Trojan-Spy.Win32@mx

Résolu
Maxim -  
Bonjour,
Un triangle jaune avec point d'exclamation clignote dans la barre d'outils et indique: System Alert: Trojan-Spy.Win32@mx; Type Spyware/Trojan et un autre: Critical System Warning: mon système est probablement infecté par Spyware.Ciberlog-X. Qui peut m'aider à m'en débarrasser
Configuration: Windows XP
Internet Explorer 7.0

38 réponses

Résumé de la discussion

Plusieurs avertissements affichés décrivent un Trojan-Spy.Win32@mx ainsi qu'un avertissement Spyware.Ciberlog-X sur un système Windows XP avec Internet Explorer 7 actif et des pages parasites suspectes. Des éléments de réponse suggèrent d'utiliser CCleaner et Spybot, puis de recourir à des analyses avec Norton, Avast ou Spybot-Search & Destroy, tout en envisageant des outils spécialisés comme HijackThis et SmitFraudFix. Les échanges décrivent des symptômes persistants, des dossiers bloqués et des difficultés de suppression, avec des rapports HijackThis et des journaux montrant des modifications du registre et des processus système. En pratique, les échanges montrent que le nettoyage peut nécessiter plusieurs outils et passages, y compris l’analyse en mode sans échec et la suppression manuelle de composants, sans conclure à une résolution immédiate.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    Bonjour

    Télécharge sur le bureau
    http://ftpclubic7.clubic.com/...
    = Clic-droit sur Hijackthis
    = Extraire ici ( ou extraire sans confirmation ou tout ou unzip)
    = clic droit sur Hijackthis ( en forme de dynamite) ==> renommer ==> écrire : test.exe ( à la place de hijackthis.exe) <== Important
    =Double-clic dessus
    = Clic Do a system scan and save the log
    =coller le rapport
    si problème voir l'aide
    [url=https://forums.cnetfrance.fr]Aide hijackthis[/url]
    1. help.me
      Bonjour, j'ai le même probleme que Maxim, j'ai le même triangle jaune avec le point d'exclamation qui clignote et avast me signale la presence de plusieurs virus:
      Win32: Agent-MFL (trj)
      Win32: Tiny-IF (trj)
      Win32: Trojan gen (other)
      Il me propose aussi des publicités pour des antivirus qui me parraissent douteuses. Pourriez-vous m'aider s'il vous plait?
      2. help.me
        bonsoir, oui je me suis rendu compte un peu tard que j'avais placé mon message au mauvais endroit, la j'ai un autre post: Win32 virus, rapport hijackthis. est ce que tu acceptes de m'aider? merci
        2. maxim1180
          Bonjour,
          Ci-après le rapport. Bizarrement, ce matin plus d'alerte système mais lorsque je me connexte sur internet, la page de démarrage est une page Internet Security qui a détecté la présence de W32.Myzor.FK@yf. J'ai scanné avec Norton Scan et Avast qui ne détectent plus de virus. J'ai fait la même chose avec Spybot-Search & Destroy qui a trouvé 4 cookies et un fichier dangereux. J'ai fait une résolution de problème. Cependant le dossier qui était renseigné hier par Norton Scan comme contenant le Trojan/Horse, à savoir Video Add-on est toujours présent dans le Program files. J'ai tenté de le supprimer mais l'accès m'est refusé. Merci de bien vouloir m'aider.

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 9:46:11, on 21/10/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16544)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
          C:\WINDOWS\system32\slserv.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\ctfmon.exe
          C:\WINDOWS\system32\igfxtray.exe
          C:\WINDOWS\system32\hkcmd.exe
          C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
          C:\Apps\Powercinema\PCMService.exe
          C:\apps\ABoard\ABoard.exe
          C:\WINDOWS\system32\GSICON.EXE
          C:\WINDOWS\system32\dslagent.exe
          C:\apps\ABoard\AOSD.exe
          C:\WINDOWS\SOUNDMAN.EXE
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\Program Files\Philips ToUcam Camera\VProperty.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\MSN Messenger\MsnMsgr.Exe
          C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          C:\Program Files\Dial-Messenger\Dial-Messenger.exe
          C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
          C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
          C:\Program Files\Larousse\Encyclopédie Universelle Larousse\Bin\hyperappel.exe
          C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe
          C:\Program Files\Windows Desktop Search\WindowsSearch.exe
          C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
          C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
          C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/nl-be?checklang=1
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par Belgacom Skynet
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
          O2 - BHO: PBBEFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB197B82D} - C:\WINDOWS\system32\pbbefrv2.dll (file missing)
          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
          O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O2 - BHO: (no name) - {CFE15135-C591-4000-A55E-A50E5F9F82BC} - C:\Program Files\Video Add-on\isfmdl.dll
          O3 - Toolbar: PBBEFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB197B82D} - C:\WINDOWS\system32\pbbefrv2.dll (file missing)
          O3 - Toolbar: Copernic Desktop Search - {C5F7A735-70F1-477F-8C36-6FF3C736017B} - C:\Program Files\Copernic Desktop Search\CopernicDesktopSearchIntegration740.dll
          O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
          O3 - Toolbar: IE Custom Tools - {23ED2206-856D-461A-BBCF-1C2466AC5AE3} - C:\Program Files\Video Add-on\ictmdl.dll (file missing)
          O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
          O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
          O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
          O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
          O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
          O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
          O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
          O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
          O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
          O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [ToUcamVProperty] C:\Program Files\Philips ToUcam Camera\VProperty.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [NI.UGES_0002_N108M1607] "c:\documents and settings\jean claude\application data\setup_en[1].exe" -nag
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [Copernic Desktop Search] "C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe" /tray
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
          O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Video Add-on\isfmntr.exe
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
          O4 - Global Startup: Dial-Messenger.lnk = C:\Program Files\Dial-Messenger\Dial-Messenger.exe
          O4 - Global Startup: hp psc 1000 series.lnk = ?
          O4 - Global Startup: hpoddt01.exe.lnk = ?
          O4 - Global Startup: Hyperappel de l'Encyclopédie Universelle Larousse.lnk = ?
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\Office\OSA9.EXE
          O4 - Global Startup: Reality Fusion GameCam SE.lnk = ?
          O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
          O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-be\msntb.dll/search.htm
          O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
          O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-be\msntabres.dll.mui/229?938cddc684784a75b4a877af3eab2d3b
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-be\msntabres.dll.mui/230?938cddc684784a75b4a877af3eab2d3b
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
          O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
          O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
          O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
          O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - https://support.norton.com/sp/en/us/home/current/info
          O22 - SharedTaskScheduler: forayer - {e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2} - C:\WINDOWS\system32\gaaplp.dll (file missing)
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
          O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
          O24 - Desktop Component 0: (no name) - http://65.54.233.250/cgi-bin/getmsg/Numériser0001.jpg?&msg=MSG1153179815.1&start=3679690&len=1720833&mimepart=3&curmbox=F000000001&b=19d92ff93b842123d1fe00a142b26e3c&disk=65.54.233.71_d1124&login=jcd%2emax&domain=hotmail%2ecom&hm___sig=1fb128c501c6ab3b140a7283b827a3e529b347766a452727
          1. Utilisateur anonyme
            re

            commence par faire ceci
            Télécharger sur le bureau : [url=http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe]navilog.exe[/url]

            = Double-Clic navilog1.zip
            = Extraire tout ( ou extraire sans confirmation ou unzip)
            = Double-Clic navilog1 qui est sur le bureau
            = Appuyer sur une touche jusqu' arriver aux options
            = Choisir option 1 ( = taper 1 )
            ne pas utiliser les autres sans avis , il peut y avoir des processus légitimes

            le rapport se trouve dans c: fixnavi.txt

            tu postes ce rapport.

            ---------------------
            2°) Télecharger [url=http://www.malekal.com/download/clean.zip]clean.zip[/url] sur le bureau
            Dézipper sur le bureau.
            = ouvrir le dossier clean
            = cliquer sur le symbole roue dentée avec le nom clean
            = choisir l'option 1 et laisser clean travailler jusqu'à l'apparition du texte "appuyer sur une touche pour continuer"
            = ensuite colle le rapport
            1. maxim1180
              Bonjour ep, voici le rapport

              Search Navipromo version 3.3.0 commencé le dim. 21/10/2007 à 10:55:59,57

              !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
              !!! Postez ce rapport sur le forum pour le faire analyser !!!
              !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

              Outil exécuté depuis C:\Program Files\navilog1
              Mise à jour le 17.10.2007 à 20h00 par IL-MAFIOSO

              Microsoft Windows XP [version 5.1.2600]
              Internet Explorer : 7.0.5730.11

              *** Recherche Programmes installés ***

              *** Recherche dossiers dans C:\WINDOWS ***

              *** Recherche dossiers dans C:\Program Files ***

              *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

              *** Recherche dossiers dans C:\Documents and Settings\Jean Claude\Application Data ***

              *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDÉ~1\PROGRA~1 ***

              *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
              pour + d'infos : http://www.gmer.net

              Aucun fichier trouvé dans :

              - C:\WINDOWS\system32
              - C:\DOCUME~1\JEANCL~1\LOCALS~1\APPLIC~1

              *** Recherche avec GenericNaviSearch ***
              !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
              !!! A vérifier impérativement avant toute suppression manuelle !!!

