Adware a enlever

Résolu
ketzakoalt -  
Bonjour,

j'ai un adware ou equivalent dans mon pc, je n'arrive pas à l'enlever pouvez vouz m'aider?

Voici le rapport hijack :

Logfile of HijackThis v1.99.1
Scan saved at 12:58:46, on 15/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\SYSTEM32\GEARSEC.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\jerome\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\mssrv32.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

merci
Configuration: Windows XP
Internet Explorer 6.0

26 réponses

Résumé de la discussion

Un échange porte sur la présence d’un adware sous Windows XP et les difficultés pour l’éliminer, les rapports HijackThis pointant des BHO et des éléments lancés au démarrage. Plusieurs indices évoquent une redirection vers des sites externes via des éléments O2 et O9, et l’un des échanges identifie une ligne précise comme responsable du problème dans le rapport. Des conseils préconisent des outils antivirus et antispyware (Avira, Avast, Ad-Aware, Spybot) et un pare-feu (ZoneAlarm, Kerio), ainsi que CCleaner pour nettoyer les traces et les résidus. Une suggestion ultérieure évoque la désactivation de la restauration système pour purger d’éventuels virus et la nécessité de refaire un contrôle après nettoyage.

Bobot (l’IA à votre service)
  1. jlpjlp Contributeur sécurité
    de rien
    bon week end!
    0
    1. ketzakoalt
      merci beaucoup jlp jlp pour le temps passé!

      bonne fin de we!
      0
      1. jlpjlp Contributeur sécurité
        O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll

        oui désolé j'ai vu un peu tard cette ligne qui etait responsable de ton pb et redirigait sur des sites ukraine

        _________________

        voila ce qu'il faut que tu garde:

        pour protéger gratos ton ordi

        securite

        mettre un antivirus

        AVAST en français ou ANTIVIR (en anglais mais très efficace)
        https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
        -------------
        des anti-espions:

        AD AWARE + SPYBOT + WINDOWS DEFENDER ou SPYWARE TERMINATOR

        +
        SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

        --------
        un pare feu :
        celui de Windows ou mieux KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

        https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
        https://manuelsdaide.com/contact/
        http://www.open-files.com/forum/index.php?showtopic=29277
        zonealarm

        -----------

        CCLEANER pour effacer les traces de surf

        bonne continuation!
        ton pb est résolu!
        enfin...
        0
        1. ketzakoalt
          bonjour,

          voici le rapport ot moveit :

          C:\WINDOWS\system32\AcroIEAdvHelper.dll unregistered successfully.
          C:\WINDOWS\system32\AcroIEAdvHelper.dll moved successfully.

          Created on 10/21/2007 10:43:34

          le rapport hijackthis :

          Logfile of HijackThis v1.99.1
          Scan saved at 10:44:24, on 21/10/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.5730.0013)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
          C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
          C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
          C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          C:\WINDOWS\SYSTEM32\GEARSEC.EXE
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\wscntfy.exe
          C:\WINDOWS\system32\VTTimer.exe
          C:\WINDOWS\system32\S3trayp.exe
          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
          C:\WINDOWS\system32\CTHELPER.EXE
          C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
          C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          C:\Program Files\MSN Messenger\MsnMsgr.Exe
          C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
          C:\Program Files\MSN Messenger\usnsvc.exe
          C:\PROGRA~1\INCRED~1\bin\IncMail.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Documents and Settings\jerome\Bureau\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
          O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
          O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
          O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
          O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
          O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

          Pour l'instant , le probleme a l'air d'avoir disparu.
          0
          2. jlpjlp Contributeur sécurité
            fix cette ligne avec hijackthis:

            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
            O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll

            télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
            double-clique sur OTMoveIt.exe pour le lancer.
            copie la liste qui se trouve en citation ci-dessous,
            et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

            Citation :

            C:\WINDOWS\system32\AcroIEAdvHelper.dll

            clique sur MoveIt! pour lancer la suppression.
            le résultat apparaitra dans le cadre "Results".
            clique sur Exit pour fermer.
            poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

            il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
            http://img137.imageshack.us/img137/3558/refaitjk8.th.jpg

            ___________________

            recolle hijackthis et dis tes pbs
            0
            1. ketzakoalt
              j'ai toujours le pb, voici le rapport :

              Logfile of HijackThis v1.99.1
              Scan saved at 23:29:23, on 19/10/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.5730.0013)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\ZoneLabs\vsmon.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
              C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
              C:\WINDOWS\system32\VTTimer.exe
              C:\WINDOWS\system32\S3trayp.exe
              C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
              C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
              C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
              C:\WINDOWS\system32\CTHELPER.EXE
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              C:\WINDOWS\SYSTEM32\GEARSEC.EXE
              C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
              C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
              C:\Program Files\MSN Messenger\MsnMsgr.Exe
              C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
              C:\PROGRA~1\INCRED~1\bin\IMApp.exe
              C:\WINDOWS\system32\wscntfy.exe
              C:\Program Files\Internet Explorer\iexplore.exe
              C:\Documents and Settings\jerome\Bureau\HijackThis.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
              O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll
              O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
              O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
              O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
              O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
              O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
              O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
              O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
              O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
              O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
              O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O11 - Options group: [INTERNATIONAL] International*
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
              O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
              O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
              O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
              O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
              0
              1. jlpjlp Contributeur sécurité
                FIX ca avec hijackthis

                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

                O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
                O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
                O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

                ___________________

                mets a jour internet explorer: la version 7

                ____________________

                lance internet explorer puis dans outils puis option internet mets l'adresse de google pour l'avoir au demarrage

                ____________________

                recolle hihjackthis
                0
                1. ketzakoalt
                  voici le rapport :

                  Logfile of HijackThis v1.99.1
                  Scan saved at 20:44:17, on 19/10/2007
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\WINDOWS\system32\VTTimer.exe
                  C:\WINDOWS\system32\S3trayp.exe
                  C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                  C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                  C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
                  C:\WINDOWS\system32\CTHELPER.EXE
                  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                  C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                  C:\Program Files\MSN Messenger\MsnMsgr.Exe
                  C:\WINDOWS\SYSTEM32\GEARSEC.EXE
                  C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
                  C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                  C:\WINDOWS\system32\wscntfy.exe
                  C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                  C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                  C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                  C:\Program Files\MSN Messenger\usnsvc.exe
                  C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                  C:\PROGRA~1\INCRED~1\bin\IncMail.exe
                  C:\Documents and Settings\jerome\Bureau\HijackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                  O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll
                  O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
                  O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
                  O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
                  O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
                  O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                  O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
                  O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                  O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                  O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
                  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
                  O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                  O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
                  O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
                  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                  O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                  O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                  O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                  O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
                  O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

                  Je suis toujours redirigé vers tanunah.com a partir de google.
                  0
                  1. jlpjlp Contributeur sécurité
                    C:\System Volume Information\_restore{5CA2E0E0-FBAB-410D-9E82-D91E020BDA29}\RP3\A0000269.exe
                    [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen

                    ca c'est ta restauration system:

                    désactive la restauration système pour purger les virus qui seraient dedans (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre) puis réactive la

                    ___________

                    et le reste correspond au scan panda que tu as fais

                    C:\WINDOWS\system32\ActiveScan\pskavs.dll

                    _____________

                    bref pas grand chose,
                    recolle hijackthis , essaye de refaire lopxp et dis tes pbs
                    0
                    1. ketzakoalt
                      Bonjour,

                      j''ai installé le lopxpsetup, il me demande d'ecraser des fichiers puis apres rien ne se passe.

                      sinon voici le rapport t'antivir apres installation et scan :

                      AntiVir PersonalEdition Classic
                      Report file date: vendredi 19 octobre 2007 16:48

                      Scanning for 896565 virus strains and unwanted programs.

