Pub CID sur firefox

Salut

désinstal messenger plus (si tu le réinstal n instal pas le sponsor)

si present désinstal CID HELP

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

Tutorial ( aide ) : http://bibou0007.com/outils-specifiques-f78/tuto-lop-sd-t956.htm

salut

fais ce que t'a dis chiquitine

ensuite pour vérif

Télécharger sur le bureau [url=https://www.besttechie.com/resources/malwarebytes/]Malwarebyte's Anti-Malware[/url]

=> double-clic sur mbam-setup pour lancer l'installation
=> Installer simplement sans rien modifier
=> Quand le programme lancé ==> onglet Mise à jour cliquer sur => Recherche de mise à jour
Onglet Recherche => cocher Exécuter un examen complet
=> Clic Rechercher
=> Eventuellement décocher les disque à ne pas analyser
=> Clic Lancer l'examen
=> En fin de scan , si infection trouvée
==> Clic Afficher résultat
=> Fermer vos applications en cours
=> Vérifier si tout est coché et clic Supprimer la sélection

=> un rapport s'ouvre le copier et le coller dans la réponse

++++++++

télécharger sur le bureau

http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

Clic [b]Do a system scan and save the log/b
-- Le Bloc-Notes s'ouvre :
-> Edition / Sélectionner Tout
-> Edition / Copier
copier coller le rapport

voici mon rapport LOP,
--------------------\\ Lop S&D 4.2.2-4 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Marc ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 29/07/2008 | 16:24:14,23 ] [ PC : NABET ]
[ MAJ : 25-07-2008 | 17:45 ]

--------------------\\ Listing des dossiers dans APPLIC~1

[23/09/2004|19:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[23/09/2004|20:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[13/11/2006|14:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[13/11/2006|15:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[13/11/2006|14:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[15/01/2008|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\4D
[10/02/2008|20:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[16/02/2007|22:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[29/08/2007|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[03/05/2007|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[12/08/2007|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[07/05/2007|21:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[07/07/2007|21:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
[02/02/2007|22:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[23/09/2004|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[14/06/2007|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/07/2007|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[20/01/2007|21:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[09/03/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[08/03/2008|19:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[27/07/2008|21:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Long slow road itch
[09/05/2007|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[28/07/2008|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[29/05/2008|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[21/01/2007|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[17/07/2008|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[13/11/2006|14:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[05/03/2008|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[07/07/2007|21:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pswi_preloaded.exe
[29/08/2007|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[22/03/2007|20:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[08/08/2007|21:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[01/06/2007|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[20/01/2007|20:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[23/09/2007|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[15/01/2008|22:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Suivi-Secu
[08/06/2008|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[29/04/2007|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[29/07/2007|19:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[28/07/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[13/11/2006|14:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[13/11/2006|14:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[20/03/2007|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[20/03/2007|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[04/07/2007|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
[11/07/2007|22:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[12/12/2007|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[19/05/2007|16:40] C:\DOCUME~1\Corinne\APPLIC~1\Adobe
[23/09/2004|19:51] C:\DOCUME~1\Corinne\APPLIC~1\desktop.ini
[19/05/2007|16:42] C:\DOCUME~1\Corinne\APPLIC~1\Google
[19/05/2007|16:40] C:\DOCUME~1\Corinne\APPLIC~1\HP
[23/09/2004|20:25] C:\DOCUME~1\Corinne\APPLIC~1\Identities
[23/08/2007|20:53] C:\DOCUME~1\Corinne\APPLIC~1\Macromedia
[19/05/2007|16:43] C:\DOCUME~1\Corinne\APPLIC~1\Microsoft
[16/10/2007|21:20] C:\DOCUME~1\Corinne\APPLIC~1\Mozilla
[16/10/2007|21:30] C:\DOCUME~1\Corinne\APPLIC~1\Opera
[13/11/2006|14:46] C:\DOCUME~1\Corinne\APPLIC~1\You've Got Pictures Screensaver

[23/09/2004|19:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[23/09/2004|20:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[13/11/2006|14:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[13/11/2006|15:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[13/11/2006|14:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[23/09/2004|19:51] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini
[23/09/2004|20:25] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[18/10/2007|16:28] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[18/10/2007|16:26] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[13/11/2006|14:46] C:\DOCUME~1\INVIT~1\APPLIC~1\You've Got Pictures Screensaver

