Info sur mon pc

Re bonsoir Evasion Je viens de refaire un scan hyjack peux tu voir si j'ai encore quelque souci merci à toi pour ton aide marc
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:53:26, on 17/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
C:\WINDOWS\system32\lxdvcoms.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe
C:\Program Files\PcBoost\PcBoost.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [PcBoost] "C:\Program Files\PcBoost\PcBoost.exe" /start
O4 - HKLM\..\Run: [Pinnacle WebUpdater] "C:\Program Files\Pinnacle\Shared Files\Programs\WebUpdater\WebUpdater.exe" -s -f=UpdateVersion.xml -url=http://cdn.pinnaclesys.com/SupportFiles
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PMCLoader] C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe -checktasks
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.5.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - http://www.eset.eu/OnlineScanner.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.be/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} - http://www.extrafilm.be/ImageUploader4.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Avira AntiVir Premium MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe
O23 - Service: Planificateur Avira AntiVir Premium (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe
O23 - Service: Avira AntiVir Premium Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe
O23 - Service: Avira AntiVir Premium WebGuard (antivirwebservice) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE
O23 - Service: Service d'assistance Avira AntiVir Premium MailGuard (AVEService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxdvCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdvserv.exe
O23 - Service: lxdv_device - - C:\WINDOWS\system32\lxdvcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

Ok evasion pas problème merci quand meme à toi marc a bientot pour d'autre résolution

Ok voilà merci cela étant fait merci à toi évasion es que tu pourrait me donné ton adresse mail pour m'aider si je trouve que mon pc ne va plus bien merci marc

Bonjour

Relance HijackThis pour un " do a system scan only "
Coche à gauche les lignes ci dessous :

O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O8 - Extra context menu item: Add to Windows &Live Favorites - <https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)

Clique en bas sur " Fix checked "

Fait ta mise à jour Java/Sun :
Java Sun/MicroSystem
https://www.oracle.com/java/technologies/javase-downloads.html
1er lien...Java Runtime Environnement--->JRE:6u11--->Windows offline
03/12/08

Via " ajout/suppression d programmes ", désinstalle toutes les anciennes versions de Java/Sun, sauf celle d'aujourd'hui

Voila, bonne continuation

RE me revoici pas problème de vous avoir fait confiance c'est génial de pouvoir conté sur quelqu'un pour m'aider parce que de nos jour c'est le top.J'ai fait une bouvelle analyse hijac comme dis dans msg précédent mais était plus sur mon bureau et meme plus dans mon pc c'est déinstallé voilà merci encore marc
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:26:45, on 17/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
C:\WINDOWS\system32\lxdvcoms.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\PcBoost\PcBoost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O4 - HKLM\..\Run: [PcBoost] "C:\Program Files\PcBoost\PcBoost.exe" /start
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.be/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} - http://www.extrafilm.be/ImageUploader4.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxdvCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdvserv.exe
O23 - Service: lxdv_device - - C:\WINDOWS\system32\lxdvcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

Bonjour, évasion me re voici merci à toi pour ton aide et d'avoir le temps pour m'expliqué comment je peut faire pour garder tous les détails pour résoudre mon problème comme ca si cela arive encore je pourrait refaire tous ce que tu ma dis faire si tu as adresse mail??je vais refaire une analyse hijac pour que tu puisse regardez si tous est ok vu quelque jour ce son passé merci encore à toi marc

Bonsoir

... Avec CCleaner, pas de rapport " Analyse ", puis " lancer le nettoyage " et enfin confirmer !

Bonne réception

Re merci pour tous ptite question avec ccleaner j'ai une analyse et je fais quoi te poste le rapport ainsi celui de tcleaner
ANALYSE COMPLETE - (32.031 secs)
------------------------------------------------------------------------------------------
1.783,7MB ont été supprimés. (Taille approximative)
------------------------------------------------------------------------------------------