              * Recherche dans C:\WINDOWS\system32 *

              * Recherche dans C:\DOCUME~1\JEANCL~1\LOCALS~1\APPLIC~1 *

              *** Recherche fichiers ***

              *** Recherche clés spécifiques dans le Registre ***

              *** Module de Recherche complémentaire ***
              (Recherche fichiers spécifiques)

              1)Recherche fichiers connus:

              2)Recherche Heuristique :

              3)Recherche Certificats :

              Certificat Egroup absent !

              *** Analyse terminée le dim. 21/10/2007 à 10:56:28,81 ***
              1. maxim1180
                Et voici le rapport de Clean

                dim. 21/10/2007 a 11:01:52,28

                *** Recherche des fichiers dans C:

                *** Recherche des fichiers dans C:\WINDOWS\

                *** Recherche des fichiers dans C:\WINDOWS\system32

                *** Recherche des fichiers dans C:\Program Files
                "C:\Program Files\Dynamic Toolbar\" FOUND
                *** Fin du rapport !
                1. Utilisateur anonyme
                  relance clean en mode sans échec et choisis l'option 2
                  ensuite en mode normal
                  Télécharge sur le bureau [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip]SmitfraudFix.zip[/url]
                  => Double clic sur SmitfraudFix.zip
                  => Extraire tout
                  => Double clic sur SmitfraudFix
                  => Double Clic sur SmitfraudFix.cmd
                  => Choisir Option 1
                  => Sauver le rapport
                  1. maxim1180
                    Bonjour ep, voici le rapport de SmitfraudFix. Qu'en penses-tu?

                    SmitFraudFix v2.240

                    Rapport fait à 15:17:22,62, dim. 21/10/2007
                    Executé à partir de C:\Documents and Settings\Jean Claude\Mes documents\SmitfraudFix
                    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                    Le type du système de fichiers est NTFS
                    Fix executé en mode normal

                    »»»»»»»»»»»»»»»»»»»»»»»» Process

                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                    C:\WINDOWS\system32\slserv.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\WINDOWS\system32\ctfmon.exe
                    C:\Program Files\Video Add-on\icthis.exe
                    C:\Program Files\Video Add-on\isfmntr.exe
                    C:\WINDOWS\system32\igfxtray.exe
                    C:\WINDOWS\system32\hkcmd.exe
                    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                    C:\Apps\Powercinema\PCMService.exe
                    C:\Program Files\Video Add-on\icmntr.exe
                    C:\apps\ABoard\ABoard.exe
                    C:\WINDOWS\system32\GSICON.EXE
                    C:\WINDOWS\system32\dslagent.exe
                    C:\apps\ABoard\AOSD.exe
                    C:\Program Files\Video Add-on\isfmm.exe
                    C:\WINDOWS\SOUNDMAN.EXE
                    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                    C:\Program Files\Philips ToUcam Camera\VProperty.exe
                    C:\Program Files\QuickTime\qttask.exe
                    C:\Program Files\iTunes\iTunesHelper.exe
                    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
                    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    C:\Program Files\MSN Messenger\MsnMsgr.Exe
                    C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe
                    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    C:\Program Files\Dial-Messenger\Dial-Messenger.exe
                    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
                    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
                    C:\Program Files\Larousse\Encyclopédie Universelle Larousse\Bin\hyperappel.exe
                    C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe
                    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
                    C:\Program Files\iPod\bin\iPodService.exe
                    C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
                    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
                    C:\WINDOWS\system32\HPZipm12.exe
                    C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
                    C:\Program Files\Internet Explorer\IEXPLORE.EXE
                    C:\WINDOWS\system32\cmd.exe
                    C:\Program Files\Windows Desktop Search\WindowsSearchFilter.exe

                    »»»»»»»»»»»»»»»»»»»»»»»» hosts

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Jean Claude

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Jean Claude\Application Data

                    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\JEANCL~1\Favoris

                    C:\DOCUME~1\JEANCL~1\Favoris\Online Security Test.url PRESENT !

                    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                    "Source"="http://65.54.233.250/cgi-bin/getmsg/Num‚riser0001.jpg?&msg=MSG1153179815.1&start=3679690&len=1720833&mimepart=3&curmbox=F000000001&b=19d92ff93b842123d1fe00a142b26e3c&disk=65.54.233.71_d1124&login=jcd%2emax&domain=hotmail%2ecom&hm___sig=1fb128c501c6ab3b140a7283b827a3e529b347766a452727"
                    "SubscribedURL"="http://65.54.233.250/cgi-bin/getmsg/Num‚riser0001.jpg?&msg=MSG1153179815.1&start=3679690&len=1720833&mimepart=3&curmbox=F000000001&b=19d92ff93b842123d1fe00a142b26e3c&disk=65.54.233.71_d1124&login=jcd%2emax&domain=hotmail%2ecom&hm___sig=1fb128c501c6ab3b140a7283b827a3e529b347766a452727"
                    "FriendlyName"=""

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1]
                    "Source"="About:Home"
                    "SubscribedURL"="About:Home"
                    "FriendlyName"="Ma page d'accueil"

                    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    SrchSTS.exe by S!Ri
                    Search SharedTaskScheduler's .dll

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
                    "{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}"="forayer"

                    [HKEY_CLASSES_ROOT\CLSID\{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}\InProcServer32]
                    @="C:\WINDOWS\system32\gaaplp.dll"

                    [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}\InProcServer32]
                    @="C:\WINDOWS\system32\gaaplp.dll"

                    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                    "AppInit_DLLs"=""

                    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                    "System"=""

                    »»»»»»»»»»»»»»»»»»»»»»»» Rustock

                    »»»»»»»»»»»»»»»»»»»»»»»» DNS

                    Description: Realtek RTL8169/8110 Family Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets
                    DNS Server Search Order: 192.168.1.1

                    HKLM\SYSTEM\CCS\Services\Tcpip\..\{1E1C0C2D-B0D5-4AEC-9145-15BB8BB4C611}: DhcpNameServer=192.168.1.1
                    HKLM\SYSTEM\CS1\Services\Tcpip\..\{1E1C0C2D-B0D5-4AEC-9145-15BB8BB4C611}: DhcpNameServer=192.168.1.1
                    HKLM\SYSTEM\CS2\Services\Tcpip\..\{1E1C0C2D-B0D5-4AEC-9145-15BB8BB4C611}: DhcpNameServer=192.168.1.1
                    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
                    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
                    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

                    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                    »»»»»»»»»»»»»»»»»»»»»»»» Fin
                    1. Utilisateur anonyme
                      en mode sans echec
                      relance SmitfraudFix et choisit l'option2

                      ensuite refais hijack
                      stp
                      @+
                      1. maxim1180
                        Bonjour ep,
                        J'ai fait ce que tu m'as recommandé. Voici les deux rapport:

                        SmitFraudFix v2.240

                        Rapport fait à 8:45:23,12, lun. 22/10/2007
                        Executé à partir de C:\Documents and Settings\Jean Claude\Mes documents\Protection\SmitfraudFix
                        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                        Le type du système de fichiers est NTFS
                        Fix executé en mode sans echec

                        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        SrchSTS.exe by S!Ri
                        Search SharedTaskScheduler's .dll

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
                        "{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}"="forayer"

                        [HKEY_CLASSES_ROOT\CLSID\{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}\InProcServer32]
                        @="C:\WINDOWS\system32\gaaplp.dll"

                        [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}\InProcServer32]
                        @="C:\WINDOWS\system32\gaaplp.dll"

                        »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                        »»»»»»»»»»»»»»»»»»»»»»»» hosts

                        127.0.0.1 localhost

                        »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

                        S!Ri's WS2Fix: LSP not Found.

                        »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

                        GenericRenosFix by S!Ri

                        »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

                        C:\DOCUME~1\JEANCL~1\Favoris\Online Security Test.url supprimé

                        »»»»»»»»»»»»»»»»»»»»»»»» DNS

                        HKLM\SYSTEM\CCS\Services\Tcpip\..\{1E1C0C2D-B0D5-4AEC-9145-15BB8BB4C611}: DhcpNameServer=192.168.1.1
                        HKLM\SYSTEM\CS1\Services\Tcpip\..\{1E1C0C2D-B0D5-4AEC-9145-15BB8BB4C611}: DhcpNameServer=192.168.1.1
                        HKLM\SYSTEM\CS2\Services\Tcpip\..\{1E1C0C2D-B0D5-4AEC-9145-15BB8BB4C611}: DhcpNameServer=192.168.1.1
                        HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
                        HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
                        HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

                        »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

                        »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                        "System"=""

                        »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                        Nettoyage terminé.

