popups

Question

Bonjour, 
J'ai fait une analyse avec navilog afin de ne plus être dérangée par tous ces poups; Que puis-je supprimer dans tout ce bazar????
Search Navipromo version 3.3.2 commencé le 26/10/2007 à 18:43:38,92

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 22.10.2007 à 19h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 


*** Recherche Programmes installés ***


Instant Access
MessengerSkinner


*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***

C:\Program Files\Instant Access trouvé !
C:\Program Files\MessengerSkinner trouvé !


*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\michele strobbe\Application Data ***

...\Application Data\MessengerSkinner trouvé !

*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Fichier(s) caché(s) :

C:\WINDOWS\system32\fyebumdhy.dat
C:\WINDOWS\system32\fyebumdhy.exe
C:\WINDOWS\system32\fyebumdhy_nav.dat
C:\WINDOWS\system32\fyebumdhy_navps.dat

Processus caché(s) :

C:\WINDOWS\system32\fyebumdhy.exe 


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

Fichiers trouvés :

bdbbick.exe trouvé ! 
bhonzdzllz.exe trouvé ! 
bwhqgsotw.exe trouvé ! 
bwqrzjqq.exe trouvé ! 
ccvvjw.exe trouvé ! 
cthkktjfy.exe trouvé ! 
daakgwnp.exe trouvé ! 
dgmsidewsv.exe trouvé ! 
diewhpwhek.exe trouvé ! 
diewhpwhek.exe trouvé ! 
djlvvmj.exe trouvé ! 
dnpbwog.exe trouvé ! 
dzewbkzk.exe trouvé ! 
epkqpxcgh.exe trouvé ! 
epkqpxcgh.exe trouvé ! 
evhrorvmku.exe trouvé ! 
facircz.exe trouvé ! 
fckvjokmb.exe trouvé ! 
fisnsslqkj.exe trouvé ! 
fisnsslqkj.exe trouvé ! 
fubrnqsaj.exe trouvé ! 
fusfcc.exe trouvé ! 
fxhcqb.exe trouvé ! 
gaxujnodx.exe trouvé ! 
gdndsltoq.exe trouvé ! 
gdndsltoq.exe trouvé ! 
gdrtjh.exe trouvé ! 
gdrtjh.exe trouvé ! 
gibxdxtthr.exe trouvé ! 
glrwwxlre.exe trouvé ! 
hbdeyelmd.exe trouvé ! 
hbdeyelmd.exe trouvé ! 
helnywmfd.exe trouvé ! 
hivcddzca.exe trouvé ! 
hkdpsk.exe trouvé ! 
hkrhjo.exe trouvé ! 
hsxmmfiy.exe trouvé ! 
idgikij.exe trouvé ! 
ipuecr.exe trouvé ! 
jcemsulqd.exe trouvé ! 
jhkkcrz.exe trouvé ! 
jhkkcrz.exe trouvé ! 
jjyotx.exe trouvé ! 
jkkvsbq.exe trouvé ! 
jkkvsbq.exe trouvé ! 
jnhher.exe trouvé ! 
jtljhad.exe trouvé ! 
jynahm.exe trouvé ! 
jzipnl.exe trouvé ! 
kftayugynz.exe trouvé ! 
kixccc.exe trouvé ! 
klssajq.exe trouvé ! 
kmdjshnl.exe trouvé ! 
kmdjshnl.exe trouvé ! 
komwni.exe trouvé ! 
ktujqy.exe trouvé ! 
kyxtyr.exe trouvé ! 
lbggtije.exe trouvé ! 
leulwf.exe trouvé ! 
leulwf.exe trouvé ! 
lfiduuuj.exe trouvé ! 
lmlekq.exe trouvé ! 
lnpyqfsxa.exe trouvé ! 
lnzlcrucc.exe trouvé ! 
lnzlcrucc.exe trouvé ! 
loycyushe.exe trouvé ! 
lrfwbax.exe trouvé ! 
lvkfrqk.exe trouvé ! 
lvkfrqk.exe trouvé ! 
lzcyph.exe trouvé ! 
mkapdvr.exe trouvé ! 
mlpujtywl.exe trouvé ! 
mlpujtywl.exe trouvé ! 
mwkogkx.exe trouvé ! 
nixurh.exe trouvé ! 
oathzef.exe trouvé ! 
okfhaff.exe trouvé ! 
pdchyjf.exe trouvé ! 
pgxgvzxkb.exe trouvé ! 
pgzsibexv.exe trouvé ! 
pjtkjvjsl.exe trouvé ! 
possalavrv.exe trouvé ! 
ppmhfto.exe trouvé ! 
pshsvwugx.exe trouvé ! 
qcjjwovpz.exe trouvé ! 
qgfmdisyn.exe trouvé ! 
qgvambmyvl.exe trouvé ! 
qgvambmyvl.exe trouvé ! 
qizutwscjr.exe trouvé ! 
rnovnkxfj.exe trouvé ! 
rnovnkxfj.exe trouvé ! 
rrknprw.exe trouvé ! 
sctcxxj.exe trouvé ! 
sctcxxj.exe trouvé ! 
sjkfqn.exe trouvé ! 
slthkd.exe trouvé ! 
spqhzup.exe trouvé ! 
supxaifml.exe trouvé ! 
supxaifml.exe trouvé ! 
svxkojfra.exe trouvé ! 
tdxwna.exe trouvé ! 
tqaaukukfc.exe trouvé ! 
trrkxa.exe trouvé ! 
ttzelg.exe trouvé ! 
tzftimxncv.exe trouvé ! 
uninzb.exe trouvé ! 
vlqsys.exe trouvé ! 
vnltzz.exe trouvé ! 
vusuvfd.exe trouvé ! 
whrnsxj.exe trouvé ! 
wkwyao.exe trouvé ! 
wkwyao.exe trouvé ! 
wxbkups.exe trouvé ! 
wxbkups.exe trouvé ! 
xbmfsqqsy.exe trouvé ! 
xozjomieyl.exe trouvé ! 
xpmcwk.exe trouvé ! 
xucuobegg.exe trouvé ! 
xvyndhskj.exe trouvé ! 
xwprbnbq.exe trouvé ! 
xymwdi.exe trouvé ! 
xymwdi.exe trouvé ! 
ydykef.exe trouvé ! 
yfnqmm.exe trouvé ! 
ylmertvri.exe trouvé ! 
ylmertvri.exe trouvé ! 
yofycm.exe trouvé ! 
yofycm.exe trouvé ! 
yvcbrv.exe trouvé ! 
zddpsn.exe trouvé ! 
zjtjmd.exe trouvé ! 
zjtjmd.exe trouvé ! 
dcnnnbr.exe trouvé ! 
dmgyzgw.exe trouvé ! 
hplwznahya.exe trouvé ! 
kebxry.exe trouvé ! 
ksasaffssf.exe trouvé ! 
miowzgbnr.exe trouvé ! 
njpzjkodw.exe trouvé ! 
opfoqjp.exe trouvé ! 
pmqvazo.exe trouvé ! 
sivdzeflc.exe trouvé ! 
urleugmlhg.exe trouvé ! 
ypqtax.exe trouvé ! 
zvrxoq.exe trouvé ! 