Détails des fichiers à supprimer (Note: AUCUN fichier n'a pour l'instant été supprimé)
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 3742) 238,7MB
C:\Documents and Settings\Admin\Cookies\admin@3suisses[1].txt 732 bytes
C:\Documents and Settings\Admin\Cookies\admin@3suisses[3].txt 239 bytes
C:\Documents and Settings\Admin\Cookies\admin@7sur7[2].txt 390 bytes
C:\Documents and Settings\Admin\Cookies\admin@actu24[2].txt 462 bytes
C:\Documents and Settings\Admin\Cookies\admin@ad2.doublepimp[1].txt 112 bytes
C:\Documents and Settings\Admin\Cookies\admin@adhese[1].txt 102 bytes
C:\Documents and Settings\Admin\Cookies\admin@adtech[1].txt 206 bytes
C:\Documents and Settings\Admin\Cookies\admin@ask[2].txt 488 bytes
C:\Documents and Settings\Admin\Cookies\admin@atraxio[1].txt 127 bytes
C:\Documents and Settings\Admin\Cookies\admin@avast[2].txt 497 bytes
C:\Documents and Settings\Admin\Cookies\admin@avira.nexway[2].txt 714 bytes
C:\Documents and Settings\Admin\Cookies\admin@befr.ebayrtm[2].txt 1,10KB
C:\Documents and Settings\Admin\Cookies\admin@belgacom[2].txt 145 bytes
C:\Documents and Settings\Admin\Cookies\admin@benl.ebayrtm[2].txt 553 bytes
C:\Documents and Settings\Admin\Cookies\admin@bestofmicro[2].txt 177 bytes
C:\Documents and Settings\Admin\Cookies\admin@bimonline.insites[1].txt 93 bytes
C:\Documents and Settings\Admin\Cookies\admin@bitdefender[1].txt 248 bytes
C:\Documents and Settings\Admin\Cookies\admin@bitdefender[3].txt 133 bytes
C:\Documents and Settings\Admin\Cookies\admin@brandreachsys[2].txt 110 bytes
C:\Documents and Settings\Admin\Cookies\admin@bubblefoot[2].txt 449 bytes
C:\Documents and Settings\Admin\Cookies\admin@ccleaner[1].txt 339 bytes
C:\Documents and Settings\Admin\Cookies\admin@clearspring[1].txt 90 bytes
C:\Documents and Settings\Admin\Cookies\admin@click-fr[2].txt 169 bytes
C:\Documents and Settings\Admin\Cookies\admin@clubic[1].txt 527 bytes
C:\Documents and Settings\Admin\Cookies\admin@commentcamarche[2].txt 621 bytes
C:\Documents and Settings\Admin\Cookies\admin@cybermonitor[1].txt 94 bytes
C:\Documents and Settings\Admin\Cookies\admin@dailymotion[1].txt 86 bytes
C:\Documents and Settings\Admin\Cookies\admin@ebayobjects[2].txt 122 bytes
C:\Documents and Settings\Admin\Cookies\admin@ebayrtm[2].txt 164 bytes
C:\Documents and Settings\Admin\Cookies\admin@ebayrtm[3].txt 148 bytes
C:\Documents and Settings\Admin\Cookies\admin@ebay[1].txt 1,83KB
C:\Documents and Settings\Admin\Cookies\admin@ebay[3].txt 220 bytes
C:\Documents and Settings\Admin\Cookies\admin@edt02[2].txt 483 bytes
C:\Documents and Settings\Admin\Cookies\admin@estore.pinnaclesys[2].txt 131 bytes
C:\Documents and Settings\Admin\Cookies\admin@ext.infos-du-net[2].txt 107 bytes
C:\Documents and Settings\Admin\Cookies\admin@fl01.ct2.comclick[1].txt 337 bytes
C:\Documents and Settings\Admin\Cookies\admin@footgoal[1].txt 87 bytes
C:\Documents and Settings\Admin\Cookies\admin@fr.meetic[1].txt 417 bytes
C:\Documents and Settings\Admin\Cookies\admin@free-av[2].txt 331 bytes
C:\Documents and Settings\Admin\Cookies\admin@google[1].txt 329 bytes
C:\Documents and Settings\Admin\Cookies\admin@google[2].txt 132 bytes
C:\Documents and Settings\Admin\Cookies\admin@google[3].txt 136 bytes
C:\Documents and Settings\Admin\Cookies\admin@gratuit-videos-porno[1].txt 292 bytes
C:\Documents and Settings\Admin\Cookies\admin@himedia.individuad[2].txt 245 bytes
C:\Documents and Settings\Admin\Cookies\admin@host1.adhese[1].txt 84 bytes
C:\Documents and Settings\Admin\Cookies\admin@infos-du-net[2].txt 178 bytes
C:\Documents and Settings\Admin\Cookies\admin@intellitxt[1].txt 114 bytes
C:\Documents and Settings\Admin\Cookies\admin@lists.avira[1].txt 73 bytes
C:\Documents and Settings\Admin\Cookies\admin@meetic[1].txt 104 bytes
C:\Documents and Settings\Admin\Cookies\admin@metriweb[1].txt 98 bytes
C:\Documents and Settings\Admin\Cookies\admin@msn[2].txt 195 bytes
C:\Documents and Settings\Admin\Cookies\admin@notifier.avira[1].txt 358 bytes
C:\Documents and Settings\Admin\Cookies\admin@paypal.112.2o7[1].txt 117 bytes
C:\Documents and Settings\Admin\Cookies\admin@pcastuces[1].txt 97 bytes
C:\Documents and Settings\Admin\Cookies\admin@pinnaclesystems.122.2o7[1].txt 126 bytes
C:\Documents and Settings\Admin\Cookies\admin@pinnaclesys[2].txt 135 bytes
C:\Documents and Settings\Admin\Cookies\admin@pornhub[2].txt 345 bytes
C:\Documents and Settings\Admin\Cookies\admin@ptg[1].txt 71 bytes
C:\Documents and Settings\Admin\Cookies\admin@quantserve[2].txt 203 bytes
C:\Documents and Settings\Admin\Cookies\admin@s3s[2].txt 176 bytes
C:\Documents and Settings\Admin\Cookies\admin@sdc.hln[1].txt 229 bytes
C:\Documents and Settings\Admin\Cookies\admin@sdv[1].txt 164 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[1].txt 436 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[3].txt 176 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[4].txt 176 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[5].txt 183 bytes
C:\Documents and Settings\Admin\Cookies\admin@sec.3suisses[6].txt 179 bytes
C:\Documents and Settings\Admin\Cookies\admin@secure.dolist[2].txt 271 bytes
C:\Documents and Settings\Admin\Cookies\admin@smartadserver[1].txt 403 bytes
C:\Documents and Settings\Admin\Cookies\admin@specificclick[1].txt 878 bytes
C:\Documents and Settings\Admin\Cookies\admin@standardliege[2].txt 304 bytes
C:\Documents and Settings\Admin\Cookies\admin@standard[1].txt 291 bytes
C:\Documents and Settings\Admin\Cookies\admin@store.digitalriver[1].txt 137 bytes
C:\Documents and Settings\Admin\Cookies\admin@tomsguide[2].txt 172 bytes
C:\Documents and Settings\Admin\Cookies\admin@tracking.publicidees[2].txt 292 bytes
C:\Documents and Settings\Admin\Cookies\admin@weborama[1].txt 271 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.3suisses[1].txt 152 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.3suisses[3].txt 80 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.7sur7[2].txt 159 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.actu24[1].txt 96 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.actu24[2].txt 236 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.actu24[3].txt 128 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.actu24[4].txt 91 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.avira[1].txt 73 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.bestofmicro[2].txt 173 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.bibit[1].txt 71 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.dessouscheri[2].txt 92 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.diaporamas-a-la-con[2].txt 304 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.euromillions[1].txt 76 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.googleadservices[1].txt 500 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.lotto[1].txt 178 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.ludokado[2].txt 77 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.pcastuces[1].txt 77 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.pixmania[1].txt 1,30KB
C:\Documents and Settings\Admin\Cookies\admin@www.pixmania[3].txt 1,65KB
C:\Documents and Settings\Admin\Cookies\admin@www.pornhub[2].txt 85 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.pornhub[3].txt 79 bytes
C:\Documents and Settings\Admin\Cookies\admin@www.spywareterminator[1].txt 80 bytes
C:\Documents and Settings\Admin\Cookies\admin@xiti[1].txt 107 bytes
C:\Documents and Settings\Admin\Cookies\admin@yahoo[2].txt 173 bytes
Marqué pour l'effacement: C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Admin\Cookies\index.dat
Poubelle vidée (1270 fichiers) 1.529,8MB
C:\WINDOWS\TEMP\Cookies\admin@pctools[1].txt 627 bytes
C:\WINDOWS\TEMP\Cookies\admin@secure.pctools[2].txt 384 bytes
C:\WINDOWS\TEMP\Cookies\admin@yahoo[2].txt 172 bytes