                        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        SrchSTS.exe by S!Ri
                        Search SharedTaskScheduler's .dll

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
                        "{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}"="forayer"

                        [HKEY_CLASSES_ROOT\CLSID\{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}\InProcServer32]
                        @="C:\WINDOWS\system32\gaaplp.dll"

                        [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2}\InProcServer32]
                        @="C:\WINDOWS\system32\gaaplp.dll"

                        »»»»»»»»»»»»»»»»»»»»»»»» Fin

                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 8:51:01, on 22/10/2007
                        Platform: Windows XP SP2 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v7.00 (7.00.6000.16544)
                        Boot mode: Safe mode

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\cmd.exe
                        C:\WINDOWS\explorer.exe
                        C:\WINDOWS\notepad.exe
                        C:\HijackThis.exe

                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par Belgacom Skynet
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                        F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
                        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                        O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
                        O2 - BHO: PBBEFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB197B82D} - C:\WINDOWS\system32\pbbefrv2.dll (file missing)
                        O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                        O3 - Toolbar: PBBEFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB197B82D} - C:\WINDOWS\system32\pbbefrv2.dll (file missing)
                        O3 - Toolbar: Copernic Desktop Search - {C5F7A735-70F1-477F-8C36-6FF3C736017B} - C:\Program Files\Copernic Desktop Search\CopernicDesktopSearchIntegration740.dll
                        O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
                        O3 - Toolbar: IE Custom Tools - {23ED2206-856D-461A-BBCF-1C2466AC5AE3} - C:\Program Files\Video Add-on\ictmdl.dll (file missing)
                        O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
                        O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                        O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
                        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                        O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
                        O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
                        O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
                        O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
                        O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                        O4 - HKLM\..\Run: [ToUcamVProperty] C:\Program Files\Philips ToUcam Camera\VProperty.exe
                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                        O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                        O4 - HKLM\..\Run: [NI.UGES_0002_N108M1607] "c:\documents and settings\jean claude\application data\setup_en[1].exe" -nag
                        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
                        O4 - HKCU\..\Run: [Copernic Desktop Search] "C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe" /tray
                        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                        O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
                        O4 - Global Startup: Dial-Messenger.lnk = C:\Program Files\Dial-Messenger\Dial-Messenger.exe
                        O4 - Global Startup: hp psc 1000 series.lnk = ?
                        O4 - Global Startup: hpoddt01.exe.lnk = ?
                        O4 - Global Startup: Hyperappel de l'Encyclopédie Universelle Larousse.lnk = ?
                        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\Office\OSA9.EXE
                        O4 - Global Startup: Reality Fusion GameCam SE.lnk = ?
                        O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
                        O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-be\msntb.dll/search.htm
                        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                        O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                        O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-be\msntabres.dll.mui/229?938cddc684784a75b4a877af3eab2d3b
                        O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-be\msntabres.dll.mui/230?938cddc684784a75b4a877af3eab2d3b
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                        O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
                        O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
                        O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
                        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
                        O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - https://support.norton.com/sp/en/us/home/current/info
                        O22 - SharedTaskScheduler: forayer - {e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2} - C:\WINDOWS\system32\gaaplp.dll (file missing)
                        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                        O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                        O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                        O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                        O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                        O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
                        1. Utilisateur anonyme
                          Bonsoir relance hijack et coche ceci
                          ensuite clic sue fix checked

                          F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
                          O2 - BHO: PBBEFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB197B82D} - C:\WINDOWS\system32\pbbefrv2.dll (file missing)
                          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                          O3 - Toolbar: PBBEFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB197B82D} - C:\WINDOWS\system32\pbbefrv2.dll (file missing)
                          O3 - Toolbar: IE Custom Tools - {23ED2206-856D-461A-BBCF-1C2466AC5AE3} - C:\Program Files\Video Add-on\ictmdl.dll (file missing)
                          O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
                          O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
                          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                          O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
                          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                          O4 - HKLM\..\Run: [NI.UGES_0002_N108M1607] "c:\documents and settings\jean claude\application data\setup_en[1].exe" -nag
                          O4 - Global Startup: Dial-Messenger.lnk = C:\Program Files\Dial-Messenger\Dial-Messenger.exe
                          O4 - Global Startup: hp psc 1000 series.lnk = ?
                          O4 - Global Startup: hpoddt01.exe.lnk = ?
                          O4 - Global Startup: Hyperappel de l'Encyclopédie Universelle Larousse.lnk = ?
                          O4 - Global Startup: Reality Fusion GameCam SE.lnk = ?
                          O22 - SharedTaskScheduler: forayer - {e0e6e3da-f3af-4fb4-9411-2cf92fdeefc2} - C:\WINDOWS\system32\gaaplp.dll (file missing)
                          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

                          ensuite tu peux télécharger ceci
                          et utiliser régulièrement

                          CCleaner
                          https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
                          un tuto pour l'aide
                          https://forums.cnetfrance.fr

                          Ad-Aware
                          https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/11643.html
                          un tuto pour l’aide
                          http://www.kachouri.com/tuto/tuto-327-ad-aware-2007--detecter-et-retirer-les-spywares.html

                          spybot
                          https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/26157.html
                          un tuto pour l'aide
                          https://www.malekal.com/spybot-search-destroy-proteger-desinfecter-pc-virus/

                          une fois que tu auras fait tout ça redémarre ton pc et dire si tu as encore des soucis
                          2. maxim1180
                            Bonjour ep,

                            J'ai fait tout ce que tu m'as recommandé. Apparemment, tout est calme ce matin. J'ai refait un scan avec Ad-Aware (voir le résultat ci-après) et j'ai mis les critical objects en quarantaine et fait un remove des privacy objects. Autre info: une icône carrée avec bande bleue au-dessus et cadenas dans le coin inférieur gauche s'est installée dans la barre de menu de l'ordi, lorsque je positionne le curseur dessus elle affiche Resident de Spybot-SD et me dit que 41923 processus ont été mis sur la liste noire, suit une adresse fichier. C'est quoi? @+

                            Scan Results
                            Ad-Aware 2007 Free Edition
                            Log File Created on:2007-10-2309:15:32
                            Using Definitions File:C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\core.aawdef
                            Computer name:Jean-Claude
                            Name of user performing scan:SYSTEM
                            Name of user ordering scan:Jean Claude
                            Scan completed successfully

                            System Information
                            File Version Information
                            Ad-Aware 2007 Settings
                            Extended Ad-Aware 2007 Settings
                            Database Information
                            Scan Statistics
                            Scan Detailed Statistics
                            Infections Found
                            Listing of running processes
                            System Information
                            Number of processors:1
                            Processor type:Intel(R) Pentium(R) 4 CPU 2.93GHz
                            Memory Available:28%
                            Total Physical Memory:527810560 Bytes
                            Available Physical Memory:147435520 Bytes
                            Total Page File Size:1288499200 Bytes
                            Available On Page File:806973440 Bytes
                            Total Virtual Memory:2147352576 Bytes
                            Available Virtual Memory:1987809280 Bytes
                            OS:Microsoft Windows XP 5.1 (Build 2600)
                            [to top]
                            File Verion Information
                            File Version
                            CEAPI.dll 7, 0, 2, 3
                            aawservice.exe 7, 0, 2, 3
                            Ad-Aware2007.exe 7.0.2.3
                            [to top]
                            Ad-Aware 2007 Settings
                            Skipping files larger than:1048576 Bytes
                            Ignoring infections with lower TAI than:3
                            Safe Mode:False
                            [to top]
                            Extended Ad-Aware 2007 Settings
                            Unload malicious processes and modules
                            Unload Modules
                            Let Windows remove files at Start-Up
                            Deactivate Ad-Watch
                            Re-analyze Scan Result
                            Update Definitions on startup
                            Delete Restored Items
                            Permanent Archive Caching
                            Write Protect System Files
                            Create Log file
                            Include basic settings
                            Include advanced settings
                            Include user and computer name
                            Environment information
                            Running processes
                            Running processes and modules
                            Include info about ignored objects in log file
                            Consider definitions File Outdated after x days
                            Proxy URL
                            Proxy Port
                            [to top]
                            Database Info
                            Version number:27
                            Build Number:0
                            Build Date and Time:2007/10/2208:08:01
                            [to top]
                            Scan Statistics
                            Method:Full