[22/05/2007|16:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Creative
[23/09/2004|19:50] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[24/02/2008|20:24] C:\DOCUME~1\Marc\APPLIC~1\Adobe
[15/03/2007|21:57] C:\DOCUME~1\Marc\APPLIC~1\AdobeUM
[04/05/2007|15:42] C:\DOCUME~1\Marc\APPLIC~1\Ahead
[29/08/2007|22:07] C:\DOCUME~1\Marc\APPLIC~1\Apple Computer
[23/09/2007|17:32] C:\DOCUME~1\Marc\APPLIC~1\ArcSoft
[03/05/2007|17:50] C:\DOCUME~1\Marc\APPLIC~1\AVS4YOU
[13/06/2007|18:45] C:\DOCUME~1\Marc\APPLIC~1\AVSDVDPlayer.m3u
[08/03/2008|21:13] C:\DOCUME~1\Marc\APPLIC~1\Azureus
[09/03/2008|20:13] C:\DOCUME~1\Marc\APPLIC~1\BitTorrent
[09/01/2008|23:26] C:\DOCUME~1\Marc\APPLIC~1\COWON
[31/01/2007|17:04] C:\DOCUME~1\Marc\APPLIC~1\Creative
[02/02/2007|22:43] C:\DOCUME~1\Marc\APPLIC~1\CyberLink
[27/05/2007|21:11] C:\DOCUME~1\Marc\APPLIC~1\D2Soft Technologies
[23/09/2004|19:51] C:\DOCUME~1\Marc\APPLIC~1\desktop.ini
[01/09/2007|20:32] C:\DOCUME~1\Marc\APPLIC~1\DivX
[29/07/2008|16:22] C:\DOCUME~1\Marc\APPLIC~1\DNA
[25/03/2008|19:37] C:\DOCUME~1\Marc\APPLIC~1\Dr. DivX 2.0 OSS
[06/04/2008|16:48] C:\DOCUME~1\Marc\APPLIC~1\dvdcss
[25/12/2007|20:55] C:\DOCUME~1\Marc\APPLIC~1\EssentialPIM
[30/03/2007|21:52] C:\DOCUME~1\Marc\APPLIC~1\Google
[06/07/2007|16:28] C:\DOCUME~1\Marc\APPLIC~1\Help
[26/01/2007|18:12] C:\DOCUME~1\Marc\APPLIC~1\HP
[13/04/2007|16:22] C:\DOCUME~1\Marc\APPLIC~1\Identities
[30/04/2008|18:33] C:\DOCUME~1\Marc\APPLIC~1\Image Zone Express
[13/04/2007|17:53] C:\DOCUME~1\Marc\APPLIC~1\Lavasoft
[31/01/2007|18:08] C:\DOCUME~1\Marc\APPLIC~1\Leadertech
[30/01/2007|17:54] C:\DOCUME~1\Marc\APPLIC~1\LG Electronics
[18/07/2008|17:07] C:\DOCUME~1\Marc\APPLIC~1\LimeWire
[05/03/2007|17:38] C:\DOCUME~1\Marc\APPLIC~1\Macromedia
[28/07/2008|18:05] C:\DOCUME~1\Marc\APPLIC~1\Malwarebytes
[25/07/2008|18:50] C:\DOCUME~1\Marc\APPLIC~1\Microsoft
[28/07/2008|14:20] C:\DOCUME~1\Marc\APPLIC~1\Mozilla
[20/03/2007|19:32] C:\DOCUME~1\Marc\APPLIC~1\MSNInstaller
[06/09/2007|22:08] C:\DOCUME~1\Marc\APPLIC~1\Naviscope
[13/03/2008|19:22] C:\DOCUME~1\Marc\APPLIC~1\NMM-MetaData.db
[07/03/2008|17:45] C:\DOCUME~1\Marc\APPLIC~1\Nokia
[26/07/2008|16:07] C:\DOCUME~1\Marc\APPLIC~1\Nokia Multimedia Player
[13/03/2007|20:07] C:\DOCUME~1\Marc\APPLIC~1\Norman
[21/01/2007|18:29] C:\DOCUME~1\Marc\APPLIC~1\OD2
[15/01/2008|18:45] C:\DOCUME~1\Marc\APPLIC~1\OMP
[10/06/2007|18:30] C:\DOCUME~1\Marc\APPLIC~1\Opera
[05/03/2008|20:47] C:\DOCUME~1\Marc\APPLIC~1\PC Suite
[20/06/2007|19:35] C:\DOCUME~1\Marc\APPLIC~1\pokerth
[03/12/2007|17:33] C:\DOCUME~1\Marc\APPLIC~1\Printer Info Cache
[19/10/2007|16:03] C:\DOCUME~1\Marc\APPLIC~1\Radios Media Player
[23/06/2008|18:02] C:\DOCUME~1\Marc\APPLIC~1\Real
[10/06/2007|16:35] C:\DOCUME~1\Marc\APPLIC~1\Screenshot Sender
[30/04/2008|18:49] C:\DOCUME~1\Marc\APPLIC~1\Search Settings
[26/07/2008|22:36] C:\DOCUME~1\Marc\APPLIC~1\Shareaza
[01/06/2007|17:05] C:\DOCUME~1\Marc\APPLIC~1\Skype
[23/09/2007|14:21] C:\DOCUME~1\Marc\APPLIC~1\Smart PC Solutions
[10/01/2008|18:22] C:\DOCUME~1\Marc\APPLIC~1\SMasterMind Prefs.txt
[31/01/2007|18:09] C:\DOCUME~1\Marc\APPLIC~1\Sonic
[03/12/2007|22:30] C:\DOCUME~1\Marc\APPLIC~1\stickies
[19/01/2007|17:15] C:\DOCUME~1\Marc\APPLIC~1\Sun
[02/07/2007|17:44] C:\DOCUME~1\Marc\APPLIC~1\Talkback
[27/07/2008|21:15] C:\DOCUME~1\Marc\APPLIC~1\This Hope
[15/06/2007|18:36] C:\DOCUME~1\Marc\APPLIC~1\Thunderbird
[25/02/2008|18:53] C:\DOCUME~1\Marc\APPLIC~1\Todae
[28/07/2008|14:20] C:\DOCUME~1\Marc\APPLIC~1\TomTom
[18/10/2007|20:04] C:\DOCUME~1\Marc\APPLIC~1\tuxmath
[13/05/2007|21:49] C:\DOCUME~1\Marc\APPLIC~1\TuxPaint
[23/01/2007|18:38] C:\DOCUME~1\Marc\APPLIC~1\Ulead Systems
[12/03/2008|19:55] C:\DOCUME~1\Marc\APPLIC~1\uTorrent
[07/12/2007|18:50] C:\DOCUME~1\Marc\APPLIC~1\vlc
[03/07/2008|13:56] C:\DOCUME~1\Marc\APPLIC~1\Vso
[20/12/2007|18:37] C:\DOCUME~1\Marc\APPLIC~1\VSO_HWE
[23/01/2008|20:53] C:\DOCUME~1\Marc\APPLIC~1\Warsow
[28/10/2007|11:36] C:\DOCUME~1\Marc\APPLIC~1\WinPatrol
[18/08/2007|18:15] C:\DOCUME~1\Marc\APPLIC~1\XnView
[13/11/2006|14:46] C:\DOCUME~1\Marc\APPLIC~1\You've Got Pictures Screensaver

