Win32:Adware-gen [Adw]

Bonjour,

désolé de vous déranger apres un gentil et joli petit scan d'avast ... le coup de sirène m'a explosé les tympans pour m'annoncer une formidable nouvelle ... :(

C:\WINXP\system32\winck75.dll apparemment était infecté par un logiciel malveillant du nom de Win32:Adware-gen [Adw] ... la journée commence bien ...

apres qques recherche google je suis tombé sur ce site ... et pourquoi pas demander de l'aide aux personnes qui s'y connaissent ;)

j'ai passer un coup de "HijackThis" comme écris dans de multiples post ... je vous soumet donc le rapport ...

Logfile of HijackThis v1.99.1
Scan saved at 11:47:19, on 23/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINXP\System32\smss.exe
C:\WINXP\system32\winlogon.exe
C:\WINXP\system32\services.exe
C:\WINXP\system32\lsass.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\System32\svchost.exe
C:\WINXP\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINXP\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINXP\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINXP\Explorer.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINXP\system32\ctfmon.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINXP\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINXP\system32\notepad.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Jennifer\Mes documents\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Mirar - {B891BE6B-48E2-4ECF-9C93-34A3AB603F44} - C:\WINXP\system32\winck75.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-be\msntb.dll
O2 - BHO: VisualTool - {F3A54897-9E68-B11E-A37A-4D1422CE9CAA} - C:\Program Files\VisualTool\VisualTool-3.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-be\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Mirar - {B891BE6A-48E2-4ECF-9C93-34A3AB603F44} - C:\WINXP\system32\winck75.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINXP\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINXP\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINXP\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

Pouvez vous me venir en aide? ...

D'avance merci bonne journée a vous ;)
Configuration: Windows XP
Internet Explorer 7.0

3 réponses

  1. Salut ta version d' Hijackthis est périmée, tu peux telecharger la nouvelle version ici : http://www.trendsecure.com/portal/en-US/download/HijackThis.exe et postes le rapport ensuite... *Un tuto:https://forums.cnetfrance.fr
    1. Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 12:52:20, on 23/11/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16735)
      Boot mode: Normal

      Running processes:
      C:\WINXP\System32\smss.exe
      C:\WINXP\system32\winlogon.exe
      C:\WINXP\system32\services.exe
      C:\WINXP\system32\lsass.exe
      C:\WINXP\system32\svchost.exe
      C:\WINXP\System32\svchost.exe
      C:\WINXP\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINXP\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\WINXP\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINXP\Explorer.EXE
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\WINXP\system32\ctfmon.exe
      C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
      C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINXP\system32\wuauclt.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
      O2 - BHO: Mirar - {B891BE6B-48E2-4ECF-9C93-34A3AB603F44} - C:\WINXP\system32\winck75.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-be\msntb.dll
      O2 - BHO: VisualTool - {F3A54897-9E68-B11E-A37A-4D1422CE9CAA} - C:\Program Files\VisualTool\VisualTool-3.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-be\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Mirar - {B891BE6A-48E2-4ECF-9C93-34A3AB603F44} - C:\WINXP\system32\winck75.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINXP\system32\ctfmon.exe
      O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] cmd.exe /c md "%USERPROFILE%\Local Settings\Temp" (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] cmd.exe /c md "%USERPROFILE%\Local Settings\Temp" (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'Default user')
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINXP\bdoscandel.exe
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINXP\bdoscandel.exe
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
      1. telecharges LOP S&D ici : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 *Double-cliques dessus pour l'installer *Double-cliques sur le raccourci du bureau *Selectionne la langue (f), puis choisis l'option1 ( recherche) *Postes le rapport généré Note : si ton bureau ne reapparait pas, presses les touches CTRL+Alt+supp >>>choisis l'onglet "fichier" >>>cliques sur " Nouvelles taches ". Tapes alors : explorer.exe puis valide.
        1. Re, pour avancer : va dans le panneau de configuration >>> ajouter/supprimer un programme et supprime le programme " Mirar " et si tu as des cracks, penses a les virer aussi, sinon l'infection reviendra... j'attends le rapport LOp!
        2. @Utilisateur anonymebonjour,

          désolé pour le temp de réponse j'ai du partir travailler et ici je suis sur un autre pc ... miais merci de votre aide ... ;) je fais ca des que je rentre :D
        3. @speedlenteurSalut, oui je me doute que si tu n'es pas revenu, c'est que tu as d'autres choses a faire... en tous cas, " pas de souci", toujours pret a t'aider... Bonne journée et A+ !
        4. re feelgood je suis désolé du temp d'absence de ma réponse ... petits problemes personnels a régler en tout cas un grand merci pour l'interet que tu portes a mon probleme ...