                            Items Scanned:327409
                            Infections Detected:209
                            Infections Removed:0
                            Infections Quarantined:0
                            Infections Ignored:0
                            [to top]
                            Scan Detailed Statistics
                            Type Critical Total
                            Process Scan 0 0
                            Registry Scan 15 15
                            Registry PE Scan 0 0
                            Hosts Scan 0 0
                            File Scan 0 0
                            Folder Scan 0 0
                            LSP Scan 0 0
                            ADS Scan 0 0
                            Cookie Scan 192 192
                            File Hash Scan 0 0
                            [to top]
                            Infections Found
                            Family Id Name Category TAI
                            1040 Win32.Trojandownloader.Zlob Malware 10
                            [300034790] Root: HKLM Path: software\microsoft\windows\currentversion\explorer\browser helper objects\{cfe15135-c591-4000-a55e-a50e5f9f82bc}
                            [300035566] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\internet explorer\toolbar\webbrowser Value: {23ed2206-856d-461a-bbcf-1c2466ac5ae3}
                            [300027615] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\contraviruspro.com
                            [300027617] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\freerealitympegs.com
                            [300027621] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\hollywoodfiles.tv
                            [300027623] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\net-codec.com
                            [300027627] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\plus-codec.com
                            [300027632] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\contraviruspro.com
                            [300027634] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\freerealitympegs.com
                            [300027637] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\gomyron.com
                            [300027638] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\hollywoodfiles.tv
                            [300027639] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\inc-codec.com
                            [300027640] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\net-codec.com
                            [300027641] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\nmextensions.com
                            [300027644] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\plus-codec.com

                            725 Tracking Cookie DataMiner 3
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Jean Claude\Cookies\index.dat msnportal.112.2o7.net s_vi /
                            [600000262] Browser: Internet Explorer Cookie: C:\Documents and Settings\Jean Claude\Cookies\index.dat metriweb.be MetriWeb /
                            [600000179] Browser: Internet Explorer Cookie: C:\Documents and Settings\Jean Claude\Cookies\index.dat atdmt.com AA002 /
                            [600000144] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat doubleclick.net id /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat be.sitestat.com s1 /belgacom/skynet/
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat be.sitestat.com s1 /belgacom/kidcity/
                            [600000263] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat mediaplex.com svid /
                            [600000179] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat atdmt.com AA002 /
                            [600000052] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat trafficmp.com u /
                            [600000052] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat trafficmp.com ctime /
                            [600000052] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat trafficmp.com TMPFreqCap /
                            [600000052] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat trafficmp.com TMPCrByAS /
                            [600000052] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat trafficmp.com TMPPOByAS /
                            [600000052] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat trafficmp.com fc /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat estat.com e /
                            [600000171] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat bs.serving-sys.com eyeblaster /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat be.sitestat.com s1 /thomascook/neckermann/
                            [600000086] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat qsrch.com cuid /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat be.sitestat.com c1 /thomascook/
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat be.sitestat.com c1 /belgacom/
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1065167406/
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat real.com RNsites /
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat real.com Edition /
                            [600000177] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat beweb.com GUID /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat z1.adserver.com xon /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat z1.adserver.com z17 /
                            [600000579] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat creativeby.viewpoint.com VWCUK180 /
                            [600000182] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat as1.falkag.de TRG /
                            [600000182] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat as1.falkag.de BSUID /
                            [600000182] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat as1.falkag.de KIDYMD /
                            [600000182] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat as1.falkag.de WIDYMD /
                            [600000182] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat as1.falkag.de IIDYMD /
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 247realmedia.com RMID /
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 247realmedia.com targetbw /
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 247realmedia.com RM_BPS /
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 247realmedia.com RM_CNX /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1071592576/
                            [600000095] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat perf.overture.com SYSTEM_USER_ID /
                            [600000164] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat centrport.net CPID /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat msnlivefavorites.112.2o7.net s_vi /
                            [600000409] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat server.iad.liveperson.net HumanClickKEY /hc/18766632
                            [600000095] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat data2.perf.overture.com NSC_ebub2_hspvq /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat boonty.122.2o7.net s_vi /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1069762219/
                            [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat weborama.fr AFFICHE_W /
                            [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat weborama.fr aimfarcapping /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat be.sitestat.com s1 /belgacom/arena51/
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat be.sitestat.com s1 /hallmark/hallmark/
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat microsofteup.112.2o7.net s_vi /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www5.addfreestats.com NC1U /cgi-bin
                            [600000488] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat indextools.com itvisitorid1000477487863 /
                            [600000488] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat indextools.com itsessionid1000477487863 /
                            [600000488] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat indextools.com itvs /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1068662616/
                            [600000464] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat valueclick.com ksa /
                            [600000295] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adtech.de CfP /
                            [600000295] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adtech.de JEB2 /
                            [600000068] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat statse.webtrendslive.com wtl147011 /S147011
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat msnportal.112.2o7.net s_vi /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1070767430/
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1071835059/
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat stat.onestat.com 231659 /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat stat.onestat.com ONESTAT /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat stat.onestat.com 274690 /
                            [600000101] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat overture.com UserData /
                            [600000101] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat overture.com ConvData /
                            [600000101] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat overture.com CMUserData /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adserving.cpxinteractive.com rmCookiesChecked /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adserving.cpxinteractive.com flashInstalled /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat aolfr.122.2o7.net s_vi /
                            [600000234] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat tradedoubler.com TD_UNIQUE_IMP /
                            [600000234] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat tradedoubler.com TradeDoublerGUID /
                            [600000234] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat tradedoubler.com TD_EH_0 /
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat media.adrevolver.com adrevid /adrevolver/
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat media.adrevolver.com freq /adrevolver/
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat media.adrevolver.com gai /adrevolver/
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat media.adrevolver.com uid /adrevolver/
                            [600000065] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat targetnet.com tn_pid /
                            [600000065] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat targetnet.com fcap0 /
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adrevolver.com prefs /
                            [600000476] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat statcounter.com session_1042065 /
                            [600000476] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat statcounter.com session_414235 /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com testbounce /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com ih /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com uid /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com vuday1 /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com pv1 /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com fl_inst /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1071971038/
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat premiumtv.122.2o7.net s_vi /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1067816105/
                            [600000138] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fastclick.net pluto /
                            [600000138] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fastclick.net m6 /
                            [600000138] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fastclick.net m1 /
                            [600000138] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fastclick.net pjw /
                            [600000138] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fastclick.net adv_ic /
                            [600000461] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.uk.tangozebra.com TZID /a
                            [600000068] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat statse.webtrendslive.com ACOOKIE /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fnac.112.2o7.net s_vi /
                            [600000050] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat tribalfusion.com ANON_ID /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5103083LCAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510528CENMV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510528MBFCV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5103154GMWV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5103120MSFV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510612FMNSV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM51030813MRV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5106126NRNV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510612D8CWV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510824IDDVV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510315GDENV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510824KMFVV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510308OCSAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510308L7AVV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM541109D6SFV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5701245LRAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM550623G6NNV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5105285HSEV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM520514JJMAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5510259AVAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510612JEBAV6 /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRID /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRimp /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRpb /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRaf /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRca /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRcp /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRpl /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRcr /
                            [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ads.pointroll.com PRpc /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat smartadserver.com pid /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat smartadserver.com pbwmaj /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat smartadserver.com pbw /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www7.addfreestats.com NC1U /cgi-bin
                            [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat advertising.com ACID /
                            [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat advertising.com BASE /
                            [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat advertising.com ROLL /
                            [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat advertising.com C2 /
                            [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat advertising.com F1 /
                            [600000457] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adopt.euroclick.com LO /
                            [600000457] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adopt.euroclick.com UI /
                            [600000457] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adopt.euroclick.com NSC_mc-bepqu.fvspdmjdl.dpn-iuuq /
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat realmedia.com RMID /
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat realmedia.com RMFM /
                            [600000083] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat realmedia.com NXCLICK2 /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1071467813/
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com A2 /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com B2 /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com C3 /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com D3 /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com E2 /
                            [600000031] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.cibleclick.com CIDENT_ID /
                            [600000031] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.cibleclick.com CIBLE_CLICK_BAN /
                            [600000434] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat casalemedia.com CMID /
                            [600000434] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat casalemedia.com CMPH /
                            [600000434] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat casalemedia.com CMFP /
                            [600000434] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat casalemedia.com CMX1 /
                            [600000434] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat casalemedia.com CMS /
                            [600000434] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat casalemedia.com CMX3 /
                            [600000434] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat casalemedia.com CMCLICK3 /
                            [600000409] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat server.iad.liveperson.net HumanClickID /
                            [600000409] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat server.iad.liveperson.net HumanClickACTIVE /
                            [600000262] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat metriweb.be MetriWeb /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adserver.aol.fr CfP /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adserver.aol.fr JEB2 /
                            [600000085] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat questionmarket.com ES /
                            [600000085] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat questionmarket.com CS1 /
                            [600000122] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat instadia.net UID /
                            [600000363] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fl01.ct2.comclick.com comTrackIdSurfeur /
                            [600000363] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fl01.ct2.comclick.com CKA /
                            [600000363] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fl01.ct2.comclick.com CKA_SIZE /
                            [600000363] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fl01.ct2.comclick.com CLK /
                            [600000363] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fl01.ct2.comclick.com CLK_SIZE /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www8.addfreestats.com NC1U /cgi-bin
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-warnerbrothers.hitbox.com DM550408NMSDV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-warnerbrothers.hitbox.com DM55021471CAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat hitbox.com CTG /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat hitbox.com WSS_GW /
                            [600000173] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat bluestreak.com id /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 2o7.net s_vi_atamox7Ecaihem /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 2o7.net s_vi_zgpx7Bgfak /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 2o7.net s_vi_x7Frubx7Fx7Ewqx7Dux7Euhdvb /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 2o7.net s_vi_x60tndsur /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 2o7.net s_vi_gxxppuuxxrexxx7Fvvpx7Ctb /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat 2o7.net s_vi_x7Dbjendx7Bnx7Fxx9 /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat be.sitestat.com s1 /belgacom/skynet/
                            [600000262] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat metriweb.be MetriWeb /
                            [600000179] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat atdmt.com AA002 /
                            [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat weborama.fr AFFICHE_W /
                            [600000144] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat doubleclick.net id /
                            [600000263] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat mediaplex.com svid /
                            [600000173] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat bluestreak.com id /