C:\WINDOWS\TEMP\Cookies\index.dat 32,00KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\115_20030210120549[1].gif 1,47KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\4000001102_20080403211424[1].css 6,61KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\anti-virus_16x16[1].png 1,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\bg_cont_r_3[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\bg_head[1].gif 538 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\bg_menu1[1].gif 152 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\blue_blc[1].gif 203 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\box_tr[1].gif 652 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c2[1].gif 342 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c2[2].gif 342 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c2_1[1].gif 342 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c2_bg[1].gif 63 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c4_1[1].gif 181 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\c4_1[2].gif 181 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\cont_r_1[1].gif 94 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\cont_r_4[1].gif 94 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\default[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\default[1].htm 28,19KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\filters[1].bin 74,50KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\guarantee-small[1].gif 5,29KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\httpErrorPagesScripts[1] 7,40KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\ie7[1].css 196 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\indicator[1].gif 1,75KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\infinity[1].png 581 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\info_48[1] 6,83KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\logo_amex[1].gif 1,32KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\m1[1].gif 45 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\m2[1].gif 599 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\mbox[1].js 23,57KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\mt1[1].gif 90 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\mt2[1].gif 90 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\navcancl[1] 2,66KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\openWindow[1].js 2,41KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\pctools[1].js 11,23KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\POLi[1].js 4,61KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\renew_fr[1].gif 2,59KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\s4[1].gif 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\s4[2].gif 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\standard[1] 177 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\uniqueid[1].php 113 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\url[1].htm 23,53KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\113OLJ44\weather[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\arrow3[1].gif 84 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\authenticate[1].js 3,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\bg_cont_r_4[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\bg_head[1].gif 538 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\blank[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\blue_brc[1].gif 202 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\blue_trcm[1].gif 995 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\bottom_menu_c1[1].gif 107 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\box_tl[1].gif 653 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c1_bg[1].gif 811 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c3[1].gif 2,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c3[2].gif 2,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c4_bg[1].gif 52 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\c4_bg[2].gif 52 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\check.xml 6,75KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\check[1].cab 3,04KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\errorPageStrings[1] 955 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\ga[1].js 22,23KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\gcc_delta[1].gif 1,66KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\Generic[1].htm 17,32KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\Generic[1].xml 4,38KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\logo[1].png 3,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\map[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\mid_dot[1].gif 613 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\off_dot[1].gif 1,02KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\pctools[1].css 32,71KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\pctools[1].js 11,23KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\pcw_best_buy[1].gif 4,13KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\phone[1].htm 23,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\Popup[1].js 1,44KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\registry-mechanic_16x16[1].png 1.015 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\s1[1].gif 1,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\s2[1].gif 9,83KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\s2[2].gif 9,83KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\secure[1].gif 144 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\secure[2].gif 144 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\softonic_sd[1].png 8,74KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\spyware-doctor_16x16[1].png 1,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\spyware-doctor_16x16[2].png 1,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\standard[1] 177 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\stocks[1].htm 25,43KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\2R20S9E0\tx[1].js 6,30KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\116_20080218101409[1].gif 1,48KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bg[1].gif 1,10KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bg_cont_4_1[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bg_menu[1].gif 152 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bg_menu[2].gif 152 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\blue_tm[1].gif 824 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\boxbg[1].gif 550 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\bullet[1] 3,09KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\c1[1].gif 2,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\c1[2].gif 2,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\c3_bg[1].gif 811 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\c3_bg[2].gif 811 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\cart-header[1].gif 299 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\computer_shopper_06[1].gif 8,32KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\cont_r_2[1].gif 94 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\cont_r_3[1].gif 94 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\desktop-maestro_16x16[1].png 1.016 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\email[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\ErrorPageTemplate[1] 2,12KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\favicon[1].ico 1,37KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\firewall_16x16[1].png 1.017 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\FormValidation[1].js 26,66KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\ga[1].js 22,23KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\global-collect[1].js 12,06KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\internet-security_16x16[1].png 1,02KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\logo[1].png 3,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\logo_mc[1].gif 1,65KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\maps[1].htm 24,98KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\Modules[1].js 16,40KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\on_dot[1].gif 1,02KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\parameters[1].bin 53,71KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\pctools[1].css 32,71KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\pcw95[1].png 3,49KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\pcw_best_buy[1].gif 