Win 32

missysoso77 -  
bonsoir ,
Je n'arrive pas à installer certaine application sur mon ordinateur , un message d'erreur " win32 n'est pas une application valide" apparait . Cela commence vraiment à devenir un probleme car nod32 et itunes ne veulent pas s'installer .
Aider moi ! Merci d'avance
Configuration: Windows Vista Internet Explorer 7.0

32 réponses

Résumé de la discussion

Plusieurs utilisateurs rencontrent l’erreur l’erreur win32 n’est pas une application valide lors de l’installation d’applications sur Windows Vista, empêchant des programmes comme NOD32 et iTunes de s’exécuter. Les réponses proposées incluent l’utilisation d’outils de détection et de nettoyage comme GenProc et HijackThis, puis le partage des rapports et la recommandation d’exécuter des scans en mode normal. Des échanges successifs décrivent l’analyse des rapports d’infection potentielle, le nettoyage des éléments indésirables dans le registre et les fichiers temporaires, puis la collecte de rapports Nod32 comme étape de confirmation. D'autres échanges précisent que, lorsque des infections réelles sont détectées, la désactivation temporaire de certaines protections peut être évoquée, mais la discussion ne tranche pas sur l’état final du fil.

Bobot (l’IA à votre service)
  1. Narco!4 Contributeur
    Bonjour,

    télécharge GenProc http://www.genproc.com/GenProc.exe

    double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre
    2. Trying2 Contributeur sécurité
      Hello à tous,

      @Narco4: Si tu trouves une info ou deux ici...

      Bonne continuation.
      Bye.
      3. missysoso77 Auteur
        arrivé à 99 % le site me dit qu'il y a eu une erreur :/
        2. missysoso77 Auteur
          voila le rapport :

          ComboFix 09-08-01.06 - Sonia 02/08/2009 13:42.1.2 - NTFSx86
          Microsoft® Windows Vista™ Édition Familiale Basique 6.0.6001.1.1252.33.1036.18.2942.1875 [GMT 2:00]
          Running from: c:\users\Sonia\Desktop\ComboFix.exe
          SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
          .

          ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
          .

          c:\$recycle.bin\S-1-5-21-2373954164-2419952531-494492721-500
          c:\$recycle.bin\S-1-5-21-2908564048-2523520018-2590238898-500
          c:\$recycle.bin\S-1-5-21-379578684-575248035-2863804450-1000

          .
          ((((((((((((((((((((((((( Files Created from 2009-07-02 to 2009-08-02 )))))))))))))))))))))))))))))))
          .