                      Licensed to: Avira AntiVir PersonalEdition Classic
                      Serial number: 0000149996-ADJIE-0001
                      Platform: Windows XP
                      Windows version: (Service Pack 2) [5.1.2600]
                      Username: SYSTEM
                      Computer name: MONPC

                      Version information:
                      BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
                      AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 12:16:29
                      AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 11:23:51
                      LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 14:32:47
                      LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 11:35:20
                      ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:27:15
                      ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 13:26:55
                      ANTIVIR2.VDF : 7.0.0.91 687104 Bytes 16/10/2007 14:48:31
                      ANTIVIR3.VDF : 7.0.0.110 171008 Bytes 19/10/2007 14:48:31
                      AVEWIN32.DLL : 7.6.0.27 3019264 Bytes 19/10/2007 14:48:32
                      AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 09:36:26
                      AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 06:39:17
                      AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
                      AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 07:46:00
                      AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 06:17:06
                      AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 11:26:33
                      AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 06:10:18
                      NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 10:09:42
                      RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 11:38:13
                      RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 11:50:37
                      SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 08:37:21

                      Configuration settings for the scan:
                      Jobname..........................: Complete system scan
                      Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
                      Logging..........................: low
                      Primary action...................: interactive
                      Secondary action.................: ignore
                      Scan master boot sector..........: off
                      Scan boot sector.................: on
                      Boot sectors.....................: C:,
                      Scan memory......................: on
                      Process scan.....................: on
                      Scan registry....................: on
                      Search for rootkits..............: off
                      Scan all files...................: Intelligent file selection
                      Scan archives....................: on
                      Recursion depth..................: 20
                      Smart extensions.................: on
                      Macro heuristic..................: on
                      File heuristic...................: medium

                      Start of the scan: vendredi 19 octobre 2007 16:49

                      The scan of running processes will be started
                      Scan process 'avscan.exe' - '1' Module(s) have been scanned
                      Scan process 'avcenter.exe' - '1' Module(s) have been scanned
                      Scan process 'sched.exe' - '1' Module(s) have been scanned
                      Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                      Scan process 'avguard.exe' - '1' Module(s) have been scanned
                      Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
                      Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
                      Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
                      Scan process 'alg.exe' - '1' Module(s) have been scanned
                      Scan process 'ImApp.exe' - '1' Module(s) have been scanned
                      Scan process 'EmuPatchMixDSP.exe' - '1' Module(s) have been scanned
                      Scan process 'gearsec.exe' - '1' Module(s) have been scanned
                      Scan process 'CDAC11BA.EXE' - '1' Module(s) have been scanned
                      Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
                      Scan process 'aawservice.exe' - '1' Module(s) have been scanned
                      Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
                      Scan process 'CTHELPER.EXE' - '1' Module(s) have been scanned
                      Scan process 'cledx.exe' - '1' Module(s) have been scanned
                      Scan process 'jusched.exe' - '1' Module(s) have been scanned
                      Scan process 'zlclient.exe' - '0' Module(s) have been scanned
                      Scan process 'S3Trayp.exe' - '1' Module(s) have been scanned
                      Scan process 'VTTimer.exe' - '1' Module(s) have been scanned
                      Scan process 'explorer.exe' - '1' Module(s) have been scanned
                      Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                      Scan process 'vsmon.exe' - '0' Module(s) have been scanned
                      Scan process 'svchost.exe' - '1' Module(s) have been scanned
                      Scan process 'svchost.exe' - '1' Module(s) have been scanned
                      Scan process 'svchost.exe' - '1' Module(s) have been scanned
                      Scan process 'svchost.exe' - '1' Module(s) have been scanned
                      Scan process 'svchost.exe' - '1' Module(s) have been scanned
                      Scan process 'lsass.exe' - '1' Module(s) have been scanned
                      Scan process 'services.exe' - '1' Module(s) have been scanned
                      Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                      Scan process 'csrss.exe' - '1' Module(s) have been scanned
                      Scan process 'smss.exe' - '1' Module(s) have been scanned
                      33 processes with 33 modules were scanned

                      Start scanning boot sectors:
                      Boot sector 'C:\'
                      [NOTE] No virus was found!

                      Starting to scan the registry.
                      The registry was scanned ( '25' files ).

                      Starting the file scan:

                      Begin scan in 'C:\'
                      C:\pagefile.sys
                      [WARNING] The file could not be opened!
                      C:\Program Files\Panda Security\NanoScan\Engine\psnflg.dll
                      [DETECTION] Is the Trojan horse TR/Agent.bux.1
                      [INFO] The file was moved to '4786c7f2.qua'!
                      C:\Program Files\Panda Security\TotalScan\pskavs.dll
                      [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
                      [INFO] The file was moved to '4783c7fc.qua'!
                      C:\System Volume Information\_restore{5CA2E0E0-FBAB-410D-9E82-D91E020BDA29}\RP3\A0000269.exe
                      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
                      [INFO] The file was moved to '4748c820.qua'!
                      C:\System Volume Information\_restore{5CA2E0E0-FBAB-410D-9E82-D91E020BDA29}\RP5\A0000388.dll
                      [DETECTION] Is the Trojan horse TR/Agent.bux.1
                      [INFO] The file was moved to '4748c828.qua'!
                      C:\System Volume Information\_restore{5CA2E0E0-FBAB-410D-9E82-D91E020BDA29}\RP5\A0000389.dll
                      [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
                      [INFO] The file was moved to '4748c82b.qua'!
                      C:\WINDOWS\system32\ActiveScan\pskavs.dll
                      [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
                      [INFO] The file was moved to '4783c9d3.qua'!

                      End of the scan: vendredi 19 octobre 2007 17:14
                      Used time: 25:03 min

                      The scan has been done completely.

                      2578 Scanning directories
                      121070 Files were scanned
                      6 viruses and/or unwanted programs were found
                      0 Files were classified as suspicious:
                      0 files were deleted
                      0 files were repaired
                      6 files were moved to quarantine
                      0 files were renamed
                      1 Files cannot be scanned
                      121064 Files not concerned
                      880 Archives were scanned
                      3 Warnings
                      1 Notes
                      0
                      1. jlpjlp Contributeur sécurité
                        mets a jour internet explorer , la version 7:

                        DEMARRER puis TOUS LES PROGRAMMES puis WINDOWS UPDATE

                        ______________________

                        Télécharge ceci: (by Moe) :

                        http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

                        Double clic sur Lopxpsetup.exe pour lancer l'installation
                        Au menu, choisir l'option 1
                        Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
                        Une rapport sera alors crée, à copie/colle en entier sur le forum.

                        __________________
                        tu n'as pas d'antivirus
                        installe antivir et scan avec et colle moi le rapport:

                        https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/13198.html
                        0
                        1. ketzakoalt
                          voici le rapport, combofix :

                          ComboFix 07-10-19.1 - jerome 2007-10-19 14:12:49.1 - NTFSx86
                          Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.510 [GMT 2:00]
                          Running from: C:\Documents and Settings\jerome\Mes documents\ComboFix.exe
                          * Created a new restore point
                          .

                          ((((((((((((((((((((((((((((( Fichiers créés 2007-09-19 to 2007-10-19 ))))))))))))))))))))))))))))))))))))
                          .