4,13KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\phone[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\s1[1].gif 1,21KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\s3[1].gif 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\s3[2].gif 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\start.xml 299 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\start[1].cab 7,00KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\stocks[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\title_doctor_fr[1].gif 15,24KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\DA1WIJNR\uniqueid[1].php 111 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\index.dat 96,00KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\authenticate[1].js 3,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\background_gradient[1] 453 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\bg[1].gif 1,10KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\bg_cont_r_2[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\bg_mt[1].gif 49 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\blue_tlcm[1].gif 995 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\border_1pxdotted[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\bottom_menu_c2[1].gif 107 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\box_t[1].gif 161 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\Browser[1].js 4,83KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\btn_blue2[1].gif 1,04KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c1_bg[1].gif 811 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c2_1[1].gif 342 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c2_bg[1].gif 63 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c4[1].gif 181 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\c4[2].gif 181 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\cart-header-active[1].gif 1,29KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\desktop.ini 67 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\editorspick[1].gif 7,19KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\email[1].htm 23,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\gcc_electron[1].gif 1,19KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\global[1].css 3,03KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\help2[1].png 990 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\ie7[1].css 196 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\logo_visa[1].gif 1,22KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\m1[1].gif 45 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\m3[1].gif 570 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\mbox[1].js 23,57KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\menu[1].css 3,86KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\menu[2].css 3,86KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\pc-mag_feb_08[1].png 1,51KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\pcmag[1].png 10,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\p[1].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\p[2].gif 43 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\SmaMenStrings[1].xml 4,52KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\softonic_sd[1].png 8,74KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\spyware-doctor-antivirus_16x16[1].png 1,01KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\String[1].js 1,69KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\subbg[1].gif 902 bytes
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\txp1[1].js 3,76KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\url[1].bmp 1,05KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\weather[1].htm 24,39KB
C:\WINDOWS\TEMP\Fichiers Internet temporaires\Content.IE5\LIV4XQCF\whats_this[1].png 729 bytes
C:\WINDOWS\TEMP\History\History.IE5\desktop.ini 145 bytes
C:\WINDOWS\TEMP\History\History.IE5\index.dat 32,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_730.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_738.dat 16,00KB
C:\WINDOWS\TEMP\WGAErrLog.txt 483 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\Arabic.bin 20,48KB
C:\Documents and Settings\Admin\Local Settings\Temp\Czech.bin 23,74KB
C:\Documents and Settings\Admin\Local Settings\Temp\Danish.bin 22,24KB
C:\Documents and Settings\Admin\Local Settings\Temp\Dutch.bin 25,14KB
C:\Documents and Settings\Admin\Local Settings\Temp\English.bin 21,40KB
C:\Documents and Settings\Admin\Local Settings\Temp\Excel8.0\MSForms.exd 0,22MB
C:\Documents and Settings\Admin\Local Settings\Temp\Finnish.bin 22,32KB
C:\Documents and Settings\Admin\Local Settings\Temp\French.bin 26,60KB
C:\Documents and Settings\Admin\Local Settings\Temp\German.bin 25,14KB
C:\Documents and Settings\Admin\Local Settings\Temp\Greek.bin 24,49KB
C:\Documents and Settings\Admin\Local Settings\Temp\Hebrew.bin 19,09KB
C:\Documents and Settings\Admin\Local Settings\Temp\Hungarian.bin 25,46KB
C:\Documents and Settings\Admin\Local Settings\Temp\Italian.bin 26,77KB
C:\Documents and Settings\Admin\Local Settings\Temp\Japanese.bin 23,73KB
C:\Documents and Settings\Admin\Local Settings\Temp\jkos-Admin\binaries\FSSync.dll 37,50KB
C:\Documents and Settings\Admin\Local Settings\Temp\Korean.bin 19,66KB
C:\Documents and Settings\Admin\Local Settings\Temp\Norwegian.bin 21,44KB
C:\Documents and Settings\Admin\Local Settings\Temp\PMC\14028_633672254848125000_11.txt 1,22KB
C:\Documents and Settings\Admin\Local Settings\Temp\PMC\2960_633672254751250000_0.txt 251 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\PMC\2960_633672254845625000_1.txt 297 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\PMC\2960_633672254846875000_2.txt 250 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\Polish.bin 23,65KB
C:\Documents and Settings\Admin\Local Settings\Temp\Portuguese(Brazil).bin 24,48KB
C:\Documents and Settings\Admin\Local Settings\Temp\Portuguese.bin 25,64KB
C:\Documents and Settings\Admin\Local Settings\Temp\Russian.bin 25,51KB
C:\Documents and Settings\Admin\Local Settings\Temp\Set1.tmp 0,11MB
C:\Documents and Settings\Admin\Local Settings\Temp\Set14.tmp 0,11MB
C:\Documents and Settings\Admin\Local Settings\Temp\Set9.tmp 0,11MB
C:\Documents and Settings\Admin\Local Settings\Temp\SimChin.bin 16,02KB
C:\Documents and Settings\Admin\Local Settings\Temp\Spanish.bin 27,10KB
C:\Documents and Settings\Admin\Local Settings\Temp\SWEDISH.bin 23,52KB
C:\Documents and Settings\Admin\Local Settings\Temp\Thai.bin 21,46KB
C:\Documents and Settings\Admin\Local Settings\Temp\TradChin.bin 16,55KB
C:\Documents and Settings\Admin\Local Settings\Temp\Turkish.bin 21,72KB
C:\Documents and Settings\Admin\Local Settings\Temp\VBE\MSForms.exd 0,14MB
C:\Documents and Settings\Admin\Local Settings\Temp\VBE\RefEdit.exd 14,69KB
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn feed 0 3,63KB
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn update 358 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn upgrade status 109 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.windowslive.addbtn.btn upgrade status 109 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.windowslive.news.btn feed 0 1,76KB
C:\Documents and Settings\Admin\Local Settings\Temp\WLTB Custom Button Feeds\microsoft.windowslive.news.btn upgrade status 109 bytes
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd1.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd2.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd3.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd4.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd5.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd6.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd7.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\{51C87C22-15A9-433D-AD2A-837C72C3D30F}\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\bbrd8.bmp 0,66MB
C:\Documents and Settings\Admin\Local Settings\Temp\~DF1F5A.tmp 16,00KB
C:\Documents and Settings\Admin\Local Settings\Temp\~DF2885.tmp 16,00KB
C:\Documents and Settings\Admin\Local Settings\Temp\~DF5369.tmp 16,00KB
C:\Documents and Settings\Admin\Local Settings\Temp\~DFCE77.tmp 16,00KB
C:\WINDOWS\system32\wbem\Logs\FrameWork.log 19,51KB