* Recherche dans C:\DOCUME~1\MICHEL~1\LOCALS~1\APPLIC~1 *



*** Recherche fichiers *** 


C:\WINDOWS\Downloaded Program Files\EGAUTH.inf trouvé !
C:\WINDOWS\Downloaded Program Files\EGDACCESS.inf trouvé !
C:\WINDOWS\Downloaded Program Files\EGDACCESS_ASPIV4.inf trouvé !
C:\WINDOWS\Downloaded Program Files\IaLdr32.inf trouvé !
C:\WINDOWS\Downloaded Program Files\sysnetsvc32.inf trouvé !
C:\WINDOWS\Downloaded Program Files\syswbsvc32.inf trouvé !
C:\WINDOWS\system32\linkprd.exe trouvé !
C:\WINDOWS\prefetch\MESSENGERSKINNER.EXE-0EE2A110.pf trouvé !


*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :

C:\WINDOWS\system32\ayyrhbakhh.dat trouvé !
C:\WINDOWS\system32\bvnqku.dat trouvé !
C:\WINDOWS\system32\dxulah.dat trouvé !
C:\WINDOWS\system32\fyebumdhy.dat trouvé !
C:\WINDOWS\system32\hidraysj.dat trouvé !
C:\WINDOWS\system32
npfmmswo.dat trouvé !
C:\WINDOWS\system32\whlnxmroez.dat trouvé !
C:\WINDOWS\system32\xvqbrthygi.dat trouvé !
C:\WINDOWS\system32\ayyrhbakhh_nav.dat trouvé !
C:\WINDOWS\system32\bvnqku_nav.dat trouvé !
C:\WINDOWS\system32\dblimrns_nav.dat trouvé !
C:\WINDOWS\system32\dxulah_nav.dat trouvé !
C:\WINDOWS\system32\fyebumdhy_nav.dat trouvé !
C:\WINDOWS\system32\hidraysj_nav.dat trouvé !
C:\WINDOWS\system32
npfmmswo_nav.dat trouvé !
C:\WINDOWS\system32\whlnxmroez_nav.dat trouvé !
C:\WINDOWS\system32\xvqbrthygi_nav.dat trouvé !
C:\WINDOWS\system32\ajrqajpwn.exe trouvé !
C:\WINDOWS\system32\axkdumop.exe trouvé !
C:\WINDOWS\system32\biufnm.exe trouvé !
C:\WINDOWS\system32\bsxzfowpg.exe trouvé !
C:\WINDOWS\system32\cmjylijxz.exe trouvé !
C:\WINDOWS\system32\dulkcor.exe trouvé !
C:\WINDOWS\system32\eoxlwfouqw.exe trouvé !
C:\WINDOWS\system32\esnupmppam.exe trouvé !
C:\WINDOWS\system32\fuhael.exe trouvé !
C:\WINDOWS\system32\gfxtpqtaa.exe trouvé !
C:\WINDOWS\system32\hkrkqyy.exe trouvé !
C:\WINDOWS\system32\htpaby.exe trouvé !
C:\WINDOWS\system32\ixzxueaikg.exe trouvé !
C:\WINDOWS\system32\knlmvpgrl.exe trouvé !
C:\WINDOWS\system32\kpokpjy.exe trouvé !
C:\WINDOWS\system32\kuvvue.exe trouvé !
C:\WINDOWS\system32\lffdfaxm.exe trouvé !
C:\WINDOWS\system32\liihhclyc.exe trouvé !
C:\WINDOWS\system32\linkprd.exe trouvé !
C:\WINDOWS\system32\lmhwkucoe.exe trouvé !
C:\WINDOWS\system32\lnaccess.exe trouvé !
C:\WINDOWS\system32\lqjzhglgu.exe trouvé !
C:\WINDOWS\system32\ltjlbaica.exe trouvé !
C:\WINDOWS\system32\lxmtbz.exe trouvé !
C:\WINDOWS\system32\mefjpkuf.exe trouvé !
C:\WINDOWS\system32\mutxsoaj.exe trouvé !
C:\WINDOWS\system32\mzbfye.exe trouvé !
C:\WINDOWS\system32
dzuombvsg.exe trouvé !
C:\WINDOWS\system32\oavxqg.exe trouvé !
C:\WINDOWS\system32\ocncaawcs.exe trouvé !
C:\WINDOWS\system32\orqapir.exe trouvé !
C:\WINDOWS\system32\piaeocwkf.exe trouvé !
C:\WINDOWS\system32\qwfymzvh.exe trouvé !
C:\WINDOWS\system32ghiuh.exe trouvé !
C:\WINDOWS\system32\seeaua.exe trouvé !
C:\WINDOWS\system32\ssxgosqpkr.exe trouvé !
C:\WINDOWS\system32\sxyuqshh.exe trouvé !
C:\WINDOWS\system32	lzdmms.exe trouvé !
C:\WINDOWS\system32	rkoywh.exe trouvé !
C:\WINDOWS\system32	satap.exe trouvé !
C:\WINDOWS\system32\uawobety.exe trouvé !
C:\WINDOWS\system32\uxygeoj.exe trouvé !
C:\WINDOWS\system32\vheikhchln.exe trouvé !
C:\WINDOWS\system32\vzkylp.exe trouvé !
C:\WINDOWS\system32\wcvugznxf.exe trouvé !
C:\WINDOWS\system32\wiqfjc.exe trouvé !
C:\WINDOWS\system32\xtmxkyotg.exe trouvé !
C:\WINDOWS\system32\xwqhysrjco.exe trouvé !
C:\WINDOWS\system32\ybcfiu.exe trouvé !
C:\WINDOWS\system32\yinekquml.exe trouvé !
C:\WINDOWS\system32\yswhntx.exe trouvé !
C:\WINDOWS\system32\yyjhshu.exe trouvé !


