BTSTAC~1.EXE]

==================================
API HOOK
Entrypoint Error: CreateProcessA (Dangerous Level: High, Hooked by Module: 0x00130239)
Entrypoint Error: CreateProcessW (Dangerous Level: High, Hooked by Module: 0x001302C5)
Entrypoint Error: CreateRemoteThread (Dangerous Level: High, Hooked by Module: 0x001304F5)
Entrypoint Error: CreateThread (Dangerous Level: High, Hooked by Module: 0x00130581)
Entrypoint Error: WriteProcessMemory (Dangerous Level: High, Hooked by Module: 0x00130699)
Entrypoint Error: SetWindowsHookExA (Dangerous Level: High, Hooked by Module: 0x00130725)
Entrypoint Error: SetWindowsHookExW (Dangerous Level: High, Hooked by Module: 0x001307B1)

==================================
Hidden Process
N/A

==================================

[/CODE]

-

Je rédemmare pour voir ce que ca donne ;)

Toujours le même problème...

Re,

Je ne vois rien de spécial.

1/ * Télécharge GenProc (de Lazzzy et Narco4) sur ton bureau : http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip
* Dézippe-le sur ton bureau (Clic droit>Extraire ici).
* Double-clique sur GenProc.bat et édite le rapport généré par le programme.
* Tu trouveras une aide en images ici : http://www.alt-shift-return.org/Info/GenProc-HowTo.html

2/ * Télécharge clean.zip (merci Malekal) : http://www.malekal.com/download/clean.zip
* Dézippe-le sur le bureau.
* Ouvre le dossier jaune nommé clean sur ton bureau.
* Double-clique sur clean.cmd
* Choisis l'option 1 et copie sur le bureau le rapport généré. Il doit normalement aussi se trouver là : c:\rapport_clean.txt
* Clique sur Q pour quitter le programme.

FillPCA

Re,

Le rapport GenProc :

Rapport GenProc 0.71 [1] effectué le 21/09/2007 à 23:23:31,98 - SystemRoot = C:\WINDOWS

Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.

# Etape 1/ Télécharge :

- SDfix http://downloads.andymanchesta.com/RemovalTools/SDFix.exe (créé par AndyManchesta) et sauvegarde le sur ton Bureau.

***** Copie ce qui suit dans un fichier texte et redémarre en mode sans échec comme indiqué ici https://docs.microsoft.com/en-us/?mfr=true (choisis ta session courante "Thibob") *****

# Etape 2/

Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur "RunThis.bat" pour lancer le script.
- Appuie sur "Y" pour commencer le processus de nettoyage.
- Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
- Appuie sur une touche pour redémarrer le PC.
- Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
- Après le chargement du Bureau, l'outil terminera son travail et affichera "Finished".
- Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
- Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom "Report.txt".
~ Le fichier "SDFIX_README.htm" (dans le dossier SDFix) contient la liste des malwares pris en compte par l'outil.
~ Andy fait plusieurs mises à jour, souvent plus d'une par jour... N'hésite donc pas à télécharger une nouvelle version lorsque le nettoyage dure et que l'outil ne semble pas tout voir.

# Etape 3/

Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

# Etape 4/

Redémarre normalement et poste :
- Un nouveau rapport HijackThis, toutes fenêtres et applications fermées http://www.trendsecure.com/portal/en-US/threat_analytics/HiJackThis.exe ;
- Le contenu du fichier Report.txt ;

Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

--------------

Le deuxième rapport :

21/09/2007 a 23:25:03,53

*** Recherche des fichiers dans C:

*** Recherche des fichiers dans C:\WINDOWS\

*** Recherche des fichiers dans C:\WINDOWS\system32
C:\WINDOWS\system32\bdod.bin FOUND
C:\WINDOWS\system32\check.exe FOUND

*** Recherche des fichiers dans C:\Program Files
*** Fin du rapport !

Par contre je viens de remarquer un truc, en désactviant mn antivirus (Nod32), au bout d'une minute ou deux, SVCHOST ne me prend plus toute mon UC ! Bizarre...

