Encore et toujours Win Fixer

salut il rest un truc fix ceci avec hijack

O20 - Winlogon Notify: avpe32 - avpe32.dll (file missing)
O20 - Winlogon Notify: SideBySide - C:\WINDOWS\system32\aza401hqe.dll (file missing)

1.redemarre en mode sans echec (redemarage + tapotte sans arret sur F8 desque l'ordi s'allume)

2. desactive ta restauration (pour win xp ) comme ceci :
clike droit sur post de travaille/proprietes/restauration system et la tu coche desactiver la restauration du systeme tu applique

3. affiche les fichier cacher comme ceci :
clicker sur demarrer/panneau de configuration/option des dossiers/affichage
Cocher afficher les dossiers cacher
Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"
Puis fais «Ok» pour valider les changements.
Decocher masquer les extentions dont le type est connues

4.ensuite va dans demarrer/rechercher et tape:
windows.exe
suprime le et vide ta corebeille

reactive la restauration et masque les fichiers caché en suivant le meme chemin

redemare en mode normal :

telecharge et execute ces antispywares ( pense a les mettre a jour avant de les lancées)
(1) ad-aware version 1.06

(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip
***
(2) spybot version 1.4

(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite

voir demo d utilisation
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
***

et aussi ceci
(3) ccleaner :
http://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

son tutorial :
http://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

(4) a2

http://www.emsisoft.net/fr/
penser a le metre a jour avant de scanner le pc
***
ps : un grand merci a balltrap pour les lien :)

(5) Edwido
http://download.ewido.net/ewido-setup.exe
Pendant l'installation, sur la page "Additional Options", décoche les deux options "Install background guard" et "Install scan via context menu Ewido Security Suite. Clique sur mise à jour.

Clique sur scanner puis sur scan complet du système. puis colle le resultat ici

pour te protegé contre les attaque telecharge et installe cette antivirus (lit les tutorials avant de les executé)

(avast)
http://www.clubic.com/telecharger-fiche11113-avast-.html
(tuto avast)
http://www.pcentraide.com/index.php?showtopic=120

installe aussi ce firewall
(kerio)
http://www.clubic.com/telecharger-fiche11071-kerio-personal-firewall.html

(tutorial kerio) :
http://www.pcentraide.com/index.php?showtopic=110

@+++++++++

bon, apparement les bug il y en a pas, le pc est moins lent, et plus de pop up, mais je prefere vous montrez un autre Hjt :

Logfile of HijackThis v1.99.1
Scan saved at 00:05:30, on 13/01/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\windows.exe
C:\WINDOWS\System32\windows.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\progra~1\yahoo!\YCentral\YahooCentral.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\eChanblard\emule.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Propriétaire.BRUNO\Bureau\Programme Virus\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [YCentral] c:\progra~1\yahoo!\YCentral\YahooCentral.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eChanblard\emule.exe -AutoStart
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: avpe32 - avpe32.dll (file missing)
O20 - Winlogon Notify: SideBySide - C:\WINDOWS\system32\aza401hqe.dll (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: Mouse Hardware Sync (mousehs) - Unknown owner - C:\WINDOWS\System32\mousehs.exe (file missing)
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

on ne sait jamais si il reste kelkes petits trucs....Merci encore à tous ceux qui m'ont aidé

salut fait ce que je t'ai dit sur mon message 43 et 45

@+++++++

voici le HJT :

Logfile of HijackThis v1.99.1
Scan saved at 20:39:03, on 12/01/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\windows.exe
C:\WINDOWS\System32\windows.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\progra~1\yahoo!\YCentral\YahooCentral.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\eChanblard\emule.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\msnet32.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\Propriétaire.BRUNO\Bureau\Programme Virus\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [YCentral] c:\progra~1\yahoo!\YCentral\YahooCentral.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eChanblard\emule.exe -AutoStart
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: avpe32 - avpe32.dll (file missing)
O20 - Winlogon Notify: SideBySide - C:\WINDOWS\system32\aza401hqe.dll (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: Mouse Hardware Sync (mousehs) - Unknown owner - C:\WINDOWS\System32\mousehs.exe (file missing)
O23 - Service: Microsoft Network Service (Network) - Unknown owner - C:\WINDOWS\msnet32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

slt il est pas de moi mais j ais pas le nom de l auteur

salut tous les deux
tu as un roktit
fait ceci
ouvre le bloc note et copie colle ceci entre les etoiles
**********
@echo off

color 4E

VER|find "Windows 2000">NUL
IF NOT ERRORLEVEL 1 GOTO NT

VER|find "Windows XP">NUL
IF NOT ERRORLEVEL 1 GOTO NT

VER|find "Windows 95">NUL
IF NOT ERRORLEVEL 1 GOTO last

VER|find "Windows 98">NUL
IF NOT ERRORLEVEL 1 GOTO last

VER|find "Windows Millennium">NUL
IF NOT ERRORLEVEL 1 GOTO last

VER|find "Windows 2003">NUL
IF NOT ERRORLEVEL 1 GOTO NT

echo Unsupported Version
goto last

:NT
echo Use this tool on your own risk.
echo.
pause
@echo off
if exist %systemdrive%\haxfix.txt del %systemdrive%\haxfix.txt
echo haxfix.txt>>%systemdrive%\haxfix.txt
echo ---------->>%systemdrive%\haxfix.txt
echo. >>%systemdrive%\haxfix.txt
echo searching for services....>>%systemdrive%\haxfix.txt
regedit.exe /e %systemdrive%\avpe.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avpe32"
regedit.exe /e %systemdrive%\avpe.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avpe64"
regedit.exe /e %systemdrive%\avpe.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avpe32.sys"
regedit.exe /e %systemdrive%\avpe.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avpe64.sys"
regedit.exe /e %systemdrive%\avpe.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avpe32.sys"
regedit.exe /e %systemdrive%\avpe.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avpe64.sys"
if exist %systemdrive%\avpe.txt echo services found >>%systemdrive%\haxfix.txt
echo. >>%systemdrive%\haxfix.txt
echo. >>%systemdrive%\haxfix.txt

if exist %systemdrive%\avpe.txt goto fix
if not exist %systemdrive%\avpe.txt goto end