                          2007-10-19 14:11 51,200 --a------ C:\WINDOWS\NirCmd.exe
                          2007-10-18 23:24 <REP> d-------- C:\Documents and Settings\jerome\Application Data\Apple Computer
                          2007-10-17 20:06 <REP> d-------- C:\Program Files\Google
                          2007-10-17 18:29 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
                          2007-10-17 18:29 24,661 --a--c--- C:\WINDOWS\system32\dllcache\spxcoins.dll
                          2007-10-17 18:29 13,312 --a------ C:\WINDOWS\system32\irclass.dll
                          2007-10-17 18:29 13,312 --a--c--- C:\WINDOWS\system32\dllcache\irclass.dll
                          2007-10-17 17:49 53,248 --a------ C:\WINDOWS\system32\Process.exe
                          2007-10-16 21:18 <REP> d-------- C:\Program Files\Lavasoft
                          2007-10-16 21:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
                          2007-10-16 21:17 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
                          2007-10-16 20:56 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                          2007-10-16 20:37 <REP> d-------- C:\Program Files\Navilog1
                          2007-10-16 18:34 <REP> d-------- C:\Program Files\Panda Security
                          2007-10-16 18:20 1,680 --a------ C:\WINDOWS\system32\tmp.reg
                          2007-10-16 18:19 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
                          2007-10-16 18:19 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
                          2007-10-16 18:19 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
                          2007-10-16 18:19 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
                          2007-10-14 18:51 286,720 --a------ C:\WINDOWS\system32\Mp3com.dll
                          2007-10-14 18:51 217,088 --a------ C:\WINDOWS\Rewire.dll
                          2007-10-14 18:51 40,960 --a------ C:\WINDOWS\system32\Mros432.dll
                          2007-10-14 18:51 36,864 --a------ C:\WINDOWS\system32\audioencoderenum.dll
                          2007-10-14 17:15 <REP> d-------- C:\Documents and Settings\cubase\Application Data\DivX
                          2007-10-14 17:14 <REP> d-------- C:\Documents and Settings\cubase\Application Data\Steinberg
                          2007-10-14 16:19 <REP> d-------- C:\WINDOWS\pss
                          2007-10-14 16:10 <REP> d-------- C:\Documents and Settings\cubase\Application Data\EmuPatchMixDSP
                          2007-10-14 16:09 <REP> d-------- C:\Documents and Settings\cubase\Application Data\AVG7
                          2007-10-14 16:08 <REP> d--h----- C:\Documents and Settings\cubase\Voisinage r‚seau
                          2007-10-14 16:08 <REP> d--h----- C:\Documents and Settings\cubase\Voisinage d'impression
                          2007-10-14 16:08 <REP> d--h----- C:\Documents and Settings\cubase\ModŠles
                          2007-10-14 16:08 <REP> dr------- C:\Documents and Settings\cubase\Mes documents
                          2007-10-14 16:08 <REP> dr------- C:\Documents and Settings\cubase\Menu D‚marrer
                          2007-10-14 16:08 <REP> dr------- C:\Documents and Settings\cubase\Favoris
                          2007-10-14 16:08 <REP> d-------- C:\Documents and Settings\cubase\Bureau
                          2007-10-14 16:08 <REP> d-------- C:\Documents and Settings\cubase\Application Data\Grisoft
                          2007-10-14 11:46 <REP> d-------- C:\Documents and Settings\jerome\Application Data\DivX
                          2007-10-14 11:43 <REP> d-------- C:\Program Files\DivX
                          2007-10-12 18:26 <REP> d--h----- C:\WINDOWS\ShellNew
                          2007-10-12 18:24 <REP> d-------- C:\Documents and Settings\jerome\Application Data\Microsoft Web Folders
                          2007-10-12 17:35 <REP> d-------- C:\WINDOWS\system32\Samsung_USB_Drivers
                          2007-10-10 13:46 <REP> d-------- C:\WINDOWS\Downloaded Installations
                          2007-10-10 13:42 <REP> d-------- C:\Program Files\Samsung
                          2007-10-09 01:02 <REP> d---s---- C:\Documents and Settings\jerome\UserData
                          2007-10-08 13:33 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
                          2007-10-08 13:06 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
                          2007-10-08 12:50 <REP> d-------- C:\Program Files\QuickTime
                          2007-10-08 12:50 <REP> d-------- C:\Program Files\Apple Software Update
                          2007-10-08 12:50 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
                          2007-10-08 12:50 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
                          2007-10-08 12:42 <REP> d-------- C:\Program Files\Fichiers communs\Creative Professional
                          2007-10-08 12:36 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared
                          2007-10-08 12:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Macrovision
                          2007-10-08 12:36 54,784 --a------ C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                          2007-10-08 12:36 12,464 --a------ C:\WINDOWS\system32\drivers\CdaC15BA.SYS
                          2007-10-08 12:34 <REP> d-------- C:\Documents and Settings\jerome\Application Data\Steinberg
                          2007-10-08 12:22 <REP> d-------- C:\Program Files\Syncrosoft
                          2007-10-08 12:22 704,512 --a------ C:\WINDOWS\system32\SYNSOACC.dll
                          2007-10-08 12:22 147,456 --a------ C:\WINDOWS\system32\SynsoLChk.dll
                          2007-10-08 12:22 45,056 --a------ C:\WINDOWS\system32\Synsopos.exe
                          2007-10-08 12:22 33,792 --a------ C:\WINDOWS\system32\drivers\cledx.sys
                          2007-10-08 12:22 16,896 --a------ C:\WINDOWS\system32\drivers\synasUSB.sys
                          2007-10-07 22:57 <REP> d-------- C:\Documents and Settings\jerome\Application Data\Azureus
                          2007-10-07 22:49 <REP> d-------- C:\WINDOWS\Sun
                          2007-10-07 22:48 <REP> d-------- C:\Program Files\Java
                          2007-10-07 22:48 <REP> d-------- C:\Program Files\Fichiers communs\Java
                          2007-10-07 22:46 <REP> d-------- C:\Program Files\Azureus
                          2007-10-07 21:10 <REP> d-------- C:\Program Files\DAEMON Tools
                          2007-10-07 21:08 384 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000004-00000000-00000004-00001102-00000004-40021102}.dat
                          2007-10-07 21:08 384 --a------ C:\WINDOWS\system32\DVCState-{00000004-00000000-00000004-00001102-00000004-40021102}.dat
                          2007-10-07 21:07 639,224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
                          2007-10-07 19:20 <REP> d-------- C:\Documents and Settings\jerome\Contacts
                          2007-10-07 19:19 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
                          2007-10-07 19:19 <REP> d-------- C:\Program Files\MSN Messenger
                          2007-10-07 19:13 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
                          2007-10-07 19:07 <REP> d-------- C:\Program Files\IncrediMail
                          2007-10-07 19:02 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\AVG7
                          2007-10-07 19:02 <REP> d-------- C:\Documents and Settings\jerome\Application Data\AVG7
                          2007-10-07 19:02 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
                          2007-10-07 19:02 <REP> d-------- C:\Documents and Settings\All Users\Application Data\avg7
                          2007-10-07 19:02 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
                          2007-10-07 19:02 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
                          2007-09-28 18:08 156,992 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe
                          2007-09-28 18:07 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
                          2007-09-28 18:07 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
                          2007-09-28 18:07 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe
                          2007-09-28 18:07 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
                          2007-09-20 23:43 200,192 --a------ C:\WINDOWS\system32\AcroIEAdvHelper.dll

                          .
                          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          2007-10-19 12:15 6,737,952 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
                          2007-10-19 12:14 79,988 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
                          2007-10-14 16:51 --------- d-----w C:\Program Files\Steinberg
                          2007-10-14 16:50 --------- d--h--w C:\Program Files\InstallShield Installation Information
                          2007-10-14 16:50 --------- d-----w C:\Program Files\Creative Professional
                          2007-10-12 16:23 --------- d-----w C:\Program Files\microsoft frontpage
                          2007-10-07 22:33 --------- d-----w C:\Program Files\Fichiers communs\Adobe
                          2007-10-07 19:08 --------- d-----w C:\Documents and Settings\jerome\Application Data\EmuPatchMixDSP
                          2007-10-07 18:48 --------- d-----w C:\Documents and Settings\jerome\Application Data\Creative
                          2007-10-07 18:46 --------- d-----w C:\Documents and Settings\jerome\Application Data\InterTrust
                          2007-10-07 18:42 --------- d-----w C:\Program Files\Minnetonka Audio Software
                          2007-10-07 18:41 --------- d-----w C:\Program Files\Creative
                          2007-10-07 18:40 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
                          2007-10-07 18:37 --------- d-----w C:\Program Files\Fichiers communs\SpeechEngines
                          2007-10-07 18:37 --------- d-----w C:\Program Files\Fichiers communs\ODBC
                          2007-10-07 17:13 75,932 ----a-w C:\WINDOWS\system32\drivers\klick.dat
                          2007-10-07 17:13 74,396 ----a-w C:\WINDOWS\system32\drivers\klin.dat
                          2007-10-07 16:56 --------- d-----w C:\Program Files\S3
                          2007-10-07 16:55 --------- d-----w C:\Program Files\VIA
                          2007-10-07 16:45 --------- d-----w C:\Program Files\Services en ligne
                          2007-10-07 16:45 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
                          2007-09-28 16:07 9,464 ----a-w C:\WINDOWS\system32\drivers\cdralw2k.sys
                          2007-09-28 16:07 9,336 ----a-w C:\WINDOWS\system32\drivers\cdr4_xp.sys
                          2007-09-28 16:07 43,528 ----a-w C:\WINDOWS\system32\drivers\PxHelp20.sys
                          2007-09-28 16:07 129,784 ----a-w C:\WINDOWS\system32\pxafs.dll
                          2007-09-28 16:07 120,056 ----a-w C:\WINDOWS\system32\pxcpyi64.exe
                          2007-09-28 16:07 118,520 ----a-w C:\WINDOWS\system32\pxinsi64.exe
                          2007-09-28 16:05 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
                          2007-09-28 16:05 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
                          2007-09-28 16:05 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
                          2007-09-28 16:05 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
                          2007-09-28 16:05 739,840 ----a-w C:\WINDOWS\system32\DivX.dll
                          2007-09-28 16:05 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
                          2007-09-28 16:05 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
                          2007-09-28 16:05 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
                          2007-09-28 16:05 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
                          2007-09-28 16:05 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
                          2007-09-28 16:05 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
                          2007-09-28 16:05 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
                          2007-09-28 16:05 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
                          .