                            9999 MRU Object MRU Object 0
                            [1] MRU Path: C:\Documents and Settings\Jean Claude\Recent Count: 11
                            [3] MRU Registry Key: S-1-5-21-504491946-92588270-3581130662-1008\Software\Microsoft\Internet Explorer\TypedURLs Count: 25

                            Quarantined Objects
                            Family Id Name Category TAI
                            1040 Win32.Trojandownloader.Zlob Malware 10
                            [300034790] Root: HKLM Path: software\microsoft\windows\currentversion\explorer\browser helper objects\{cfe15135-c591-4000-a55e-a50e5f9f82bc}
                            [300035566] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\internet explorer\toolbar\webbrowser Value: {23ed2206-856d-461a-bbcf-1c2466ac5ae3}
                            [300027615] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\contraviruspro.com
                            [300027617] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\freerealitympegs.com
                            [300027621] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\hollywoodfiles.tv
                            [300027623] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\net-codec.com
                            [300027627] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\plus-codec.com
                            [300027632] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\contraviruspro.com
                            [300027634] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\freerealitympegs.com
                            [300027637] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\gomyron.com
                            [300027638] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\hollywoodfiles.tv
                            [300027639] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\inc-codec.com
                            [300027640] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\net-codec.com
                            [300027641] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\nmextensions.com
                            [300027644] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\plus-codec.com

                            Removed Objects
                            Family Id Name Category TAI
                            1040 Win32.Trojandownloader.Zlob Malware 10
                            [300034790] Root: HKLM Path: software\microsoft\windows\currentversion\explorer\browser helper objects\{cfe15135-c591-4000-a55e-a50e5f9f82bc}
                            [300035566] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\internet explorer\toolbar\webbrowser Value: {23ed2206-856d-461a-bbcf-1c2466ac5ae3}
                            [300027615] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\contraviruspro.com
                            [300027617] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\freerealitympegs.com
                            [300027621] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\hollywoodfiles.tv
                            [300027623] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\net-codec.com
                            [300027627] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\domains\plus-codec.com
                            [300027632] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\contraviruspro.com
                            [300027634] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\freerealitympegs.com
                            [300027637] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\gomyron.com
                            [300027638] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\hollywoodfiles.tv
                            [300027639] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\inc-codec.com
                            [300027640] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\net-codec.com
                            [300027641] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\nmextensions.com
                            [300027644] Root: HKU Path: S-1-5-21-504491946-92588270-3581130662-1008\software\microsoft\windows\currentversion\internet settings\zonemap\escdomains\plus-codec.com

                            725 Tracking Cookie DataMiner 3
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Jean Claude\Cookies\index.dat msnportal.112.2o7.net s_vi /
                            [600000262] Browser: Internet Explorer Cookie: C:\Documents and Settings\Jean Claude\Cookies\index.dat metriweb.be MetriWeb /
                            [600000179] Browser: Internet Explorer Cookie: C:\Documents and Settings\Jean Claude\Cookies\index.dat atdmt.com AA002 /
                            [600000144] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat doubleclick.net id /
                            [600000179] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat atdmt.com AA002 /
                            [600000171] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat bs.serving-sys.com eyeblaster /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat be.sitestat.com c1 /belgacom/
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1065167406/
                            [600000579] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat creativeby.viewpoint.com VWCUK180 /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1071592576/
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat msnlivefavorites.112.2o7.net s_vi /
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat boonty.122.2o7.net s_vi /
                            [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat weborama.fr AFFICHE_W /
                            [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat weborama.fr aimfarcapping /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www5.addfreestats.com NC1U /cgi-bin
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1068662616/
                            [600000068] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat statse.webtrendslive.com wtl147011 /S147011
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat msnportal.112.2o7.net s_vi /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1070767430/
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat stat.onestat.com 231659 /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat stat.onestat.com ONESTAT /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat stat.onestat.com 274690 /
                            [600000101] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat overture.com UserData /
                            [600000101] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat overture.com ConvData /
                            [600000101] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat overture.com CMUserData /
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat media.adrevolver.com adrevid /adrevolver/
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat media.adrevolver.com freq /adrevolver/
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat media.adrevolver.com gai /adrevolver/
                            [600000201] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat media.adrevolver.com uid /adrevolver/
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com testbounce /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com ih /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com uid /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com vuday1 /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com pv1 /
                            [600000460] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.yieldmanager.com fl_inst /
                            [600000190] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat www.googleadservices.com Conversion /pagead/conversion/1067816105/
                            [600000461] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ad.uk.tangozebra.com TZID /a
                            [600000212] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat fnac.112.2o7.net s_vi /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5103083LCAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510528CENMV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510528MBFCV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5103154GMWV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5103120MSFV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510612FMNSV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM51030813MRV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5106126NRNV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510612D8CWV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510824IDDVV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510315GDENV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510824KMFVV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510308OCSAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510308L7AVV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM541109D6SFV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5701245LRAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM550623G6NNV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5105285HSEV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM520514JJMAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM5510259AVAV6 /
                            [600000126] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat ehg-dig.hitbox.com DM510612JEBAV6 /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat smartadserver.com pid /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat smartadserver.com pbwmaj /
                            [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat smartadserver.com pbw /
                            [600000457] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adopt.euroclick.com LO /
                            [600000457] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adopt.euroclick.com UI /
                            [600000457] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat adopt.euroclick.com NSC_mc-bepqu.fvspdmjdl.dpn-iuuq /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com A2 /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com B2 /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com C3 /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com D3 /
                            [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat serving-sys.com E2 /
                            [600000409] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat server.iad.liveperson.net HumanClickID /
                            [600000409] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat server.iad.liveperson.net HumanClickACTIVE /
                            [600000085] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat questionmarket.com ES /
                            [600000085] Browser: Internet Explorer Cookie: C:\Documents and Settings\Anaïs\Cookies\index.dat questionmarket.com CS1 /
                            [600000142] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat be.sitestat.com s1 /belgacom/skynet/
                            [600000262] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat metriweb.be MetriWeb /
                            [600000179] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat atdmt.com AA002 /
                            [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat weborama.fr AFFICHE_W /
                            [600000144] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat doubleclick.net id /
                            [600000263] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat mediaplex.com svid /
                            [600000173] Browser: Internet Explorer Cookie: C:\Documents and Settings\Tiffany\Cookies\index.dat bluestreak.com id /

                            9999 MRU Object MRU Object 0
                            [1] MRU Path: C:\Documents and Settings\Jean Claude\Recent Count: 11
                            [3] MRU Registry Key: S-1-5-21-504491946-92588270-3581130662-1008\Software\Microsoft\Internet Explorer\TypedURLs Count: 25