[23/09/2004|19:50] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[29/07/2008 16:00][--ah-----] C:\WINDOWS\tasks\ACEA3A2D93E5AB8D.job
[19/03/2008 09:26][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[29/07/2008 16:18][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[29/07/2008 13:01][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 15:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( ACEA3A2D93E5AB8D.job )=( c:\docume~1\marc\applic~1\thisho~1\SoftNameMp3.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[14/11/2007|19:52] C:\Program Files\7x8
[26/06/2008|18:55] C:\Program Files\Adobe
[04/05/2007|15:40] C:\Program Files\Ahead
[02/02/2008|22:17] C:\Program Files\Alawar
[03/04/2007|16:31] C:\Program Files\Alice
[29/04/2007|18:07] C:\Program Files\Alwil Software
[29/08/2007|21:54] C:\Program Files\Apple Software Update
[23/09/2007|17:30] C:\Program Files\ArcSoft
[13/04/2007|19:01] C:\Program Files\Ares
[11/06/2008|20:29] C:\Program Files\AZPR
[01/01/2008|22:35] C:\Program Files\CascadePC
[13/04/2007|17:24] C:\Program Files\CCleaner
[28/05/2007|19:04] C:\Program Files\ClearProg
[20/07/2007|23:14] C:\Program Files\CodeStuff
[23/09/2004|20:03] C:\Program Files\ComPlus Applications
[11/02/2007|16:49] C:\Program Files\Cryo
[13/11/2006|14:57] C:\Program Files\CyberLink
[05/03/2008|20:46] C:\Program Files\DIFX
[11/02/2007|16:50] C:\Program Files\directx
[25/11/2007|21:39] C:\Program Files\DMV
[09/03/2008|20:13] C:\Program Files\DNA
[25/11/2007|21:24] C:\Program Files\Easy MEMO
[07/07/2007|19:57] C:\Program Files\Elaborate Bytes
[25/02/2008|18:47] C:\Program Files\Emoticon
[29/07/2008|16:13] C:\Program Files\eMule
[26/03/2008|17:59] C:\Program Files\FairUse Wizard 2
[19/07/2007|17:29] C:\Program Files\FDRLab
[23/06/2008|17:50] C:\Program Files\Fichiers communs
[30/04/2008|18:32] C:\Program Files\Free Video Converter
[20/10/2007|19:22] C:\Program Files\Google
[20/01/2007|20:55] C:\Program Files\Hewlett-Packard
[09/07/2008|20:34] C:\Program Files\houari-dauphin
[09/03/2007|21:27] C:\Program Files\HP
[01/07/2008|22:11] C:\Program Files\i-Covers
[18/07/2008|17:06] C:\Program Files\Incomplete
[26/05/2007|19:50] C:\Program Files\IncrediMail
[28/07/2008|20:03] C:\Program Files\InstallShield Installation Information
[11/06/2008|16:30] C:\Program Files\Internet Explorer
[04/05/2007|19:58] C:\Program Files\iPuissance 4D
[08/05/2007|17:06] C:\Program Files\Java
[28/09/2007|21:11] C:\Program Files\JCA2000
[01/10/2007|19:24] C:\Program Files\KC Softwares
[17/01/2008|18:28] C:\Program Files\Kikoo
[04/05/2007|19:40] C:\Program Files\KraiSoft
[05/07/2008|18:10] C:\Program Files\Kyodai Mahjongg 2006
[13/04/2007|17:53] C:\Program Files\Lavasoft
[13/11/2006|14:46] C:\Program Files\Learn2.com
[18/07/2008|17:05] C:\Program Files\LimeWire
[05/06/2007|22:05] C:\Program Files\LudoSoft
[05/08/2007|12:44] C:\Program Files\Magentic
[28/07/2008|18:05] C:\Program Files\Malwarebytes' Anti-Malware
[08/10/2007|21:04] C:\Program Files\MeeSoft
[29/08/2007|16:30] C:\Program Files\metagenia
[25/07/2008|18:47] C:\Program Files\Microsoft ActiveSync
[05/07/2007|22:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[23/09/2004|20:15] C:\Program Files\microsoft frontpage
[17/06/2008|19:53] C:\Program Files\Microsoft Office
[01/12/2007|21:47] C:\Program Files\Microsoft SQL Server Compact Edition
[08/12/2007|23:09] C:\Program Files\Microsoft Works
[19/01/2007|23:24] C:\Program Files\Microsoft.NET
[30/11/2007|23:26] C:\Program Files\MotsCach‚s 2.0
[17/07/2008|22:39] C:\Program Files\Motus
[14/10/2007|18:36] C:\Program Files\Movie Maker
[29/07/2008|16:07] C:\Program Files\Mozilla Firefox
[20/10/2007|15:40] C:\Program Files\MSBuild
[17/06/2008|19:52] C:\Program Files\MSECache
[23/09/2004|19:59] C:\Program Files\MSN Gaming Zone
[08/03/2007|21:38] C:\Program Files\MSXML 4.0
[20/10/2007|15:42] C:\Program Files\MSXML 6.0
[28/07/2008|17:26] C:\Program Files\Navilog1
[06/09/2007|22:07] C:\Program Files\Naviscope
[04/05/2007|19:45] C:\Program Files\Neoact
[23/09/2004|20:07] C:\Program Files\NetMeeting
[05/03/2008|20:46] C:\Program Files\Nokia
[13/11/2006|14:47] C:\Program Files\Norman
[23/09/2007|14:23] C:\Program Files\Oberon Media
[14/10/2007|18:36] C:\Program Files\Outlook Express
[05/03/2008|20:46] C:\Program Files\PC Connectivity Solution
[24/05/2007|12:02] C:\Program Files\Perenety
[24/09/2007|15:34] C:\Program Files\PhotoFiltre
[15/10/2007|18:07] C:\Program Files\Picasa2
[13/05/2007|20:55] C:\Program Files\Pluslong
[05/04/2008|19:23] C:\Program Files\QuickMediaConverter
[26/02/2008|13:18] C:\Program Files\Radio_France
[11/06/2008|20:29] C:\Program Files\RAR Password Cracker
[10/10/2007|22:02] C:\Program Files\Ratajik Software
[13/11/2006|14:46] C:\Program Files\Real
[13/11/2006|14:28] C:\Program Files\Realtek
[20/10/2007|15:36] C:\Program Files\Reference Assemblies
[30/05/2007|16:22] C:\Program Files\RogueRemover
[30/04/2008|18:28] C:\Program Files\Search Settings
[23/09/2004|20:08] C:\Program Files\Services en ligne
[13/11/2006|14:52] C:\Program Files\Sonic
[19/06/2008|20:37] C:\Program Files\SweetIM
[13/11/2006|14:29] C:\Program Files\Synaptics
[27/07/2008|21:15] C:\Program Files\This Hope
[08/05/2007|17:41] C:\Program Files\TomCat Soft
[28/07/2008|14:18] C:\Program Files\TomTom HOME 2
[06/07/2008|22:04] C:\Program Files\Trend Micro
[07/04/2008|19:16] C:\Program Files\TuxMath
[23/09/2007|14:22] C:\Program Files\TuxPaint
[13/11/2006|14:55] C:\Program Files\Ulead Systems
[23/09/2004|20:25] C:\Program Files\Uninstall Information
[07/12/2007|18:49] C:\Program Files\VideoLAN
[13/11/2006|14:46] C:\Program Files\Viewpoint
[29/07/2008|15:54] C:\Program Files\vso
[28/07/2008|19:24] C:\Program Files\Windows Live
[31/10/2007|14:55] C:\Program Files\Windows Live Toolbar
[13/11/2006|14:55] C:\Program Files\Windows Media Components
[23/03/2007|23:09] C:\Program Files\Windows Media Connect 2
[19/10/2007|16:03] C:\Program Files\Windows Media Player
[23/09/2004|19:59] C:\Program Files\Windows NT
[23/09/2004|20:09] C:\Program Files\WindowsUpdate
[11/06/2008|20:29] C:\Program Files\WinRAR
[20/06/2008|18:47] C:\Program Files\WinZip
[23/09/2004|20:15] C:\Program Files\xerox
[23/04/2008|10:11] C:\Program Files\X'nBeep 1.1
[24/02/2008|13:18] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[10/02/2008|20:24] C:\Program Files\Fichiers communs\Adobe
[04/05/2007|15:40] C:\Program Files\Fichiers communs\Ahead
[13/11/2006|14:46] C:\Program Files\Fichiers communs\AOL
[13/11/2006|14:46] C:\Program Files\Fichiers communs\aolshare
[13/06/2007|18:48] C:\Program Files\Fichiers communs\AVSMedia
[07/05/2007|21:03] C:\Program Files\Fichiers communs\BOONTY Shared
[19/01/2007|23:25] C:\Program Files\Fichiers communs\DESIGNER
[20/01/2007|20:54] C:\Program Files\Fichiers communs\Hewlett-Packard
[20/01/2007|20:58] C:\Program Files\Fichiers communs\HP
[13/11/2006|14:56] C:\Program Files\Fichiers communs\InstallShield
[13/11/2006|14:40] C:\Program Files\Fichiers communs\Java
[09/05/2007|21:14] C:\Program Files\Fichiers communs\Macrovision Shared
[28/07/2008|19:24] C:\Program Files\Fichiers communs\Microsoft Shared
[23/09/2004|20:07] C:\Program Files\Fichiers communs\MSSoap
[05/03/2008|20:46] C:\Program Files\Fichiers communs\Nokia
[13/11/2006|14:46] C:\Program Files\Fichiers communs\Nullsoft
[23/09/2004|19:53] C:\Program Files\Fichiers communs\ODBC
[05/03/2008|20:46] C:\Program Files\Fichiers communs\PCSuite
[23/06/2008|17:49] C:\Program Files\Fichiers communs\Real
[23/09/2004|20:07] C:\Program Files\Fichiers communs\Services
[20/01/2007|20:58] C:\Program Files\Fichiers communs\Sonic Shared
[23/09/2004|19:53] C:\Program Files\Fichiers communs\SpeechEngines
[13/11/2006|14:52] C:\Program Files\Fichiers communs\SureThing Shared
[29/04/2007|18:05] C:\Program Files\Fichiers communs\Symantec Shared
[12/06/2007|22:05] C:\Program Files\Fichiers communs\System
[13/11/2006|14:57] C:\Program Files\Fichiers communs\Ulead Systems
[01/12/2007|21:45] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[15/01/2008|22:53] C:\Program Files\Fichiers communs\Wise Installation Wizard
[23/06/2008|17:50] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 54 Processus )