                          ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          .
                          *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

                          [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8673347E-6D08-4B61-8794-E101DC448950}]
                          2007-09-20 23:43 200192 --a------ C:\WINDOWS\system32\AcroIEAdvHelper.dll

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                          "VTTimer"="VTTimer.exe" [2006-08-03 08:53 C:\WINDOWS\system32\VTTimer.exe]
                          "S3Trayp"="S3trayp.exe" [2006-07-10 20:33 C:\WINDOWS\system32\S3Trayp.exe]
                          "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-06-21 21:54]
                          "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
                          "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 06:24]
                          "H2O"="C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe" [2005-10-23 00:00]
                          "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 12:48]
                          "CTHelper"="CTHELPER.EXE" [2004-08-25 10:48 C:\WINDOWS\system32\CTHELPER.EXE]

                          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                          "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]
                          "SetDefaultMIDI"="MIDIDef.exe" [2003-06-20 12:13 C:\WINDOWS\MIDIDEF.EXE]
                          "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
                          "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-09-20 15:17]

                          R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys
                          R0 xfilt;VIA SATA IDE Hot-plug Driver;C:\WINDOWS\system32\DRIVERS\xfilt.sys
                          R3 CLEDX;Team H2O CLEDX service;C:\WINDOWS\system32\DRIVERS\cledx.sys
                          R3 S3GIGP;S3GIGP;C:\WINDOWS\system32\DRIVERS\S3gIGPm.sys
                          S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

                          [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
                          AutoRun\command - D:\setup.exe

                          .
                          Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
                          "2007-10-08 10:50:27 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
                          - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
                          .
                          **************************************************************************

                          catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                          Rootkit scan 2007-10-19 14:16:00
                          Windows 5.1.2600 Service Pack 2 NTFS

                          scanning hidden processes ...

                          scanning hidden autostart entries ...

                          scanning hidden files ...

                          scan completed successfully
                          hidden files: 0

                          **************************************************************************
                          .
                          Completion time: 2007-10-19 14:17:03 - machine was rebooted
                          .
                          --- E O F ---

                          voici la rapport clean avant nettoyage :

                          Script execute en mode sans echec
                          Rapport clean par Malekal_morte - http://www.malekal.com
                          Script execute en mode sans echec 19/10/2007 a 14:30:12,48

                          Microsoft Windows XP [version 5.1.2600]

                          *** Suppression des fichiers dans C:

                          *** Suppression des fichiers dans C:\WINDOWS\

                          *** Suppression des fichiers dans C:\WINDOWS\system32
                          tentative de suppression de "C:\WINDOWS\Downloaded Program Files\CONFLICT.1"

                          *** Suppression des fichiers dans C:\Program Files

                          *** Suppression des clefs du registre effectuee..
                          *** Fin du rapport !

                          et apres nettoyage :

                          Script execute en mode sans echec
                          Rapport clean par Malekal_morte - http://www.malekal.com
                          Script execute en mode sans echec 19/10/2007 a 14:30:12,48

                          Microsoft Windows XP [version 5.1.2600]

                          *** Suppression des fichiers dans C:

                          *** Suppression des fichiers dans C:\WINDOWS\

                          *** Suppression des fichiers dans C:\WINDOWS\system32
                          tentative de suppression de "C:\WINDOWS\Downloaded Program Files\CONFLICT.1"

                          *** Suppression des fichiers dans C:\Program Files

                          *** Suppression des clefs du registre effectuee..
                          *** Fin du rapport !

                          et enfin le rapport hijackthis :

                          Logfile of HijackThis v1.99.1
                          Scan saved at 14:37:06, on 19/10/2007
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                          C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                          C:\WINDOWS\SYSTEM32\GEARSEC.EXE
                          C:\WINDOWS\system32\wuauclt.exe
                          C:\WINDOWS\system32\wscntfy.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\WINDOWS\system32\VTTimer.exe
                          C:\WINDOWS\system32\S3trayp.exe
                          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                          C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                          C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
                          C:\WINDOWS\system32\CTHELPER.EXE
                          C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                          C:\Program Files\MSN Messenger\MsnMsgr.Exe
                          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                          C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
                          C:\Documents and Settings\jerome\Bureau\HijackThis.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                          O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll
                          O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
                          O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
                          O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
                          O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                          O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
                          O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                          O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
                          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                          O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
                          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
                          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                          O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
                          O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
                          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                          O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                          O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
                          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

                          ... et mon virus est toujours là!
                          0
                          1. jlpjlp Contributeur sécurité
                            desinstalle navilog

                            ____________

                            desinstalle avg 7 et remplace le par antivir et scan avec et colle le rapport:

                            https://www.01net.com/

                            _____________

                            combofix (colle le rapport)

                            http://mickael.barroux.free.fr/securite/combofix.php

                            ______________

                            Colle le rapport :
                            Clean permettra de faire du nettoyage et supprimer des fichiers que des anti-virus et anti-spywares n'ont pas pu trouver. Le logiciel est régulièrement mis à jour, vous devrez donc le re-téléchargé pour obtenir une version plus récente.

                            • Téléchargez clean.zip, décompressez-le sur votre bureau (clic droit / extraire tout), vous obtenez alors un dossier clean
                            • Démarrez Windows en mode sans échec : Guide pour redémarrer en mode sans échec
                            • Ouvrez le dossier clean qui se trouve sur ton bureau, et double-cliquez sur clean.cmd, une fenêtre noire va apparaître pendant un instant, laissez la ouverte jusqu'à ce qu'elle se ferme.
                            Manuel de clean :
                            http://kerio.probb.fr/tuto-Clean-h37.html

                            _________________

                            recolle hijackthis
                            0
                            2. ketzakoalt
                              voici le rapport adaware :

                              Ad-Aware 2007 Build
                              Log File Created on: 2007-10-16 21:28:56
                              Using Definitions File: C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\core.aawdef
                              Computer name: MONPC
                              Name of user performing scan: SYSTEM

                              System information
                              ===========================
                              Number of processors: 1
                              Processor type: AMD Sempron(tm) Processor 3200+
                              Memory Available: 50%
                              Total Physical Memory: 937934848 Bytes
                              Available Physical Memory: 461877248 Bytes
                              Total Page File Size: 2272387072 Bytes
                              Available On Page File: 1789014016 Bytes
                              Total Virtual Memory: 2147352576 Bytes
                              Available Virtual Memory: 1976729600 Bytes
                              OS: Microsoft Windows XP Service Pack 2 (Build 2600)

                              Ad-Aware 2007 Settings
                              ===========================
                              Skipping files larger than 1048576 kB
                              Ignoring infections with lower TAI than: 3

                              Extended Ad-Aware 2007 Settings
                              ===========================
                              Unloading known modules during scan
                              Ignoring spanned files when scanning cab archives
                              Scanning registry for all users
                              Using permanent archive caching
                              Reanalyzing results after scanning before displaying results
                              Trying to unload modules prior to removal
                              Let Windows remove files currently in use at next reboot
                              Removing quarantined objects after restore
                              Logging Ad-Aware events
                              Blocking Pop-Ups aggressively
                              Deactivating Ad-Watch during scans
                              Writeprotecting system files after repairs
                              Including Ad-aware command line parameters in log file
                              Include info about ignored objects in log file
                              Including basic settings in log file
                              Including advanced settings in log file
                              Including user and computer name in log file
                              Include reference summary in log file
                              Creating log file for removal operations
                              Including module info in log file
                              Include Alternate Data Stream details in log file
                              Create and save WebUpdate log file

                              Databaseinfo
                              ===========================
                              Version number: 7
                              Build Number: 0
                              Build Date and Time: 2007/07/05 07:55:33

                              Scan Statistics
                              ===========================
                              Method: Smart
                              Scan tracking cookies.............................: On
                              Scan ADS filestreams..............................: Off

                              Item Scanned: 90910
                              Infections Detected: 33
                              Infections Ignored: 0

                              Scan detailed statistics
                              ===========================
                              Type Critical Total
                              Process Scan....: 0 0
                              Registry Scan...: 0 0
                              Registry PE Scan: 0 0
                              Hosts File Scan.: 0 0
                              File Scan.......: 0 0
                              Folder Scan.....: 0 0
                              LSP Scan........: 0 0
                              ADS Scan........: 0 0
                              Cookie Scan.....: 30 30
                              File Hash Scan..: 0 0