:fix
@echo off
cls
echo Please close all open windows. The computer will reboot immediately.
echo.
pause
del /q %systemdrive%\avpe.txt
copy /y dummy.txt %windir%\dummy.txt
copy /y clean.bat %systemdrive%\clean.bat
echo deleting services..... >>%systemdrive%\haxfix.txt
echo. >>%systemdrive%\haxfix.txt
swsc stop avpe32
swsc delete avpe32

swsc stop avpe64
swsc delete avpe64

echo REGEDIT4>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\avpe32.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\avpe64.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\avpe32.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\avpe64.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Minimal\avpe32.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Minimal\avpe64.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Network\avpe32.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Network\avpe64.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\SafeBoot\Minimal\avpe32.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\SafeBoot\Minimal\avpe64.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\SafeBoot\Network\avpe32.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\SafeBoot\Network\avpe64.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avpe32.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avpe64.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avpe32.sys]>>delserv.reg
echo. >>delserv.reg
echo [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avpe64.sys]>>delserv.reg
echo. >>delserv.reg
echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]>>delserv.reg
echo "EnforceWriteProtection"=->>delserv.reg

regedit /s delserv.reg
del /q delserv.reg

moveex.exe %windir%\dummy.txt %windir%\system32\avpe32.dll

echo REGEDIT4 >>run.reg
echo. >>run.reg
echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]>>run.reg
echo "Flags"=dword:00000008>>run.reg
echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx\000]>>run.reg
echo "clean"="%systemdrive%\\clean.bat">>run.reg

regedit /s run.reg
del /q run.reg

echo rebooting the computer..... >>%systemdrive%\haxfix.txt
echo. >>%systemdrive%\haxfix.txt
reboot.exe
exit

:end
cls
@echo off
del %systemdrive%\haxfix.txt
echo You don't have to run this tool. No infection found.
echo.
pause
exit

:last
echo Unsupported version>>message.txt
notepad message.txt
exit

************
enregistre le sur ton bureau et nomme le xxx.cmd
et dans la case en dessous type met sur tous fichiers

la vas sur ton bureau et double clik sur se fichier que tu vient de faire et suit la procedure

ensuite redemarre et refait un hijack

ree j'ai oublié un truc tu doit desactiver ce service

O23 - Service: Microsoft Network Service (Network) - Unknown owner - C:\WINDOWS\msnet32.exe

va dans le Menu Démarrer/Panneau de Configuration/Outils d'administration/Services
Dans la fenêtre qui s'ouvre, double-clique sur la ligne "Microsoft Network Service (Network) -".
Dans le champ "Type de démarrage" de l'onglet "Général", sélectionne "Desactivé".
Clique sur "Arrêter".
Clique ensuite sur "OK" pour valider la configuration.

ensuite cherche et supprime le fichier en gras
C:\WINDOWS\msnet32.exe

voila :)
@++++

je doit y'aller il se fait tard si le probleme persiste refait l2mfix option 1 et colle le rapport ici je te repond demain car la j'en peu plus lol
@++++
bonne nuit

ok pas grave
fix ces 2 lignes avec hijack

O20 - Winlogon Notify: avpe32 - avpe32.dll (file missing)
O20 - Winlogon Notify: SideBySide - C:\WINDOWS\system32\aza401hqe.dll (file missing)

et dit moi ou on es tu avec tes soucis
@++++

donc j'ai fais second.bat et il m'a dit : Second.bat is Not intended to be run on its own

et voici le log hjt

Logfile of HijackThis v1.99.1
Scan saved at 00:39:10, on 12/01/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\windows.exe
C:\WINDOWS\System32\windows.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\progra~1\yahoo!\YCentral\YahooCentral.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\eChanblard\emule.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\msnet32.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Propriétaire.BRUNO\Bureau\Programme Virus\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [YCentral] c:\progra~1\yahoo!\YCentral\YahooCentral.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eChanblard\emule.exe -AutoStart
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: avpe32 - avpe32.dll (file missing)
O20 - Winlogon Notify: SideBySide - C:\WINDOWS\system32\aza401hqe.dll (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: Mouse Hardware Sync (mousehs) - Unknown owner - C:\WINDOWS\System32\mousehs.exe (file missing)
O23 - Service: Microsoft Network Service (Network) - Unknown owner - C:\WINDOWS\msnet32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

ok maintenant tres important ferme tout les programe parcequ'il va y'avoir reboot

Ouvre le dossier l2mfix créé sur le bureau puis double-clic sur L2Mfix.bat
Ensuite choisis l'option 2 puis Entrée
Puis appuie sur n'importe quelle touche pour redémarrer l'ordinateur
Après redémarrage, le bureau et les icônes vont apparaître puis disparaître, c'est normal ! Et un nouveau rapport va apparaître à l'écran.
>> Si après redémarrage les icônes n'apparaissent/disparaissent pas ou si le rapport n'apparaît pas, alors ouvre le dossier l2mfix et lance second.bat
Enfin poste ce 2ème rapport avec un nouveau rapport HJT

@++++++++

gros rapport...