                            [to top]
                            Listing of Running Processes
                            C:\WINDOWS\SYSTEM32\SMSS.EXE
                            c:\windows\system32\smss.exe
                            c:\windows\system32\ntdll.dll
                            C:\WINDOWS\SYSTEM32\CSRSS.EXE
                            c:\windows\system32\csrss.exe
                            c:\windows\system32\ntdll.dll
                            c:\windows\system32\csrsrv.dll
                            c:\windows\system32\basesrv.dll
                            c:\windows\system32\winsrv.dll
                            c:\windows\system32\gdi32.dll
                            c:\windows\system32\kernel32.dll
                            c:\windows\system32\user32.dll
                            c:\windows\system32\lpk.dll
                            c:\windows\system32\usp10.dll
                            c:\windows\system32\msvcrt.dll
                            c:\windows\system32\advapi32.dll
                            c:\windows\system32\rpcrt4.dll
                            c:\windows\system32\sxs.dll
                            C:\WINDOWS\SYSTEM32\WINLOGON.EXE
                            c:\windows\system32\winlogon.exe
                            c:\windows\system32\ntdll.dll
                            c:\windows\system32\kernel32.dll
                            c:\windows\system32\advapi32.dll
                            c:\windows\system32\rpcrt4.dll
                            c:\windows\system32\authz.dll
                            c:\windows\system32\msvcrt.dll
                            c:\windows\system32\crypt32.dll
                            c:\windows\system32\user32.dll
                            c:\windows\system32\gdi32.dll
                            c:\windows\system32\msasn1.dll
                            c:\windows\system32\nddeapi.dll
                            c:\windows\system32\profmap.dll
                            c:\windows\system32\netapi32.dll
                            c:\windows\system32\userenv.dll
                            c:\windows\system32\psapi.dll
                            c:\windows\system32\regapi.dll
                            c:\windows\system32\secur32.dll
                            c:\windows\system32\setupapi.dll
                            c:\windows\system32\version.dll
                            c:\windows\system32\winsta.dll
                            c:\windows\system32\wintrust.dll
                            c:\windows\system32\imagehlp.dll
                            c:\windows\system32\ws2_32.dll
                            c:\windows\system32\ws2help.dll
                            c:\windows\system32\imm32.dll
                            c:\windows\system32\lpk.dll
                            c:\windows\system32\usp10.dll
                            c:\windows\system32\msgina.dll
                            c:\windows\system32\shell32.dll
                            c:\windows\system32\shlwapi.dll
                            c:\windows\system32\comctl32.dll
                            c:\windows\system32\odbc32.dll
                            c:\windows\system32\comdlg32.dll
                            c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
                            c:\windows\system32\odbcint.dll
                            c:\windows\system32\shsvcs.dll
                            c:\windows\system32\sfc.dll
                            c:\windows\system32\sfc_os.dll
                            c:\windows\system32\ole32.dll
                            c:\windows\system32\apphelp.dll
                            c:\windows\system32\msctfime.ime
                            c:\windows\system32\winscard.dll
                            c:\windows\system32\wtsapi32.dll
                            c:\windows\system32\sxs.dll
                            c:\windows\system32\uxtheme.dll
                            c:\windows\system32\winmm.dll
                            c:\windows\system32\cscdll.dll
                            c:\windows\system32\wlnotify.dll
                            c:\windows\system32\winspool.drv
                            c:\windows\system32\mpr.dll
                            c:\windows\system32\rsaenh.dll
                            c:\windows\system32\wgalogon.dll
                            c:\windows\system32\oleaut32.dll
                            c:\windows\system32\ntmarta.dll
                            c:\windows\system32\wldap32.dll
                            c:\windows\system32\samlib.dll
                            c:\windows\system32\clbcatq.dll
                            c:\windows\system32\comres.dll
                            c:\windows\system32\msv1_0.dll
                            c:\windows\system32\iphlpapi.dll
                            c:\windows\system32\rasapi32.dll
                            c:\windows\system32\rasman.dll
                            c:\windows\system32\tapi32.dll
                            c:\windows\system32\rtutils.dll
                            c:\windows\system32\cscui.dll
                            c:\windows\system32\mprapi.dll
                            c:\windows\system32\activeds.dll
                            c:\windows\system32\adsldpc.dll
                            c:\windows\system32\atl.dll
                            c:\windows\system32\wdmaud.drv
                            c:\windows\system32\msacm32.drv
                            c:\windows\system32\msacm32.dll
                            c:\windows\system32\midimap.dll
                            c:\windows\system32\xpsp2res.dll
                            C:\WINDOWS\SYSTEM32\SERVICES.EXE
                            c:\windows\system32\services.exe
                            c:\windows\system32\ntdll.dll
                            c:\windows\system32\kernel32.dll
                            c:\windows\system32\msvcrt.dll
                            c:\windows\system32\advapi32.dll
                            c:\windows\system32\rpcrt4.dll
                            c:\windows\system32\user32.dll
                            c:\windows\system32\gdi32.dll
                            c:\windows\system32\userenv.dll
                            c:\windows\system32\scesrv.dll
                            c:\windows\system32\authz.dll
                            c:\windows\system32\umpnpmgr.dll
                            c:\windows\system32\winsta.dll
                            c:\windows\system32\netapi32.dll
                            c:\windows\system32\ncobjapi.dll
                            c:\windows\system32\msvcp60.dll
                            c:\windows\system32\shimeng.dll
                            c:\windows\apppatch\acadproc.dll
                            c:\windows\system32\imm32.dll
                            c:\windows\system32\lpk.dll
                            c:\windows\system32\usp10.dll
                            c:\windows\system32\secur32.dll
                            c:\windows\system32\apphelp.dll
                            c:\windows\system32\version.dll
                            c:\windows\system32\eventlog.dll
                            c:\windows\system32\ws2_32.dll
                            c:\windows\system32\ws2help.dll
                            c:\windows\system32\psapi.dll
                            c:\windows\system32\wtsapi32.dll
                            C:\WINDOWS\SYSTEM32\LSASS.EXE
                            c:\windows\system32\lsass.exe
                            c:\windows\system32\ntdll.dll
                            c:\windows\system32\kernel32.dll
                            c:\windows\system32\advapi32.dll
                            c:\windows\system32\rpcrt4.dll
                            c:\windows\system32\lsasrv.dll
                            c:\windows\system32\mpr.dll
                            c:\windows\system32\user32.dll
                            c:\windows\system32\gdi32.dll
                            c:\windows\system32\msasn1.dll
                            c:\windows\system32\msvcrt.dll
                            c:\windows\system32\netapi32.dll
                            c:\windows\system32\ntdsapi.dll
                            c:\windows\system32\dnsapi.dll
                            c:\windows\system32\ws2_32.dll
                            c:\windows\system32\ws2help.dll
                            c:\windows\system32\wldap32.dll
                            c:\windows\system32\secur32.dll
                            c:\windows\system32\samlib.dll
                            c:\windows\system32\samsrv.dll
                            c:\windows\system32\cryptdll.dll
                            c:\windows\system32\shimeng.dll
                            c:\windows\apppatch\acgenral.dll
                            c:\windows\system32\winmm.dll
                            c:\windows\system32\ole32.dll
                            c:\windows\system32\oleaut32.dll
                            c:\windows\system32\msacm32.dll
                            c:\windows\system32\version.dll
                            c:\windows\system32\shell32.dll
                            c:\windows\system32\shlwapi.dll
                            c:\windows\system32\userenv.dll
                            c:\windows\system32\uxtheme.dll
                            c:\windows\system32\imm32.dll
                            c:\windows\system32\lpk.dll
                            c:\windows\system32\usp10.dll
                            c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
                            c:\windows\system32\comctl32.dll
                            c:\windows\system32\msprivs.dll
                            c:\windows\system32\kerberos.dll
                            c:\windows\system32\msv1_0.dll
                            c:\windows\system32\iphlpapi.dll
                            c:\windows\system32\netlogon.dll
                            c:\windows\system32\w32time.dll
                            c:\windows\system32\msvcp60.dll
                            c:\windows\system32\schannel.dll
                            c:\windows\system32\crypt32.dll
                            c:\windows\system32\wdigest.dll
                            c:\windows\system32\rsaenh.dll
                            c:\windows\system32\scecli.dll
                            c:\windows\system32\setupapi.dll
                            c:\windows\system32\ipsecsvc.dll
                            c:\windows\system32\authz.dll
                            c:\windows\system32\oakley.dll
                            c:\windows\system32\winipsec.dll
                            c:\windows\system32\pstorsvc.dll
                            c:\windows\system32\psbase.dll
                            c:\windows\system32\mswsock.dll
                            c:\windows\system32\hnetcfg.dll
                            c:\windows\system32\wshtcpip.dll
                            c:\windows\system32\dssenh.dll
                            C:\WINDOWS\SYSTEM32\SVCHOST.EXE
                            c:\windows\system32\svchost.exe
                            c:\windows\system32\ntdll.dll
                            c:\windows\system32\kernel32.dll
                            c:\windows\system32\advapi32.dll
                            c:\windows\system32\rpcrt4.dll
                            c:\windows\system32\shimeng.dll
                            c:\windows\apppatch\acgenral.dll
                            c:\windows\system32\user32.dll
                            c:\windows\system32\gdi32.dll
                            c:\windows\system32\winmm.dll
                            c:\windows\system32\ole32.dll
                            c:\windows\system32\msvcrt.dll
                            c:\windows\system32\oleaut32.dll
                            c:\windows\system32\msacm32.dll
                            c:\windows\system32\version.dll
                            c:\windows\system32\shell32.dll
                            c:\windows\system32\shlwapi.dll
                            c:\windows\system32\userenv.dll
                            c:\windows\system32\uxtheme.dll
                            c:\windows\system32\imm32.dll
                            c:\windows\system32\lpk.dll
                            c:\windows\system32\usp10.dll
                            c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
                            c:\windows\system32\comctl32.dll
                            c:\windows\system32\ntmarta.dll
                            c:\windows\system32\wldap32.dll
                            c:\windows\system32\samlib.dll
                            c:\windows\system32\rpcss.dll
                            c:\windows\system32\secur32.dll
                            c:\windows\system32\ws2_32.dll
                            c:\windows\system32\ws2help.dll
                            c:\windows\system32\xpsp2res.dll
                            c:\windows\system32\clbcatq.dll
                            c:\windows\system32\comres.dll
                            c:\windows\system32\termsrv.dll
                            c:\windows\system32\icaapi.dll
                            c:\windows\system32\setupapi.dll
                            c:\windows\system32\wintrust.dll
                            c:\windows\system32\crypt32.dll
                            c:\windows\system32\msasn1.dll
                            c:\windows\system32\imagehlp.dll
                            c:\windows\system32\authz.dll
                            c:\windows\system32\mstlsapi.dll
                            c:\windows\system32\activeds.dll
                            c:\windows\system32\adsldpc.dll
                            c:\windows\system32\netapi32.dll
                            c:\windows\system32\atl.dll
                            c:\windows\system32\regapi.dll
                            c:\windows\system32\rsaenh.dll
                            c:\windows\system32\apphelp.dll