          2009-08-02 11:31 . 2009-08-02 11:31 -------- d-----w- c:\programdata\Apple
          2009-08-02 11:31 . 2009-08-02 11:31 -------- d-----w- c:\program files\Apple Software Update
          2009-08-02 10:33 . 2007-05-02 14:31 90624 ----a-w- c:\windows\system32\nmwcdcls.dll
          2009-08-02 10:33 . 2009-08-02 10:33 -------- d-----w- c:\program files\DIFX
          2009-08-02 10:33 . 2007-09-17 13:53 21632 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
          2009-08-02 10:33 . 2009-08-02 10:33 -------- dc----w- c:\windows\system32\DRVSTORE
          2009-08-02 10:32 . 2009-03-20 08:01 90112 ----a-w- c:\windows\system32\drivers\ss_bbus.sys
          2009-08-02 10:32 . 2009-03-20 08:01 14976 ----a-w- c:\windows\system32\drivers\ss_bmdfl.sys
          2009-08-02 10:32 . 2009-03-20 08:01 121856 ----a-w- c:\windows\system32\drivers\ss_bmdm.sys
          2009-08-02 10:32 . 2009-03-20 08:01 12160 ----a-w- c:\windows\system32\drivers\ss_bwhnt.sys
          2009-08-02 10:32 . 2009-03-20 08:01 12160 ----a-w- c:\windows\system32\drivers\ss_bwh.sys
          2009-08-02 10:32 . 2009-03-20 08:01 12160 ----a-w- c:\windows\system32\drivers\ss_bcmnt.sys
          2009-08-02 10:32 . 2009-03-20 08:01 12160 ----a-w- c:\windows\system32\drivers\ss_bcm.sys
          2009-08-02 10:32 . 2009-03-31 07:39 36608 ----a-w- c:\windows\system32\FsUsbExDisk.Sys
          2009-08-02 10:32 . 2009-03-31 07:39 233472 ----a-w- c:\windows\system32\FsUsbExService.Exe
          2009-08-02 10:32 . 2009-03-31 07:39 110592 ----a-w- c:\windows\system32\FsUsbExDevice.Dll
          2009-08-02 10:31 . 2009-08-02 10:31 -------- d-----w- c:\program files\MarkAny
          2009-08-02 10:29 . 2009-08-02 10:29 -------- d-----w- c:\users\Sonia\AppData\Local\Downloaded Installations
          2009-08-01 22:34 . 2009-08-01 22:34 -------- d-----w- c:\windows\Sun
          2009-08-01 21:59 . 2009-08-01 21:59 -------- d-----w- c:\program files\ESET
          2009-08-01 21:30 . 2009-08-01 21:30 -------- d-----w- c:\program files\Trend Micro
          2009-08-01 21:14 . 2009-08-02 07:34 -------- d-----w- C:\ToolBar SD
          2009-08-01 20:58 . 2009-08-01 21:11 -------- d-----w- c:\program files\Navilog1
          2009-08-01 20:33 . 2009-08-02 11:24 -------- d-----w- C:\FindyKill
          2009-08-01 20:30 . 2009-08-01 20:44 -------- d-----w- C:\GenProc
          2009-08-01 19:58 . 2009-08-01 19:58 -------- d-----w- c:\users\Sonia\AppData\Local\HP
          2009-08-01 19:05 . 2009-08-01 19:05 -------- d-----w- c:\program files\4Media
          2009-08-01 14:51 . 2009-08-01 14:51 -------- d-----w- c:\users\Sonia\AppData\Roaming\WindSolutions
          2009-07-31 16:43 . 2009-07-31 16:43 -------- dcsh--w- c:\program files\Common Files\WindowsLiveInstaller
          2009-07-31 16:43 . 2009-07-31 16:43 -------- d-----w- c:\program files\Windows Live
          2009-07-31 16:42 . 2009-07-31 16:55 -------- d-----w- c:\programdata\WLInstaller
          2009-07-27 20:45 . 2009-07-27 20:45 -------- d-----w- c:\users\Sonia\AppData\Roaming\Spacejock Software
          2009-07-27 18:06 . 2009-07-29 18:58 -------- d-----w- c:\users\Sonia\AppData\Roaming\IDM
          2009-07-27 11:52 . 2009-07-27 11:52 -------- d-----w- c:\program files\FP
          2009-07-27 11:03 . 2009-07-29 18:58 -------- d-----w- c:\users\Sonia\AppData\Roaming\DMCache
          2009-07-26 19:06 . 2009-07-26 19:06 -------- d-----w- c:\users\Sonia\AppData\Roaming\BitSpirit
          2009-07-26 18:34 . 2009-07-26 18:34 -------- d-----w- c:\users\Sonia\AppData\Local\Ares
          2009-07-24 14:09 . 2009-07-24 14:09 -------- d-----w- c:\programdata\Azureus
          2009-07-24 14:09 . 2009-08-01 21:15 -------- d-----w- c:\users\Sonia\AppData\Roaming\Azureus
          2009-07-24 13:46 . 2009-07-24 13:46 -------- d-----w- c:\program files\DivX
          2009-07-23 11:34 . 2009-07-31 08:26 -------- d-----w- c:\programdata\eMule
          2009-07-23 11:34 . 2009-07-31 08:26 -------- d-----w- c:\users\Sonia\AppData\Local\eMule
          2009-07-22 12:33 . 2009-07-22 12:33 -------- d-----w- c:\users\Sonia\AppData\Local\Deployment
          2009-07-22 12:33 . 2009-07-22 12:33 -------- d-----w- c:\users\Sonia\AppData\Local\Apps
          2009-07-20 19:06 . 2009-07-21 11:36 -------- d-----w- c:\program files\Free Download Manager
          2009-07-20 14:30 . 2009-07-24 13:47 -------- d-----w- c:\program files\Google
          2009-07-20 14:02 . 2009-07-22 10:57 -------- d-----w- c:\programdata\NOS
          2009-07-20 14:02 . 2009-07-22 10:57 -------- d-----w- c:\program files\NOS
          2009-07-09 15:54 . 2009-07-09 15:54 -------- d-----w- c:\programdata\PC Suite
          2009-07-09 15:54 . 2009-07-09 15:54 -------- d-----w- c:\users\Sonia\AppData\Roaming\PC Suite
          2009-07-04 17:38 . 2009-08-02 10:33 -------- d-----w- c:\program files\PC Connectivity Solution