L2MFIX find log 010406
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avpe32]
"DllName"=hex(2):61,00,76,00,70,00,65,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,\
00,00
"Startup"="MmPageFree"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
"MaxWait"=dword:00000001
"secureUID"="[273181023496717056]"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Telephony]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\l46o0ej3eho.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{93C8BDE1-EDF0-AAC3-5F3B-014934CFAAEC}"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia"
"{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS"
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile"
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
"{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS"
"{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚"
"{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement"
"{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows"
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM"
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
"{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers"
"{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web"
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
"{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
"{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal"
"{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes"
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo"
"{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo"
"{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo"
"{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo"
"{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo"
"{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
"{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension"
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows"
"{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft"
"{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
"{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es"
"{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..."
"{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
"{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration"
"{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
"{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
"{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
"{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
"{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
"{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft"
"{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement"
"{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu"
"{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚"
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft"
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche"
"{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band"
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche"
"{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web"
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre"
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse"
"{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse"
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft"
"{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
"{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU"
"{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU"
"{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
"{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante"
"{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Analyseur de la barre d'adresses"
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft"
"{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft"
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft"
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes"
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
"{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau"
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur"
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global"
"{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
"{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
"{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique"
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
"{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4"
"{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
"{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
"{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet"
"{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
"{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription"
"{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
"{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
"{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
"{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
"{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
"{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement"
"{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es"
"{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin"
"{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
"{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
"{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI"
"{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)"
"{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
"{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
"{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web"
"{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web"
"{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell"
"{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport"
"{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs"
"{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
"{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne"
"{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne"
"{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
"{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
"{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
"{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
"{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
"{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
"{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
"{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
"{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
"{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
"{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
"{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
"{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
"{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
"{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
"{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
"{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
"{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
"{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
"{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..."
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{CA5FEE26-14C1-4B5A-86E9-233FC0EE2682}"="IZArc DragDrop Menu"
"{8D9D4D0D-FDDD-44CB-AAB2-6161FA0757C5}"="IZArc Shell Context Menu"
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
"{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices"
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu"
"{BF05BB6E-442C-428B-8025-82280B7BC26C}"="Zen Micro Media Explorer"
"{7C9D5882-CB4A-4090-96C8-430BFE8B795B}"="Webroot Spy Sweeper Context Menu Integration"
"{0006F045-0000-0000-C000-000000000046}"="Microsoft Outlook Custom Icon Handler"
"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}"="Shell Extensions for RealOne Player"
"{5E795CFE-E101-46A2-A7ED-512F557F7848}"=""
"{EB82F2CD-FE22-4242-9F47-BDC1087109C7}"=""
"{38DF9564-DCE3-41FE-99F3-D07B0636FAE7}"=""

**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{EB82F2CD-FE22-4242-9F47-BDC1087109C7}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{EB82F2CD-FE22-4242-9F47-BDC1087109C7}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{EB82F2CD-FE22-4242-9F47-BDC1087109C7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{EB82F2CD-FE22-4242-9F47-BDC1087109C7}\InprocServer32]
@="C:\\WINDOWS\\system32\\osbcbcp.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{38DF9564-DCE3-41FE-99F3-D07B0636FAE7}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{38DF9564-DCE3-41FE-99F3-D07B0636FAE7}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{38DF9564-DCE3-41FE-99F3-D07B0636FAE7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{38DF9564-DCE3-41FE-99F3-D07B0636FAE7}\InprocServer32]
@="C:\\WINDOWS\\system32\\fvlemgmt.dll"
"ThreadingModel"="Apartment"