                              Infections Found
                              ===========================
                              Family Id: 725 Name: Tracking Cookie Category: DataMiner TAI:3
                              Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com A2 /
                              Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com B2 /
                              Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com C3 /
                              Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com D3 /
                              Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com E2 /
                              Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat advertising.com ACID /
                              Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat advertising.com BASE /
                              Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat advertising.com F1 /
                              Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat advertising.com ROLL /
                              Item Id: 600000144 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat doubleclick.net id /
                              Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat weborama.fr AFFICHE_W /
                              Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat weborama.fr wbo_temps_reel /
                              Item Id: 600000173 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat bluestreak.com id /
                              Item Id: 600000171 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat bs.serving-sys.com eyeblaster /
                              Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat smartadserver.com TestIfCookieP /
                              Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat smartadserver.com pbw /
                              Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat smartadserver.com pid /
                              Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat smartadserver.com pbwmaj /
                              Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat smartadserver.com TestIfCookieP /
                              Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat smartadserver.com pbw /
                              Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat smartadserver.com pid /
                              Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat smartadserver.com pbwmaj /
                              Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat msnportal.112.2o7.net s_vi /
                              Item Id: 600000295 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat adtech.de JEB2 /
                              Item Id: 600000173 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat bluestreak.com id /
                              Item Id: 600000144 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat doubleclick.net id /
                              Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat advertising.com ACID /
                              Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat advertising.com F1 /
                              Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat advertising.com BASE /
                              Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat advertising.com ROLL /
                              Family Id: 9999 Name: MRU Object Category: MRU Object TAI:0
                              Item Id: 1 Value: MRU Path: C:\Documents and Settings\jerome\Recent Count: 55
                              Item Id: 2 Value: MRU Registry Key: S-1-5-21-448539723-926492609-839522115-1003\Software\Microsoft\Search Assistant\ACMru\5603 Count: 1
                              Item Id: 3 Value: MRU Registry Key: S-1-5-21-448539723-926492609-839522115-1003\Software\Microsoft\Internet Explorer\TypedURLs Count: 16

                              Items Ignored During Scan
                              ===========================

                              Listing of running processes
                              ===========================
                              C:\WINDOWS\SYSTEM32\SMSS.EXE
                              c:\windows\system32\smss.exe

                              c:\windows\system32\ntdll.dll

                              C:\WINDOWS\SYSTEM32\CSRSS.EXE
                              c:\windows\system32\csrss.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\csrsrv.dll

                              c:\windows\system32\basesrv.dll

                              c:\windows\system32\winsrv.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\sxs.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              C:\WINDOWS\SYSTEM32\WINLOGON.EXE
                              c:\windows\system32\winlogon.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\authz.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\nddeapi.dll

                              c:\windows\system32\profmap.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\psapi.dll

                              c:\windows\system32\regapi.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\winsta.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\imagehlp.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\msgina.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\odbc32.dll

                              c:\windows\system32\comdlg32.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\odbcint.dll

                              c:\windows\system32\shsvcs.dll

                              c:\windows\system32\sfc.dll

                              c:\windows\system32\sfc_os.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\winscard.dll

                              c:\windows\system32\wtsapi32.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\cscdll.dll

                              c:\windows\system32\wlnotify.dll

                              c:\windows\system32\winspool.drv

                              c:\windows\system32\mpr.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\samlib.dll

                              c:\windows\system32\sxs.dll

                              c:\windows\system32\msv1_0.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\windows\system32\cscui.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\ntmarta.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\wdmaud.drv

                              c:\windows\system32\msacm32.drv

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\midimap.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\wbem\wbemprox.dll

                              c:\windows\system32\wbem\wbemcomn.dll

                              c:\windows\system32\wbem\wbemsvc.dll

                              c:\windows\system32\wbem\fastprox.dll

                              c:\windows\system32\msvcp60.dll

                              c:\windows\system32\ntdsapi.dll

                              c:\windows\system32\dnsapi.dll

                              C:\WINDOWS\SYSTEM32\SERVICES.EXE
                              c:\windows\system32\services.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\scesrv.dll

                              c:\windows\system32\authz.dll

                              c:\windows\system32\umpnpmgr.dll

                              c:\windows\system32\winsta.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\ncobjapi.dll

                              c:\windows\system32\msvcp60.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\eventlog.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\psapi.dll

                              c:\windows\system32\wtsapi32.dll

                              C:\WINDOWS\SYSTEM32\LSASS.EXE
                              c:\windows\system32\lsass.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\lsasrv.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\samsrv.dll

                              c:\windows\system32\cryptdll.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\samlib.dll

                              c:\windows\system32\mpr.dll

                              c:\windows\system32\ntdsapi.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\msprivs.dll

                              c:\windows\system32\kerberos.dll

                              c:\windows\system32\msv1_0.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\windows\system32\netlogon.dll

                              c:\windows\system32\w32time.dll

                              c:\windows\system32\msvcp60.dll

                              c:\windows\system32\schannel.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\wdigest.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\scecli.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\ipsecsvc.dll

                              c:\windows\system32\authz.dll

                              c:\windows\system32\oakley.dll

                              c:\windows\system32\winipsec.dll

                              c:\windows\system32\pstorsvc.dll

                              c:\windows\system32\psbase.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              c:\windows\system32\dssenh.dll

                              C:\WINDOWS\SYSTEM32\SVCHOST.EXE
                              c:\windows\system32\svchost.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\ntmarta.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\samlib.dll

                              c:\windows\system32\rpcss.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\termsrv.dll

                              c:\windows\system32\icaapi.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\imagehlp.dll

                              c:\windows\system32\authz.dll

                              c:\windows\system32\mstlsapi.dll

                              c:\windows\system32\activeds.dll

                              c:\windows\system32\adsldpc.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\atl.dll

                              c:\windows\system32\regapi.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\wtsapi32.dll

                              c:\windows\system32\winsta.dll

                              c:\windows\system32\msv1_0.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\windows\system32\svchost.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\rpcss.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\windows\system32\winrnr.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\rasadhlp.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\svchost.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\ntmarta.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\samlib.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\shsvcs.dll

                              c:\windows\system32\winsta.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\dhcpcsvc.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              c:\windows\system32\wzcsvc.dll

                              c:\windows\system32\rtutils.dll

                              c:\windows\system32\wmi.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\wtsapi32.dll

                              c:\windows\system32\esent.dll

                              c:\windows\system32\atl.dll

                              c:\windows\system32\rastls.dll

                              c:\windows\system32\cryptui.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\imagehlp.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\mprapi.dll

                              c:\windows\system32\activeds.dll

                              c:\windows\system32\adsldpc.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\rasapi32.dll

                              c:\windows\system32\rasman.dll

                              c:\windows\system32\tapi32.dll

                              c:\windows\system32\schannel.dll

                              c:\windows\system32\winscard.dll

                              c:\windows\system32\raschap.dll

                              c:\windows\system32\msv1_0.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\schedsvc.dll

                              c:\windows\system32\ntdsapi.dll

                              c:\windows\system32\msidle.dll

                              c:\windows\system32\audiosrv.dll

                              c:\windows\system32\wkssvc.dll

                              c:\windows\system32\cryptsvc.dll

                              c:\windows\system32\certcli.dll

                              c:\windows\system32\es.dll

                              c:\windows\system32\ersvc.dll

                              c:\windows\system32\dmserver.dll

                              c:\windows\pchealth\helpctr\binaries\pchsvc.dll

                              c:\windows\system32\netman.dll

                              c:\windows\system32\netshell.dll

                              c:\windows\system32\credui.dll

                              c:\windows\system32\wzcsapi.dll

                              c:\windows\system32\srvsvc.dll

                              c:\windows\system32\hidserv.dll

                              c:\windows\system32\hid.dll

                              c:\windows\system32\trkwks.dll

                              c:\windows\system32\srsvc.dll

                              c:\windows\system32\powrprof.dll

                              c:\windows\system32\sens.dll

                              c:\windows\system32\seclogon.dll

                              c:\windows\system32\sxs.dll

                              c:\windows\system32\w32time.dll

                              c:\windows\system32\msvcp60.dll

                              c:\windows\system32\browser.dll

                              c:\windows\system32\wuauserv.dll

                              c:\windows\system32\wbem\wmisvc.dll

                              c:\windows\system32\vssapi.dll

                              c:\windows\system32\wuaueng.dll

                              c:\windows\system32\advpack.dll

                              c:\windows\system32\shfolder.dll

                              c:\windows\system32\winspool.drv

                              c:\windows\system32\winhttp.dll

                              c:\windows\system32\cabinet.dll

                              c:\windows\system32\mspatcha.dll

                              c:\windows\system32\sfc.dll

                              c:\windows\system32\sfc_os.dll

                              c:\windows\system32\ipnathlp.dll

                              c:\windows\system32\authz.dll

                              c:\windows\system32\comsvcs.dll

                              c:\windows\system32\mtxclu.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\colbact.dll