          voici le rappord de LOP

          --------------------\\ Lop S&D 4.2.4-9c XP/Vista

          Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
          X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
          BIOS : Phoenix - AwardBIOS v6.00PG
          USER : Jennifer ( Administrator )
          BOOT : Normal boot
          Antivirus : avast! antivirus 4.8.1290 [VPS 081216-0] 4.8.1290 (Activated)
          C:\ (Local Disk) - NTFS - Total:74 Go (Free:16 Go)
          D:\ (Local Disk) - FAT32 - Total:2 Go (Free:0 Go)
          E:\ (CD or DVD)

          "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
          Option : [1] ( mer. 17/12/2008|13:12 )

          --------------------\\ Listing des dossiers dans APPLIC~1

          [07/07/2007|12:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

          [30/12/2005|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
          [21/09/2005|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
          [10/01/2007|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
          [25/06/2007|18:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
          [01/03/2007|09:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\dart pile download default
          [19/12/2006|15:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
          [05/02/2006|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
          [26/06/2007|13:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
          [10/04/2007|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
          [20/09/2006|15:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
          [01/03/2007|09:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Webroot
          [27/07/2006|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

          [07/07/2007|21:19] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Ahead
          [07/07/2007|16:17] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple
          [07/07/2007|16:25] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple Computer
          [09/07/2007|21:43] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\BenQ
          [05/08/2007|21:36] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\DVD Shrink
          [26/12/2007|13:21] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Google
          [07/08/2008|19:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Hewlett-Packard
          [05/08/2007|11:20] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft
          [08/09/2007|11:46] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TuneUp Software
          [19/07/2007|20:09] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage

          [13/09/2005|15:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
          [21/09/2005|14:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

          [07/07/2007|12:03] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\Microsoft

          [14/07/2008|10:23] C:\DOCUME~1\Jennifer\APPLIC~1\Adobe
          [20/07/2007|15:30] C:\DOCUME~1\Jennifer\APPLIC~1\Ahead
          [07/07/2007|16:30] C:\DOCUME~1\Jennifer\APPLIC~1\Apple Computer
          [11/04/2008|20:53] C:\DOCUME~1\Jennifer\APPLIC~1\BitTorrent
          [05/08/2007|11:31] C:\DOCUME~1\Jennifer\APPLIC~1\DivX
          [02/09/2008|16:31] C:\DOCUME~1\Jennifer\APPLIC~1\DNA
          [30/11/2008|10:25] C:\DOCUME~1\Jennifer\APPLIC~1\dvdcss
          [26/12/2007|13:21] C:\DOCUME~1\Jennifer\APPLIC~1\Google
          [05/08/2007|19:03] C:\DOCUME~1\Jennifer\APPLIC~1\Help
          [07/07/2007|12:32] C:\DOCUME~1\Jennifer\APPLIC~1\Identities
          [04/08/2008|19:59] C:\DOCUME~1\Jennifer\APPLIC~1\Image Zone Express
          [09/07/2007|21:43] C:\DOCUME~1\Jennifer\APPLIC~1\InterVideo
          [24/07/2007|15:28] C:\DOCUME~1\Jennifer\APPLIC~1\Macromedia
          [07/07/2007|15:35] C:\DOCUME~1\Jennifer\APPLIC~1\Microsoft
          [07/07/2007|15:17] C:\DOCUME~1\Jennifer\APPLIC~1\MSNInstaller
          [17/12/2008|12:58] C:\DOCUME~1\Jennifer\APPLIC~1\OpenOffice.org2
          [28/09/2007|15:09] C:\DOCUME~1\Jennifer\APPLIC~1\Sun
          [08/09/2007|11:42] C:\DOCUME~1\Jennifer\APPLIC~1\TuneUp Software
          [08/09/2007|11:31] C:\DOCUME~1\Jennifer\APPLIC~1\U3
          [11/11/2008|10:03] C:\DOCUME~1\Jennifer\APPLIC~1\uTorrent
          [28/07/2007|14:44] C:\DOCUME~1\Jennifer\APPLIC~1\vlc
          [10/08/2007|17:04] C:\DOCUME~1\Jennifer\APPLIC~1\Webroot

          [17/11/2005|10:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
          [01/03/2007|09:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\Webroot

          [07/07/2007|12:03] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft

          [13/09/2005|15:37] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

          [07/07/2007|12:03] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft

          --------------------\\ Tâches planifiées dans C:\WINXP\tasks

          [22/08/2008 16:21][--a------] C:\WINXP\tasks\Maintenance en 1 clic.job
          [07/07/2007 16:20][--a------] C:\WINXP\tasks\AppleSoftwareUpdate.job
          [17/12/2008 12:43][--ah-----] C:\WINXP\tasks\SA.DAT
          [28/08/2001 13:00][-r-h-----] C:\WINXP\tasks\desktop.ini