          .
          (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
          .
          2009-08-02 11:22 . 2008-08-26 20:24 442628 ----a-w- c:\windows\system32\perfc00C.dat
          2009-08-02 11:22 . 2008-08-26 20:24 1621466 ----a-w- c:\windows\system32\perfh00C.dat
          2009-08-02 10:33 . 2008-12-25 07:57 -------- d-----w- c:\program files\Samsung
          2009-08-02 10:31 . 2008-08-26 10:56 -------- d--h--w- c:\program files\InstallShield Installation Information
          2009-08-02 10:21 . 2008-12-25 12:14 -------- d-----w- c:\program files\Spyware Terminator
          2009-08-02 10:19 . 2009-02-06 10:17 -------- d-----w- c:\users\Sonia\AppData\Roaming\vlc
          2009-08-02 10:19 . 2009-06-08 10:46 -------- d-----w- c:\users\Sonia\AppData\Roaming\dvdcss
          2009-08-02 10:19 . 2008-12-27 12:54 -------- d-----w- c:\programdata\Spybot - Search & Destroy
          2009-08-02 10:19 . 2008-12-26 16:03 -------- d-----w- c:\program files\DAEMON Tools Toolbar
          2009-08-02 10:19 . 2008-12-25 12:14 -------- d-----w- c:\programdata\Spyware Terminator
          2009-08-02 10:19 . 2008-08-26 11:06 -------- d-----w- c:\programdata\muvee Technologies
          2009-08-02 08:03 . 2008-12-25 12:14 -------- d-----w- c:\users\Sonia\AppData\Roaming\Spyware Terminator
          2009-07-12 13:09 . 2008-12-26 09:31 330 ----a-w- c:\users\Sonia\AppData\Roaming\wklnhst.dat
          2009-07-04 17:39 . 2009-01-15 19:08 -------- d-----w- c:\users\Sonia\AppData\Roaming\Samsung
          2008-08-26 20:38 . 2008-08-26 20:38 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
          .

          ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
          .
          .
          *Note* empty entries & legit default entries are not shown
          REGEDIT4

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
          "HPAdvisor"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2008-07-03 972080]
          "Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 360448]
          "E06FXLRD_1771734"="c:\program files\Microsoft Encarta\Collection Microsoft Encarta 2006 DVD\EDICT.EXE" [2005-06-04 301776]
          "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]
          "AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2009-04-02 102400]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
          "hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 65536]
          "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-22 13539872]
          "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-22 92704]
          "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-02 75008]
          "DPService"="c:\program files\HP\DVDPlay\DPService.exe" [2008-06-11 90112]
          "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_01\bin\jusched.exe" [2007-04-07 132760]
          "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
          "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]

          [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
          "EnableLUA"= 0 (0x0)
          "EnableUIADesktopToggle"= 0 (0x0)
          "HideFastUserSwitching"= 0 (0x0)

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
          "aux"=wdmaud.drv

          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
          @="Service"

          [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
          "DisableMonitoring"=dword:00000001

          [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
          "DisableMonitoring"=dword:00000001

          [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
          "DisableMonitoring"=dword:00000001

          [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
          "AntiSpywareOverride"=dword:00000001