**********************************************************************************
Files Found are not all bad files:

C:\WINDOWS\SYSTEM32\
az1401~1.dll Wed 11 Jan 2006 19:47:46 ..S.R 235 946 230,41 K
az160e~1.dll Sun 8 Jan 2006 23:59:52 ..S.R 235 174 229,66 K
az16l7~1.dll Mon 9 Jan 2006 18:42:16 ..S.R 236 207 230,67 K
aza00g~1.dll Wed 11 Jan 2006 17:11:34 ..S.R 235 303 229,79 K
aza0l1~1.dll Thu 5 Jan 2006 21:14:58 ..S.R 235 343 229,82 K
aza401~1.dll Fri 6 Jan 2006 20:41:44 ..S.R 234 703 229,20 K
aza401~2.dll Thu 12 Jan 2006 0:13:40 ..S.R 237 031 231,47 K
aza60e~1.dll Sat 7 Jan 2006 19:06:30 ..S.R 234 906 229,40 K
aza6l7~1.dll Sun 8 Jan 2006 6:37:14 ..S.R 235 939 230,41 K
aza8l1~1.dll Wed 11 Jan 2006 22:39:38 ..S.R 235 910 230,38 K
azao09~1.dll Wed 11 Jan 2006 17:32:08 ..S.R 235 616 230,09 K
azaol3~1.dll Mon 9 Jan 2006 19:08:12 ..S.R 235 595 230,07 K
azaolg~1.dll Wed 11 Jan 2006 0:04:58 ..S.R 234 064 228,58 K
azas0a~1.dll Wed 11 Jan 2006 0:27:04 ..S.R 236 496 230,95 K
azaslg~1.dll Tue 10 Jan 2006 19:23:48 ..S.R 236 048 230,52 K
azau0e~1.dll Tue 10 Jan 2006 0:10:44 ..S.R 235 236 229,72 K
c400le~1.dll Wed 4 Jan 2006 20:12:12 ..S.R 234 980 229,47 K
c6002g~1.dll Mon 9 Jan 2006 23:24:48 ..S.R 233 976 228,49 K
c600lg~1.dll Mon 9 Jan 2006 23:14:48 ..S.R 233 976 228,49 K
dn0801~1.dll Wed 11 Jan 2006 0:59:44 ..S.R 235 752 230,23 K
dn4401~1.dll Tue 3 Jan 2006 1:10:14 ..S.R 236 645 231,10 K
dn4s01~1.dll Thu 5 Jan 2006 19:12:48 ..S.R 234 717 229,21 K
dn6601~1.dll Sun 8 Jan 2006 19:06:44 ..S.R 234 637 229,14 K
dn6m01~1.dll Mon 9 Jan 2006 1:19:44 ..S.R 234 137 228,65 K
dn8801~1.dll Thu 5 Jan 2006 18:39:36 ..S.R 234 857 229,35 K
dnj401~1.dll Fri 6 Jan 2006 20:00:56 ..S.R 234 387 228,89 K
dnj601~1.dll Sun 1 Jan 2006 20:02:22 ..S.R 234 198 228,71 K
dnju01~1.dll Mon 9 Jan 2006 0:44:52 ..S.R 234 887 229,38 K
dnl601~1.dll Thu 5 Jan 2006 19:21:04 ..S.R 234 607 229,11 K
dnp201~1.dll Mon 9 Jan 2006 1:27:48 ..S.R 234 247 228,75 K
dnps01~1.dll Sun 8 Jan 2006 18:12:50 ..S.R 234 747 229,24 K
dnr601~1.dll Mon 2 Jan 2006 19:09:14 ..S.R 236 895 231,34 K
e020la~1.dll Wed 4 Jan 2006 22:11:12 ..S.R 234 996 229,49 K
en80l1~1.dll Mon 2 Jan 2006 18:54:58 ..S.R 237 285 231,72 K
en88l1~1.dll Sat 7 Jan 2006 12:48:26 ..S.R 235 857 230,33 K
enn0l1~1.dll Wed 4 Jan 2006 22:51:04 ..S.R 235 027 229,52 K
enrul1~1.dll Fri 6 Jan 2006 0:50:38 ..S.R 235 967 230,43 K
f00ola~1.dll Mon 2 Jan 2006 14:10:40 ..S.R 233 898 228,41 K
f0l00a~1.dll Sun 1 Jan 2006 19:25:22 ..S.R 235 091 229,58 K
f20o0c~1.dll Mon 9 Jan 2006 0:52:54 ..S.R 234 278 228,79 K
f6l00g~1.dll Mon 9 Jan 2006 0:48:08 ..S.R 234 012 228,53 K
f82m0i~1.dll Tue 3 Jan 2006 22:50:52 ..S.R 234 104 228,62 K
fp2203~1.dll Thu 5 Jan 2006 0:48:04 ..S.R 234 199 228,71 K
fp4u03~1.dll Sun 8 Jan 2006 18:47:34 ..S.R 234 919 229,41 K
fp8003~1.dll Mon 9 Jan 2006 21:17:02 ..S.R 233 976 228,49 K
fpjm03~1.dll Wed 11 Jan 2006 19:15:18 ..S.R 235 064 229,55 K
fpl803~1.dll Wed 11 Jan 2006 19:45:02 ..S.R 235 784 230,26 K
fprm03~1.dll Wed 11 Jan 2006 19:55:48 ..S.R 235 144 229,63 K
fvlemgmt.dll Thu 12 Jan 2006 0:13:40 ..S.R 236 274 230,73 K
g6jolg~1.dll Tue 3 Jan 2006 20:37:06 ..S.R 235 292 229,78 K
gccoll~1.dll Tue 15 Nov 2005 12:12:08 A.... 126 680 123,71 K
gcunco~1.dll Tue 15 Nov 2005 12:12:06 A.... 95 448 93,21 K
gp08l3~1.dll Fri 6 Jan 2006 0:25:22 ..S.R 235 779 230,25 K
gp0ol3~1.dll Thu 5 Jan 2006 22:52:12 ..S.R 235 279 229,76 K
gp6ol3~1.dll Wed 11 Jan 2006 16:53:44 ..S.R 236 314 230,77 K
gp80l3~1.dll Thu 5 Jan 2006 19:35:36 ..S.R 235 059 229,55 K
gpnql3~1.dll Thu 5 Jan 2006 23:27:40 ..S.R 235 529 230,01 K
gpr6l3~1.dll Thu 5 Jan 2006 0:11:06 ..S.R 235 669 230,14 K
h60q0g~1.dll Thu 5 Jan 2006 23:09:20 ..S.R 234 482 228,98 K
h64mlg~1.dll Sun 8 Jan 2006 20:47:06 ..S.R 235 122 229,61 K
hashlib.dll Tue 15 Nov 2005 12:12:08 A.... 117 976 115,21 K
hr0005~1.dll Mon 9 Jan 2006 19:48:20 ..S.R 233 981 228,50 K
hr0205~1.dll Sun 1 Jan 2006 23:32:10 ..S.R 233 978 228,49 K
hr8205~1.dll Tue 10 Jan 2006 21:22:46 ..S.R 236 781 231,23 K
hsetcfg.dll Wed 11 Jan 2006 0:27:38 ..S.R 233 812 228,33 K
i2lolc~1.dll Wed 4 Jan 2006 0:04:10 ..S.R 235 308 229,79 K
i6240g~1.dll Mon 2 Jan 2006 18:52:42 ..S.R 236 630 231,08 K
ir00l5~1.dll Sun 8 Jan 2006 23:53:52 ..S.R 234 981 229,47 K
ir0ql5~1.dll Mon 9 Jan 2006 0:16:20 ..S.R 235 481 229,96 K
ir2ul5~1.dll Wed 4 Jan 2006 20:14:24 ..S.R 235 901 230,37 K
ir4ml5~1.dll Wed 4 Jan 2006 22:57:10 ..S.R 235 121 229,61 K
ir82l5~1.dll Thu 5 Jan 2006 22:59:12 ..S.R 235 261 229,75 K
irl0l5~1.dll Mon 2 Jan 2006 19:03:44 ..S.R 237 239 231,68 K
j02qla~1.dll Tue 3 Jan 2006 2:00:48 ..S.R 234 008 228,52 K
j26m0c~1.dll Fri 6 Jan 2006 0:05:54 ..S.R 234 138 228,65 K