          --------------------\\ Listing des dossiers dans C:\Program Files

          [30/12/2005|19:05] C:\Program Files\Adobe
          [08/09/2007|12:15] C:\Program Files\Ahead
          [20/09/2006|15:15] C:\Program Files\Alwil Software
          [07/07/2007|16:19] C:\Program Files\Apple Software Update
          [23/03/2006|10:01] C:\Program Files\ATOM DOG VGA
          [25/06/2007|18:45] C:\Program Files\Audible
          [31/03/2008|19:20] C:\Program Files\BearShare
          [07/07/2007|21:26] C:\Program Files\BenQ
          [11/04/2008|20:03] C:\Program Files\BitTorrent
          [13/09/2005|15:35] C:\Program Files\ComPlus Applications
          [25/06/2007|18:46] C:\Program Files\Creative
          [25/06/2007|18:42] C:\Program Files\Creative Installation Information
          [28/07/2007|14:36] C:\Program Files\DivX
          [02/09/2008|16:20] C:\Program Files\DNA
          [04/12/2006|21:27] C:\Program Files\DVD Shrink
          [05/05/2006|20:31] C:\Program Files\Elaborate Bytes
          [31/03/2008|19:27] C:\Program Files\eMule
          [09/04/2008|19:12] C:\Program Files\ESET
          [15/10/2008|18:47] C:\Program Files\FBrowserAdvisor
          [15/10/2008|18:47] C:\Program Files\FBrowsingAdvisor
          [08/09/2007|11:42] C:\Program Files\Fichiers communs
          [01/11/2005|17:04] C:\Program Files\GameHouse
          [26/12/2007|13:47] C:\Program Files\Google
          [13/09/2005|16:59] C:\Program Files\HighMAT CD Writing Wizard
          [16/04/2008|15:11] C:\Program Files\ING
          [07/07/2007|21:26] C:\Program Files\InstallShield Installation Information
          [13/12/2008|19:30] C:\Program Files\Internet Explorer
          [10/08/2008|10:05] C:\Program Files\InternetGameBox
          [10/01/2007|10:58] C:\Program Files\iPod
          [07/07/2007|16:26] C:\Program Files\iTunes
          [17/12/2008|12:52] C:\Program Files\Java
          [06/05/2006|16:46] C:\Program Files\Kyodai
          [25/09/2006|13:24] C:\Program Files\Lavasoft
          [16/05/2008|11:19] C:\Program Files\LimeWire
          [01/10/2008|13:27] C:\Program Files\Messenger
          [21/04/2006|18:39] C:\Program Files\MessengerPlus! 3
          [01/11/2005|16:49] C:\Program Files\Micro Application
          [14/09/2005|18:58] C:\Program Files\Microsoft Encarta
          [13/09/2005|15:38] C:\Program Files\microsoft frontpage
          [21/09/2005|14:20] C:\Program Files\Microsoft Hardware
          [21/09/2005|14:17] C:\Program Files\Microsoft IntelliType Pro
          [01/11/2005|15:27] C:\Program Files\Microsoft Office
          [01/11/2005|15:26] C:\Program Files\Microsoft Visual Studio
          [01/11/2005|15:27] C:\Program Files\Microsoft Works
          [01/11/2005|15:26] C:\Program Files\Microsoft.NET
          [01/10/2008|13:22] C:\Program Files\Movie Maker
          [07/06/2007|09:42] C:\Program Files\Mozilla Firefox
          [07/07/2007|19:10] C:\Program Files\MSN
          [07/07/2007|19:38] C:\Program Files\MSN Apps
          [13/09/2005|15:35] C:\Program Files\MSN Gaming Zone
          [04/10/2008|09:31] C:\Program Files\MSN Messenger
          [07/07/2007|19:49] C:\Program Files\MSN Toolbar
          [15/11/2006|15:30] C:\Program Files\MSXML 4.0
          [08/09/2007|12:22] C:\Program Files\Nero
          [01/10/2008|13:16] C:\Program Files\NetMeeting
          [10/08/2008|10:10] C:\Program Files\NewDotNet
          [13/09/2005|15:35] C:\Program Files\Online Services
          [28/09/2008|18:57] C:\Program Files\OpenOffice.org 2.4
          [01/10/2008|13:16] C:\Program Files\Outlook Express
          [07/07/2007|19:06] C:\Program Files\Picasa2
          [15/10/2008|18:10] C:\Program Files\PlayMP3z
          [23/03/2007|18:53] C:\Program Files\PuzzlesMaster
          [07/07/2007|16:25] C:\Program Files\QuickTime
          [05/05/2006|20:27] C:\Program Files\Real Clone DVD
          [13/09/2005|17:25] C:\Program Files\S3Inc
          [13/09/2005|15:36] C:\Program Files\Services en ligne
          [02/02/2007|10:03] C:\Program Files\Shareaza
          [28/09/2008|18:20] C:\Program Files\Tetris
          [23/11/2008|12:52] C:\Program Files\Trend Micro
          [08/09/2007|11:43] C:\Program Files\TuneUp Utilities 2006
          [13/09/2005|15:41] C:\Program Files\Uninstall Information
          [29/03/2007|10:22] C:\Program Files\uPlayMe
          [11/04/2008|20:11] C:\Program Files\uTorrent
          [13/09/2005|18:22] C:\Program Files\VIAudioi
          [28/07/2007|14:43] C:\Program Files\VideoLAN
          [17/12/2008|12:45] C:\Program Files\VisualTool
          [04/04/2006|22:19] C:\Program Files\Webroot
          [12/12/2006|15:46] C:\Program Files\Windows Media Connect
          [11/08/2007|22:25] C:\Program Files\Windows Media Connect 2
          [01/10/2008|13:16] C:\Program Files\Windows Media Player
          [01/10/2008|13:16] C:\Program Files\Windows NT
          [20/09/2006|15:54] C:\Program Files\WindowsUpdate
          [07/07/2007|13:20] C:\Program Files\WinRAR
          [13/09/2005|15:38] C:\Program Files\xerox