iexplore.exe ~ [2356]
iexplore.exe ~ [2880]
iexplore.exe ~ [3052]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Long slow road itch
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Long slow road itch\Close face.exe
C:\DOCUME~1\Marc\APPLIC~1\thisho~1
C:\DOCUME~1\Marc\APPLIC~1\thisho~1\SEEK MPEG BAIT 01.exe
C:\DOCUME~1\Marc\APPLIC~1\thisho~1\SoftNameMp3.exe
C:\DOCUME~1\Marc\APPLIC~1\thisho~1\Surf1.exe
C:\DOCUME~1\Marc\APPLIC~1\thisho~1\xplusbkj.exe
C:\Program Files\thisho~1
C:\DOCUME~1\Marc\Cookies\marc@advertising[1].txt
C:\DOCUME~1\Marc\Cookies\marc@adopt.euroclick[1].txt
C:\DOCUME~1\Marc\Cookies\marc@pacificpoker[1].txt
C:\DOCUME~1\Marc\Cookies\marc@32vegas[1].txt
C:\DOCUME~1\Marc\Cookies\marc@banner.32vegas[2].txt
C:\WINDOWS\Tasks\ACEA3A2D93E5AB8D.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VGA MEOW"="C:\\DOCUME~1\\Marc\\APPLIC~1\\THISHO~1\\Surf1.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ROAD ITCH AMOK PING"="C:\\Documents and Settings\\All Users\\Application Data\\Long slow road itch\\Close face.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-29 16:25:26
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 97

--------------------\\ Recherche d'autres infections

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dqegth"="c:\\windows\\system32\\dqegth.exe dqegth"

[b]==> EGDACCESS <==/b

[F:9][D:3]-> C:\DOCUME~1\Marc\LOCALS~1\Temp
[F:39][D:0]-> C:\DOCUME~1\Marc\Cookies
[F:1017][D:4]-> C:\DOCUME~1\Marc\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 16:29:43,23

Relance Lop S&D

* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)

voici mon rapport LOP apres suppression,
--------------------\\ Lop S&D 4.2.2-4 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Marc ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 29/07/2008 | 16:35:50,26 ] [ PC : NABET ]
[ MAJ : 25-07-2008 | 17:45 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Long slow road itch\Close face.exe
Supprime! - C:\DOCUME~1\Marc\APPLIC~1\thisho~1\SEEK MPEG BAIT 01.exe
Supprime! - C:\DOCUME~1\Marc\APPLIC~1\thisho~1\SoftNameMp3.exe
Supprime! - C:\DOCUME~1\Marc\APPLIC~1\thisho~1\Surf1.exe
Supprime! - C:\DOCUME~1\Marc\APPLIC~1\thisho~1\xplusbkj.exe
Supprime! - C:\DOCUME~1\Marc\Cookies\marc@advertising[1].txt
Supprime! - C:\DOCUME~1\Marc\Cookies\marc@adopt.euroclick[1].txt
Supprime! - C:\DOCUME~1\Marc\Cookies\marc@pacificpoker[1].txt
Supprime! - C:\DOCUME~1\Marc\Cookies\marc@32vegas[1].txt
Supprime! - C:\DOCUME~1\Marc\Cookies\marc@banner.32vegas[2].txt
Supprime! - C:\WINDOWS\Tasks\ACEA3A2D93E5AB8D.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Long slow road itch
Supprime! - C:\DOCUME~1\Marc\APPLIC~1\thisho~1
Supprime! - C:\Program Files\thisho~1

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Supprime! - C:\Program Files\Viewpoint
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[23/09/2004|19:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[23/09/2004|20:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[13/11/2006|14:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[13/11/2006|15:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[13/11/2006|14:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[15/01/2008|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\4D
[10/02/2008|20:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[16/02/2007|22:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[29/08/2007|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[03/05/2007|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[12/08/2007|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[07/05/2007|21:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[07/07/2007|21:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
[02/02/2007|22:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[23/09/2004|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[14/06/2007|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/07/2007|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[20/01/2007|21:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[09/03/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[08/03/2008|19:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[09/05/2007|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[28/07/2008|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[29/05/2008|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[21/01/2007|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[17/07/2008|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[13/11/2006|14:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[05/03/2008|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[07/07/2007|21:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pswi_preloaded.exe
[29/08/2007|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[22/03/2007|20:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[08/08/2007|21:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[01/06/2007|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[20/01/2007|20:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[23/09/2007|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[15/01/2008|22:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Suivi-Secu
[08/06/2008|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[29/04/2007|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[29/07/2007|19:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[28/07/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[13/11/2006|14:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[20/03/2007|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[20/03/2007|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[04/07/2007|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
[11/07/2007|22:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[12/12/2007|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[19/05/2007|16:40] C:\DOCUME~1\Corinne\APPLIC~1\Adobe
[23/09/2004|19:51] C:\DOCUME~1\Corinne\APPLIC~1\desktop.ini
[19/05/2007|16:42] C:\DOCUME~1\Corinne\APPLIC~1\Google
[19/05/2007|16:40] C:\DOCUME~1\Corinne\APPLIC~1\HP
[23/09/2004|20:25] C:\DOCUME~1\Corinne\APPLIC~1\Identities
[23/08/2007|20:53] C:\DOCUME~1\Corinne\APPLIC~1\Macromedia
[19/05/2007|16:43] C:\DOCUME~1\Corinne\APPLIC~1\Microsoft
[16/10/2007|21:20] C:\DOCUME~1\Corinne\APPLIC~1\Mozilla
[16/10/2007|21:30] C:\DOCUME~1\Corinne\APPLIC~1\Opera
[13/11/2006|14:46] C:\DOCUME~1\Corinne\APPLIC~1\You've Got Pictures Screensaver