j4j60e~1.dll Sat 7 Jan 2006 2:16:36 ..S.R 234 590 229,09 K
j80s0i~1.dll Sun 8 Jan 2006 6:27:26 ..S.R 234 684 229,18 K
j84o0i~1.dll Thu 5 Jan 2006 0:56:16 ..S.R 234 324 228,83 K
j84oli~1.dll Tue 3 Jan 2006 22:11:04 ..S.R 235 324 229,81 K
jt2407~1.dll Sat 7 Jan 2006 12:14:14 ..S.R 234 403 228,91 K
jt2u07~1.dll Sun 8 Jan 2006 18:32:52 ..S.R 234 903 229,39 K
jt4m07~1.dll Thu 5 Jan 2006 18:45:08 ..S.R 234 123 228,63 K
jtpm07~1.dll Fri 6 Jan 2006 20:49:04 ..S.R 234 153 228,66 K
jtr407~1.dll Sun 1 Jan 2006 20:06:00 ..S.R 233 894 228,41 K
k080la~1.dll Sun 1 Jan 2006 20:00:06 ..S.R 237 284 231,72 K
k2080c~1.dll Wed 11 Jan 2006 17:50:32 ..S.R 235 753 230,23 K
k444le~1.dll Wed 11 Jan 2006 22:19:58 ..S.R 236 395 230,85 K
k6lq0g~1.dll Wed 11 Jan 2006 19:41:18 ..S.R 235 487 229,96 K
kt02l7~1.dll Wed 11 Jan 2006 0:44:18 ..S.R 234 556 229,06 K
kt24l7~1.dll Thu 5 Jan 2006 20:26:18 ..S.R 235 403 229,88 K
kt46l7~1.dll Thu 5 Jan 2006 18:56:42 ..S.R 235 623 230,10 K
kt8ml7~1.dll Sun 1 Jan 2006 20:00:16 ..S.R 234 097 228,61 K
kt8sl7~1.dll Sat 7 Jan 2006 2:24:50 ..S.R 235 763 230,23 K
ktn4l7~1.dll Wed 4 Jan 2006 21:59:12 ..S.R 235 433 229,91 K
ktp8l7~1.dll Sun 1 Jan 2006 19:49:54 ..S.R 234 186 228,70 K
ktpml7~1.dll Wed 11 Jan 2006 19:27:18 ..S.R 236 128 230,59 K
l0p2la~1.dll Wed 4 Jan 2006 19:45:28 ..S.R 235 246 229,73 K
l46o0e~1.dll Wed 11 Jan 2006 23:25:28 ..S.R 236 274 230,73 K
l46ole~1.dll Sun 8 Jan 2006 23:49:36 ..S.R 235 340 229,82 K
l8j8li~1.dll Wed 4 Jan 2006 23:26:22 ..S.R 235 794 230,27 K
lv4o09~1.dll Sun 8 Jan 2006 18:58:10 ..S.R 234 325 228,83 K
lv8409~1.dll Fri 6 Jan 2006 20:09:36 ..S.R 234 465 228,97 K
lvl209~1.dll Wed 11 Jan 2006 19:09:20 ..S.R 235 190 229,68 K
lvp809~1.dll Tue 3 Jan 2006 0:40:48 ..S.R 237 083 231,52 K
lvr009~1.dll Fri 6 Jan 2006 18:17:58 ..S.R 234 075 228,59 K
m282lc~1.dll Sun 1 Jan 2006 19:30:38 ..S.R 234 679 229,18 K
m2ju0c~1.dll Fri 6 Jan 2006 0:03:38 ..S.R 234 888 229,38 K
m2julc~1.dll Wed 11 Jan 2006 20:02:40 ..S.R 236 863 231,31 K
m2nq0c~1.dll Sun 8 Jan 2006 12:43:40 ..S.R 234 528 229,03 K
m6460g~1.dll Sun 8 Jan 2006 23:04:22 ..S.R 234 622 229,12 K
m682lg~1.dll Wed 11 Jan 2006 23:52:56 ..S.R 233 891 228,41 K
mrsign32.dll Tue 10 Jan 2006 20:06:50 ..S.R 233 976 228,49 K
mv02l9~1.dll Mon 9 Jan 2006 21:15:02 ..S.R 235 185 229,67 K
mv60l9~1.dll Thu 5 Jan 2006 18:59:38 ..S.R 235 045 229,54 K
mvj8l9~1.dll Thu 5 Jan 2006 22:25:18 ..S.R 235 795 230,27 K
mvjol9~1.dll Sat 7 Jan 2006 2:33:06 ..S.R 235 295 229,78 K
mvl4l9~1.dll Sun 1 Jan 2006 19:25:02 ..S.R 235 711 230,18 K
mvpol9~1.dll Tue 3 Jan 2006 23:55:18 ..S.R 235 355 229,84 K
mvrql9~1.dll Wed 11 Jan 2006 17:20:12 ..S.R 236 550 231,00 K
n4p40e~1.dll Wed 11 Jan 2006 22:46:04 ..S.R 236 384 230,84 K
n62u0g~1.dll Fri 6 Jan 2006 20:31:30 ..S.R 234 902 229,39 K
n66q0g~1.dll Tue 3 Jan 2006 22:48:12 ..S.R 234 542 229,04 K
n86q0i~1.dll Wed 11 Jan 2006 19:38:38 ..S.R 235 519 229,99 K
nrprovau.dll Tue 10 Jan 2006 21:03:38 ..S.R 234 148 228,66 K
o266lc~1.dll Tue 10 Jan 2006 19:55:00 ..S.R 235 638 230,11 K
o6nslg~1.dll Fri 6 Jan 2006 20:17:30 ..S.R 235 732 230,21 K
o8840i~1.dll Wed 4 Jan 2006 19:56:56 ..S.R 234 464 228,97 K
osbcbcp.dll Sun 1 Jan 2006 23:32:00 ..S.R 236 204 230,67 K
p08q0a~1.dll Wed 4 Jan 2006 20:21:24 ..S.R 234 556 229,06 K
p0n80a~1.dll Tue 10 Jan 2006 0:12:50 ..S.R 234 826 229,32 K
p28q0c~1.dll Tue 3 Jan 2006 19:01:22 ..S.R 236 204 230,67 K
p44u0e~1.dll Mon 9 Jan 2006 23:19:20 ..S.R 233 976 228,49 K
p6p6lg~1.dll Thu 5 Jan 2006 9:35:58 ..S.R 235 652 230,13 K
p8p6li~1.dll Wed 11 Jan 2006 22:32:52 ..S.R 236 629 231,08 K
pncrt.dll Mon 17 Oct 2005 20:54:20 A.... 278 528 272,00 K
pndx5016.dll Mon 17 Oct 2005 20:54:22 A.... 6 656 6,50 K
pndx5032.dll Mon 17 Oct 2005 20:54:22 A.... 5 632 5,50 K
q0ps0a~1.dll Tue 3 Jan 2006 19:36:14 ..S.R 234 746 229,24 K
q6680g~1.dll Wed 11 Jan 2006 22:37:38 ..S.R 236 776 231,23 K
qsartz.dll Tue 10 Jan 2006 0:10:44 ..S.R 233 976 228,49 K
r0r60a~1.dll Mon 2 Jan 2006 18:43:52 ..S.R 236 894 231,34 K
r4r6le~1.dll Thu 5 Jan 2006 20:17:14 ..S.R 235 670 230,14 K
rmoc3260.dll Mon 17 Oct 2005 20:54:42 A.... 176 167 172,04 K
s0pula~1.dll Tue 3 Jan 2006 18:55:18 ..S.R 234 233 228,74 K
skcsccp.dll Tue 10 Jan 2006 21:11:00 ..S.R 235 953 230,42 K
t6r80g~1.dll Mon 9 Jan 2006 1:11:30 ..S.R 234 872 229,37 K
vsdata.dll Tue 15 Nov 2005 0:50:30 A.... 83 720 81,76 K
vsinit.dll Tue 15 Nov 2005 0:50:42 A.... 141 064 137,76 K
vsmonapi.dll Tue 15 Nov 2005 0:50:52 A.... 104 208 101,77 K
vspubapi.dll Tue 15 Nov 2005 0:50:56 A.... 227 088 221,77 K
vsutil.dll Tue 15 Nov 2005 0:51:12 A.... 382 728 373,76 K
vsxml.dll Tue 15 Nov 2005 0:51:20 A.... 100 104 97,76 K
wonetmgr.dll Mon 9 Jan 2006 19:48:22 ..S.R 233 976 228,49 K