3)Recherche Certificats :

Certificat Egroup trouvé !


*** Analyse terminée le 26/10/2007 à 18:45:48,31 ***

green day · Answer

Salut

 oula ! ça c'est de l'infection ! :)

    
          o Double-cliquer sur navilog1.bat
          o Arriver au menu principal, choisir l'option 2 et valider.
          o Indiquer le mode de nettoyage "automatique"
          o Répondre aux questions éventuelles, le bureau disparaîtra, c'est normal !
          o Patienter jusqu'au message : Nettoyage Termine le ...
          o Sauvegarder le rapport de manière à le retrouver, puis fermer le blocnote, le bureau réapparaîtra
          o Le rapport sera en outre sauvegardé à la racine du disque (cleannavi.txt)

ensuite :

Télécharge ceci : 

Lien : http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm 

Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum. 


++

queuedecerise · Answer

Voilà ce que j'ai trouvé !!!!c'est grave, docteur????? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:06:13, on 27/10/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\system32\fxssvc.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Documents and Settings\michele strobbe\Mes documents\photos\vacances\2007 venise\Wallpaper\Wallpaper.exe C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\AOL 9.0h\aoltray.exe C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\Program Files\Delux\PS2 Keyboard English Edition\keyboard.exe C:\Program Files\Windows Desktop Search\WindowsSearch.exe C:\Program Files\Antipub\antipub.exe C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe C:\Program Files\AOL 9.0h\waol.exe C:\Program Files\AOL 9.0h\shellmon.exe C:\Program Files\Windows Desktop Search\WindowsSearchFilter.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.bing.com/?toHttps=1&redig=76420697312543738FC7AC1F1CA1CB9B R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Stimulation Cérébrale - Planificateur] "C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe" O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Wallpaper] "C:\Documents and Settings\michele strobbe\Mes documents\photos\vacances\2007 venise\Wallpaper\Wallpaper.exe" Starter O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0h\aoltray.exe O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O4 - Global Startup: PS2 Keyboard English Edition.lnk = ? O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 2.0\resources\fr-FR\local\search.html O8 - Extra context menu item: &Search - ?p=ZS O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.creaf.com O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://www.king.com/ctl/kingcomie.cab O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.fr/computercheckup/qdiagcc.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1187871205015 O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/downloadcontrol.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{11389026-0515-446D-9F4A-1170FDCEC47C}: NameServer = 205.188.146.145 O21 - SSODL: bestreak - - (no file) O22 - SharedTaskScheduler: - bestreak - (no file) O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

green day · Answer

Salut

poste le rapport de navilog option 2 stp

++

queuedecerise@aol.com · Answer

Clean Navipromo version 3.3.2 commencé le 27/10/2007 à 23:36:23,85

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 22.10.2007 à 19h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11

Mode suppression automatique 


 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans C:\WINDOWS\System32 *

kgeipdpbt.exe trouvé !
Copie kgeipdpbt.exe réalisé avec succès !
kgeipdpbt.exe supprimé !