                            c:\windows\system32\wtsapi32.dll
                            c:\windows\system32\winsta.dll
                            c:\windows\system32\msv1_0.dll
                            c:\windows\system32\iphlpapi.dll
                            c:\windows\system32\svchost.exe
                            c:\windows\system32\ntdll.dll
                            c:\windows\system32\kernel32.dll
                            c:\windows\system32\advapi32.dll
                            c:\windows\system32\rpcrt4.dll
                            c:\windows\system32\shimeng.dll
                            c:\windows\apppatch\acgenral.dll
                            c:\windows\system32\user32.dll
                            c:\windows\system32\gdi32.dll
                            c:\windows\system32\winmm.dll
                            c:\windows\system32\ole32.dll
                            c:\windows\system32\msvcrt.dll
                            c:\windows\system32\oleaut32.dll
                            c:\windows\system32\msacm32.dll
                            c:\windows\system32\version.dll
                            c:\windows\system32\shell32.dll
                            c:\windows\system32\shlwapi.dll
                            c:\windows\system32\userenv.dll
                            c:\windows\system32\uxtheme.dll
                            c:\windows\system32\imm32.dll
                            c:\windows\system32\lpk.dll
                            c:\windows\system32\usp10.dll
                            c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
                            c:\windows\system32\comctl32.dll
                            c:\windows\system32\rpcss.dll
                            c:\windows\system32\secur32.dll
                            c:\windows\system32\ws2_32.dll
                            c:\windows\system32\ws2help.dll
                            c:\windows\system32\xpsp2res.dll
                            c:\windows\system32\rsaenh.dll
                            c:\windows\system32\mswsock.dll
                            c:\windows\system32\hnetcfg.dll
                            c:\windows\system32\wshtcpip.dll
                            c:\windows\system32\wshisn.dll
                            c:\windows\system32\wsock32.dll
                            c:\windows\system32\dnsapi.dll
                            c:\windows\system32\iphlpapi.dll
                            c:\windows\system32\winrnr.dll
                            c:\windows\system32\wldap32.dll
                            c:\windows\system32\rasadhlp.dll
                            c:\windows\system32\clbcatq.dll
                            c:\windows\system32\comres.dll
                            c:\windows\system32\svchost.exe
                            c:\windows\system32\ntdll.dll
                            c:\windows\system32\kernel32.dll
                            c:\windows\system32\advapi32.dll
                            c:\windows\system32\rpcrt4.dll
                            c:\windows\system32\shimeng.dll
                            c:\windows\apppatch\acgenral.dll
                            c:\windows\system32\user32.dll
                            c:\windows\system32\gdi32.dll
                            c:\windows\system32\winmm.dll
                            c:\windows\system32\ole32.dll
                            c:\windows\system32\msvcrt.dll
                            c:\windows\system32\oleaut32.dll
                            c:\windows\system32\msacm32.dll
                            c:\windows\system32\version.dll
                            c:\windows\system32\shell32.dll
                            c:\windows\system32\shlwapi.dll
                            c:\windows\system32\userenv.dll
                            c:\windows\system32\uxtheme.dll
                            c:\windows\system32\imm32.dll
                            c:\windows\system32\lpk.dll
                            c:\windows\system32\usp10.dll
                            c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
                            c:\windows\system32\comctl32.dll
                            c:\windows\system32\ntmarta.dll
                            c:\windows\system32\wldap32.dll
                            c:\windows\system32\samlib.dll
                            c:\windows\system32\xpsp2res.dll
                            c:\windows\system32\shsvcs.dll
                            c:\windows\system32\winsta.dll
                            c:\windows\system32\netapi32.dll
                            c:\windows\system32\dhcpcsvc.dll
                            c:\windows\system32\dnsapi.dll
                            c:\windows\system32\ws2_32.dll
                            c:\windows\system32\ws2help.dll
                            c:\windows\system32\iphlpapi.dll
                            c:\windows\system32\secur32.dll
                            c:\windows\system32\rsaenh.dll
                            c:\windows\system32\mswsock.dll
                            c:\windows\system32\hnetcfg.dll
                            c:\windows\system32\wshtcpip.dll
                            c:\windows\system32\wzcsvc.dll
                            c:\windows\system32\rtutils.dll
                            c:\windows\system32\wmi.dll
                            c:\windows\system32\crypt32.dll
                            c:\windows\system32\msasn1.dll
                            c:\windows\system32\wtsapi32.dll
                            c:\windows\system32\esent.dll
                            c:\windows\system32\atl.dll
                            c:\windows\system32\setupapi.dll
                            c:\windows\system32\rastls.dll
                            c:\windows\system32\cryptui.dll
                            c:\windows\system32\wintrust.dll
                            c:\windows\system32\imagehlp.dll
                            c:\windows\system32\wininet.dll
                            c:\windows\system32\normaliz.dll
                            c:\windows\system32\iertutil.dll
                            c:\windows\system32\mprapi.dll
                            c:\windows\system32\activeds.dll
                            c:\windows\system32\adsldpc.dll
                            c:\windows\system32\rasapi32.dll
                            c:\windows\system32\rasman.dll
                            c:\windows\system32\tapi32.dll
                            c:\windows\system32\schannel.dll
                            c:\windows\system32\winscard.dll
                            c:\windows\system32\raschap.dll
                            c:\windows\system32\msv1_0.dll
                            c:\windows\system32\clbcatq.dll
                            c:\windows\system32\comres.dll
                            c:\windows\system32\schedsvc.dll
                            c:\windows\system32\ntdsapi.dll
                            c:\windows\system32\msidle.dll
                            c:\windows\system32\audiosrv.dll
                            c:\windows\system32\wkssvc.dll
                            c:\windows\system32\cryptsvc.dll
                            c:\windows\system32\certcli.dll
                            c:\windows\system32\ersvc.dll
                            c:\windows\system32\es.dll
                            c:\windows\pchealth\helpctr\binaries\pchsvc.dll
                            c:\windows\system32\hidserv.dll
                            c:\windows\system32\hid.dll
                            c:\windows\system32\srvsvc.dll
                            c:\windows\system32\sens.dll
                            c:\windows\system32\seclogon.dll
                            c:\windows\system32\mprdim.dll
                            c:\windows\system32\ipxsap.dll
                            c:\windows\system32\rtm.dll
                            c:\windows\system32\wsock32.dll
                            c:\windows\system32\adptif.dll
                            c:\windows\system32\netman.dll
                            c:\windows\system32\netshell.dll
                            c:\windows\system32\credui.dll
                            c:\windows\system32\wzcsapi.dll
                            c:\windows\system32\iprtrmgr.dll
                            c:\windows\system32\iprtprio.dll
                            c:\windows\system32\winspool.drv
                            c:\windows\system32\srsvc.dll
                            c:\windows\system32\powrprof.dll
                            c:\windows\system32\tapisrv.dll
                            c:\windows\system32\psapi.dll
                            c:\windows\system32\ipxrtmgr.dll
                            c:\windows\system32\wuauserv.dll
                            c:\windows\system32\wbem\wmisvc.dll
                            c:\windows\system32\vssapi.dll
                            c:\windows\system32\w32time.dll
                            c:\windows\system32\msvcp60.dll
                            c:\windows\system32\trkwks.dll
                            c:\windows\system32\wuaueng.dll
                            c:\windows\system32\winhttp.dll
                            c:\windows\system32\cabinet.dll
                            c:\windows\system32\mspatcha.dll
                            c:\windows\system32\rasppp.dll
                            c:\windows\system32\ntlsapi.dll
                            c:\windows\system32\ipxwan.dll
                            c:\windows\system32\sxs.dll
                            c:\windows\system32\comsvcs.dll
                            c:\windows\system32\colbact.dll
                            c:\windows\system32\mtxclu.dll
                            c:\windows\system32\clusapi.dll
                            c:\windows\system32\resutils.dll
                            c:\windows\system32\wscsvc.dll
                            c:\windows\system32\msi.dll
                            c:\windows\system32\ipnathlp.dll
                            c:\windows\system32\authz.dll
                            c:\windows\system32\wbem\wbemcomn.dll
                            c:\windows\system32\wbem\wbemcore.dll
                            c:\windows\system32\wbem\esscli.dll
                            c:\windows\system32\wbem\fastprox.dll
                            c:\windows\system32\wbem\wbemsvc.dll
                            c:\windows\system32\wbem\wmiutils.dll
                            c:\windows\system32\wbem\repdrvfs.dll
                            c:\windows\system32\winrnr.dll
                            c:\windows\system32\sfc.dll
                            c:\windows\system32\sfc_os.dll
                            c:\windows\system32\wbem\wmiprvsd.dll
                            c:\windows\system32\ncobjapi.dll
                            c:\windows\system32\wbem\wbemess.dll
                            c:\windows\system32\wbem\ncprov.dll
                            c:\windows\system32\browser.dll
                            c:\windows\system32\rasmans.dll
                            c:\windows\system32\winipsec.dll
                            c:\windows\system32\netcfgx.dll
                            c:\windows\system32\ipxrip.dll
                            c:\windows\system32\mprddm.dll
                            c:\windows\system32\iashlpr.dll
                            c:\windows\system32\iasrad.dll
                            c:\windows\system32\iaspolcy.dll
                            c:\windows\system32\iassvcs.dll
                            c:\windows\system32\rastapi.dll
                            c:\windows\system32\rasadhlp.dll
                            c:\windows\system32\unimdm.tsp
                            c:\windows\system32\uniplat.dll
                            c:\windows\system32\unimdmat.dll
                            c:\windows\system32\modemui.dll
                            c:\windows\system32\kmddsp.tsp
                            c:\windows\system32\ndptsp.tsp
                            c:\windows\system32\ipconf.tsp
                            c:\windows\system32\h323.tsp
                            c:\windows\system32\hidphone.tsp
                            c:\windows\system32\kerberos.dll
                            c:\windows\system32\cryptdll.dll
                            c:\windows\system32\iassdo.dll
                            c:\program files\fichiers communs\system\ole db\oledb32.dll
                            c:\windows\system32\msdart.dll
                            c:\windows\system32\comdlg32.dll
                            c:\program files\fichiers communs\system\ole db\oledb32r.dll
                            c:\windows\system32\vbajet32.dll
                            c:\windows\system32\iasnap.dll
                            c:\windows\system32\iassam.dll
                            c:\windows\system32\iasacct.dll
                            c:\windows\system32\msxml3.dll
                            c:\windows\system32\apphelp.dll
                            c:\windows\system32\wups2.dll
                            c:\windows\system32\advpack.dll
                            c:\windows\system32\upnp.dll
                            c:\windows\syste
                            1. Utilisateur anonyme
                              Bonsoir
                              c'est une liste qui bloque certaines bestioles très connues
                              maintenant fait ceci
                              Télécharge:
                              http://www.grisoft.cz/filedir/inst/avgas-setup-7.5.1.43.exe AVG-AntiSpyware
                              = Installer
                              = Le lancer
                              = Clic : Mise à jour
                              ------
                              = Redémarre en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
                              Attention, pas d’accès à internet dans ce mode. Enregistre ou imprime les consignes.