153 items found: 153 files (140 H/S), 0 directories.
Total of file sizes: 34 773 334 bytes 33,16 M
Locate .tmp files:

No matches found.
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\WINDOWS\System32

12/01/2006 00:13 236ÿ274 fvlemgmt.dll
12/01/2006 00:13 237ÿ031 aza401hqe.dll
11/01/2006 23:52 233ÿ891 m682lglo16qc.dll
11/01/2006 23:25 236ÿ274 l46o0ej3eho.dll
11/01/2006 22:46 236ÿ384 n4p40e7qeh.dll
11/01/2006 22:39 235ÿ910 aza8l1lu1.dll
11/01/2006 22:37 236ÿ776 q6680gjue6o80.dll
11/01/2006 22:32 236ÿ629 p8p6li7s18.dll
11/01/2006 22:19 236ÿ395 k444lehq1h4e.dll
11/01/2006 21:29 <REP> dllcache
11/01/2006 20:02 236ÿ863 m2julc191f.dll
11/01/2006 19:55 235ÿ144 fprm0391e.dll
11/01/2006 19:47 235ÿ946 az14011qe.dll
11/01/2006 19:45 235ÿ784 fpl8033ue.dll
11/01/2006 19:41 235ÿ487 k6lq0g35e6.dll
11/01/2006 19:38 235ÿ519 n86q0ij5e8o.dll
11/01/2006 19:27 236ÿ128 ktpml7711.dll
11/01/2006 19:15 235ÿ064 fpjm0311e.dll
11/01/2006 19:09 235ÿ190 lvl2093oe.dll
11/01/2006 17:50 235ÿ753 k2080cduef080.dll
11/01/2006 17:32 235ÿ616 azao09h3e.dll
11/01/2006 17:20 236ÿ550 mvrql9951.dll
11/01/2006 17:11 235ÿ303 aza00g3me6.dll
11/01/2006 16:53 236ÿ314 gp6ol3j31.dll
11/01/2006 00:59 235ÿ752 dn0801due.dll
11/01/2006 00:44 234ÿ556 kt02l7do1.dll
11/01/2006 00:27 233ÿ812 hsetcfg.dll
11/01/2006 00:27 236ÿ496 azas0a77ed.dll
11/01/2006 00:22 296ÿ960 msnchecker.exe
11/01/2006 00:04 234ÿ064 azaolg1316.dll
10/01/2006 21:22 236ÿ781 hr8205loe.dll
10/01/2006 21:10 235ÿ953 skcsccp.dll
10/01/2006 21:03 234ÿ148 nrprovau.dll
10/01/2006 20:06 233ÿ976 mrsign32.dll
10/01/2006 19:54 235ÿ638 o266lcjs1fo6.dll
10/01/2006 19:23 236ÿ048 azaslg5716.dll
10/01/2006 00:12 234ÿ826 p0n80a5ued.dll
10/01/2006 00:10 233ÿ976 qsartz.dll
10/01/2006 00:10 235ÿ236 azau0eh9eh4.dll
09/01/2006 23:24 233ÿ976 c6002gdmg60a2.dll
09/01/2006 23:19 233ÿ976 p44u0eh9eh4.dll
09/01/2006 23:14 233ÿ976 c600lgdm160a.dll
09/01/2006 21:17 233ÿ976 fp8003lme.dll
09/01/2006 21:15 235ÿ185 mv02l9do1.dll
09/01/2006 19:48 233ÿ976 wonetmgr.dll
09/01/2006 19:48 233ÿ981 hr0005dme.dll
09/01/2006 19:08 235ÿ595 azaol3d31.dll
09/01/2006 18:42 236ÿ207 az16l7hs1.dll
09/01/2006 01:27 234ÿ247 dnp2017oe.dll
09/01/2006 01:19 234ÿ137 dn6m01j1e.dll
09/01/2006 01:11 234ÿ872 t6r80g9ue6.dll
09/01/2006 00:52 234ÿ278 f20o0cd3ef0.dll
09/01/2006 00:48 234ÿ012 f6l00g3me6.dll
09/01/2006 00:44 234ÿ887 dnju0119e.dll
09/01/2006 00:16 235ÿ481 ir0ql5d51.dll
08/01/2006 23:59 235ÿ174 az160e1seh.dll
08/01/2006 23:53 234ÿ981 ir00l5dm1.dll
08/01/2006 23:49 235ÿ340 l46olej31ho.dll
08/01/2006 23:04 234ÿ622 m6460ghse6460.dll
08/01/2006 20:47 235ÿ122 h64mlgh1164.dll
08/01/2006 19:06 234ÿ637 dn6601jse.dll
08/01/2006 18:58 234ÿ325 lv4o09h3e.dll
08/01/2006 18:47 234ÿ919 fp4u03h9e.dll
08/01/2006 18:32 234ÿ903 jt2u07f9e.dll
08/01/2006 18:12 234ÿ747 dnps0177e.dll
08/01/2006 12:43 234ÿ528 m2nq0c55ef.dll
08/01/2006 06:37 235ÿ939 aza6l7hs1.dll
08/01/2006 06:27 234ÿ684 j80s0id7e80.dll
07/01/2006 19:06 234ÿ906 aza60e1seh.dll
07/01/2006 12:48 235ÿ857 en88l1lu1.dll
07/01/2006 12:14 234ÿ403 jt2407fqe.dll
07/01/2006 02:33 235ÿ295 mvjol9131.dll
07/01/2006 02:24 235ÿ763 kt8sl7l71.dll
07/01/2006 02:16 234ÿ590 j4j60e1seh.dll
06/01/2006 20:49 234ÿ153 jtpm0771e.dll
06/01/2006 20:41 234ÿ703 aza4011qe.dll
06/01/2006 20:31 234ÿ902 n62u0gf9e62.dll
06/01/2006 20:17 235ÿ732 o6nslg5716.dll
06/01/2006 20:09 234ÿ465 lv8409lqe.dll
06/01/2006 20:00 234ÿ387 dnj4011qe.dll
06/01/2006 18:17 234ÿ075 lvr0099me.dll
06/01/2006 00:50 235ÿ967 enrul1991.dll
06/01/2006 00:25 235ÿ779 gp08l3du1.dll
06/01/2006 00:05 234ÿ138 j26m0cj1efo.dll
06/01/2006 00:03 234ÿ888 m2ju0c19ef.dll
05/01/2006 23:27 235ÿ529 gpnql3551.dll
05/01/2006 23:09 234ÿ482 h60q0gd5e60.dll
05/01/2006 22:59 235ÿ261 ir82l5lo1.dll
05/01/2006 22:52 235ÿ279 gp0ol3d31.dll
05/01/2006 22:25 235ÿ795 mvj8l91u1.dll
05/01/2006 21:14 235ÿ343 aza0l15m1.dll
05/01/2006 20:26 235ÿ403 kt24l7fq1.dll
05/01/2006 20:17 235ÿ670 r4r6le9s1h.dll
05/01/2006 19:35 235ÿ059 gp80l3lm1.dll
05/01/2006 19:21 234ÿ607 dnl6013se.dll
05/01/2006 19:12 234ÿ717 dn4s01h7e.dll
05/01/2006 18:59 235ÿ045 mv60l9jm1.dll
05/01/2006 18:56 235ÿ623 kt46l7hs1.dll
05/01/2006 18:45 234ÿ123 jt4m07h1e.dll
05/01/2006 18:39 234ÿ857 dn8801lue.dll
05/01/2006 09:35 235ÿ652 p6p6lg7s16.dll
05/01/2006 00:56 234ÿ324 j84o0ih3e84.dll
05/01/2006 00:48 234ÿ199 fp2203foe.dll
05/01/2006 00:11 235ÿ669 gpr6l39s1.dll
04/01/2006 23:26 235ÿ794 l8j8li1u18.dll
04/01/2006 22:57 235ÿ121 ir4ml5h11.dll
04/01/2006 22:51 235ÿ027 enn0l15m1.dll
04/01/2006 22:11 234ÿ996 e020lafm1d2a.dll
04/01/2006 21:59 235ÿ433 ktn4l75q1.dll
04/01/2006 20:21 234ÿ556 p08q0al5edq.dll
04/01/2006 20:14 235ÿ901 ir2ul5f91.dll
04/01/2006 20:12 234ÿ980 c400ledm1h0a.dll
04/01/2006 19:56 234ÿ464 o8840ilqe8qe0.dll
04/01/2006 19:45 235ÿ246 l0p2la7o1d.dll
04/01/2006 00:04 235ÿ308 i2lolc331f.dll
03/01/2006 23:55 235ÿ355 mvpol9731.dll
03/01/2006 22:50 234ÿ104 f82m0if1e82.dll
03/01/2006 22:48 234ÿ542 n66q0gj5e6o.dll
03/01/2006 22:11 235ÿ324 j84olih3184.dll
03/01/2006 20:37 235ÿ292 g6jolg1316.dll
03/01/2006 19:36 234ÿ746 q0ps0a77ed.dll
03/01/2006 19:01 236ÿ204 p28q0cl5efq.dll
03/01/2006 18:55 234ÿ233 s0pula791d.dll
03/01/2006 02:00 234ÿ008 j02qlaf51d2.dll
03/01/2006 01:10 236ÿ645 dn4401hqe.dll
03/01/2006 00:40 237ÿ083 lvp8097ue.dll
02/01/2006 19:09 236ÿ895 dnr6019se.dll
02/01/2006 19:03 237ÿ239 irl0l53m1.dll
02/01/2006 18:54 237ÿ285 en80l1lm1.dll
02/01/2006 18:52 236ÿ630 i6240gfqe62e0.dll
02/01/2006 18:43 236ÿ894 r0r60a9sed.dll
02/01/2006 14:10 233ÿ898 f00olad31d0.dll
01/01/2006 23:32 233ÿ978 hr0205doe.dll
01/01/2006 23:31 236ÿ204 osbcbcp.dll
01/01/2006 20:05 233ÿ894 jtr4079qe.dll
01/01/2006 20:02 234ÿ198 dnj6011se.dll
01/01/2006 20:00 234ÿ097 kt8ml7l11.dll
01/01/2006 20:00 237ÿ284 k080lalm1dqa.dll
01/01/2006 19:49 234ÿ186 ktp8l77u1.dll
01/01/2006 19:30 234ÿ679 m282lclo1fqc.dll
01/01/2006 19:25 235ÿ091 f0l00a3med.dll
01/01/2006 19:25 235ÿ711 mvl4l93q1.dll
17/07/2005 02:56 6ÿ686 mousehs.0xe
19/06/2005 20:28 <REP> Microsoft
142 fichier(s) 33ÿ230ÿ981 octets
2 R‚p(s) 6ÿ069ÿ346ÿ304 octets libres