C:\WINDOWS\prefetch\kgeipdpbt*.pf trouvé !
Copie C:\WINDOWS\prefetch\kgeipdpbt*.pf réalisé avec succès !
C:\WINDOWS\prefetch\kgeipdpbt*.pf supprimé !


* Suppression dans C:\DOCUME~1\MICHEL~1\LOCALS~1\APPLIC~1 *



*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\michele strobbe\Application Data ***


*** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\michele strobbe\Local Settings\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche, création sauvegardes et suppression Heuristique :


*** Sauvegarde du Registre vers dossier Backupnavi ***

sauvegarde du Registre réalisé avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !

*** Nettoyage terminé le 27/10/2007 à 23:39:40,79 ***

philae83 · Answer

bonsoir

hello green day

pour avancer

reposte un nouveau rapport hijackthis

queuedecerise · Answer

Par "nouveau hatchkis", je suppose qu'il faut activer le niveau1 du navilog?????? scuse. je suis totalement stupide...J'y vais;

queuedecerise · Answer

Bonjour (re)
Search Navipromo version 3.3.2 commencé le 28/10/2007 à 10:23:41,51

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 22.10.2007 à 19h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 


*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\michele strobbe\Application Data ***


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun fichier trouvé dans :

- C:\WINDOWS\system32
- C:\DOCUME~1\MICHEL~1\LOCALS~1\APPLIC~1



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans C:\DOCUME~1\MICHEL~1\LOCALS~1\APPLIC~1 *



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :



3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse terminée le 28/10/2007 à 10:26:10,60 ***

queuedecerise · Answer

allo????

philae83 · Answer

bonsoir,

visiblement green day n'est pas là. Je disais nouveau rapport HIJACKTHIS, pas navilog

queuedecerise · Answer

c'est ça ??????
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:11:50, on 28/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Documents and Settings\michele strobbe\Mes documents\photos\vacances\2007 venise\Wallpaper\Wallpaper.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\AOL 9.0h\aoltray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Delux\PS2 Keyboard English Edition\keyboard.exe
C:\Program Files\AOL 9.0h\waol.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Antipub\antipub.exe
C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.bing.com/?toHttps=1&redig=76420697312543738FC7AC1F1CA1CB9B
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboFormoboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboFormoboform.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Stimulation Cérébrale - Planificateur] "C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Wallpaper] "C:\Documents and Settings\michele strobbe\Mes documents\photos\vacances\2007 venise\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [neebbszyqq] c:\windows\system32
eebbszyqq.exe neebbszyqq (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [azmxuwihse] c:\windows\system32\azmxuwihse.exe azmxuwihse (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nabspjziu] c:\windows\system32
abspjziu.exe nabspjziu (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [fpvvunv] c:\windows\system32\fpvvunv.exe fpvvunv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [htuwqqauc] c:\windows\system32\htuwqqauc.exe htuwqqauc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gvswnpjkhm] c:\windows\system32\gvswnpjkhm.exe gvswnpjkhm (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [qtarokals] c:\windows\system32\qtarokals.exe qtarokals (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nnpfmmswo] c:\windows\system32
npfmmswo.exe nnpfmmswo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vrrfmzgo] c:\windows\system32\vrrfmzgo.exe vrrfmzgo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [icxjjch] c:\windows\system32\icxjjch.exe icxjjch (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vohwjvh] c:\windows\system32\vohwjvh.exe vohwjvh (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [kukqoxc] c:\windows\system32\kukqoxc.exe kukqoxc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vpycfx] c:\windows\system32\vpycfx.exe vpycfx (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gmkmbshk] c:\windows\system32\gmkmbshk.exe gmkmbshk (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [eqcpjksl] c:\windows\system32\eqcpjksl.exe eqcpjksl (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [mogsya] c:\windows\system32\mogsya.exe mogsya (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hkkohqv] c:\windows\system32\hkkohqv.exe hkkohqv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hxkgel] c:\windows\system32\hxkgel.exe hxkgel (User 'yann strobbe')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0h\aoltray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: PS2 Keyboard English Edition.lnk = ?
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 2.0esources\fr-FR\local\search.html
O8 - Extra context menu item: &Search - ?p=ZS
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.creaf.com
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://www.king.com/ctl/kingcomie.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1187871205015
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/downloadcontrol.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{11389026-0515-446D-9F4A-1170FDCEC47C}: NameServer = 205.188.146.145
O21 - SSODL: bestreak -   - (no file)
O22 - SharedTaskScheduler:   - bestreak - (no file)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

queuedecerise · Answer

Mon PC est-il désinfecté maintenant? Si oui, que faut-il faire pour éviter que ça ne recommence, stp?

philae83 · Answer

bonjour,

non ce n'est pas ce que j'ai dit, d'ailleurs je n'ai rien dit, je pensais que green day reviendrait. Peut être est elle en vacances

je vais regarder ton dernier rapport qui ne me parait pas être au top

philae83 · Answer

re

plusieurs choses encore restent à faire

Une partie de la procédure se déroulera sans avoir accès à internet, prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant cette désinfection.

Les manipulations sont à faire sans interruption et dans l'ordre.