                              c:\windows\system32\clusapi.dll

                              c:\windows\system32\resutils.dll

                              c:\windows\system32\wscsvc.dll

                              c:\windows\system32\msi.dll

                              c:\windows\system32\wbem\wbemcomn.dll

                              c:\windows\system32\wbem\wbemcore.dll

                              c:\windows\system32\wbem\esscli.dll

                              c:\windows\system32\wbem\fastprox.dll

                              c:\windows\system32\wbem\wmiutils.dll

                              c:\windows\system32\wbem\repdrvfs.dll

                              c:\windows\system32\wbem\wmiprvsd.dll

                              c:\windows\system32\ncobjapi.dll

                              c:\windows\system32\wbem\wbemess.dll

                              c:\windows\system32\upnp.dll

                              c:\windows\system32\ssdpapi.dll

                              c:\windows\system32\rasadhlp.dll

                              c:\windows\system32\wbem\ncprov.dll

                              c:\windows\system32\rasdlg.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\svchost.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\dnsrslvr.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              c:\windows\system32\svchost.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\ntmarta.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\samlib.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\lmhsvc.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\webclnt.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\urlmon.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\regsvc.dll

                              c:\windows\system32\ssdpsrv.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\wshtcpip.dll

                              C:\WINDOWS\EXPLORER.EXE
                              c:\windows\explorer.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\browseui.dll

                              c:\windows\system32\shdocvw.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\cryptui.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\imagehlp.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\cscui.dll

                              c:\windows\system32\cscdll.dll

                              c:\windows\system32\themeui.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\msimg32.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\actxprxy.dll

                              c:\windows\system32\msutb.dll

                              c:\windows\system32\msctf.dll

                              c:\windows\system32\linkinfo.dll

                              c:\windows\system32\ntshrui.dll

                              c:\windows\system32\atl.dll

                              c:\windows\system32\urlmon.dll

                              c:\windows\system32\msi.dll

                              c:\windows\system32\winsta.dll

                              c:\windows\system32\webcheck.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\stobject.dll

                              c:\windows\system32\batmeter.dll

                              c:\windows\system32\powrprof.dll

                              c:\windows\system32\wtsapi32.dll

                              c:\windows\system32\wdmaud.drv

                              c:\windows\system32\msacm32.drv

                              c:\windows\system32\midimap.dll

                              c:\windows\system32\netshell.dll

                              c:\windows\system32\rtutils.dll

                              c:\windows\system32\credui.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\program files\grisoft\avg anti-spyware 7.5\shellexecutehook.dll

                              c:\program files\incredimail\bin\b4imapp.dll

                              c:\windows\system32\sxs.dll

                              c:\windows\system32\mpr.dll

                              c:\windows\system32\drprov.dll

                              c:\windows\system32\ntlanman.dll

                              c:\windows\system32\netui0.dll

                              c:\windows\system32\netui1.dll

                              c:\windows\system32\netrap.dll

                              c:\windows\system32\samlib.dll

                              c:\windows\system32\davclnt.dll

                              c:\windows\system32\shdoclc.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\browselc.dll

                              c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx

                              c:\windows\system32\duser.dll

                              c:\windows\system32\msgina.dll

                              c:\windows\system32\odbc32.dll

                              c:\windows\system32\comdlg32.dll

                              c:\windows\system32\odbcint.dll

                              c:\windows\system32\mlang.dll

                              c:\windows\system32\rasapi32.dll

                              c:\windows\system32\rasman.dll

                              c:\windows\system32\tapi32.dll

                              c:\windows\system32\sensapi.dll

                              c:\windows\system32\cryptnet.dll

                              c:\windows\system32\winhttp.dll

                              c:\progra~1\spybot~1\sdhelper.dll

                              c:\windows\system32\faultrep.dll

                              c:\windows\system32\olepro32.dll

                              c:\windows\system32\msisip.dll

                              c:\windows\system32\wshext.dll

                              c:\windows\system32\mfc42.dll

                              c:\windows\system32\mfc42loc.dll

                              c:\windows\system32\wshfr.dll

                              C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
                              c:\windows\system32\spoolsv.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\spoolss.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\rasadhlp.dll

                              c:\windows\system32\localspl.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\sfc_os.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\imagehlp.dll

                              c:\windows\system32\winspool.drv

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\cnbjmon.dll

                              c:\windows\system32\pjlmon.dll

                              c:\windows\system32\tcpmon.dll

                              c:\windows\system32\usbmon.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\winrnr.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\win32spl.dll

                              c:\windows\system32\netrap.dll

                              c:\windows\system32\ntdsapi.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\inetpp.dll

                              c:\windows\system32\xpsp2res.dll

                              C:\PROGRAM FILES\SYNCROSOFT\POS\H2O\CLEDX.EXE
                              c:\program files\syncrosoft\pos\h2o\cledx.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\newdev.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\credui.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\program files\syncrosoft\pos\h2o\emu.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\system32\msctf.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\imagehlp.dll

                              C:\WINDOWS\SYSTEM32\CTFMON.EXE
                              c:\windows\system32\ctfmon.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\msctf.dll

                              c:\windows\system32\msutb.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
                              c:\program files\msn messenger\msnmsgr.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcr80.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msimg32.dll

                              c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll

                              c:\program files\msn messenger\msncore.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\system32\imm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\windows\system32\msacm32.dll

                              c:\program files\msn messenger\msidcrl40.dll

                              c:\windows\system32\sensapi.dll

                              c:\windows\system32\psapi.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\imagehlp.dll

                              c:\program files\msn messenger\contactsux.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\cryptnet.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\winhttp.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\msctf.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\inetcomm.dll

                              c:\windows\system32\msoert2.dll

                              c:\windows\system32\inetres.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\program files\msn messenger\msgslang.8.1.0178.00.dll

                              c:\program files\msn messenger\msgsres.dll

                              c:\windows\system32\wtsapi32.dll

                              c:\windows\system32\winsta.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\es.dll

                              c:\windows\system32\urlmon.dll

                              c:\windows\system32\sxs.dll

                              c:\program files\msn messenger\msgswcam.dll

                              c:\windows\system32\sirenacm.dll

                              c:\windows\system32\devenum.dll

                              c:\windows\system32\msdmo.dll

                              c:\windows\system32\riched20.dll

                              c:\program files\incredimail\bin\b4imapp.dll

                              c:\program files\msn messenger\lmcdata.dll

                              c:\program files\msn messenger\contact.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\schannel.dll

                              c:\windows\system32\rasadhlp.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              c:\windows\system32\rasapi32.dll

                              c:\windows\system32\rasman.dll

                              c:\windows\system32\tapi32.dll

                              c:\windows\system32\rtutils.dll

                              c:\windows\system32\msxml3.dll

                              c:\windows\system32\dssenh.dll

                              c:\windows\system32\winrnr.dll

                              c:\windows\system32\mlang.dll

                              c:\windows\system32\shdocvw.dll

                              c:\windows\system32\cryptui.dll

                              c:\program files\msn messenger\abssm.dll

                              c:\program files\msn messenger\dfsr.dll

                              c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll

                              c:\windows\system32\esent.dll

                              c:\program files\msn messenger\custsat.dll

                              c:\program files\msn messenger\usnsvcps.dll

                              c:\windows\system32\shdoclc.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\cscui.dll

                              c:\windows\system32\cscdll.dll

                              c:\windows\system32\linkinfo.dll

                              c:\windows\system32\ntshrui.dll

                              c:\windows\system32\atl.dll

                              c:\windows\system32\jscript.dll

                              c:\windows\system32\vbscript.dll

                              c:\windows\system32\mfc42.dll

                              c:\windows\system32\mfc42loc.dll

                              c:\windows\system32\wdmaud.drv

                              c:\windows\system32\msacm32.drv

                              c:\windows\system32\midimap.dll

                              c:\windows\system32\ddraw.dll

                              c:\windows\system32\dciman32.dll

                              c:\windows\system32\ddrawex.dll

                              c:\windows\system32\msi.dll

                              c:\windows\system32\wmvcore.dll

                              c:\windows\system32\wmasf.dll

                              C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE
                              c:\windows\system32\drivers\cdac11ba.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              C:\WINDOWS\SYSTEM32\GEARSEC.EXE
                              c:\windows\system32\gearsec.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              C:\WINDOWS\SYSTEM32\WDFMGR.EXE
                              c:\windows\system32\wdfmgr.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\imagehlp.dll