C:\WINDOWS\system32\wbem\Logs\mofcomp.log 1,99KB
C:\WINDOWS\system32\wbem\Logs\wbemcore.log 14,12KB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 47,58KB
C:\WINDOWS\system32\wbem\Logs\wbemprox.log 460 bytes
C:\WINDOWS\system32\wbem\Logs\wmiadap.log 1,04KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 3,42KB
C:\WINDOWS\system32\wbem\Logs\wbemcore.lo_ 64,08KB
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\comsetup.log 10,22KB
C:\WINDOWS\FaxSetup.log 28,87KB
C:\WINDOWS\iis6.log 65,43KB
C:\WINDOWS\imsins.log 1,36KB
C:\WINDOWS\KB915800-v4.log 4,95KB
C:\WINDOWS\KB940157.log 24,56KB
C:\WINDOWS\KB943729.log 5,67KB
C:\WINDOWS\MedCtrOC.log 2,42KB
C:\WINDOWS\msgsocm.log 1,67KB
C:\WINDOWS\msmqinst.log 14,80KB
C:\WINDOWS\netfxocm.log 5,28KB
C:\WINDOWS\ntdtcsetup.log 7,39KB
C:\WINDOWS\ocgen.log 22,49KB
C:\WINDOWS\ocmsn.log 1,82KB
C:\WINDOWS\setupact.log 0 bytes
C:\WINDOWS\setupapi.log 0,12MB
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\tabletoc.log 1,21KB
C:\WINDOWS\tsoc.log 16,21KB
C:\WINDOWS\updspapi.log 459 bytes
C:\WINDOWS\imsins.BAK 1,36KB
C:\WINDOWS\ntbtlog.txt 0,15MB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 0,50MB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp 68,68KB
C:\WINDOWS\Debug\UserMode\userenv.log 8,36KB
C:\WINDOWS\SchedLgU.Txt 3,79KB
C:\WINDOWS\security\logs\scecomp.old 868 bytes
C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf 16,27KB
C:\WINDOWS\Prefetch\ASHDISP.EXE-0B874892.pf 25,21KB
C:\WINDOWS\Prefetch\ASHMAISV.EXE-12E27032.pf 72,70KB
C:\WINDOWS\Prefetch\ASHSERV.EXE-3B661600.pf 1,28KB
C:\WINDOWS\Prefetch\ASHWEBSV.EXE-0548EF0A.pf 21,13KB
C:\WINDOWS\Prefetch\AVAST.SETUP-032170A8.pf 58,51KB
C:\WINDOWS\Prefetch\CDSPEED.EXE-1B3E857C.pf 18,68KB
C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf 19,01KB
C:\WINDOWS\Prefetch\CTOOLBAR.EXE-30BB9B12.pf 23,22KB
C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf 18,35KB
C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf 15,64KB
C:\WINDOWS\Prefetch\DISKDOCTOR.EXE-1F701D19.pf 53,80KB
C:\WINDOWS\Prefetch\DRIVEDEFRAG.EXE-350E01A5.pf 54,36KB
C:\WINDOWS\Prefetch\DRVCTL.EXE-025D615A.pf 4,33KB
C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf 86,46KB
C:\WINDOWS\Prefetch\GOOGLEDESKTOP.EXE-3376B31F.pf 42,04KB
C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf 2,64KB
C:\WINDOWS\Prefetch\HELPCTR.EXE-3862B6F5.pf 61,65KB
C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf 57,02KB
C:\WINDOWS\Prefetch\HKCMD.EXE-1D05234B.pf 12,80KB
C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf 0,10MB
C:\WINDOWS\Prefetch\IGFXSRVC.EXE-2FB63FE8.pf 13,53KB
C:\WINDOWS\Prefetch\INTEGRATOR.EXE-0A7B7F59.pf 16,60KB
C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf 12,21KB
C:\WINDOWS\Prefetch\MEMOPTIMIZER.EXE-1E8AF6AD.pf 64,28KB
C:\WINDOWS\Prefetch\MMC.EXE-230DED8E.pf 36,30KB
C:\WINDOWS\Prefetch\MOBSYNC.EXE-173EDCEF.pf 19,83KB
C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf 13,21KB
C:\WINDOWS\Prefetch\MSIMN.EXE-38BA891D.pf 12,75KB
C:\WINDOWS\Prefetch\MSNTBUP.EXE-0D913FB9.pf 16,49KB
C:\WINDOWS\Prefetch\MSN_SL.EXE-18A18BC5.pf 25,34KB
C:\WINDOWS\Prefetch\NEROHOME.EXE-25AF858B.pf 33,76KB
C:\WINDOWS\Prefetch\NEROREMOTECTRLHANDLER.EXE-20002AA4.pf 20,77KB
C:\WINDOWS\Prefetch\NEROSTARTSMART.EXE-34F7076D.pf 61,28KB
C:\WINDOWS\Prefetch\NEROVISION.EXE-02880481.pf 44,36KB
C:\WINDOWS\Prefetch\NMINDEXSTORESVR.EXE-22A7DEEF.pf 33,81KB
C:\WINDOWS\Prefetch\NMTVWIZARD.EXE-371776A8.pf 44,48KB
C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf 16,73KB
C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf 1,13MB
C:\WINDOWS\Prefetch\ONECLICKSTARTER.EXE-31B195B2.pf 44,88KB
C:\WINDOWS\Prefetch\PCBOOST.EXE-3B119323.pf 18,99KB
C:\WINDOWS\Prefetch\PCTSGUI.EXE-281B8AB7.pf 41,27KB
C:\WINDOWS\Prefetch\PCTSSVC.EXE-3A239962.pf 37,37KB
C:\WINDOWS\Prefetch\PCTSTRAY.EXE-29391146.pf 41,64KB
C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf 15,64KB
C:\WINDOWS\Prefetch\REGISTRYDEFRAG.EXE-1F8BDCCD.pf 59,25KB
C:\WINDOWS\Prefetch\REGISTRYDEFRAGHELPER.EXE-21A4E51D.pf 43,85KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-147710F4.pf 28,08KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-311943EE.pf 20,43KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-3D97474F.pf 59,50KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-470F11BD.pf 18,63KB
C:\WINDOWS\Prefetch\RUNDLL32.EXE-47352368.pf 24,56KB
C:\WINDOWS\Prefetch\SDLOADER.EXE-21FADC9B.pf 15,00KB
C:\WINDOWS\Prefetch\SPEEDOPTIMIZER.EXE-1180577B.pf 68,14KB
C:\WINDOWS\Prefetch\SPYWARETERMINATOR.EXE-0C0A5116.pf 92,69KB
C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf 852 bytes
C:\WINDOWS\Prefetch\SYSOCMGR.EXE-31169C54.pf 50,08KB
C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf 18,14KB
C:\WINDOWS\Prefetch\TEATIMER.EXE-1F57E47A.pf 22,71KB
C:\WINDOWS\Prefetch\TUNEUPDEFRAGSERVICE.EXE-24FF2B48.pf 45,71KB
C:\WINDOWS\Prefetch\UPDATE.EXE-1A7E7F45.pf 43,13KB
C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf 17,43KB
C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf 17,49KB
C:\WINDOWS\Prefetch\WLLOGINPROXY.EXE-2D4B6027.pf 30,28KB
C:\WINDOWS\Prefetch\WMIADAP.EXE-2DF425B2.pf 23,21KB
C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf 66,44KB
C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf 10,40KB
C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf 47,48KB
C:\WINDOWS\Prefetch\ZCLIENTM.EXE-25C31104.pf 12,11KB
C:\WINDOWS\$NtUninstallKB915800-v4$\mimefilt.dll 29,00KB
C:\WINDOWS\$NtUninstallKB915800-v4$\nlhtml.dll 96,00KB
C:\WINDOWS\$NtUninstallKB915800-v4$\offfilt.dll 0,18MB
C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe 0,22MB
C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.inf 7,72KB
C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.txt 551 bytes
C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\updspapi.dll 0,37MB
C:\WINDOWS\$NtUninstallKB940157$\reg00005 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00006 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00007 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00015 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00017 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00019 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00022 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00027 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00028 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00029 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00030 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00031 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00032 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00033 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00042 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00048 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00049 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00052 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00053 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00054 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00059 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00069 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00085 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00086 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00087 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00088 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00089 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00091 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00104 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00105 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00106 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00107 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00108 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00109 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00121 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00132 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00139 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00140 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00141 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00142 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00143 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00147 