Si tu ne comprends pas quelque chose, demande des explications avant de commencer.

$$ Télécharge Brute Force Uninstaller (de Merijn)

http://www.merijn.org/files/bfu.zip

Créé un nouveau dossier directement sur le C:\ et nomme-le BFU. Décompresse le fichier téléchargé dans ce nouveau dossier (C:\BFU)

 

$$ FAIS UN CLIC-DROIT sur le lien suivant

http://perso.orange.fr/Chercheur-perso/scripts/toolbar.bfu

 

et choisis "Enregistrer la cible sous..." afin de télécharger Toolbar.bfu de Chercheur

Sauvegarde dans le dossier créé (C:\BFU).

**Note : si tu utlises Internet Explorer; lors de la sauvegarde, assure-toi que le champs "Type :" affiche "Tous les fichiers". Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : [bToolbar.bfu et BFU.exe (très important).

 

$$ Redémarre en mode Sans Échec : au redémarrage, tapote immédiatement la touche F8 ou F5; tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée".

Choisis ton compte usuel, et non Administrateur.

 

$$ Démarre le "Brute Force Uninstaller" en double-cliquant BFU.exe (du dossier C:\BFU)

Clique sur le petit dossier jaune, à la droite de la boîte Scriptline to execute, et double-clique sur :

Toolbar.bfu

 

Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\Toolbar.bfu

Clique sur Execute et laisse-le faire son travail.

Attendre que Complete script execution apparaîsse et clique sur OK.

Clique Exit pour fermer le programme BFU.

 

$$ Redémarre normalement

puis

* lance hijackthis "do a system scan only" et coche ces lignes :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr/ 
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe 
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe 
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [neebbszyqq] c:\windows\system32
eebbszyqq.exe neebbszyqq (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [azmxuwihse] c:\windows\system32\azmxuwihse.exe azmxuwihse (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nabspjziu] c:\windows\system32
abspjziu.exe nabspjziu (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [fpvvunv] c:\windows\system32\fpvvunv.exe fpvvunv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [htuwqqauc] c:\windows\system32\htuwqqauc.exe htuwqqauc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gvswnpjkhm] c:\windows\system32\gvswnpjkhm.exe gvswnpjkhm (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [qtarokals] c:\windows\system32\qtarokals.exe qtarokals (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nnpfmmswo] c:\windows\system32
npfmmswo.exe nnpfmmswo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vrrfmzgo] c:\windows\system32\vrrfmzgo.exe vrrfmzgo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [icxjjch] c:\windows\system32\icxjjch.exe icxjjch (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vohwjvh] c:\windows\system32\vohwjvh.exe vohwjvh (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [kukqoxc] c:\windows\system32\kukqoxc.exe kukqoxc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vpycfx] c:\windows\system32\vpycfx.exe vpycfx (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gmkmbshk] c:\windows\system32\gmkmbshk.exe gmkmbshk (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [eqcpjksl] c:\windows\system32\eqcpjksl.exe eqcpjksl (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [mogsya] c:\windows\system32\mogsya.exe mogsya (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hkkohqv] c:\windows\system32\hkkohqv.exe hkkohqv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hxkgel] c:\windows\system32\hxkgel.exe hxkgel (User 'yann strobbe') 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll 
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll ---ces 2 derniers lignes devraient avoir disparues après la manip faite plus haut.
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://www.king.com/ctl/kingcomie.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/downloadcontrol.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab 
O21 - SSODL: bestreak - - (no file)
O22 - SharedTaskScheduler: - bestreak - (no file) 

* toutes applications fermées et HORS CONNEXION si possible clique sur FIX CHECKED

puis

Télécharge OTMoveIt (de Old_Timer) sur ton Bureau.
http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe


double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.


c:\windows\system32
eebbszyqq.exe 
c:\windows\system32\azmxuwihse.exe
c:\windows\system32
abspjziu.exe 
c:\windows\system32\fpvvunv.exe
c:\windows\system32\htuwqqauc.exe
c:\windows\system32\gvswnpjkhm.exe
c:\windows\system32\qtarokals.exe
c:\windows\system32
npfmmswo.exe
c:\windows\system32\vrrfmzgo.exe
c:\windows\system32\icxjjch.exe 
c:\windows\system32\vohwjvh.exe
c:\windows\system32\kukqoxc.exe
c:\windows\system32\vpycfx.exe
c:\windows\system32\gmkmbshk.exe
c:\windows\system32\eqcpjksl.exe
c:\windows\system32\mogsya.exe 
c:\windows\system32\hkkohqv.exe
c:\windows\system32\hxkgel.exe

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre Results.
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Yes.

* Fait un scan antivirus en ligne avec Internet Explorer
 https://www.bitdefender.fr/
et copie colle le résultat ici
* En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
* Dans la nouvelle fenêtre, clique sur I agree
* La fenêtre change encore, clique sur Click here to scan
* Les signatures se chargent, etc.

tuto en image

http://pageperso.aol.fr/rginformatique/mapage/defender.htm

ainsi qu'un nouveau rapport hijackthis

green day · Answer

Bonjour

 je ne fais que passé rapidement ! merci Philae ;-)

++

queuedecerise · Answer

Bonjour,

j'ai donc tenté de faire ce que tu me demandais mais je  n'ai pas trouvé ceci :