                              C:\PROGRA~1\INCRED~1\BIN\IMAPP.EXE
                              c:\progra~1\incred~1\bin\imapp.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\progra~1\incred~1\bin\imutilsu.dll

                              c:\progra~1\incred~1\bin\imntutilu.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\mfc42u.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\mpr.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\urlmon.dll

                              c:\windows\system32\msvcp60.dll

                              c:\progra~1\incred~1\bin\imlooku.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\mfc42loc.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\dbghelp.dll

                              c:\windows\system32\msctf.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\program files\incredimail\bin\imappru.dll

                              c:\windows\system32\oleacc.dll

                              c:\windows\system32\sxs.dll

                              c:\program files\incredimail\bin\imcomutlu.dll

                              c:\program files\incredimail\bin\imspoolu.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\msvcirt.dll

                              c:\program files\incredimail\bin\imfoldrsu.dll

                              c:\program files\incredimail\bin\imservu.dll

                              c:\program files\incredimail\bin\imjunku.dll

                              c:\program files\incredimail\bin\imnotfyu.dll

                              c:\program files\incredimail\bin\b4imapp.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\rasapi32.dll

                              c:\windows\system32\rasman.dll

                              c:\windows\system32\tapi32.dll

                              c:\windows\system32\rtutils.dll

                              c:\windows\system32\sensapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\mprapi.dll

                              c:\windows\system32\activeds.dll

                              c:\windows\system32\adsldpc.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\atl.dll

                              c:\windows\system32\samlib.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\winhttp.dll

                              c:\windows\system32\mlang.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\rasadhlp.dll

                              c:\windows\system32\winrnr.dll

                              c:\windows\system32\apphelp.dll

                              C:\WINDOWS\SYSTEM32\WSCNTFY.EXE
                              c:\windows\system32\wscntfy.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\msctf.dll

                              C:\WINDOWS\SYSTEM32\ALG.EXE
                              c:\windows\system32\alg.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\atl.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\shimeng.dll

                              c:\windows\apppatch\acgenral.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
                              c:\program files\internet explorer\iexplore.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\shdocvw.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\cryptui.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\imagehlp.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\version.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\msctf.dll

                              c:\windows\system32\browseui.dll

                              c:\windows\system32\browselc.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\urlmon.dll

                              c:\windows\system32\cscui.dll

                              c:\windows\system32\cscdll.dll

                              c:\windows\system32\setupapi.dll

                              c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx

                              c:\windows\system32\sxs.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\program files\java\jre1.6.0_03\bin\ssv.dll

                              c:\program files\java\jre1.6.0_03\bin\msvcr71.dll

                              c:\windows\system32\acroieadvhelper.dll

                              c:\windows\system32\olepro32.dll

                              c:\windows\system32\msxml3.dll

                              c:\windows\system32\winhttp.dll

                              c:\windows\system32\shdoclc.dll

                              c:\windows\system32\mlang.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              c:\program files\incredimail\bin\b4imapp.dll

                              c:\windows\system32\rasapi32.dll

                              c:\windows\system32\rasman.dll

                              c:\windows\system32\tapi32.dll

                              c:\windows\system32\rtutils.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\sensapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\rasadhlp.dll

                              c:\windows\system32\mshtml.dll

                              c:\windows\system32\msls31.dll

                              c:\windows\system32\msimtf.dll

                              c:\windows\system32\imm32.dll

                              c:\windows\system32\jscript.dll

                              c:\windows\system32\iepeers.dll

                              c:\windows\system32\winspool.drv

                              c:\windows\system32\macromed\flash\flash9d.ocx

                              c:\windows\system32\comdlg32.dll

                              c:\windows\system32\wdmaud.drv

                              c:\windows\system32\msacm32.drv

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\midimap.dll

                              c:\windows\system32\plugin.ocx

                              c:\windows\system32\schannel.dll

                              c:\windows\system32\ddrawex.dll

                              c:\windows\system32\ddraw.dll

                              c:\windows\system32\dciman32.dll

                              c:\windows\system32\mshtmled.dll

                              c:\windows\system32\dxtrans.dll

                              c:\windows\system32\atl.dll

                              c:\windows\system32\vbscript.dll

                              c:\windows\system32\mfc42.dll

                              c:\windows\system32\mfc42loc.dll

                              c:\windows\system32\imgutil.dll

                              c:\windows\system32\pngfilt.dll

                              c:\windows\system32\inetcpl.cpl

                              c:\windows\system32\inetcplc.dll

                              c:\windows\system32\rsaenh.dll

                              c:\windows\system32\dssenh.dll

                              c:\windows\system32\wmp.dll

                              c:\windows\system32\msvfw32.dll

                              c:\windows\system32\wmploc.dll

                              c:\windows\system32\dxtmsft.dll

                              c:\windows\system32\usp10.dll

                              c:\windows\system32\actxprxy.dll

                              c:\windows\system32\ntshrui.dll

                              c:\windows\system32\linkinfo.dll

                              c:\windows\system32\corpol.dll

                              c:\windows\system32\cryptnet.dll

                              c:\windows\system32\winrnr.dll

                              c:\windows\system32\iphlpapi.dll

                              c:\progra~1\spybot~1\sdhelper.dll

                              c:\windows\system32\msimg32.dll

                              c:\windows\system32\faultrep.dll

                              c:\windows\system32\winsta.dll

                              c:\windows\system32\wtsapi32.dll

                              c:\windows\system32\msieftp.dll

                              c:\program files\internet explorer\iexplore.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\shdocvw.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\cryptui.dll

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\imagehlp.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\wldap32.dll

                              c:\windows\system32\version.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\comctl32.dll

                              c:\windows\system32\msctf.dll

                              c:\windows\system32\browseui.dll

                              c:\windows\system32\browselc.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\urlmon.dll

                              c:\windows\system32\cscui.dll

                              c:\windows\system32\cscdll.dll

                              c:\windows\system32\setupapi.dll

                              c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx

                              c:\windows\system32\sxs.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\program files\java\jre1.6.0_03\bin\ssv.dll

                              c:\program files\java\jre1.6.0_03\bin\msvcr71.dll

                              c:\windows\system32\acroieadvhelper.dll

                              c:\windows\system32\olepro32.dll

                              c:\windows\system32\msxml3.dll

                              c:\windows\system32\winhttp.dll

                              c:\windows\system32\shdoclc.dll

                              c:\windows\system32\mlang.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\mswsock.dll

                              c:\windows\system32\hnetcfg.dll

                              c:\windows\system32\wshtcpip.dll

                              c:\windows\system32\rasapi32.dll

                              c:\windows\system32\rasman.dll

                              c:\windows\system32\tapi32.dll

                              c:\windows\system32\rtutils.dll

                              c:\windows\system32\winmm.dll

                              c:\program files\incredimail\bin\b4imapp.dll

                              c:\windows\system32\sensapi.dll

                              c:\windows\system32\userenv.dll

                              c:\windows\system32\dnsapi.dll

                              c:\windows\system32\rasadhlp.dll

                              c:\windows\system32\mshtml.dll

                              c:\windows\system32\msls31.dll

                              c:\windows\system32\msimtf.dll

                              c:\windows\system32\imm32.dll

                              c:\windows\system32\jscript.dll

                              c:\windows\system32\iepeers.dll

                              c:\windows\system32\winspool.drv

                              c:\windows\system32\imgutil.dll

                              c:\windows\system32\pngfilt.dll

                              c:\windows\system32\mshtmled.dll

                              c:\windows\system32\usp10.dll

                              c:\windows\system32\macromed\flash\flash9d.ocx

                              c:\windows\system32\comdlg32.dll

                              c:\windows\system32\wdmaud.drv

                              c:\windows\system32\msacm32.drv

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\midimap.dll

                              c:\windows\system32\dxtrans.dll

                              c:\windows\system32\atl.dll

                              c:\windows\system32\ddrawex.dll

                              c:\windows\system32\ddraw.dll

                              c:\windows\system32\dciman32.dll

                              c:\windows\system32\dxtmsft.dll

                              c:\windows\system32\schannel.dll

                              c:\windows\system32\inetcpl.cpl

                              c:\windows\system32\inetcplc.dll

                              c:\windows\system32\occache.dll

                              c:\windows\system32\actxprxy.dll

                              c:\windows\system32\winrnr.dll

                              c:\windows\system32\iphlpapi.dll

                              C:\PROGRAM FILES\MSN MESSENGER\USNSVC.EXE
                              c:\program files\msn messenger\usnsvc.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\version.dll

