Adware a enlever

Résolu
ketzakoalt -  
Bonjour,

j'ai un adware ou equivalent dans mon pc, je n'arrive pas à l'enlever pouvez vouz m'aider?

Voici le rapport hijack :

Logfile of HijackThis v1.99.1
Scan saved at 12:58:46, on 15/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\SYSTEM32\GEARSEC.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\jerome\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\mssrv32.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

merci
Configuration: Windows XP
Internet Explorer 6.0

26 réponses

Résumé de la discussion

Un échange porte sur la présence d’un adware sous Windows XP et les difficultés pour l’éliminer, les rapports HijackThis pointant des BHO et des éléments lancés au démarrage. Plusieurs indices évoquent une redirection vers des sites externes via des éléments O2 et O9, et l’un des échanges identifie une ligne précise comme responsable du problème dans le rapport. Des conseils préconisent des outils antivirus et antispyware (Avira, Avast, Ad-Aware, Spybot) et un pare-feu (ZoneAlarm, Kerio), ainsi que CCleaner pour nettoyer les traces et les résidus. Une suggestion ultérieure évoque la désactivation de la restauration système pour purger d’éventuels virus et la nécessité de refaire un contrôle après nettoyage.

Bobot (l’IA à votre service)
  3. jlpjlp Contributeur sécurité
    O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll

    oui désolé j'ai vu un peu tard cette ligne qui etait responsable de ton pb et redirigait sur des sites ukraine

    _________________

    voila ce qu'il faut que tu garde:

    pour protéger gratos ton ordi

    securite

    mettre un antivirus

    AVAST en français ou ANTIVIR (en anglais mais très efficace)
    https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
    -------------
    des anti-espions:

    AD AWARE + SPYBOT + WINDOWS DEFENDER ou SPYWARE TERMINATOR

    +
    SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

    --------
    un pare feu :
    celui de Windows ou mieux KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

    https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
    https://manuelsdaide.com/contact/
    http://www.open-files.com/forum/index.php?showtopic=29277
    zonealarm

    -----------

    CCLEANER pour effacer les traces de surf

    bonne continuation!
    ton pb est résolu!
    enfin...
    1. ketzakoalt
      bonjour,

      voici le rapport ot moveit :

      C:\WINDOWS\system32\AcroIEAdvHelper.dll unregistered successfully.
      C:\WINDOWS\system32\AcroIEAdvHelper.dll moved successfully.

      Created on 10/21/2007 10:43:34

      le rapport hijackthis :

      Logfile of HijackThis v1.99.1
      Scan saved at 10:44:24, on 21/10/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0013)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      C:\WINDOWS\SYSTEM32\GEARSEC.EXE
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\wscntfy.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\system32\S3trayp.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
      C:\WINDOWS\system32\CTHELPER.EXE
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\PROGRA~1\INCRED~1\bin\IncMail.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Documents and Settings\jerome\Bureau\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
      O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
      O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O11 - Options group: [INTERNATIONAL] International*
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Pour l'instant , le probleme a l'air d'avoir disparu.
      2. jlpjlp Contributeur sécurité
        fix cette ligne avec hijackthis:

        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
        O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll

        télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
        double-clique sur OTMoveIt.exe pour le lancer.
        copie la liste qui se trouve en citation ci-dessous,
        et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

        Citation :

        C:\WINDOWS\system32\AcroIEAdvHelper.dll

        clique sur MoveIt! pour lancer la suppression.
        le résultat apparaitra dans le cadre "Results".
        clique sur Exit pour fermer.
        poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

        il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
        http://img137.imageshack.us/img137/3558/refaitjk8.th.jpg

        ___________________

        recolle hijackthis et dis tes pbs
        1. ketzakoalt
          j'ai toujours le pb, voici le rapport :