O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll 


O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe 
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe" 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe 
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [neebbszyqq] c:\windows\system32
eebbszyqq.exe neebbszyqq (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [azmxuwihse] c:\windows\system32\azmxuwihse.exe azmxuwihse (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nabspjziu] c:\windows\system32
abspjziu.exe nabspjziu (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [fpvvunv] c:\windows\system32\fpvvunv.exe fpvvunv (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [htuwqqauc] c:\windows\system32\htuwqqauc.exe htuwqqauc (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gvswnpjkhm] c:\windows\system32\gvswnpjkhm.exe gvswnpjkhm (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [qtarokals] c:\windows\system32\qtarokals.exe qtarokals (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nnpfmmswo] c:\windows\system32
npfmmswo.exe nnpfmmswo (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vrrfmzgo] c:\windows\system32\vrrfmzgo.exe vrrfmzgo (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [icxjjch] c:\windows\system32\icxjjch.exe icxjjch (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vohwjvh] c:\windows\system32\vohwjvh.exe vohwjvh (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [kukqoxc] c:\windows\system32\kukqoxc.exe kukqoxc (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vpycfx] c:\windows\system32\vpycfx.exe vpycfx (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gmkmbshk] c:\windows\system32\gmkmbshk.exe gmkmbshk (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [eqcpjksl] c:\windows\system32\eqcpjksl.exe eqcpjksl (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [mogsya] c:\windows\system32\mogsya.exe mogsya (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hkkohqv] c:\windows\system32\hkkohqv.exe hkkohqv (User 'yann strobbe') 
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hxkgel] c:\windows\system32\hxkgel.exe hxkgel (User 'yann strobbe') 
-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll 
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll 
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program 



Voici le rapport de Bit defender
BitDefender Online Scanner
  
  
 
Rapport d'analyse généré à: Tue, Oct 30, 2007 - 15:49:56
 
 
  
  
 
Voie d'analyse: C:\;E:\;F:\;
  
  
 
 
  
  
 
Statistiques
 
Temps
 02:33:12
 
Fichiers
 497813
 
Directoires
 13077
 
Secteurs de boot
 2
 
Archives
 8962
 
Paquets programmes
 26527
 
  
  
 
Résultats
 
Virus identifiés
 11
 
Fichiers infectés
 77
 
Fichiers suspects
 0
 
Avertissements
 0
 
Désinfectés
 0
 
Fichiers effacés
 79
 
  
  
 
Info sur les moteurs
 
Définition virus
 858860
 
Version des moteurs
 AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
 
Analyse des plugins
 14
 
Archive des plugins
 38
 
Unpack des plugins
 7
 
E-mail plugins
 6
 
Système plugins
 1
 
  
  
 
Paramètres d'analyse
 
Première action
 Désinfecté
 
Seconde Action
 Supprimé
 
Heuristique
 Oui
 
Acceptez les avertissements
 Oui
 
Extensions analysées
 *;
 
Excludez les extensions
  
 
Analyse d'emails
 Oui
 
Analyse des Archives
 Oui
 
Analyser paquets programmes
 Oui
 
Analyse des fichiers
 Oui
 
Analyse de boot
 Oui
 
  
  
 
  Fichier analysé
  Statut
 
C:\Documents and Settings\michele strobbe\.housecall\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
 Infecté par: Joke.Melter.A
 
C:\Documents and Settings\michele strobbe\.housecall\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
 Echec de la désinfection
 
C:\Documents and Settings\michele strobbe\.housecall\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
 Supprimé
 
C:\Documents and Settings\michele strobbe\.housecall6.6\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
 Infecté par: Joke.Melter.A
 
C:\Documents and Settings\michele strobbe\.housecall6.6\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
 Echec de la désinfection
 