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00148 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00153 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00178 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00221 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00231 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00235 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00236 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00237 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00238 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00422 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00423 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00424 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00427 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00442 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00443 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00545 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\reg00551 8,00KB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe 0,21MB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.inf 79,89KB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.txt 3,84KB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\updspapi.dll 0,38MB
C:\WINDOWS\$NtUninstallKB940157$\spuninst\wss_SpCustom.dll 0,25MB
C:\WINDOWS\$NtUninstallKB943729$\spuninst\spuninst.exe 0,21MB
C:\WINDOWS\$NtUninstallKB943729$\spuninst\spuninst.inf 12,26KB
C:\WINDOWS\$NtUninstallKB943729$\spuninst\spuninst.txt 434 bytes
C:\WINDOWS\$NtUninstallKB943729$\spuninst\updspapi.dll 0,38MB
C:\Documents and Settings\Admin\Application Data\Google\Local Search History\google%2Eweb.w 3,49KB
C:\Documents and Settings\Admin\Application Data\Sun\Java\Deployment\cache\6.0\45\18f20d2d-61a198e1 0,10MB
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\bin.clearspring.com\clearspring.sol 61 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\flvtools.spacash.com\ffc\flv_player_1227795738.swf\LiveFlvPlayerData.sol 57 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\fr.castyouporn.com\com.jeroenwijering.players.sol 66 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\fr.disneylandparis.be\_disney.sol 73 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\include.classistatic.com\include\c3js\classifieds\rel1\FLASH\getMachId.swf\mach_data.sol 177 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pan.fotovista.com\pixmania\grafx\fr\fr\home_univers\player\player5.swf\LaMemoireDuVolume.sol 58 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pan2.fotovista.com\pixmania\grafx\multipays\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pan3.fotovista.com\pixmania\grafx\multipays\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pan9.fotovista.com\pixmania\grafx\multipays\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pixmania.com\pixsettings.sol 96 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\pixmania.com\pixsettings_be.sol 99 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\rcapp.persgroep.be\epg.sol 90 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\rcapp.persgroep.be\poll\flash\swf\polling.swf\pollCookie561.sol 849 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\s.ytimg.com\soundData.sol 58 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\secureinclude.ebaystatic.com\ebayLSO.sol 160 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\secureinclude.ebaystatic.com\ebayT.sol 39 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\static.trialpay.com\swf\logo.swf\helpData.sol 119 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\wat.tv\images\v2.5\flash\player.swf\watPlayer.sol 60 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.dailymotion.com\flash\dmplayer\dmplayer-fr.swf\dmplayer.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.ikea.com\ms\flash\rooms_ideas\mpa\platform.swf\com.ikea.mpa.evolver_20083_evho01a.sol 90 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.ikea.com\ms\flash\rooms_ideas\mpa\platform.swf\com.ikea.mpa.twochoice_20081_itcs08a.sol 180 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.kewego.com\swf\p3\epix.swf\KewegoEPIX_userData.sol 277 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pinnaclesys.com\s_br.sol 35 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pixmania.com\dev\gui_web\shopping\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pixmania.com\dev\gui_web\shopping\flashAS\Mac_180_150.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\players\MX\v1\player_v1.4.swf\ph_options.sol 56 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\players\MX\v1\player_v1.5.1.swf\ph_options.sol 49 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\players\pornhub_2.swf\ph_options.sol 56 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\players\pornhub_embed_2.swf\ph_options.sol 49 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\xmoov_flv\player\index.php\xmoov.sol 36 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.pornhub.com\xmoov_flv\player\index.php\xmoov_younoob.sol 73 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.redtube.com\_playerx\flash\client_players\redtube\xmoov-flv-player3.swf\xmoov.sol 78 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\#SharedObjects\G8HKWC63\www.redtube.com\_playerx\flash\client_players\redtube\xmoov-flv-player3.swf\xmoov_redtube_original.sol 78 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flvtools.spacash.com\settings.sol 90 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.castyouporn.com\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.disneylandparis.be\settings.sol 91 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#include.classistatic.com\settings.sol 94 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan.fotovista.com\settings.sol 87 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan2.fotovista.com\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan3.fotovista.com\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan9.fotovista.com\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pixmania.com\settings.sol 82 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#rcapp.persgroep.be\settings.sol 88 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol 81 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secureinclude.ebaystatic.com\settings.sol 98 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.trialpay.com\settings.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#wat.tv\settings.sol 76 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ikea.com\settings.sol 82 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.kewego.com\settings.sol 84 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pinnaclesys.com\settings.sol 89 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pixmania.com\settings.sol 86 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pornhub.com\settings.sol 85 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.redtube.com\settings.sol 85 bytes
C:\Documents and Settings\Admin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 819 bytes
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.090102-0005.log 241 bytes
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.090102-0026.txt 2,00KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.log 14,25KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Statistics.ini 0 bytes
------------------------------------------------------------------------------------------
[ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\TB.txt: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\Admin\Bureau\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Admin\Mes documents\fichier analyse virus\TB.txt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\Admin\Bureau\ToolBarSD.exe: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\TB.txt: supprimé !
C:\Documents and Settings\Admin\Mes documents\fichier analyse virus\TB.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Toolbar SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Re ptit question es que antivir security suite pour 39,95€ à tous meme un firewall et anti spam ou je garde antir prémium et malwaresbytes et je prend la protection merci
marc