                              Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
                              Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel
                              -------
                              = Dans ANALYSE ( en forme de loupe )
                              ==> Paramètres ==> sous COMMENT REAGIR==>clic sur Actions recommandées ==>Quarantaine
                              ==> Clic : Analyse complète du système
                              En fin de scan ( qui est assez long)
                              ==> Clic Appliquer toutes les actions <== ceci Très important
                              ==> Clic Sauvegarder rapport puis Enregistrer sous et choisir bureau
                              -------
                              En mode normal
                              colle le rapport
                              @+
                              1. maxim1180
                                Bonjour,
                                Désolé de répondre si tard mais j'étais over booker hier. Voici le rapport, bonne réception.

                                ---------------------------------------------------------
                                AVG Anti-Spyware - Rapport d'analyse
                                ---------------------------------------------------------

                                + Créé à: 12:10:20 25/10/2007

                                + Résultat de l'analyse:

                                C:\Documents and Settings\Anaïs\Cookies\anaïs@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@premiumtv.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@boonty.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@highbeam.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@microsoftwlmessengermkt.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@msninvite.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@msnuk.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@eurostar.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@msnservices.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@www.adobe[2].txt -> TrackingCookie.Adobe : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@z1.adserver[1].txt -> TrackingCookie.Adserver : Nettoyé.
                                C:\Documents and Settings\Anaïs\Local Settings\Temp\Cookies\anaïs@z1.adserver[1].txt -> TrackingCookie.Adserver : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@promo.casinotropez[1].txt -> TrackingCookie.Casinotropez : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@centrport[1].txt -> TrackingCookie.Centrport : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@ads.cnn[1].txt -> TrackingCookie.Cnn : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@com[2].txt -> TrackingCookie.Com : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@connextra[1].txt -> TrackingCookie.Connextra : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@bilbo.counted[2].txt -> TrackingCookie.Counted : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@www.epilot[1].txt -> TrackingCookie.Epilot : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@e-2dj6wfkiqoazsaq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@e-2dj6wfl4ooc5oeo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@e-2dj6wflysgajogp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@e-2dj6wgmycpczsdp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@e-2dj6wjl4qpczgep.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@estat[3].txt -> TrackingCookie.Estat : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.
                                C:\Documents and Settings\Anaïs\Local Settings\Temp\Cookies\anaïs@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@findwhat[1].txt -> TrackingCookie.Findwhat : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@ehg-warnerbrothers.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@hitbox[3].txt -> TrackingCookie.Hitbox : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@hotlog[2].txt -> TrackingCookie.Hotlog : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@searchportal.information[2].txt -> TrackingCookie.Information : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@intelli-direct[1].txt -> TrackingCookie.Intelli-direct : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@search.live[1].txt -> TrackingCookie.Live : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@image.masterstats[1].txt -> TrackingCookie.Masterstats : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@search.msn[4].txt -> TrackingCookie.Msn : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@stat.onestat[1].txt -> TrackingCookie.Onestat : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@data2.perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@paycounter[2].txt -> TrackingCookie.Paycounter : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@www.paypal[1].txt -> TrackingCookie.Paypal : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@www.pstats[1].txt -> TrackingCookie.Pstats : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@qksrv[2].txt -> TrackingCookie.Qksrv : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@real[1].txt -> TrackingCookie.Real : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@france.realsearch.real[2].txt -> TrackingCookie.Real : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@real[1].txt -> TrackingCookie.Real : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@realmedia[1].txt -> TrackingCookie.Realmedia : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@realmedia[2].txt -> TrackingCookie.Realmedia : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@revenue[2].txt -> TrackingCookie.Revenue : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@edge.ru4[1].txt -> TrackingCookie.Ru4 : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@bs.serving-sys[3].txt -> TrackingCookie.Serving-sys : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@serving-sys[3].txt -> TrackingCookie.Serving-sys : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@targetnet[2].txt -> TrackingCookie.Targetnet : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@trafficmp[1].txt -> TrackingCookie.Trafficmp : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@valueclick[1].txt -> TrackingCookie.Valueclick : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean claude@valueclick[1].txt -> TrackingCookie.Valueclick : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@web-stat[1].txt -> TrackingCookie.Web-stat : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@webstat[2].txt -> TrackingCookie.Web-stat : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
                                C:\Documents and Settings\Tiffany\Cookies\tiffany@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
                                C:\Documents and Settings\Anaïs\Cookies\anaïs@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
                                C:\Documents and Settings\Jean Claude\Cookies\jean_claude@xxxcounter[2].txt -> TrackingCookie.Xxxcounter : Nettoyé.

                                Fin du rapport
                                1. Utilisateur anonyme
                                  Bonsoir maxim1180

                                  As tu utilisé CCleaner et Spybot?
                                  ou en sont tes soucis
                                  @+
                                  1. maxim1180
                                    Bonjour ep,

                                    Oui, j'ai fait cleaner et spybot tout au début de nos contacts. Je peux les refaire si tu veux. Pour l'instant je n'ai plus de soucis mais je trouve l'ordi un peu lent. @+
                                    • 1
                                    • 2

                                    Discussions similaires

                                    trojan-spy.win32@mx
                                    caramel79

                                    3 réponses
                                    Trojan-spy.win32@mx
                                    komis

                                    4 réponses
                                    Curseur de souris qui ne bouge pas
                                    Sandra

                                    14 réponses
                                    Aide pour un virus
                                    cerise92700

                                    41 réponses
                                    Trojan impossible à supprimer!
                                    Gridouu

                                    12 réponses