oui c'est bien ca le rapport aparement le programe n'as pas reussi a supprimer le virus on va essayé autrement

telecharge l2me fix
Mets-le sur ton bureau. http://www.downloads.subratam.org/l2mfix.exe
Double-clic sur l2mfix.exe
A la 1ère question clic sur Accept, ensuite click sur Install

Ouvre le dossier l2mfix créé sur le bureau puis double-clic sur L2Mfix.bat
Ensuite choisis l'option 1 puis Entrée
Poste ce 1er rapport.

@++++++++

et voilà le log :

Logfile of HijackThis v1.99.1
Scan saved at 23:56:21, on 11/01/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\windows.exe
C:\WINDOWS\System32\windows.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\msnet32.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\progra~1\yahoo!\YCentral\YahooCentral.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\eChanblard\emule.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Propriétaire.BRUNO\Bureau\Programme Virus\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [YCentral] c:\progra~1\yahoo!\YCentral\YahooCentral.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eChanblard\emule.exe -AutoStart
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: avpe32 - avpe32.dll (file missing)
O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\system32\l46o0ej3eho.dll
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: Mouse Hardware Sync (mousehs) - Unknown owner - C:\WINDOWS\System32\mousehs.exe (file missing)
O23 - Service: Microsoft Network Service (Network) - Unknown owner - C:\WINDOWS\msnet32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

c bien ca le rapport de windelf ?