          --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

          [30/12/2005|19:06] C:\Program Files\Fichiers communs\Adobe
          [08/09/2007|12:29] C:\Program Files\Fichiers communs\Ahead
          [07/07/2007|16:18] C:\Program Files\Fichiers communs\Apple
          [25/06/2007|18:42] C:\Program Files\Fichiers communs\Creative
          [01/11/2005|15:27] C:\Program Files\Fichiers communs\DESIGNER
          [25/06/2007|18:41] C:\Program Files\Fichiers communs\InstallShield
          [07/07/2007|21:27] C:\Program Files\Fichiers communs\InterVideo
          [05/05/2006|21:48] C:\Program Files\Fichiers communs\Java
          [23/11/2006|20:58] C:\Program Files\Fichiers communs\Microsoft Shared
          [13/09/2005|15:36] C:\Program Files\Fichiers communs\MSSoap
          [13/09/2005|17:31] C:\Program Files\Fichiers communs\ODBC
          [13/09/2005|15:36] C:\Program Files\Fichiers communs\Services
          [13/09/2005|17:31] C:\Program Files\Fichiers communs\SpeechEngines
          [20/09/2006|15:10] C:\Program Files\Fichiers communs\Symantec Shared
          [01/10/2008|13:16] C:\Program Files\Fichiers communs\System
          [08/09/2007|11:42] C:\Program Files\Fichiers communs\Wise Installation Wizard

          --------------------\\ Process

          ( 35 Processes )

          iexplore.exe ~ [PID:3560]

          --------------------\\ Recherche avec S_Lop

          Aucun fichier / dossier Lop trouvé !

          --------------------\\ Recherche de Fichiers / Dossiers Lop

          C:\DOCUME~1\Jennifer\LOCALS~1\Temp\nsc18.tmp
          C:\DOCUME~1\Jennifer\LOCALS~1\Temp\nse14A.tmp
          C:\DOCUME~1\Jennifer\LOCALS~1\Temp\nsl13F.tmp
          C:\DOCUME~1\Jennifer\Cookies\jennifer@advertstream[1].txt
          C:\DOCUME~1\Jennifer\Cookies\jennifer@adin.bigpoint[2].txt
          C:\DOCUME~1\Jennifer\Cookies\jennifer@bigpoint[1].txt
          C:\DOCUME~1\Jennifer\Cookies\jennifer@dk.seafight.bigpoint[1].txt
          C:\DOCUME~1\Jennifer\Cookies\jennifer@partypoker[1].txt
          C:\DOCUME~1\Jennifer\Cookies\jennifer@dk.seafight.bigpoint[1].txt

          --------------------\\ Verification du Registre

          ..... OK !
        5. @speedlenteur1Ok, heureux de te " revoir " sur le forum... * Relances LopSD et choisis cette fois l'option 2 ( nettoyage )... Ne fermes pas les fenetres lors de la suppression... Un rapport sera genere, postes le stp, * Note : ( si le bureau ne reapparait pas, presses Ctrl + Alt + supp >>> onglet fichier, Nouvelles taches >> tapes explorer.exe et valides ) * Ensuite pour avancer, telecharges ToolBar SD sur ton bureau : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 * Fermes tous les programmes en cours et lances l'installation en executant le fichier telecharge..Double-cliques sur le raccourci de ton bureau et selectionnes la langue et valide par entree... Choisis l'option1 ( recherche ) et patientes jusqu'a la fin du scan. ( ne touches a rien pendant la recherche ) un rapport sera genere, postes le stp...Note : ( le rapport TB.txt se trouve a la racine du disque dur )