Bonjour,

# Télécharge SDFix (créé par Andy Manchesta) et sauvegarde le sur ton Bureau : http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
# Imprime ceci.
# Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :

* Redémarre ton ordinateur.
* Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (ou F5).
* A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
* Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
* Choisis ton compte.

# Déroule la liste des instructions ci-dessous :

* En mode sans échec, double-clique sur le fichier SDFix.exe et clique sur install,
* Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
* Appuie sur Y pour commencer le script.
* Il va supprimer les services de certains trojans, effectuera aussi quelques réparations du Registre et il te demandera d'appuyer sur une touche pour redémarrer.
* Appuie sur une touche pour redémarrer le PC.
* Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
* Après le chargement du Bureau, l'outil terminera son travail et affichera Finished
* Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
* Enfin, ouvre le dossier de SDFix sur ton Bureau et copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

FillPCA

Salut,

Le log SDFix :

SDFix: Version 1.106

Run by Thibob on 22/09/2007 at 19:46

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...

Normal Mode:
Checking Files:

No Trojan Files Found

Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

Remaining Services:
------------------

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\eMule\\emule.exe"="D:\\eMule\\emule.exe:*:Enabled:eMule"
"D:\\BitComet\\BitComet.exe"="D:\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\PiMPWare\\PiMPStreamer\\PimpStreamer.exe"="C:\\Program Files\\PiMPWare\\PiMPStreamer\\PimpStreamer.exe:*:Enabled:PimpStreamer, Streams video from PC to PSP Realtime!"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\TVUPlayer\\TVUPlayer.exe"="C:\\Program Files\\TVUPlayer\\TVUPlayer.exe:*:Enabled:TVU Player Component"
"C:\\Program Files\\PeerTV\\PeerCast.exe"="C:\\Program Files\\PeerTV\\PeerCast.exe:*:Enabled:PeerCast"
"C:\\Program Files\\adslTV\\adslTV.exe"="C:\\Program Files\\adslTV\\adslTV.exe:*:Enabled:adslTV"
"C:\\nIRC\\mirc.exe"="C:\\nIRC\\mirc.exe:*:Enabled:mIRC"
"C:\\Documents and Settings\\Thibob\\Bureau\\SuperScan4.exe"="C:\\Documents and Settings\\Thibob\\Bureau\\SuperScan4.exe:*:Enabled:SuperScan 4 Beta 1"
"C:\\Documents and Settings\\Thibob\\Bureau\\superscan4\\SuperScan4.exe"="C:\\Documents and Settings\\Thibob\\Bureau\\superscan4\\SuperScan4.exe:*:Enabled:SuperScan 4 Beta 1"
"C:\\StubInstaller.exe"="C:\\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\XLink Kai Evolution VII\\kaiLaunch.exe"="C:\\Program Files\\XLink Kai Evolution VII\\kaiLaunch.exe:*:Enabled:XLink Kai Evolution 7 Launcher"
"C:\\Program Files\\XLink Kai Evolution VII\\kaiEngine.exe"="C:\\Program Files\\XLink Kai Evolution VII\\kaiEngine.exe:*:Enabled:XLink Kai Evolution 7 Engine"
"C:\\Program Files\\MaxTV\\maxtv.exe"="C:\\Program Files\\MaxTV\\maxtv.exe:*:Enabled:MaxTV Online"
"C:\\Program Files\\FileZilla\\FileZilla.exe"="C:\\Program Files\\FileZilla\\FileZilla.exe:*:Enabled:FileZilla"
"C:\\Program Files\\HomePlayer1.5.0.2\\HomePlayer.exe"="C:\\Program Files\\HomePlayer1.5.0.2\\HomePlayer.exe:*:Enabled:HomePlayer"
"C:\\Program Files\\Webteh\\BSplayer\\bsplayer.exe"="C:\\Program Files\\Webteh\\BSplayer\\bsplayer.exe:*:Enabled:BSPlayer"
"C:\\WINDOWS\\System32\\dpvsetup.exe"="C:\\WINDOWS\\System32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\System32\\RUNDLL32.EXE"="C:\\WINDOWS\\System32\\RUNDLL32.EXE:*:Enabled:Ex‚cuter une DLL en tant qu'application"
"C:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe"="C:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"="C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\\uTorrent\\utorrent.exe"="D:\\uTorrent\\utorrent.exe:*:Enabled:æTorrent"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. Take a deep breath "
"C:\\Program Files\\Active WebCam\\WebCam.exe"="C:\\Program Files\\Active WebCam\\WebCam.exe:*:Enabled:Active WebCam"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\thibob\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\thibob\\counter-strike source\\hl2.exe:*:Disabled:hl2"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"C:\\Program Files\\PSPFreePlayer\\VLC\\vlc.exe"="C:\\Program Files\\PSPFreePlayer\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"="C:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe:*:Enabled:Sunbelt Firewall GUI"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