[23/09/2004|19:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[23/09/2004|20:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[13/11/2006|14:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[13/11/2006|15:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[13/11/2006|14:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[23/09/2004|19:51] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini
[23/09/2004|20:25] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[18/10/2007|16:28] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[18/10/2007|16:26] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[13/11/2006|14:46] C:\DOCUME~1\INVIT~1\APPLIC~1\You've Got Pictures Screensaver

[22/05/2007|16:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Creative
[23/09/2004|19:50] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[24/02/2008|20:24] C:\DOCUME~1\Marc\APPLIC~1\Adobe
[15/03/2007|21:57] C:\DOCUME~1\Marc\APPLIC~1\AdobeUM
[04/05/2007|15:42] C:\DOCUME~1\Marc\APPLIC~1\Ahead
[29/08/2007|22:07] C:\DOCUME~1\Marc\APPLIC~1\Apple Computer
[23/09/2007|17:32] C:\DOCUME~1\Marc\APPLIC~1\ArcSoft
[03/05/2007|17:50] C:\DOCUME~1\Marc\APPLIC~1\AVS4YOU
[13/06/2007|18:45] C:\DOCUME~1\Marc\APPLIC~1\AVSDVDPlayer.m3u
[08/03/2008|21:13] C:\DOCUME~1\Marc\APPLIC~1\Azureus
[09/03/2008|20:13] C:\DOCUME~1\Marc\APPLIC~1\BitTorrent
[09/01/2008|23:26] C:\DOCUME~1\Marc\APPLIC~1\COWON
[31/01/2007|17:04] C:\DOCUME~1\Marc\APPLIC~1\Creative
[02/02/2007|22:43] C:\DOCUME~1\Marc\APPLIC~1\CyberLink
[27/05/2007|21:11] C:\DOCUME~1\Marc\APPLIC~1\D2Soft Technologies
[23/09/2004|19:51] C:\DOCUME~1\Marc\APPLIC~1\desktop.ini
[01/09/2007|20:32] C:\DOCUME~1\Marc\APPLIC~1\DivX
[29/07/2008|16:32] C:\DOCUME~1\Marc\APPLIC~1\DNA
[25/03/2008|19:37] C:\DOCUME~1\Marc\APPLIC~1\Dr. DivX 2.0 OSS
[06/04/2008|16:48] C:\DOCUME~1\Marc\APPLIC~1\dvdcss
[25/12/2007|20:55] C:\DOCUME~1\Marc\APPLIC~1\EssentialPIM
[30/03/2007|21:52] C:\DOCUME~1\Marc\APPLIC~1\Google
[06/07/2007|16:28] C:\DOCUME~1\Marc\APPLIC~1\Help
[26/01/2007|18:12] C:\DOCUME~1\Marc\APPLIC~1\HP
[13/04/2007|16:22] C:\DOCUME~1\Marc\APPLIC~1\Identities
[30/04/2008|18:33] C:\DOCUME~1\Marc\APPLIC~1\Image Zone Express
[13/04/2007|17:53] C:\DOCUME~1\Marc\APPLIC~1\Lavasoft
[31/01/2007|18:08] C:\DOCUME~1\Marc\APPLIC~1\Leadertech
[30/01/2007|17:54] C:\DOCUME~1\Marc\APPLIC~1\LG Electronics
[18/07/2008|17:07] C:\DOCUME~1\Marc\APPLIC~1\LimeWire
[05/03/2007|17:38] C:\DOCUME~1\Marc\APPLIC~1\Macromedia
[28/07/2008|18:05] C:\DOCUME~1\Marc\APPLIC~1\Malwarebytes
[25/07/2008|18:50] C:\DOCUME~1\Marc\APPLIC~1\Microsoft
[28/07/2008|14:20] C:\DOCUME~1\Marc\APPLIC~1\Mozilla
[20/03/2007|19:32] C:\DOCUME~1\Marc\APPLIC~1\MSNInstaller
[06/09/2007|22:08] C:\DOCUME~1\Marc\APPLIC~1\Naviscope
[13/03/2008|19:22] C:\DOCUME~1\Marc\APPLIC~1\NMM-MetaData.db
[07/03/2008|17:45] C:\DOCUME~1\Marc\APPLIC~1\Nokia
[26/07/2008|16:07] C:\DOCUME~1\Marc\APPLIC~1\Nokia Multimedia Player
[13/03/2007|20:07] C:\DOCUME~1\Marc\APPLIC~1\Norman
[21/01/2007|18:29] C:\DOCUME~1\Marc\APPLIC~1\OD2
[15/01/2008|18:45] C:\DOCUME~1\Marc\APPLIC~1\OMP
[10/06/2007|18:30] C:\DOCUME~1\Marc\APPLIC~1\Opera
[05/03/2008|20:47] C:\DOCUME~1\Marc\APPLIC~1\PC Suite
[20/06/2007|19:35] C:\DOCUME~1\Marc\APPLIC~1\pokerth
[03/12/2007|17:33] C:\DOCUME~1\Marc\APPLIC~1\Printer Info Cache
[19/10/2007|16:03] C:\DOCUME~1\Marc\APPLIC~1\Radios Media Player
[23/06/2008|18:02] C:\DOCUME~1\Marc\APPLIC~1\Real
[10/06/2007|16:35] C:\DOCUME~1\Marc\APPLIC~1\Screenshot Sender
[30/04/2008|18:49] C:\DOCUME~1\Marc\APPLIC~1\Search Settings
[26/07/2008|22:36] C:\DOCUME~1\Marc\APPLIC~1\Shareaza
[01/06/2007|17:05] C:\DOCUME~1\Marc\APPLIC~1\Skype
[23/09/2007|14:21] C:\DOCUME~1\Marc\APPLIC~1\Smart PC Solutions
[10/01/2008|18:22] C:\DOCUME~1\Marc\APPLIC~1\SMasterMind Prefs.txt
[31/01/2007|18:09] C:\DOCUME~1\Marc\APPLIC~1\Sonic
[03/12/2007|22:30] C:\DOCUME~1\Marc\APPLIC~1\stickies
[19/01/2007|17:15] C:\DOCUME~1\Marc\APPLIC~1\Sun
[02/07/2007|17:44] C:\DOCUME~1\Marc\APPLIC~1\Talkback
[15/06/2007|18:36] C:\DOCUME~1\Marc\APPLIC~1\Thunderbird
[25/02/2008|18:53] C:\DOCUME~1\Marc\APPLIC~1\Todae
[28/07/2008|14:20] C:\DOCUME~1\Marc\APPLIC~1\TomTom
[18/10/2007|20:04] C:\DOCUME~1\Marc\APPLIC~1\tuxmath
[13/05/2007|21:49] C:\DOCUME~1\Marc\APPLIC~1\TuxPaint
[23/01/2007|18:38] C:\DOCUME~1\Marc\APPLIC~1\Ulead Systems
[12/03/2008|19:55] C:\DOCUME~1\Marc\APPLIC~1\uTorrent
[07/12/2007|18:50] C:\DOCUME~1\Marc\APPLIC~1\vlc
[03/07/2008|13:56] C:\DOCUME~1\Marc\APPLIC~1\Vso
[20/12/2007|18:37] C:\DOCUME~1\Marc\APPLIC~1\VSO_HWE
[23/01/2008|20:53] C:\DOCUME~1\Marc\APPLIC~1\Warsow
[28/10/2007|11:36] C:\DOCUME~1\Marc\APPLIC~1\WinPatrol
[18/08/2007|18:15] C:\DOCUME~1\Marc\APPLIC~1\XnView
[13/11/2006|14:46] C:\DOCUME~1\Marc\APPLIC~1\You've Got Pictures Screensaver