          Logfile of HijackThis v1.99.1
          Scan saved at 23:29:23, on 19/10/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.5730.0013)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
          C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
          C:\WINDOWS\system32\VTTimer.exe
          C:\WINDOWS\system32\S3trayp.exe
          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
          C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
          C:\WINDOWS\system32\CTHELPER.EXE
          C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          C:\WINDOWS\SYSTEM32\GEARSEC.EXE
          C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
          C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          C:\Program Files\MSN Messenger\MsnMsgr.Exe
          C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
          C:\WINDOWS\system32\wscntfy.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Documents and Settings\jerome\Bureau\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll
          O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
          O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
          O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
          O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
          O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
          O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
          O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          1. jlpjlp Contributeur sécurité
            FIX ca avec hijackthis

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

            O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
            O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
            O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
            O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

            ___________________

            mets a jour internet explorer: la version 7

            ____________________

            lance internet explorer puis dans outils puis option internet mets l'adresse de google pour l'avoir au demarrage

            ____________________

            recolle hihjackthis
            1. ketzakoalt
              voici le rapport :

              Logfile of HijackThis v1.99.1
              Scan saved at 20:44:17, on 19/10/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\ZoneLabs\vsmon.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\VTTimer.exe
              C:\WINDOWS\system32\S3trayp.exe
              C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
              C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
              C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
              C:\WINDOWS\system32\CTHELPER.EXE
              C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
              C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
              C:\Program Files\MSN Messenger\MsnMsgr.Exe
              C:\WINDOWS\SYSTEM32\GEARSEC.EXE
              C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
              C:\PROGRA~1\INCRED~1\bin\IMApp.exe
              C:\WINDOWS\system32\wscntfy.exe
              C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
              C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
              C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
              C:\Program Files\MSN Messenger\usnsvc.exe
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              C:\PROGRA~1\INCRED~1\bin\IncMail.exe
              C:\Documents and Settings\jerome\Bureau\HijackThis.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll
              O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
              O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
              O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
              O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
              O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
              O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
              O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
              O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
              O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
              O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
              O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
              O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
              O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
              O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
              O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
              O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

              Je suis toujours redirigé vers tanunah.com a partir de google.
              1. jlpjlp Contributeur sécurité
                C:\System Volume Information\_restore{5CA2E0E0-FBAB-410D-9E82-D91E020BDA29}\RP3\A0000269.exe
                [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen

                ca c'est ta restauration system:

                désactive la restauration système pour purger les virus qui seraient dedans (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre) puis réactive la

                ___________

                et le reste correspond au scan panda que tu as fais

                C:\WINDOWS\system32\ActiveScan\pskavs.dll

                _____________

                bref pas grand chose,
                recolle hijackthis , essaye de refaire lopxp et dis tes pbs
                1. ketzakoalt
                  Bonjour,

                  j''ai installé le lopxpsetup, il me demande d'ecraser des fichiers puis apres rien ne se passe.

                  sinon voici le rapport t'antivir apres installation et scan :

                  AntiVir PersonalEdition Classic
                  Report file date: vendredi 19 octobre 2007 16:48

                  Scanning for 896565 virus strains and unwanted programs.

                  Licensed to: Avira AntiVir PersonalEdition Classic
                  Serial number: 0000149996-ADJIE-0001
                  Platform: Windows XP
                  Windows version: (Service Pack 2) [5.1.2600]
                  Username: SYSTEM
                  Computer name: MONPC

                  Version information:
                  BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
                  AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 12:16:29
                  AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 11:23:51
                  LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 14:32:47
                  LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 11:35:20
                  ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:27:15
                  ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 13:26:55
                  ANTIVIR2.VDF : 7.0.0.91 687104 Bytes 16/10/2007 14:48:31
                  ANTIVIR3.VDF : 7.0.0.110 171008 Bytes 19/10/2007 14:48:31
                  AVEWIN32.DLL : 7.6.0.27 3019264 Bytes 19/10/2007 14:48:32
                  AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 09:36:26
                  AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 06:39:17
                  AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
                  AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 07:46:00
                  AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 06:17:06
                  AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 11:26:33
                  AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 06:10:18
                  NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 10:09:42
                  RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 11:38:13
                  RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 11:50:37
                  SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 08:37:21