Remaining Files:
---------------

Files with Hidden Attributes:

C:\WINDOWS\system32\NTICDMK7.dll
C:\WINDOWS\system32\NTIMPEG2.dll
C:\WINDOWS\system32\NTIMP3.dll
C:\WINDOWS\system32\NTIFCD3.dll
C:\WINDOWS\system32\NTIBUN4.dll
C:\WINDOWS\SoftwareDistribution\Download\778fd2fc3fe6b905e366b5ddbba384c8\BIT17.tmp
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp

Finished!

Le log HijackThis!

Logfile of HijackThis v1.99.1
Scan saved at 19:57:31, on 22/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\program files\valve\steam\steam.exe
C:\Program Files\MICROSTAR\Bluetooth Software\BTTray.exe
C:\PROGRA~1\MICROS~3\BLUETO~1\BTSTAC~1.EXE
C:\Documents and Settings\Thibob\Bureau\hijackthis\proi.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\BitComet\tools\BitCometBHO_1.1.5.19.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [EnvyHFCPL] "C:\Program Files\Gamesurround Fortissimo 4 mixer\EnMixCPL.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LogitechVideoRepair] "C:\Program Files\Logitech\Video\ISStart.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] ; "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [DAEMON Tools] ; "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [LanguageShortcut] ; "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] ; C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] ; "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [PeerGuardian] "C:\Program Files\PeerGuardian2\pg2.exe"
O4 - HKCU\..\Run: [NudgeMania] ; C:\Program Files\NudgeMania\NudgeMania.exe
O4 - HKCU\..\Run: [Skype] ; "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [FFTI] "C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles\ziqstwdo.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath="C:\Documents and Settings\Thibob\Application Data\Mozilla\Firefox\Profiles/ziqstwdo.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}"
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Download all links using BitComet - res://D:\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://D:\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://D:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\STARDOCK\OBJECT~1\WINDOW~1\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

Apparemment plus de problème depuis le redémarrrage grace à SDFix !

A toi de me dire si c'est bon :)

Bonsoir,

C'est propre.

1/ * Lance OTmoveIT.
* Clique sur CleanUp! (le programme va télécharger un fichier texte qui servira a nettoyer les programmes que l'on a téléchargés).

NOTE : Normalement, ton firewall (parefeu) devrait te demander si OTmoveIT peut accéder à internet, Autorise le.

* Une liste apparaît dans la partie gauche d'OTmoveIT.
* Un message apparaît pour confirmer le nettoyage. Confirme.
* Les fichiers infectés qui se trouvent dans les quarantaines seront supprimés aussi.

2/ Tu dois désactiver la restauration système. Pour cela, fais un clic droit sur « poste de travail ». Dans l’onglet « restauration du système », coche la case « désactiver la restauration système ». Clique sur appliquer>OK.
Décoche cette case, clique sur appliquer>OK et redémarre le PC.

Si tu n'as plus de soucis, tu peux noter ton problème comme "résolu".

Bon surf !

FillPCA

Salut,

Il faut que tu crées ton propre sujet.

FillPCA