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
          "{A49E70DD-C56A-4CBA-836A-81F7233A523E}"= c:\program files\HP\DVDPlay\DVDPlay.exe:DVD Play
          "{50F67E86-7DDD-4527-81CB-F3A6865A0983}"= c:\program files\HP\DVDPlay\DPService.exe:DVD Play Resident Program
          "{63A82F3F-D06E-4A04-A85C-EE77EAB60F63}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
          "{39E9487A-3C78-4188-B2EB-CE27480D5148}"= UDP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:Sony Ericsson Media Manager 1.1
          "{78F6AE29-AF79-4926-9FEA-E98D3C23CDEE}"= TCP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:Sony Ericsson Media Manager 1.1
          "{C3C65A77-0B0B-46E3-B5C6-18C0769E71BE}"= UDP:c:\program files\Samsung\Samsung New PC Studio\npsasvr.exe:KTF MUSIC AoD Server
          "{EC7E058A-38C5-4E87-8112-AED9D742A2AA}"= TCP:c:\program files\Samsung\Samsung New PC Studio\npsasvr.exe:KTF MUSIC AoD Server
          "{295FE4C7-ABD9-4113-ADCC-A4E8DDBB0D79}"= UDP:c:\program files\Samsung\Samsung New PC Studio\npsvsvr.exe:KTF MUSIC VoD Server
          "{E92AE534-36AF-4638-968F-616B57CD5D12}"= TCP:c:\program files\Samsung\Samsung New PC Studio\npsvsvr.exe:KTF MUSIC VoD Server

          R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\System32\drivers\sp_rsdrv2.sys [25/12/2008 14:14 142464]
          R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21/01/2008 04:33 21504]
          R2 FsUsbExService;FsUsbExService;c:\windows\System32\FsUsbExService.Exe [02/08/2009 12:32 233472]
          R3 FsUsbExDisk;FsUsbExDisk;c:\windows\System32\FsUsbExDisk.Sys [02/08/2009 12:32 36608]
          R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\System32\drivers\ss_bbus.sys [02/08/2009 12:32 90112]
          R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\System32\drivers\ss_bmdfl.sys [02/08/2009 12:32 14976]
          R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\System32\drivers\ss_bmdm.sys [02/08/2009 12:32 121856]
          S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\magix\Common\Database\bin\fbserver.exe [03/02/2009 22:32 1527900]

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
          LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc

          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
          ezSharedSvc
          .
          Contents of the 'Scheduled Tasks' folder

          2009-08-02 c:\windows\Tasks\User_Feed_Synchronization-{6CE793BF-5885-41FE-B86D-17CC3087304E}.job
          - c:\windows\system32\msfeedssync.exe [2008-01-21 02:34]
          .
          - - - - ORPHANS REMOVED - - - -

          HKLM-Run-NPSStartup - (no file)

          .
          ------- Supplementary Scan -------
          .
          uStart Page = hxxp://www.google.fr/
          mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=84&bd=Presario&pf=cndt
          IE: &Recherche AOL Toolbar - c:\programdata\AOL\ieToolbar\resources\fr-FR\local\search.html
          TCP: {1EA064FB-4276-4940-9BED-AD107A98E568} = 62.201.129.99
          .

          **************************************************************************

          catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2009-08-02 13:46
          Windows 6.0.6001 Service Pack 1 NTFS

          scanning hidden processes ...

          scanning hidden autostart entries ...

          scanning hidden files ...

          scan completed successfully
          hidden files: 0

          **************************************************************************
          .
          --------------------- LOCKED REGISTRY KEYS ---------------------

          [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
          @Denied: (A) (Users)
          @Denied: (A) (Everyone)
          @Allowed: (B 1 2 3 4 5) (S-1-5-20)
          "BlindDial"=dword:00000000
          .
          --------------------- DLLs Loaded Under Running Processes ---------------------

          - - - - - - - > 'Explorer.exe'(2392)
          c:\program files\Samsung\Samsung New PC Studio\NPSArbiter.dll
          c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          .
          Completion time: 2009-08-02 13:48
          ComboFix-quarantined-files.txt 2009-08-02 11:48

          Pre-Run: 214 243 618 816 octets libres
          Post-Run: 214 364 299 264 octets libres