C:\Documents and Settings\michele strobbe\.housecall6.6\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
 Supprimé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\ooo680fr1592215
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\ooo680fr1592515
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\ooo680fr1667412
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\ooo680fr1667512
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecachees_commandimagelist_sc_fr116
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecachees_commandimagelist_sc_fr131
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecachees_commandimagelist_sc_fr19
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecachees_commandimagelist_sc_fr514
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecachees_commandimagelist_sc_fr59
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sc680fr2755
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sfx680fr03
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sfx680fr2683
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svt680fr1592167
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svt680fr1592267
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svt680fr1592567
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svx680fr140021
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svx680fr140121
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svx680fr15005
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svx680fr15015
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr1020
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr15
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr2125412
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr2753
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr3211
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr3311
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr520
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr722
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr822
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\javasettings_Windows_x86.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\moderne.sog
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\global\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\global\accelerator\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\global\accelerator\fr\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\global\accelerator\fr\current.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\images\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\images\Bitmaps\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\menubar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\statusbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp	oolbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\accelerator\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\accelerator\fr\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\accelerator\fr\current.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\images\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\images\Bitmaps\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\menubar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\statusbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc	oolbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\accelerator\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\accelerator\fr\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\accelerator\fr\current.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\images\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\images\Bitmaps\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\menubar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\statusbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw	oolbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\accelerator\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\accelerator\fr\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\accelerator\fr\current.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\images\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\images\Bitmaps\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\menubar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\statusbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal	oolbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\accelerator\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\accelerator\fr\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\accelerator\fr\current.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\images\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\images\Bitmaps\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\menubar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\statusbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress	oolbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\accelerator\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\accelerator\fr\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\accelerator\fr\current.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\images\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\images\Bitmaps\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\menubar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\statusbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule	oolbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\images\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\images\Bitmaps\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\menubar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\statusbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb	oolbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\accelerator\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\accelerator\fr\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\accelerator\fr\current.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\images\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\images\Bitmaps\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\menubar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\statusbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter	oolbar\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E48284FC1.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000000800000008913C8356.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E229C8222.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E706D9D1A.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005ECB5F19AD.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EC3443446.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EB758AAC8.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E2AC2D17B.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/10000000000000B4000000874138D207.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EC3FCE171.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EC7B70664.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E2FA489E1.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E18D2F70E.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E803C4F28.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E513A4C71.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E469E6667.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E7F0C5E7C.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EB9C46970.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E43C87AF2.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EE2D09D89.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E134DD71B.png
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Content.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>META-INF/manifest.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.soc
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sod
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.soe
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sog
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.soh
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\sun-color.soc
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\web.soc
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\crashdat.chk
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\crashdat.dmp
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\crashdat.prv
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\crashdat.stk
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio\biblio.dbf
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio\biblio.dbf=>REMOVED_NULLS
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio\biblio.dbt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb=>mimetype
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb=>content.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb=>settings.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb=>META-INF/manifest.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\01PKG7064.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\02PKG7201.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\03PKG4220.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\04PKG50C0.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\05PKG52A3.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\06PKG60B3.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\07PKG6284.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\30sound001.wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\APPPHOTO.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\CLIC.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Crissement de freins.wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Enter the Matado_J04 FAIT.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\fart.wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Noelancien (2m 06s).wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Paillarde002.wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Ramona.wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\RICOCHET.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg100.sdv
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg100.thm
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg30.sdg
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg30.sdv
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg30.thm
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Sobs female_SR082401.WAV
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery	ype.wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Vai trabalhar vagabundo.wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\woody2.wav
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.FirstStartWizard.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Inet.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.LDAP.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Addons.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Calc.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Commands.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Common.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Compatibility.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.DataAccess.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Draw.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Embedding.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Events.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Impress.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Java.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Jobs.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Linguistic.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.ProtocolHandler.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Recovery.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Scripting.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Security.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.SFX.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Substitution.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.TypeDetection.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.CalcCommands.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.CalcWindowState.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.Controller.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.DbuCommands.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.DrawImpressCommands.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.DrawWindowState.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.Effects.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.Factories.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.GenericCommands.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.ImpressWindowState.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.StartModuleCommands.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.StartModuleWindowState.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.WriterCommands.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.WriterGlobalWindowState.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.WriterWebWindowState.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.UI.WriterWindowState.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Views.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.Writer.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Office.WriterWeb.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.Setup.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.System.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.TypeDetection.Filter.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.TypeDetection.GraphicFilter.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.TypeDetection.Misc.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.TypeDetection.Types.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.TypeDetection.UISort.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.ucb.Configuration.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.ucb.Hierarchy.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.ucb.Store.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.UserProfile.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\cache\org.openoffice.VCL.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\Common.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\Common.xcu.bak
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\Linguistic.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\Recovery.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI\CalcWindowState.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI\DrawWindowState.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI\ImpressWindowState.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI\StartModuleWindowState.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI\WriterGlobalWindowState.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI\WriterWebWindowState.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI\WriterWindowState.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\UI.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\Views.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Office\Writer.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\Setup.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\ucb\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\ucb\Hierarchy.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\ucb\Store.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\useregistry\data\org\openoffice\UserProfile.xcu
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\Scripts\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\store\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\store\.templdir.cache
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user	emp\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user	emplate\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\uno_packages\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\uno_packages\cache\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\dictionary.lst
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\dictionary.lst.1st
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\dictionary.lst.old
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.aff
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.dic
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.zip
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.zip=>README_fr_FR.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.zip=>fr_FR.dic
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.zip=>fr_FR.aff
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\hyph_fr_FR.dic
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\hyph_fr_FR.zip
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\hyph_fr_FR.zip=>hyph_fr_FR.dic
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\hyph_fr_FR.zip=>README_hyph_fr_FR.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\README_fr_FR.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\README_hyph_fr_FR.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\standard.dic
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook	hes_fr_FR_v2.zip
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook	hes_fr_FR_v2.zip=>archstored:README_th_fr_FR_v2.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook	hes_fr_FR_v2.zip=>archstored:th_fr_FR_v2.idx
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook	hes_fr_FR_v2.zip=>archstored:th_fr_FR_v2.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\PC Tools\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\PC Tools\Spyware Doctor\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\dinerdash2\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\dinerdash2\logfile.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\dinerdash2\prefs.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\dinerdash2\survey.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1191531090\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1191531090\barker.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1191531090\PCBoosterStart.smi
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1191531090\pcbooster_cs.swf
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\ipmbase.jpg
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\morpheus.smi
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\morpheus_car_sm_04.gif
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\morpheus_girl_sm_02.gif
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\Category.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\Messages.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\SCategory.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealMediaSDK\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealMediaSDK\acb82e17.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealMediaSDK\acb926df.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealMediaSDK\acba0205.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\23.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\26.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\autoplaylist.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000001.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000002.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000003.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000004.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000005.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000006.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000007.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000008.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000009.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000010.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000011.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000012.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000013.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000014.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000015.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000016.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000017.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000018.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000019.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000020.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000021.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000022.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000023.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000024.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000025.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000026.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000027.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000028.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000029.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000030.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000031.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000032.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000033.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000034.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000035.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000036.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000037.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000038.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000039.tmd
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\iscomplete
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\CD.CDX
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\CD.DBF
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\CDTRAX.CDX
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\CDTRAX.DBF
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYGRPS.CDX
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYGRPS.DBF
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYLIST.CDX
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\playlist.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYLIST.DBF
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYLIST.FPT
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYTRAX.CDX
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYTRAX.DBF
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRACKS.DBF
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRACKS.FPT
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRACKS2.CDX
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRAKINFO.CDX
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRAKINFO.DBF
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\version
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\DRM\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\CDBurning.log
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\DownloadMgr.log
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\GenDevices.log
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\log1.dmp
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\Log1.log
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\pdgenctnomad.log
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\pdgenwmdm.log
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\Audio\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\Pages Web\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\Radio\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\Vidéos\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\History\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\lclkdb.son
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\library\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\PMP\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\data\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\data
ormal\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\data
ormal\imgcache.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\data
ormal\state.ini
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Temp\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer	imecache0.ini
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\viz.ini
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Realnadmin\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Realnadminnsystem.dat
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\Application Data\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\Config.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\cs\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\db\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\db\Aliases.dbs
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\db\Sites.dbs
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\Documents and Settings\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\dwld\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\dwld\WhiteList.xip
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\persist.dbs
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cseport\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cseport\aggr_storage.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cseport\send_storage.xml
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cses2\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cses2\WhiteList.dbs
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\ShoppingReport\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\attachmentfilter.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\dccfilter\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\dccfilter\map
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\dccfilter\map.txt
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins
ewsletter\
 Nettoyé
 