                  Configuration settings for the scan:
                  Jobname..........................: Complete system scan
                  Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
                  Logging..........................: low
                  Primary action...................: interactive
                  Secondary action.................: ignore
                  Scan master boot sector..........: off
                  Scan boot sector.................: on
                  Boot sectors.....................: C:,
                  Scan memory......................: on
                  Process scan.....................: on
                  Scan registry....................: on
                  Search for rootkits..............: off
                  Scan all files...................: Intelligent file selection
                  Scan archives....................: on
                  Recursion depth..................: 20
                  Smart extensions.................: on
                  Macro heuristic..................: on
                  File heuristic...................: medium

                  Start of the scan: vendredi 19 octobre 2007 16:49

                  The scan of running processes will be started
                  Scan process 'avscan.exe' - '1' Module(s) have been scanned
                  Scan process 'avcenter.exe' - '1' Module(s) have been scanned
                  Scan process 'sched.exe' - '1' Module(s) have been scanned
                  Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                  Scan process 'avguard.exe' - '1' Module(s) have been scanned
                  Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
                  Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
                  Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
                  Scan process 'alg.exe' - '1' Module(s) have been scanned
                  Scan process 'ImApp.exe' - '1' Module(s) have been scanned
                  Scan process 'EmuPatchMixDSP.exe' - '1' Module(s) have been scanned
                  Scan process 'gearsec.exe' - '1' Module(s) have been scanned
                  Scan process 'CDAC11BA.EXE' - '1' Module(s) have been scanned
                  Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
                  Scan process 'aawservice.exe' - '1' Module(s) have been scanned
                  Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
                  Scan process 'CTHELPER.EXE' - '1' Module(s) have been scanned
                  Scan process 'cledx.exe' - '1' Module(s) have been scanned
                  Scan process 'jusched.exe' - '1' Module(s) have been scanned
                  Scan process 'zlclient.exe' - '0' Module(s) have been scanned
                  Scan process 'S3Trayp.exe' - '1' Module(s) have been scanned
                  Scan process 'VTTimer.exe' - '1' Module(s) have been scanned
                  Scan process 'explorer.exe' - '1' Module(s) have been scanned
                  Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                  Scan process 'vsmon.exe' - '0' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'lsass.exe' - '1' Module(s) have been scanned
                  Scan process 'services.exe' - '1' Module(s) have been scanned
                  Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                  Scan process 'csrss.exe' - '1' Module(s) have been scanned
                  Scan process 'smss.exe' - '1' Module(s) have been scanned
                  33 processes with 33 modules were scanned

                  Start scanning boot sectors:
                  Boot sector 'C:\'
                  [NOTE] No virus was found!

                  Starting to scan the registry.
                  The registry was scanned ( '25' files ).

                  Starting the file scan:

                  Begin scan in 'C:\'
                  C:\pagefile.sys
                  [WARNING] The file could not be opened!
                  C:\Program Files\Panda Security\NanoScan\Engine\psnflg.dll
                  [DETECTION] Is the Trojan horse TR/Agent.bux.1
                  [INFO] The file was moved to '4786c7f2.qua'!
                  C:\Program Files\Panda Security\TotalScan\pskavs.dll
                  [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
                  [INFO] The file was moved to '4783c7fc.qua'!
                  C:\System Volume Information\_restore{5CA2E0E0-FBAB-410D-9E82-D91E020BDA29}\RP3\A0000269.exe
                  [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
                  [INFO] The file was moved to '4748c820.qua'!
                  C:\System Volume Information\_restore{5CA2E0E0-FBAB-410D-9E82-D91E020BDA29}\RP5\A0000388.dll
                  [DETECTION] Is the Trojan horse TR/Agent.bux.1
                  [INFO] The file was moved to '4748c828.qua'!
                  C:\System Volume Information\_restore{5CA2E0E0-FBAB-410D-9E82-D91E020BDA29}\RP5\A0000389.dll
                  [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
                  [INFO] The file was moved to '4748c82b.qua'!
                  C:\WINDOWS\system32\ActiveScan\pskavs.dll
                  [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
                  [INFO] The file was moved to '4783c9d3.qua'!

                  End of the scan: vendredi 19 octobre 2007 17:14
                  Used time: 25:03 min

                  The scan has been done completely.