          185
          1. Narco!4 Contributeur
            [*] Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
            [*] Double clique combofix.exe et suis les instructions.
            [*] Installe la console de récupération si proposé et continue.
            [*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

            NOTE : Le rapport se trouve également ici : C:\Combofix.txt
            1. missysoso77 Auteur
              le site ne marche pas , quand je veut faire la mise à jour , peut etre que je peut te posté le rapport de spyware terminator ?
              3. missysoso77 Auteur
                je réessaye , on vera bien si sa marche , j'espere que tu est toujours là ...
                1. missysoso77 Auteur
                  Le scan me dit qu'il est impossible de faire la mise à jour , vérifier les paramétres proxy
                  1. Narco!4 Contributeur
                    Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
                    - coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
                    C:\Program Files\EsetOnlineScanner\log.txt
                    2. missysoso77 Auteur
                      Rapport GenProc 2.610 [4] - 01/08/2009 à 23:42:40
                      @ Windows Vista Service Pack 1 - Mode normal
                      @ Internet Explorer (7.0.6001.18000) [Navigateur par défaut]

                      GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

                      Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
                      - coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
                      C:\Program Files\EsetOnlineScanner\log.txt

                      ~~~~ INFORMATION COMPLEMENTAIRE ~~~~

                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 23:43:54, on 01/08/2009
                      Platform: Windows Vista SP1 (WinNT 6.00.1905)
                      MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                      Boot mode: Normal

                      Running processes:
                      C:\Windows\system32\Dwm.exe
                      C:\Windows\Explorer.EXE
                      C:\Windows\system32\taskeng.exe
                      C:\Fraps\fraps.exe
                      C:\Program Files\Windows Defender\MSASCui.exe
                      C:\hp\support\hpsysdrv.exe
                      C:\Windows\System32\rundll32.exe
                      C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                      C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                      C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
                      C:\Program Files\Windows Sidebar\sidebar.exe
                      C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
                      C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
                      C:\Program Files\Microsoft Encarta\Collection Microsoft Encarta 2006 DVD\EDICT.EXE
                      C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
                      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NewPCStudio.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSToolboxAdd.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSStageSync.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSAlarm.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSDM.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSCM.exe
                      C:\Windows\system32\wbem\unsecapp.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSNotifyClient.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSPhonebook.exe
                      C:\Program Files\Samsung\Samsung New PC Studio\NPSInternetConnector.exe
                      C:\Windows\system32\cmd.exe
                      C:\Windows\system32\conime.exe
                      C:\Windows\system32\SearchFilterHost.exe
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\GenProc\outil\Sonia_GenProc.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.gdark.com
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.gdark.com
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.gdark.com
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://fr.gdark.com
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://fr.gdark.com
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.gdark.com
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                      R3 - Default URLSearchHook is missing
                      F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
                      O1 - Hosts: ::1 localhost
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                      O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
                      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
                      O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
                      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                      O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
                      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                      O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                      O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
                      O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                      O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                      O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
                      O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
                      O4 - HKCU\..\Run: [E06FXLRD_1771734] "C:\Program Files\Microsoft Encarta\Collection Microsoft Encarta 2006 DVD\EDICT.EXE" -m
                      O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                      O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
                      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                      O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
                      O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                      O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                      O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
                      O13 - Gopher Prefix:
                      O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{0C231950-EDDC-40A4-9A14-873E36B1105C}: NameServer = 62.201.129.99
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{B7D8C22F-31C6-4373-B68B-BED90056FC0C}: NameServer = 62.201.129.99
                      O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
                      O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
                      O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                      O23 - Service: Service Google Update (gupdate1ca0c652b1c7560) (gupdate1ca0c652b1c7560) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
                      O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
                      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                      O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
                      1. missysoso77 Auteur
                        voilà le rapport hijackthis

                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 23:31:03, on 01/08/2009
                        Platform: Windows Vista SP1 (WinNT 6.00.1905)
                        MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                        Boot mode: Normal