[23/09/2004|19:50] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[19/03/2008 09:26][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[29/07/2008 16:18][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[29/07/2008 13:01][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 15:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[14/11/2007|19:52] C:\Program Files\7x8
[26/06/2008|18:55] C:\Program Files\Adobe
[04/05/2007|15:40] C:\Program Files\Ahead
[02/02/2008|22:17] C:\Program Files\Alawar
[03/04/2007|16:31] C:\Program Files\Alice
[29/04/2007|18:07] C:\Program Files\Alwil Software
[29/08/2007|21:54] C:\Program Files\Apple Software Update
[23/09/2007|17:30] C:\Program Files\ArcSoft
[13/04/2007|19:01] C:\Program Files\Ares
[11/06/2008|20:29] C:\Program Files\AZPR
[01/01/2008|22:35] C:\Program Files\CascadePC
[13/04/2007|17:24] C:\Program Files\CCleaner
[28/05/2007|19:04] C:\Program Files\ClearProg
[20/07/2007|23:14] C:\Program Files\CodeStuff
[23/09/2004|20:03] C:\Program Files\ComPlus Applications
[11/02/2007|16:49] C:\Program Files\Cryo
[13/11/2006|14:57] C:\Program Files\CyberLink
[05/03/2008|20:46] C:\Program Files\DIFX
[11/02/2007|16:50] C:\Program Files\directx
[25/11/2007|21:39] C:\Program Files\DMV
[09/03/2008|20:13] C:\Program Files\DNA
[25/11/2007|21:24] C:\Program Files\Easy MEMO
[07/07/2007|19:57] C:\Program Files\Elaborate Bytes
[25/02/2008|18:47] C:\Program Files\Emoticon
[29/07/2008|16:13] C:\Program Files\eMule
[26/03/2008|17:59] C:\Program Files\FairUse Wizard 2
[19/07/2007|17:29] C:\Program Files\FDRLab
[23/06/2008|17:50] C:\Program Files\Fichiers communs
[30/04/2008|18:32] C:\Program Files\Free Video Converter
[20/10/2007|19:22] C:\Program Files\Google
[20/01/2007|20:55] C:\Program Files\Hewlett-Packard
[09/07/2008|20:34] C:\Program Files\houari-dauphin
[09/03/2007|21:27] C:\Program Files\HP
[01/07/2008|22:11] C:\Program Files\i-Covers
[18/07/2008|17:06] C:\Program Files\Incomplete
[26/05/2007|19:50] C:\Program Files\IncrediMail
[28/07/2008|20:03] C:\Program Files\InstallShield Installation Information
[11/06/2008|16:30] C:\Program Files\Internet Explorer
[04/05/2007|19:58] C:\Program Files\iPuissance 4D
[08/05/2007|17:06] C:\Program Files\Java
[28/09/2007|21:11] C:\Program Files\JCA2000
[01/10/2007|19:24] C:\Program Files\KC Softwares
[17/01/2008|18:28] C:\Program Files\Kikoo
[04/05/2007|19:40] C:\Program Files\KraiSoft
[05/07/2008|18:10] C:\Program Files\Kyodai Mahjongg 2006
[13/04/2007|17:53] C:\Program Files\Lavasoft
[13/11/2006|14:46] C:\Program Files\Learn2.com
[18/07/2008|17:05] C:\Program Files\LimeWire
[05/06/2007|22:05] C:\Program Files\LudoSoft
[05/08/2007|12:44] C:\Program Files\Magentic
[28/07/2008|18:05] C:\Program Files\Malwarebytes' Anti-Malware
[08/10/2007|21:04] C:\Program Files\MeeSoft
[29/08/2007|16:30] C:\Program Files\metagenia
[25/07/2008|18:47] C:\Program Files\Microsoft ActiveSync
[05/07/2007|22:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[23/09/2004|20:15] C:\Program Files\microsoft frontpage
[17/06/2008|19:53] C:\Program Files\Microsoft Office
[01/12/2007|21:47] C:\Program Files\Microsoft SQL Server Compact Edition
[08/12/2007|23:09] C:\Program Files\Microsoft Works
[19/01/2007|23:24] C:\Program Files\Microsoft.NET
[30/11/2007|23:26] C:\Program Files\MotsCach‚s 2.0
[17/07/2008|22:39] C:\Program Files\Motus
[14/10/2007|18:36] C:\Program Files\Movie Maker
[29/07/2008|16:07] C:\Program Files\Mozilla Firefox
[20/10/2007|15:40] C:\Program Files\MSBuild
[17/06/2008|19:52] C:\Program Files\MSECache
[23/09/2004|19:59] C:\Program Files\MSN Gaming Zone
[08/03/2007|21:38] C:\Program Files\MSXML 4.0
[20/10/2007|15:42] C:\Program Files\MSXML 6.0
[28/07/2008|17:26] C:\Program Files\Navilog1
[06/09/2007|22:07] C:\Program Files\Naviscope
[04/05/2007|19:45] C:\Program Files\Neoact
[23/09/2004|20:07] C:\Program Files\NetMeeting
[05/03/2008|20:46] C:\Program Files\Nokia
[13/11/2006|14:47] C:\Program Files\Norman
[23/09/2007|14:23] C:\Program Files\Oberon Media
[14/10/2007|18:36] C:\Program Files\Outlook Express
[05/03/2008|20:46] C:\Program Files\PC Connectivity Solution
[24/05/2007|12:02] C:\Program Files\Perenety
[24/09/2007|15:34] C:\Program Files\PhotoFiltre
[15/10/2007|18:07] C:\Program Files\Picasa2
[13/05/2007|20:55] C:\Program Files\Pluslong
[05/04/2008|19:23] C:\Program Files\QuickMediaConverter
[26/02/2008|13:18] C:\Program Files\Radio_France
[11/06/2008|20:29] C:\Program Files\RAR Password Cracker
[10/10/2007|22:02] C:\Program Files\Ratajik Software
[13/11/2006|14:46] C:\Program Files\Real
[13/11/2006|14:28] C:\Program Files\Realtek
[20/10/2007|15:36] C:\Program Files\Reference Assemblies
[30/05/2007|16:22] C:\Program Files\RogueRemover
[30/04/2008|18:28] C:\Program Files\Search Settings
[23/09/2004|20:08] C:\Program Files\Services en ligne
[13/11/2006|14:52] C:\Program Files\Sonic
[19/06/2008|20:37] C:\Program Files\SweetIM
[13/11/2006|14:29] C:\Program Files\Synaptics
[08/05/2007|17:41] C:\Program Files\TomCat Soft
[28/07/2008|14:18] C:\Program Files\TomTom HOME 2
[06/07/2008|22:04] C:\Program Files\Trend Micro
[07/04/2008|19:16] C:\Program Files\TuxMath
[23/09/2007|14:22] C:\Program Files\TuxPaint
[13/11/2006|14:55] C:\Program Files\Ulead Systems
[23/09/2004|20:25] C:\Program Files\Uninstall Information
[07/12/2007|18:49] C:\Program Files\VideoLAN
[29/07/2008|15:54] C:\Program Files\vso
[28/07/2008|19:24] C:\Program Files\Windows Live
[31/10/2007|14:55] C:\Program Files\Windows Live Toolbar
[13/11/2006|14:55] C:\Program Files\Windows Media Components
[23/03/2007|23:09] C:\Program Files\Windows Media Connect 2
[19/10/2007|16:03] C:\Program Files\Windows Media Player
[23/09/2004|19:59] C:\Program Files\Windows NT
[23/09/2004|20:09] C:\Program Files\WindowsUpdate
[11/06/2008|20:29] C:\Program Files\WinRAR
[20/06/2008|18:47] C:\Program Files\WinZip
[23/09/2004|20:15] C:\Program Files\xerox
[23/04/2008|10:11] C:\Program Files\X'nBeep 1.1
[24/02/2008|13:18] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[10/02/2008|20:24] C:\Program Files\Fichiers communs\Adobe
[04/05/2007|15:40] C:\Program Files\Fichiers communs\Ahead
[13/11/2006|14:46] C:\Program Files\Fichiers communs\AOL
[13/11/2006|14:46] C:\Program Files\Fichiers communs\aolshare
[13/06/2007|18:48] C:\Program Files\Fichiers communs\AVSMedia
[07/05/2007|21:03] C:\Program Files\Fichiers communs\BOONTY Shared
[19/01/2007|23:25] C:\Program Files\Fichiers communs\DESIGNER
[20/01/2007|20:54] C:\Program Files\Fichiers communs\Hewlett-Packard
[20/01/2007|20:58] C:\Program Files\Fichiers communs\HP
[13/11/2006|14:56] C:\Program Files\Fichiers communs\InstallShield
[13/11/2006|14:40] C:\Program Files\Fichiers communs\Java
[09/05/2007|21:14] C:\Program Files\Fichiers communs\Macrovision Shared
[28/07/2008|19:24] C:\Program Files\Fichiers communs\Microsoft Shared
[23/09/2004|20:07] C:\Program Files\Fichiers communs\MSSoap
[05/03/2008|20:46] C:\Program Files\Fichiers communs\Nokia
[13/11/2006|14:46] C:\Program Files\Fichiers communs\Nullsoft
[23/09/2004|19:53] C:\Program Files\Fichiers communs\ODBC
[05/03/2008|20:46] C:\Program Files\Fichiers communs\PCSuite
[23/06/2008|17:49] C:\Program Files\Fichiers communs\Real
[23/09/2004|20:07] C:\Program Files\Fichiers communs\Services
[20/01/2007|20:58] C:\Program Files\Fichiers communs\Sonic Shared
[23/09/2004|19:53] C:\Program Files\Fichiers communs\SpeechEngines
[13/11/2006|14:52] C:\Program Files\Fichiers communs\SureThing Shared
[29/04/2007|18:05] C:\Program Files\Fichiers communs\Symantec Shared
[12/06/2007|22:05] C:\Program Files\Fichiers communs\System
[13/11/2006|14:57] C:\Program Files\Fichiers communs\Ulead Systems
[01/12/2007|21:45] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[15/01/2008|22:53] C:\Program Files\Fichiers communs\Wise Installation Wizard
[23/06/2008|17:50] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 53 Processus )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-29 16:37:13
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 97