                  2578 Scanning directories
                  121070 Files were scanned
                  6 viruses and/or unwanted programs were found
                  0 Files were classified as suspicious:
                  0 files were deleted
                  0 files were repaired
                  6 files were moved to quarantine
                  0 files were renamed
                  1 Files cannot be scanned
                  121064 Files not concerned
                  880 Archives were scanned
                  3 Warnings
                  1 Notes
                  1. jlpjlp Contributeur sécurité
                    mets a jour internet explorer , la version 7:

                    DEMARRER puis TOUS LES PROGRAMMES puis WINDOWS UPDATE

                    ______________________

                    Télécharge ceci: (by Moe) :

                    http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

                    Double clic sur Lopxpsetup.exe pour lancer l'installation
                    Au menu, choisir l'option 1
                    Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
                    Une rapport sera alors crée, à copie/colle en entier sur le forum.

                    __________________
                    tu n'as pas d'antivirus
                    installe antivir et scan avec et colle moi le rapport:

                    https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/13198.html
                    1. ketzakoalt
                      voici le rapport, combofix :

                      ComboFix 07-10-19.1 - jerome 2007-10-19 14:12:49.1 - NTFSx86
                      Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.510 [GMT 2:00]
                      Running from: C:\Documents and Settings\jerome\Mes documents\ComboFix.exe
                      * Created a new restore point
                      .

                      ((((((((((((((((((((((((((((( Fichiers créés 2007-09-19 to 2007-10-19 ))))))))))))))))))))))))))))))))))))
                      .