                        Running processes:
                        C:\Windows\system32\Dwm.exe
                        C:\Windows\system32\taskeng.exe
                        C:\Windows\Explorer.EXE
                        C:\Windows\system32\taskeng.exe
                        C:\Program Files\Windows Defender\MSASCui.exe
                        C:\hp\support\hpsysdrv.exe
                        C:\Windows\System32\rundll32.exe
                        C:\Fraps\fraps.exe
                        C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                        C:\Program Files\Windows Sidebar\sidebar.exe
                        C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
                        C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
                        C:\Program Files\Microsoft Encarta\Collection Microsoft Encarta 2006 DVD\EDICT.EXE
                        C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NewPCStudio.exe
                        C:\Windows\system32\wbem\unsecapp.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSToolboxAdd.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSStageSync.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSAlarm.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSDM.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSCM.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSNotifyClient.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSPhonebook.exe
                        C:\Program Files\Samsung\Samsung New PC Studio\NPSInternetConnector.exe
                        C:\Program Files\Hewlett-Packard\HP Advisor\SSDK04.exe
                        C:\Program Files\Internet Explorer\ieuser.exe
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
                        C:\Windows\system32\SearchFilterHost.exe
                        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.gdark.com
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.gdark.com
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.gdark.com
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://fr.gdark.com
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://fr.gdark.com
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.gdark.com
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                        R3 - Default URLSearchHook is missing
                        F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
                        O1 - Hosts: ::1 localhost
                        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                        O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
                        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
                        O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
                        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                        O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                        O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                        O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
                        O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                        O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                        O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
                        O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
                        O4 - HKCU\..\Run: [E06FXLRD_1771734] "C:\Program Files\Microsoft Encarta\Collection Microsoft Encarta 2006 DVD\EDICT.EXE" -m
                        O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                        O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
                        O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                        O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
                        O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                        O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                        O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
                        O13 - Gopher Prefix:
                        O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                        O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                        O17 - HKLM\System\CCS\Services\Tcpip\..\{4E60679E-33F2-4ECD-8452-9175EA99CDB7}: NameServer = 62.201.129.99
                        O17 - HKLM\System\CCS\Services\Tcpip\..\{B7D8C22F-31C6-4373-B68B-BED90056FC0C}: NameServer = 62.201.129.99
                        O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
                        O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
                        O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                        O23 - Service: Service Google Update (gupdate1ca0c652b1c7560) (gupdate1ca0c652b1c7560) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
                        O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
                        O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                        O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
                        2. Narco!4 Contributeur
                          Dis moi si je dois refaire un autre rapport genproc et hijackthis

                          oui
                          1. missysoso77 Auteur
                            voilà les rapports de nivilog et ToolBar

                            !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
                            !!! Postez ce rapport sur le forum pour le faire analyser !!!

                            Outil exécuté depuis C:\Program Files\navilog1

                            Mise à jour le 18.07.2009 à 11h00 par IL-MAFIOSO

                            Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6001 ) Service Pack 1
                            X86-based PC ( Multiprocessor Free : AMD Athlon(tm) Dual Core Processor 4450e )
                            BIOS : Phoenix - AwardBIOS v6.00PG
                            USER : Sonia ( Administrator )
                            BOOT : Normal boot

                            C:\ (Local Disk) - NTFS - Total:323 Go (Free:199 Go)
                            D:\ (Local Disk) - NTFS - Total:11 Go (Free:1 Go)
                            E:\ (CD or DVD) - UDF - Total:0 Go (Free:0 Go)
                            F:\ (USB)
                            H:\ (USB)
                            I:\ (USB)
                            J:\ (USB)
                            L:\ (CD or DVD)

                            Recherche executée en mode normal

                            Nettoyage exécuté au redémarrage de l'ordinateur

                            C:\Users\Sonia\AppData\Local\cawou.exe supprimé !
                            C:\Users\Sonia\AppData\Local\cawou.dat supprimé !
                            C:\Users\Sonia\AppData\Local\cawou_nav.dat supprimé !
                            C:\Users\Sonia\AppData\Local\cawou_navps.dat supprimé !

                            Nettoyage contenu C:\Windows\Temp effectué !
                            Nettoyage contenu C:\Users\Sonia\AppData\Local\Temp effectué !

                            *** Sauvegarde du Registre vers dossier Safebackup ***

                            sauvegarde du Registre réalisée avec succès !