C:\Documents and Settings\michele strobbe\Applic

philae83 · Answer

bonjour,

pour la 02 c'est normal que tu ne l'aies pas trouvée

reposte un nouveau rapport hijackthis stp

queuedecerise · Answer

Merci de ta patience !!!!

 j'ai énormément de mal à me connceter.
Voici le nouveau rapport hijackthis.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:34:26, on 30/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AOL 9.0h\aoltray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Delux\PS2 Keyboard English Edition\keyboard.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Antipub\antipub.exe
C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
C:\Program Files\Fichiers communs\AOL\1145953506\ee\aolsoftware.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\AOL 9.0h\waol.exe
C:\Program Files\AOL 9.0h\shellmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Stimulation Cérébrale - Planificateur] "C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Wallpaper] "C:\Documents and Settings\michele strobbe\Mes documents\photos\vacances\2007 venise\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0h\aoltray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: PS2 Keyboard English Edition.lnk = ?
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 2.0\resources\fr-FR\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.creaf.com
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{11389026-0515-446D-9F4A-1170FDCEC47C}: NameServer = 205.188.146.145
O22 - SharedTaskScheduler:   - bestreak - (no file)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

philae83 · Answer

bonsoir,

* lance hijackthis puis coche ces lignes :


O4 - HKLM\..\Run: [Stimulation Cérébrale - Planificateur] "C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe" -----------je ne pense pas que ce soit nécessaire au démarrage si ?

O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO 
----------celui ci non + tu peux le lancer manuellement pour le nettoyage


O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe -----------inutile au démarrage


O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab 
O22 - SharedTaskScheduler: - bestreak - (no file) 

* clique sur fix checked

il te reste aussi du symantec.
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe 


* télécharge AVG Anti-Spyware (ewido)

https://www.avg.com/en-ww/free-antivirus-download

* tu l'installes

* lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente

puis

Lance AVG Anti-Spyware

Clique sur le bouton Analyse (de la barre d'outils)

puis fait dans l'ordre stp. Tu sauvegardes le rapport APRES avoir mis les actions.

Puis sur l'onglet Paramètres,
sous : "Comment réagir "clique sur Actions recommandées. Sélectionne Quarantaine.

Reviens à l'onglet Analyse. Clique sur Analyse complète du système.

A la fin du scan, choisis l'option 3

"Appliquer toutes les actions " en bas.

Clique sur "Enregistrer le rapport".

Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

Poste le.

queuedecerise · Answer

Bonsoir,
Voilà, c'est enfin terminé. En route, j'ai supprimé un trojan. j'espère que ça va aller maintenant</gras></gras>.

C:\System Volume Information\_restore{E1DDEA5C-0797-4040-B26D-1A77C281B096}\RP1480\A1288235.exe -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{E1DDEA5C-0797-4040-B26D-1A77C281B096}\RP1480\A1288236.exe -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Common Files\Companion Wizard\compwiz.exe -> Adware.Companion : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-1813695884-1367642660-1282664909-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{202A961F-23AE-42B1-9505-FFE3C818D717} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{E1DDEA5C-0797-4040-B26D-1A77C281B096}\RP1602\A1443327.dll -> Adware.Shopper : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\michele strobbe\Mes documents\Mes images\mes images\fichiers animés\optique\f0018.exe -> Not-A-Virus.BadJoke.Win32.Deskop : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.8:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.24:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.20:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.21:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.22:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.23:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\System Volume Information\_restore{E1DDEA5C-0797-4040-B26D-1A77C281B096}\RP1574\A1414239.exe -> Trojan.Inject.gl : Nettoyé et sauvegardé (mise en quarantaine).

Fin du rapport

philae83 · Answer

bonsoir,

cela peut être correct suivant ce que tu fais.

Popups

27 réponses

Votre réponse

Discussions similaires

Newsletters