                      2007-10-19 14:11 51,200 --a------ C:\WINDOWS\NirCmd.exe
                      2007-10-18 23:24 <REP> d-------- C:\Documents and Settings\jerome\Application Data\Apple Computer
                      2007-10-17 20:06 <REP> d-------- C:\Program Files\Google
                      2007-10-17 18:29 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
                      2007-10-17 18:29 24,661 --a--c--- C:\WINDOWS\system32\dllcache\spxcoins.dll
                      2007-10-17 18:29 13,312 --a------ C:\WINDOWS\system32\irclass.dll
                      2007-10-17 18:29 13,312 --a--c--- C:\WINDOWS\system32\dllcache\irclass.dll
                      2007-10-17 17:49 53,248 --a------ C:\WINDOWS\system32\Process.exe
                      2007-10-16 21:18 <REP> d-------- C:\Program Files\Lavasoft
                      2007-10-16 21:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
                      2007-10-16 21:17 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
                      2007-10-16 20:56 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                      2007-10-16 20:37 <REP> d-------- C:\Program Files\Navilog1
                      2007-10-16 18:34 <REP> d-------- C:\Program Files\Panda Security
                      2007-10-16 18:20 1,680 --a------ C:\WINDOWS\system32\tmp.reg
                      2007-10-16 18:19 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
                      2007-10-16 18:19 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
                      2007-10-16 18:19 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
                      2007-10-16 18:19 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
                      2007-10-14 18:51 286,720 --a------ C:\WINDOWS\system32\Mp3com.dll
                      2007-10-14 18:51 217,088 --a------ C:\WINDOWS\Rewire.dll
                      2007-10-14 18:51 40,960 --a------ C:\WINDOWS\system32\Mros432.dll
                      2007-10-14 18:51 36,864 --a------ C:\WINDOWS\system32\audioencoderenum.dll
                      2007-10-14 17:15 <REP> d-------- C:\Documents and Settings\cubase\Application Data\DivX
                      2007-10-14 17:14 <REP> d-------- C:\Documents and Settings\cubase\Application Data\Steinberg
                      2007-10-14 16:19 <REP> d-------- C:\WINDOWS\pss
                      2007-10-14 16:10 <REP> d-------- C:\Documents and Settings\cubase\Application Data\EmuPatchMixDSP
                      2007-10-14 16:09 <REP> d-------- C:\Documents and Settings\cubase\Application Data\AVG7
                      2007-10-14 16:08 <REP> d--h----- C:\Documents and Settings\cubase\Voisinage r‚seau
                      2007-10-14 16:08 <REP> d--h----- C:\Documents and Settings\cubase\Voisinage d'impression
                      2007-10-14 16:08 <REP> d--h----- C:\Documents and Settings\cubase\ModŠles
                      2007-10-14 16:08 <REP> dr------- C:\Documents and Settings\cubase\Mes documents
                      2007-10-14 16:08 <REP> dr------- C:\Documents and Settings\cubase\Menu D‚marrer
                      2007-10-14 16:08 <REP> dr------- C:\Documents and Settings\cubase\Favoris
                      2007-10-14 16:08 <REP> d-------- C:\Documents and Settings\cubase\Bureau
                      2007-10-14 16:08 <REP> d-------- C:\Documents and Settings\cubase\Application Data\Grisoft
                      2007-10-14 11:46 <REP> d-------- C:\Documents and Settings\jerome\Application Data\DivX
                      2007-10-14 11:43 <REP> d-------- C:\Program Files\DivX
                      2007-10-12 18:26 <REP> d--h----- C:\WINDOWS\ShellNew
                      2007-10-12 18:24 <REP> d-------- C:\Documents and Settings\jerome\Application Data\Microsoft Web Folders
                      2007-10-12 17:35 <REP> d-------- C:\WINDOWS\system32\Samsung_USB_Drivers
                      2007-10-10 13:46 <REP> d-------- C:\WINDOWS\Downloaded Installations
                      2007-10-10 13:42 <REP> d-------- C:\Program Files\Samsung
                      2007-10-09 01:02 <REP> d---s---- C:\Documents and Settings\jerome\UserData
                      2007-10-08 13:33 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
                      2007-10-08 13:06 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
                      2007-10-08 12:50 <REP> d-------- C:\Program Files\QuickTime
                      2007-10-08 12:50 <REP> d-------- C:\Program Files\Apple Software Update
                      2007-10-08 12:50 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
                      2007-10-08 12:50 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
                      2007-10-08 12:42 <REP> d-------- C:\Program Files\Fichiers communs\Creative Professional
                      2007-10-08 12:36 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared
                      2007-10-08 12:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Macrovision
                      2007-10-08 12:36 54,784 --a------ C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                      2007-10-08 12:36 12,464 --a------ C:\WINDOWS\system32\drivers\CdaC15BA.SYS
                      2007-10-08 12:34 <REP> d-------- C:\Documents and Settings\jerome\Application Data\Steinberg
                      2007-10-08 12:22 <REP> d-------- C:\Program Files\Syncrosoft
                      2007-10-08 12:22 704,512 --a------ C:\WINDOWS\system32\SYNSOACC.dll
                      2007-10-08 12:22 147,456 --a------ C:\WINDOWS\system32\SynsoLChk.dll
                      2007-10-08 12:22 45,056 --a------ C:\WINDOWS\system32\Synsopos.exe
                      2007-10-08 12:22 33,792 --a------ C:\WINDOWS\system32\drivers\cledx.sys
                      2007-10-08 12:22 16,896 --a------ C:\WINDOWS\system32\drivers\synasUSB.sys
                      2007-10-07 22:57 <REP> d-------- C:\Documents and Settings\jerome\Application Data\Azureus
                      2007-10-07 22:49 <REP> d-------- C:\WINDOWS\Sun
                      2007-10-07 22:48 <REP> d-------- C:\Program Files\Java
                      2007-10-07 22:48 <REP> d-------- C:\Program Files\Fichiers communs\Java
                      2007-10-07 22:46 <REP> d-------- C:\Program Files\Azureus
                      2007-10-07 21:10 <REP> d-------- C:\Program Files\DAEMON Tools
                      2007-10-07 21:08 384 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000004-00000000-00000004-00001102-00000004-40021102}.dat
                      2007-10-07 21:08 384 --a------ C:\WINDOWS\system32\DVCState-{00000004-00000000-00000004-00001102-00000004-40021102}.dat
                      2007-10-07 21:07 639,224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
                      2007-10-07 19:20 <REP> d-------- C:\Documents and Settings\jerome\Contacts
                      2007-10-07 19:19 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
                      2007-10-07 19:19 <REP> d-------- C:\Program Files\MSN Messenger
                      2007-10-07 19:13 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
                      2007-10-07 19:07 <REP> d-------- C:\Program Files\IncrediMail
                      2007-10-07 19:02 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\AVG7
                      2007-10-07 19:02 <REP> d-------- C:\Documents and Settings\jerome\Application Data\AVG7
                      2007-10-07 19:02 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
                      2007-10-07 19:02 <REP> d-------- C:\Documents and Settings\All Users\Application Data\avg7
                      2007-10-07 19:02 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
                      2007-10-07 19:02 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
                      2007-09-28 18:08 156,992 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe
                      2007-09-28 18:07 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
                      2007-09-28 18:07 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
                      2007-09-28 18:07 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe
                      2007-09-28 18:07 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
                      2007-09-20 23:43 200,192 --a------ C:\WINDOWS\system32\AcroIEAdvHelper.dll