                            *** Nettoyage Registre ***

                            Nettoyage Registre Ok

                            *** Scan terminé 01/08/2009 23:11:38,05 ***

                            -----------\\ ToolBar S&D 1.2.8 XP/Vista

                            Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6001 ) Service Pack 1
                            X86-based PC ( Multiprocessor Free : AMD Athlon(tm) Dual Core Processor 4450e )
                            BIOS : Phoenix - AwardBIOS v6.00PG
                            USER : Sonia ( Administrator )
                            BOOT : Normal boot
                            C:\ (Local Disk) - NTFS - Total:323 Go (Free:199 Go)
                            D:\ (Local Disk) - NTFS - Total:11 Go (Free:1 Go)
                            E:\ (CD or DVD) - UDF - Total:0 Go (Free:0 Go)
                            F:\ (USB)
                            H:\ (USB)
                            I:\ (USB)
                            J:\ (USB)
                            L:\ (CD or DVD)

                            "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
                            Option : [2] ( 01/08/2009|23:14 )

                            [ UAC => 0 ]

                            -----------\\ SUPPRESSION

                            Supprime! - C:\Program Files\AskBarDis\bar
                            Supprime! - C:\Program Files\AskBarDis\unins000.dat
                            Supprime! - C:\Program Files\AskBarDis\unins000.exe
                            Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                            Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
                            Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
                            Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
                            Supprime! - C:\Program Files\AskBarDis
                            Supprime! - C:\Program Files\DAEMON Tools Toolbar

                            -----------\\ Recherche de Fichiers / Dossiers ...

                            -----------\\ [..\Internet Explorer\Main]

                            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                            "Start Page"="https://www.google.fr/?gws_rd=ssl"
                            "Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF"
                            "Local Page"="C:\\Windows\\system32\\blank.htm"
                            "Search Page"="http://fr.gdark.com"
                            "Default_Search_URL"="http://fr.gdark.com"
                            "SearchMigratedDefaultURL"="http://fr.gdark.com/...{searchTerms}"
                            "Url"="https://www.msn.com/fr-fr/actualite/"

                            [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                            "Start Page"="https://www.msn.com/fr-fr/"
                            "Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF"
                            "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                            "Search Page"="http://fr.gdark.com"

                            --------------------\\ Recherche d'autres infections

                            --------------------\\ Cracks & Keygens ..

                            C:\Users\Sonia\Desktop\EA Games\Sims\Sims\Crack
                            C:\Users\Sonia\Desktop\EA Games\Sims\Sims\The_Sims_2_Crack.zip
                            C:\Users\Sonia\Desktop\EA Games\Sims\Sims\Crack\RIP CD
                            C:\Users\Sonia\Desktop\EA Games\Sims\Sims\Crack\The Sims 2 Censorship Patch.exe
                            C:\Users\Sonia\Desktop\EA Games\Sims\Sims\Crack\RIP CD\Sims2_1_RIP.MDF
                            C:\Users\Sonia\Desktop\EA Games\Sims\Sims\Crack\RIP CD\Sims2_1_RIP.MDS
                            C:\Users\Sonia\Documents\EA Games\Les Sims 2\Downloads\a0accb2e_cracks20080520.package
                            C:\Users\Sonia\Documents\EA Games\Les Sims 2\Downloads\b84da236_cracks20080520.package
                            C:\Users\Sonia\Favorites\Rapidshare Download Direct + Crack (2009) ¯ Movizdb.com (Moviz,E-book,Logiciel,livre) avec [RS][MU][FREE][FF][MF].url

                            Dis moi si je dois refaire un autre rapport genproc et hijackthis
                            merci !
                            • 1
                            • 2

                            Discussions similaires

                            Adobe acrobat fich api-ms-win-core-winrt-l1-1-0.dll manquant
                            crinik2002

                            41 réponses
                            À quoi correspond 32x32 US en taille française pour un jean ?
                            Alison1958

                            1 réponse
                            svp 32Gb est il egal a 32Go??
                            William Fernand

                            3 réponses
                            Quelle est la différence entre les GO et GB ?
                            badour

                            37 réponses