Re Marc

... Une dernière pour la route, mais très importante !!!
* Ferme toutes les applications en cours, puis télécharge ToolsCleaner (de A.Rothstein et Dj Quiou) sur ton Bureau :

Double clique sur ToolsCleaner2.exe -> clique sur -> Recherche et laisse le scan se terminer.
Clique sur -> Suppression pour finaliser
Clique sur -> Quitter, pour que le rapport puisse se créer.
Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
Note : ton bureau va disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

Ctrl+Alt+Supp pour ouvrir le Gestionnaire des tâches.
Puis rends toi à l'onglet "Processus", clique en haut à gauche sur "Fichiers" et choisis "Exécuter"
Tape : explorer.exe et valide. Cela fera ré-apparaître ton Bureau.
.
** Tu peux par contre, garder Malwarebytes'Anti-malware et CCleaner. Utilise CCleaner tous les soirs avant de couper le PC (ne prends que quelques secondes!)

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

J'aimerais que tu fasses une petite chose pour moi; modifie le titre de ton sujet. Comme on connait l'infection,
je te propose de le modifier afin de faciliter la lecture et la recherche, pour tous les autres astuciens/nes.

Replace-toi sur ton premier message du sujet, clique sur ce bouton -> et modifie ton titre de cette manière :
GameBar/Crawler et clique sur "Publier le message". Merci!

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

Il est fortement recommandé d'avoir tous ses logiciels de sécurité à jour, afin d'éviter les failles par lesquelles s'engouffrent les infections.

Pour suivre l'évolution des mises à jour de quelques logiciels de protection, ainsi que de Java : https://forum.pcastuces.com/sujet.asp?f=25&s=25842

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

/!\ Maintenant que ton PC n'est plus infecté, désactive la "Restauration du système" afin de créer un point de restauration sain.

Pour désactiver ou activer la Restauration du système, tu dois ouvrir une session Administrateur sous Windows XP.

Désactivation :
Clique droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > coche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok.

Ré-activation :
Suivre le même chemin ; décoche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok. Redémarre l'ordinateur.

Comment faire pour : https://forum.pcastuces.com/desactiver_la_restauration_systeme-f31s7.htm

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

Je te conseille de défragmenter ton PC : http://www.coupdepoucepc.com/modules/news/article.php?storyid=218

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

/!\ Pour améliorer la sécurité de ton PC, prends quelques instants pour lire...

Sécuriser son PC +WIFI (versions "hot" & "light") : https://forum.pcastuces.com/default.asp

Prévention et protection - Comment vous prémunir : https://forum.pcastuces.com/sujet.asp?f=25&s=36131

Les risques sécuritaires du peer-to-peer en 10 points : http://www.libellules.ch/...

Pourquoi éviter le P2P ? Point législatif et dangers : http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=1793

LE CRACK dans toute sa splendeur : http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=65

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

... Pour Antivir, tu peux garder la version " Free ", pas de problème
... Pour MalwareBytes', il faut suivre ses mises à jour ( lien plus haut ), et scanner une fois par semaine ta machine

Tu peux marquer ton sujet comme résolu, si tu le souhaites
Bonne continuation, et merci de nous avoir fait confiance

Re ok ca va et quoi maintenant plus de virus plus problème détecté pour toi.
Et pour antivir c'est mieux d'acheté la version à 20€ c'elle ci que tu ma conseillé est suffisante et pour les malwaresbytes c'est protection complet celle qui payer c'est mieux pour toi
Merci à toi pour tes infos et d'avoir pris de ton temps pour résoudre mon ptit pépin.

Marc

Bonsoir

... C'est pas mal !
Comment se comporte ta machine ?

A te lire

** Faites ce que l'on vous dit : pas plus, pas moins **
** Allez jusqu'au bout de la désinfection, même si vous notez une amélioration rapide **

RE j ai fait une analyse avec malwarebytes voici rapport sorry pas réponse après parce que je vais travaillé puffff
Malwarebytes' Anti-Malware 1.32
Version de la base de données: 1643
Windows 5.1.2600 Service Pack 3

12/01/2009 13:15:27
mbam-log-2009-01-12 (13-15-24).txt

Type de recherche: Examen complet (C:\|F:\|G:\|)
Eléments examinés: 131026
Temps écoulé: 28 minute(s), 52 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> No action taken.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

bonjour
voici les analyses éffectué mode sans echec et normalement
merci marc

Avira AntiVir Personal
Report file date: lundi 12 janvier 2009 08:59

Scanning for 1180145 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Save mode
Username: Admin
Computer name: XPSP2-507301392

Version information:
BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:26
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24/12/2008 22:33:56
ANTIVIR2.VDF : 7.1.1.88 726528 Bytes 8/01/2009 22:33:59
ANTIVIR3.VDF : 7.1.1.97 111104 Bytes 11/01/2009 22:34:00
Engineversion : 8.2.0.54
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56
AESCRIPT.DLL : 8.1.1.24 340348 Bytes 11/01/2009 22:34:07
AESCN.DLL : 8.1.1.5 123251 Bytes 7/11/2008 15:06:41
AERDL.DLL : 8.1.1.3 438645 Bytes 4/11/2008 13:58:38
AEPACK.DLL : 8.1.3.5 393588 Bytes 11/01/2009 22:34:06
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 11/01/2009 22:34:05
AEHEUR.DLL : 8.1.0.78 1532280 Bytes 11/01/2009 22:34:05
AEHELP.DLL : 8.1.2.0 119159 Bytes 11/01/2009 22:34:02
AEGEN.DLL : 8.1.1.8 323956 Bytes 11/01/2009 22:34:01
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
AECORE.DLL : 8.1.5.2 172405 Bytes 11/01/2009 22:34:00
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 9/07/2008 08:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15
AVREG.DLL : 8.0.0.1 33537 Bytes 9/05/2008 11:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, F:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: lundi 12 janvier 2009 08:59

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'F:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '58' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
Begin scan in 'F:\' <Nouveau nom>

End of the scan: lundi 12 janvier 2009 09:41
Used time: 41:17 Minute(s)

The scan has been done completely.