--------------------\\ Recherche d'autres infections

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dqegth"="c:\\windows\\system32\\dqegth.exe dqegth"

[b]==> EGDACCESS <==/b

[F:14][D:3]-> C:\DOCUME~1\Marc\LOCALS~1\Temp
[F:34][D:0]-> C:\DOCUME~1\Marc\Cookies
[F:1016][D:4]-> C:\DOCUME~1\Marc\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 16:42:10,67

Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Tuto: http://www.malekal.com/Adware.Magic_Control.php

voici mon rapport navilog il mafioso,Search Navipromo version 3.6.1 commencé le 29/07/2008 à 16:50:44,35

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Marc"

Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Marc\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Corinne\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Marc\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Corinne\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Marc\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Corinne\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier Navipromo trouvé

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\DOCUME~1\Marc\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\Corinne\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

* Dans "C:\DOCUME~1\Marc\locals~1\applic~1" :

* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :

* Dans "C:\DOCUME~1\Corinne\locals~1\applic~1" :

* Dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

*** Analyse terminée le 29/07/2008 à 16:56:38,49 ***

aucun navipromo

Télécharger sur le bureau https://www.besttechie.com/resources/malwarebytes/

=> double-clic sur mbam-setup pour lancer l'installation
=> Installer simplement sans rien modifier
=> Quand le programme lancé ==> onglet Mise à jour cliquer sur => Recherche de mise à jour
Onglet Recherche => cocher Exécuter un examen complet
=> Clic Rechercher
=> Eventuellement décocher les disque à ne pas analyser
=> Clic Lancer l'examen
=> En fin de scan , si infection trouvée
==> Clic Afficher résultat
=> Fermer vos applications en cours
=> Vérifier si tout est coché et clic Supprimer la sélection

=> un rapport s'ouvre le copier et le coller dans la réponse

Télécharge HijackThis ici :

-> http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

Tutoriel d´instalation : (Merci a Balltrap34 pour cette réalisation)

-> http://pageperso.aol.fr/balltrap34/Hijenr.gif

Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

Post le rapport généré ici stp...

aucun navipromo

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dqegth"="c:\\windows\\system32\\dqegth.exe dqegth"

voici mon rapport hitjackhis,Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:02:37, on 29/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\X'nBeep 1.1\XnBeep.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\PROGRA~1\INCRED~1\bin\ImApp.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cmd.exe
C:\PROGRA~1\INCRED~1\bin\IncMail.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.mini20.com/?tm=1&kw=Secure+Web+Search+Engine&KW1=Secure%20Web%20Search%20Engine&KW2=Best%20Malware%20Detection%20And%20Removal%20Software&searchbox=0&domainname=0&backfill=0
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66017
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66017
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66017
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66017
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Radio France Toolbar - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} - C:\Program Files\Radio_France\tbRad1.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Radio France Toolbar - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} - C:\Program Files\Radio_France\tbRad1.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Radio France Toolbar - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} - C:\Program Files\Radio_France\tbRad1.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [dqegth] c:\windows\system32\dqegth.exe dqegth
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI
O4 - HKCU\..\Run: [himem] "c:\windows\himem.exe" 3fff 8ffff
O4 - HKCU\..\Run: [RatpToolbar] C:\Program Files\Ratp\Barre d'outils RATP\ToolBar.exe
O4 - HKCU\..\Run: [Odebit Multimedia V3] C:\Program Files\Odebit Multimédia\V3\Odebit.exe
O4 - HKCU\..\Run: [Odebit Multimedia V3 - Services] C:\Program Files\Odebit Multimédia\V3\Odebit.exe /info
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: MaxTV.lnk = C:\Program Files\DMV\MaxTV\MaxTV.exe
O4 - Startup: Stickies.lnk = C:\Program Files\stickies\stickies.exe
O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107fd.bay107.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

désolé -_-'

je te laisse continuer parce que y'a encore des saletés.