                              c:\program files\msn messenger\usnsvcps.dll

                              c:\windows\system32\rsaenh.dll

                              C:\PROGRA~1\INCRED~1\BIN\INCMAIL.EXE
                              c:\progra~1\incred~1\bin\incmail.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\progra~1\incred~1\bin\imutilsu.dll

                              c:\progra~1\incred~1\bin\imntutilu.dll

                              c:\windows\system32\ole32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\mfc42u.dll

                              c:\windows\system32\shell32.dll

                              c:\windows\system32\shlwapi.dll

                              c:\windows\system32\winmm.dll

                              c:\windows\system32\mpr.dll

                              c:\windows\system32\netapi32.dll

                              c:\windows\system32\wininet.dll

                              c:\windows\system32\crypt32.dll

                              c:\windows\system32\msasn1.dll

                              c:\windows\system32\version.dll

                              c:\windows\system32\urlmon.dll

                              c:\windows\system32\msvcp60.dll

                              c:\progra~1\incred~1\bin\imlooku.dll

                              c:\windows\system32\comctl32.dll

                              c:\progra~1\incred~1\bin\immapiu.dll

                              c:\windows\system32\mfc42loc.dll

                              c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                              c:\windows\system32\dbghelp.dll

                              c:\windows\system32\msctf.dll

                              c:\windows\system32\clbcatq.dll

                              c:\windows\system32\comres.dll

                              c:\windows\system32\xpsp2res.dll

                              c:\program files\incredimail\bin\incmailru.dll

                              c:\program files\incredimail\bin\imsuppu.dll

                              c:\program files\incredimail\bin\imlookexu.dll

                              c:\program files\incredimail\bin\imwrappu.dll

                              c:\program files\incredimail\bin\sfttv32u.dll

                              c:\program files\incredimail\bin\imsuppru.dll

                              c:\program files\incredimail\bin\imfeatu.dll

                              c:\program files\incredimail\bin\ssce5432.dll

                              c:\windows\system32\comdlg32.dll

                              c:\program files\incredimail\bin\imfeatru.dll

                              c:\windows\system32\sxs.dll

                              c:\windows\system32\secur32.dll

                              c:\windows\system32\wsock32.dll

                              c:\windows\system32\ws2_32.dll

                              c:\windows\system32\ws2help.dll

                              c:\windows\system32\macromed\flash\flash9d.ocx

                              c:\windows\system32\wintrust.dll

                              c:\windows\system32\imagehlp.dll

                              c:\windows\system32\wdmaud.drv

                              c:\windows\system32\msacm32.drv

                              c:\windows\system32\msacm32.dll

                              c:\windows\system32\midimap.dll

                              c:\windows\system32\olepro32.dll

                              c:\program files\incredimail\bin\immangru.dll

                              c:\program files\incredimail\bin\immangrru.dll

                              c:\program files\incredimail\bin\imparseru.dll

                              c:\program files\incredimail\bin\mimepp.dll

                              c:\windows\system32\msvcirt.dll

                              c:\program files\incredimail\bin\imviewu.dll

                              c:\windows\system32\msvfw32.dll

                              c:\program files\incredimail\bin\imviewru.dll

                              c:\windows\system32\mlang.dll

                              c:\windows\system32\shdocvw.dll

                              c:\windows\system32\cryptui.dll

                              c:\windows\system32\wldap32.dll

                              c:\program files\incredimail\bin\imbooku.dll

                              c:\program files\incredimail\bin\imbookru.dll

                              c:\windows\system32\schannel.dll

                              c:\windows\system32\userenv.dll

                              c:\program files\incredimail\bin\imcomutlu.dll

                              c:\program files\incredimail\bin\b4imapp.dll

                              c:\progra~1\incred~1\bin\b4immain.dll

                              c:\windows\system32\setupapi.dll

                              c:\windows\system32\shdoclc.dll

                              c:\windows\system32\mshtml.dll

                              c:\windows\system32\msls31.dll

                              c:\windows\system32\msimtf.dll

                              c:\windows\system32\jscript.dll

                              c:\windows\system32\imm32.dll

                              c:\windows\system32\mshtmled.dll

                              c:\windows\system32\apphelp.dll

                              c:\windows\system32\uxtheme.dll

                              c:\windows\system32\rasapi32.dll

                              c:\windows\system32\rasman.dll

                              c:\windows\system32\tapi32.dll

                              c:\windows\system32\rtutils.dll

                              c:\windows\system32\sensapi.dll

                              C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SPYBOTSD.EXE
                              c:\program files\spybot - search & destroy\spybotsd.exe

                              c:\windows\system32\ntdll.dll

                              c:\windows\system32\kernel32.dll

                              c:\windows\system32\oleaut32.dll

                              c:\windows\system32\msvcrt.dll

                              c:\windows\system32\user32.dll

                              c:\windows\system32\gdi32.dll

                              c:\windows\system32\advapi32.dll

                              c:\windows\system32\rpcrt4.dll

                              c:\windows\system32\o
                              0
                              2. ketzakoalt
                                Bon,

                                j'arrive pas a faire fonctionner spybot. il me dit qu'il n'y a pas d'update disponible. ( donc il est à jour , je presume!) et quand je lance "verifier tout , il me dit qu'il faut installer la mise a jour!
                                0
                                2. ketzakoalt
                                  voici le rapport navifix :

                                  Search Navipromo version 3.2.1 commencé le 16/10/2007 à 20:39:03,98

                                  !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
                                  !!! Poster ce rapport sur le forum pour le faire analyser !!!
                                  !!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

                                  Fix lancé depuis C:\Program Files\navilog1
                                  Mise a jour le 09.10.2007 a 18h00 by IL-MAFIOSO

                                  Microsoft Windows XP [version 5.1.2600]
                                  Internet Explorer : 6.0.2900.2180

                                  *** Recherche Programmes installes ***

                                  *** Recherche dossiers dans C:\WINDOWS ***

                                  *** Recherche dossiers dans C:\Program Files ***

                                  *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

                                  *** Recherche dossiers dans C:\Documents and Settings\jerome\Application Data ***

                                  *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***

                                  *** Recherche avec Catchme-rootkit/stealth malware detector by gmer ***
                                  pour + d'infos : http://www.gmer.net

                                  Aucun fichier trouvé dans :

                                  - C:\WINDOWS\system32
                                  - C:\DOCUME~1\jerome\LOCALS~1\APPLIC~1

                                  *** Recherche avec GenericNaviSearch ***
                                  !!! Tous Ces résultats peuvent révéler des fichiers légitimes !!!
                                  !!! A verifier impérativement avant toute suppression manuelle !!!

                                  * Scan C:\WINDOWS\system32 *

                                  * Scan C:\DOCUME~1\jerome\LOCALS~1\APPLIC~1 *

                                  *** Recherche fichiers ***

                                  *** Recherche cles registre ***

                                  *** Module de Recherche complémentaire ***
                                  (Recherche fichiers spécifiques)

                                  1)Recherche fichiers connus:

                                  2)Recherche Heuristique :

                                  3)Recherche Certificats :

                                  Certificat Egroup absent !

                                  *** Analyse Terminé le 16/10/2007 à 20:39:35,06 ***
                                  0
                                  1. jlpjlp Contributeur sécurité
                                    Fais un clic droit sur ce lien : (IL-MAFIOSO)
                                    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
                                    Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
                                    Ensuite double clique sur navilog1.exe pour lancer l'installation.
                                    Une fois l'installation terminée, le fix s'exécutera automatiquement.
                                    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

                                    Laisse-toi guider. Au menu principal, choisis 1 et valides.
                                    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

                                    Patiente jusqu'au message :
                                    *** Analyse Termine le ..... ***
                                    Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
                                    Copie-colle l'intégralité dans une réponse. Referme le blocnote.
                                    Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
                                    0
                                    • 1
                                    • 2

                                    Discussions similaires

                                    Enlever ou désactiver le mode sécurisé Freebox
                                    Cycy

                                    18 réponses
                                    Je veux retirer le mode sécurité de ma TV Freebox
                                    beatrice

                                    1 réponse
                                    Comment supprimer le surlignage sur Word ?
                                    luxbanne

                                    11 réponses
                                    "Mode sécurisé": comment l'enlever ?
                                    skander1615

                                    2 réponses
                                    problème enlever surlignage texte
                                    lolomusic667

                                    5 réponses