6967 Scanning directories
421120 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
421119 Files not concerned
2603 Archives were scanned
2 Warnings
0 Notes

Avira AntiVir Personal
Report file date: lundi 12 janvier 2009 09:54

Scanning for 1180145 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: XPSP2-507301392

Version information:
BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:26
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24/12/2008 22:33:56
ANTIVIR2.VDF : 7.1.1.88 726528 Bytes 8/01/2009 22:33:59
ANTIVIR3.VDF : 7.1.1.97 111104 Bytes 11/01/2009 22:34:00
Engineversion : 8.2.0.54
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56
AESCRIPT.DLL : 8.1.1.24 340348 Bytes 11/01/2009 22:34:07
AESCN.DLL : 8.1.1.5 123251 Bytes 7/11/2008 15:06:41
AERDL.DLL : 8.1.1.3 438645 Bytes 4/11/2008 13:58:38
AEPACK.DLL : 8.1.3.5 393588 Bytes 11/01/2009 22:34:06
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 11/01/2009 22:34:05
AEHEUR.DLL : 8.1.0.78 1532280 Bytes 11/01/2009 22:34:05
AEHELP.DLL : 8.1.2.0 119159 Bytes 11/01/2009 22:34:02
AEGEN.DLL : 8.1.1.8 323956 Bytes 11/01/2009 22:34:01
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
AECORE.DLL : 8.1.5.2 172405 Bytes 11/01/2009 22:34:00
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 9/07/2008 08:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15
AVREG.DLL : 8.0.0.1 33537 Bytes 9/05/2008 11:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, F:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: lundi 12 janvier 2009 09:54

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'searchfilterhost.exe' - '1' Module(s) have been scanned
Scan process 'searchprotocolhost.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'WindowsSearch.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'PcBoost.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'hkcmd.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'searchindexer.exe' - '1' Module(s) have been scanned
Scan process 'TUProgSt.exe' - '1' Module(s) have been scanned
Scan process 'TosBtSrv.exe' - '1' Module(s) have been scanned
Scan process 'HPZipm12.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'lxdvcoms.exe' - '1' Module(s) have been scanned
Scan process 'lxdvserv.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
38 processes with 38 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'F:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '56' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
Begin scan in 'F:\' <Nouveau nom>

End of the scan: lundi 12 janvier 2009 10:18
Used time: 23:52 Minute(s)

The scan has been done completely.

7318 Scanning directories
442264 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
442263 Files not concerned
2691 Archives were scanned
2 Warnings
0 Notes

Re, juste de passage avant dodo

... Tu peux désinstaller tes deux antimalwares via " ajout / suppression de programmes "

Tu peux si tu le souhaites suivre MalwareBytes' ( gratuit, sans protection résidente, mais oui en le payant )

C'est ci dessous que cela se passe :
https://forum.pcastuces.com/maj_logiciels_de_securite-f25s25842.htm
Tuto :
https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm

... Heummm, pour un antivirus free Antivir ( maintenant en français ) :
Désinstalle Avast
https://www.avast.com/fr-fr/uninstall-utility

Télécharger Antivir :
https://www.pcastuces.com/logitheque/antivir.htm

Installer/Configurer Antivir :
https://www.malekal.com/avira-free-security-antivirus-gratuit/

A demain, j'ai pas terminé avec toi // Bonne nuit , moi je suis HS => dodo

j'ai oublier comme j'ai 2 antispywares que dois je bougé spyware doctor et spywares terminator et comme bon antivirus que dois je mettre meilleur gratuit ou un payant merci pour l 'info marc

Re bonsoir me voici sorry pour retard voici le rapport
BitDefender Online Scanner

Rapport d'analyse généré à: Sun, Jan 11, 2009 - 22:07:39

Voie d'analyse: A:\;C:\;D:\;E:\;F:\;G:\;

Statistiques

Temps
00:17:35

Fichiers
87475

Directoires
7331

Secteurs de boot
0

Archives
1135

Paquets programmes
5796

Résultats

Virus identifiés
1

Fichiers infectés
2

Fichiers suspects
0

Avertissements
0

Désinfectés
0

Fichiers effacés
2

Info sur les moteurs

Définition virus
2435930

Version des moteurs
AVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008 17:19:14)

Analyse des plugins
17

Archive des plugins
45

Unpack des plugins
7

E-mail plugins
6

Système plugins
4

Paramètres d'analyse

Première action
Désinfecté

Seconde Action
Supprimé

Heuristique
Oui

Acceptez les avertissements
Oui

Extensions analysées
exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;

Excludez les extensions

Analyse d'emails
Oui

Analyse des Archives
Oui

Analyser paquets programmes
Oui

Analyse des fichiers
Oui

Analyse de boot
Oui

Fichier analysé
Statut

C:\Program Files\Pinnacle\MediaCenter\Install\DivXPlayer\DivXPlay_ISV.exe
Infecté par: DeepScan:Generic.Zlob.7.F2F715B7

C:\Program Files\Pinnacle\MediaCenter\Install\DivXPlayer\DivXPlay_ISV.exe
Echec de la désinfection

C:\Program Files\Pinnacle\MediaCenter\Install\DivXPlayer\DivXPlay_ISV.exe
Supprimé

C:\System Volume Information\_restore{CA4AF5D0-2410-49B7-8D9B-315309C3F7E9}\RP213\A0053017.exe
Infecté par: DeepScan:Generic.Zlob.7.F2F715B7

C:\System Volume Information\_restore{CA4AF5D0-2410-49B7-8D9B-315309C3F7E9}\RP213\A0053017.exe
Echec de la désinfection

C:\System Volume Information\_restore{CA4AF5D0-2410-49B7-8D9B-315309C3F7E9}\RP213\A0053017.exe
Supprimé

Bonsoir

... Nous continuons
Attention, tu as deux antispywares intallés, il y en a un de trop !

... Déconnecte toi du Web
Ferme toutes tes applications
Lance HijackThis pour un " do a system scan only "
Coche à gauche les lignes ci dessous :

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)

Clique en bas sur " Fix checked "

... Ensuite, passe moi ce scanner en ligne :
https://www.bitdefender.fr/
Pas d'installation, mais juste utiliser la fonction : scanner

Tuto en image : https://forum.pcastuces.com/default.asp

Bonne réception, et à te lire avec le rapport du scanner BitDefender

voici merci

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:34:24, on 11/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdvserv.exe
C:\WINDOWS\system32\lxdvcoms.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\PcBoost\PcBoost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Pinnacle\Shared Files\Programs\PclePvr\VideoControl.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [PcBoost] "C:\Program Files\PcBoost\PcBoost.exe" /start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Pinnacle WebUpdater] "C:\Program Files\Pinnacle\Shared Files\Programs\WebUpdater\WebUpdater.exe" -s -f=UpdateVersion.xml -url=http://cdn.pinnaclesys.com/SupportFiles
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.be/ImageUploader5.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} - http://www.extrafilm.be/ImageUploader4.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxdvCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdvserv.exe
O23 - Service: lxdv_device - - C:\WINDOWS\system32\lxdvcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

Re / OK

... Puis-je avoir un nouveau log HijackThis / STP