-;)

tu peux suivre si tu veux

voici mon rapport toolbar,
-----------\\ ToolBar S&D 1.0.7 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Marc ] [ "C:\Toolbar SD" ] [ Selection : 1 ]
[ 29/07/2008 | 17:14:26,16 ] [ PC : NABET ]
[ MAJ : 25-07-2008 | 17:35 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.properties
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
C:\DOCUME~1\Marc\APPLIC~1\Search Settings
C:\DOCUME~1\Marc\APPLIC~1\Search Settings\kb127
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127
C:\Program Files\Search Settings\SearchSettings.exe

-----------\\ Extensions

(Marc) - {0502c898-4754-11dc-8314-0800200c9a66} => ny_yankees__45_1.0__45_fx
(Marc) - {07b2a769-ed19-4483-87ce-c643914c81bb} => Vista-aero
(Marc) - {2ca09d24-4942-11dc-8314-0800200c9a66} => baltimore_ravens__45_1.00__45_fx
(Marc) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Marc) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
(Marc) - {c1dffba0-628e-11d9-9669-0800200c9a66} => pitchdark_for_fx__45_2.0.2__45_fx
(Marc) - {CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} => cooliris

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.com/?gws_rd=ssl"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Default_Page_URL"="https://www.msn.com/fr-fr"
"Start Page"="http://www1.mini20.com/?tm=1&kw=Secure+Web+Search+Engine&KW1=Secure%20Web%20Search%20Engine&KW2=Best%20Malware%20Detection%20And%20Removal%20Software&searchbox=0&domainname=0&backfill=0"
"Url"="http://www.microsoft.com/athome/community/rss.xml"
"Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
"Url"="http://www.microsoft.com/atwork/community/rss.xml"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr"
"SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=66017"
"CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=66017"

-----------\\ Fin du rapport a 17:15:16,33

Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

mon rapport toolbar apres suppression,
-----------\\ ToolBar S&D 1.0.7 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Marc ] [ "C:\Toolbar SD" ] [ Selection : 2 ]
[ 29/07/2008 | 17:20:06,86 ] [ PC : NABET ]
[ MAJ : 25-07-2008 | 17:35 ]

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
Supprime! - C:\DOCUME~1\Marc\APPLIC~1\Search Settings\kb127
Echec ! - C:\Program Files\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\DOCUME~1\Marc\APPLIC~1\Search Settings
Echec ! - C:\Program Files\Search Settings

-----------\\ DEUXIEME PASSAGE

Echec ! - C:\Program Files\Search Settings\kb127
Echec ! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127

-----------\\ Extensions

(Marc) - {0502c898-4754-11dc-8314-0800200c9a66} => ny_yankees__45_1.0__45_fx
(Marc) - {07b2a769-ed19-4483-87ce-c643914c81bb} => Vista-aero
(Marc) - {2ca09d24-4942-11dc-8314-0800200c9a66} => baltimore_ravens__45_1.00__45_fx
(Marc) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Marc) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
(Marc) - {c1dffba0-628e-11d9-9669-0800200c9a66} => pitchdark_for_fx__45_2.0.2__45_fx
(Marc) - {CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} => cooliris

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.com/?gws_rd=ssl"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Default_Page_URL"="https://www.msn.com/fr-fr"
"Start Page"="http://www1.mini20.com/?tm=1&kw=Secure+Web+Search+Engine&KW1=Secure%20Web%20Search%20Engine&KW2=Best%20Malware%20Detection%20And%20Removal%20Software&searchbox=0&domainname=0&backfill=0"
"Url"="http://www.microsoft.com/athome/community/rss.xml"
"Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
"Url"="http://www.microsoft.com/atwork/community/rss.xml"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr"
"SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=66017"
"CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=66017"

-----------\\ Fin du rapport a 17:21:14,64

il faut le passer une seconde fois :

Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

mon rapport apres suppression,
-----------\\ ToolBar S&D 1.0.7 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Marc ] [ "C:\Toolbar SD" ] [ Selection : 2 ]
[ 29/07/2008 | 17:24:45,38 ] [ PC : NABET ]
[ MAJ : 25-07-2008 | 17:35 ]

-----------\\ SUPPRESSION

Echec ! - C:\Program Files\Search Settings\kb127
Echec ! - C:\Program Files\Search Settings

-----------\\ DEUXIEME PASSAGE

Echec ! - C:\Program Files\Search Settings\kb127
Echec ! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127

-----------\\ Extensions

(Marc) - {0502c898-4754-11dc-8314-0800200c9a66} => ny_yankees__45_1.0__45_fx
(Marc) - {07b2a769-ed19-4483-87ce-c643914c81bb} => Vista-aero
(Marc) - {2ca09d24-4942-11dc-8314-0800200c9a66} => baltimore_ravens__45_1.00__45_fx
(Marc) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Marc) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
(Marc) - {c1dffba0-628e-11d9-9669-0800200c9a66} => pitchdark_for_fx__45_2.0.2__45_fx
(Marc) - {CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} => cooliris

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.com/?gws_rd=ssl"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Default_Page_URL"="https://www.msn.com/fr-fr"
"Start Page"="http://www1.mini20.com/?tm=1&kw=Secure+Web+Search+Engine&KW1=Secure%20Web%20Search%20Engine&KW2=Best%20Malware%20Detection%20And%20Removal%20Software&searchbox=0&domainname=0&backfill=0"
"Url"="http://www.microsoft.com/athome/community/rss.xml"
"Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
"Url"="http://www.microsoft.com/atwork/community/rss.xml"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr"
"SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=66017"
"CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=66017"

-----------\\ Fin du rapport a 17:25:22,44

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
Assure toi que la case Unregister Dll's and Ocx's soit bien cochée
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

ensuite :

Telecharge malwarebytes

-> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Tu l´instale; le programme va se mettre automatiquement a jour.

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".

Puis click sur "rechercher".

Laisse le scanner le pc...

Si des elements on ete trouvés > click sur supprimer la selection.

si il t´es demandé de redemarrer > click sur "yes".

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

Copie et colle le rapport stp.

PS : les rapport sont aussi rangé dans l onglet rapport/log