***********************
* WIN32DELFKIL LOGFILE *
************************
by Marckie

BEFORE RUNNING WIN32DELFKIL
***************************

File(s) found in Windows directory
----------------------------------

File(s) found in system32 folder
--------------------------------

SharedTaskScheduler key
-----------------------

SteelWerX Registry Console Tool 1.0
Written by Bobbi Flekman © 2005

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
{438755C2-A8BA-11D1-B96B-00A0C90312E1} REG_SZ Pré-chargeur Browseui
{8C7461EF-2B13-11d2-BE35-3078302C2030} REG_SZ Démon de cache des catégories de composant

Notify key

OUI FAIT CE QUE JE T'AI DIT DANS MON MESSAGE 30 :)
@++++++++

es-tu là Jess ?

merci pour ton aide incognito02 bonne nuit.

salut :) je vais bien
t'inquiete je continue ;-)
bonne nuit!!
@++++++++++

voilà ;) (je pense ke c ca)....enfin j'espere

Rapport fait à 23:28:25,89 le 11/01/2006

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\All Users\Application Data

17/06/2005 00:24 62 desktop.ini
17/06/2005 00:23 <REP> Microsoft
17/06/2005 00:23 <REP> ..
17/06/2005 00:23 <REP> .
1 fichier(s) 62 octets
3 R‚p(s) 6095822848 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\All Users.WINDOWS\Application Data

10/01/2006 20:21 <REP> Spybot - Search & Destroy
31/12/2005 19:46 <REP> CyberLink
25/12/2005 14:43 <REP> Samsung
22/12/2005 00:11 <REP> Yahoo!
07/10/2005 18:56 <REP> Macrovision
09/09/2005 20:49 <REP> QuickTime
09/09/2005 20:49 <REP> Apple Computer
16/08/2005 16:12 <REP> Creative
08/08/2005 01:42 <REP> Adobe
16/07/2005 20:25 62 desktop.ini
16/07/2005 20:25 <REP> Microsoft
16/07/2005 20:25 <REP> .
16/07/2005 20:25 <REP> ..
1 fichier(s) 62 octets
12 R‚p(s) 6095818752 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\Default User\Application Data

17/06/2005 00:24 62 desktop.ini
17/06/2005 00:23 <REP> ..
17/06/2005 00:23 <REP> Microsoft
17/06/2005 00:23 <REP> .
1 fichier(s) 62 octets
3 R‚p(s) 6095818752 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\Default User.WINDOWS\Application Data

16/07/2005 20:25 62 desktop.ini
16/07/2005 20:25 <REP> ..
16/07/2005 20:25 <REP> Microsoft
16/07/2005 20:25 <REP> .
1 fichier(s) 62 octets
3 R‚p(s) 6095818752 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\PROPRI~1~BRU

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\PROPRI~1~KOM

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\Propri‚taire\Application Data

17/06/2005 17:48 <REP> SBSoft
17/06/2005 17:42 <REP> Winds_24
17/06/2005 17:42 <REP> PSGuard.com
16/06/2005 23:41 <REP> Macromedia
16/06/2005 23:35 <REP> Identities
16/06/2005 23:35 62 desktop.ini
16/06/2005 23:35 <REP> ..
16/06/2005 23:35 <REP> .
16/06/2005 23:35 <REP> Microsoft
1 fichier(s) 62 octets
8 R‚p(s) 6095818752 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\Propri‚taire.BRUNO\Application Data

05/01/2006 19:19 <REP> Talkback
30/12/2005 22:25 <REP> CyberLink
09/11/2005 19:32 <REP> InterVideo
31/10/2005 20:49 <REP> Help
21/09/2005 10:59 <REP> Real
09/09/2005 20:50 <REP> Apple Computer
30/08/2005 21:09 <REP> Microsoft Web Folders
18/08/2005 13:24 <REP> Webroot
16/08/2005 15:30 <REP> AdobeUM
16/08/2005 15:21 <REP> Creative
14/08/2005 22:02 <REP> Sun
10/08/2005 01:05 <REP> Mozilla
08/08/2005 01:43 <REP> Adobe
04/08/2005 22:37 <REP> Lavasoft
20/07/2005 00:27 <REP> F-Secure
18/07/2005 12:40 <REP> Macromedia
16/07/2005 19:46 <REP> Identities
16/07/2005 19:45 62 desktop.ini
16/07/2005 19:45 <REP> ..
16/07/2005 19:45 <REP> .
16/07/2005 19:45 <REP> Microsoft
1 fichier(s) 62 octets
20 R‚p(s) 6095814656 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\Propri‚taire.KOMA\Application Data

30/06/2005 22:32 <REP> Mozilla
30/06/2005 22:32 <REP> MozillaControl
28/06/2005 19:00 <REP> InterVideo
27/06/2005 17:48 <REP> Lavasoft
25/06/2005 19:02 <REP> Microsoft Web Folders
24/06/2005 23:32 <REP> mioObjects
22/06/2005 00:41 <REP> Macromedia
21/06/2005 19:39 <REP> Identities
21/06/2005 19:39 62 desktop.ini
21/06/2005 19:39 <REP> ..
21/06/2005 19:39 <REP> .
21/06/2005 19:39 <REP> Microsoft
1 fichier(s) 62 octets
11 R‚p(s) 6095814656 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\Documents and Settings\Propriétaire.BRUNO

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est F0FA-9B4F

R‚pertoire de C:\WINDOWS\Tasks

16/07/2005 19:36 6 SA.DAT
16/07/2005 19:33 65 desktop.ini
16/06/2005 23:30 <REP> ..
16/06/2005 23:30 <REP> .
2 fichier(s) 71 octets
2 R‚p(s) 6ÿ095ÿ814ÿ656 octets libres

******************************************
Recherche dans Program files

Le dossier C:\Program Files\C2Media n'existe pas

*************** Fin du rapport ****************