                      .
                      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                      .
                      2007-10-19 12:15 6,737,952 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
                      2007-10-19 12:14 79,988 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
                      2007-10-14 16:51 --------- d-----w C:\Program Files\Steinberg
                      2007-10-14 16:50 --------- d--h--w C:\Program Files\InstallShield Installation Information
                      2007-10-14 16:50 --------- d-----w C:\Program Files\Creative Professional
                      2007-10-12 16:23 --------- d-----w C:\Program Files\microsoft frontpage
                      2007-10-07 22:33 --------- d-----w C:\Program Files\Fichiers communs\Adobe
                      2007-10-07 19:08 --------- d-----w C:\Documents and Settings\jerome\Application Data\EmuPatchMixDSP
                      2007-10-07 18:48 --------- d-----w C:\Documents and Settings\jerome\Application Data\Creative
                      2007-10-07 18:46 --------- d-----w C:\Documents and Settings\jerome\Application Data\InterTrust
                      2007-10-07 18:42 --------- d-----w C:\Program Files\Minnetonka Audio Software
                      2007-10-07 18:41 --------- d-----w C:\Program Files\Creative
                      2007-10-07 18:40 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
                      2007-10-07 18:37 --------- d-----w C:\Program Files\Fichiers communs\SpeechEngines
                      2007-10-07 18:37 --------- d-----w C:\Program Files\Fichiers communs\ODBC
                      2007-10-07 17:13 75,932 ----a-w C:\WINDOWS\system32\drivers\klick.dat
                      2007-10-07 17:13 74,396 ----a-w C:\WINDOWS\system32\drivers\klin.dat
                      2007-10-07 16:56 --------- d-----w C:\Program Files\S3
                      2007-10-07 16:55 --------- d-----w C:\Program Files\VIA
                      2007-10-07 16:45 --------- d-----w C:\Program Files\Services en ligne
                      2007-10-07 16:45 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
                      2007-09-28 16:07 9,464 ----a-w C:\WINDOWS\system32\drivers\cdralw2k.sys
                      2007-09-28 16:07 9,336 ----a-w C:\WINDOWS\system32\drivers\cdr4_xp.sys
                      2007-09-28 16:07 43,528 ----a-w C:\WINDOWS\system32\drivers\PxHelp20.sys
                      2007-09-28 16:07 129,784 ----a-w C:\WINDOWS\system32\pxafs.dll
                      2007-09-28 16:07 120,056 ----a-w C:\WINDOWS\system32\pxcpyi64.exe
                      2007-09-28 16:07 118,520 ----a-w C:\WINDOWS\system32\pxinsi64.exe
                      2007-09-28 16:05 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
                      2007-09-28 16:05 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
                      2007-09-28 16:05 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
                      2007-09-28 16:05 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
                      2007-09-28 16:05 739,840 ----a-w C:\WINDOWS\system32\DivX.dll
                      2007-09-28 16:05 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
                      2007-09-28 16:05 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
                      2007-09-28 16:05 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
                      2007-09-28 16:05 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
                      2007-09-28 16:05 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
                      2007-09-28 16:05 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
                      2007-09-28 16:05 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
                      2007-09-28 16:05 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
                      .

                      ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                      .
                      .
                      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

                      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8673347E-6D08-4B61-8794-E101DC448950}]
                      2007-09-20 23:43 200192 --a------ C:\WINDOWS\system32\AcroIEAdvHelper.dll

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "VTTimer"="VTTimer.exe" [2006-08-03 08:53 C:\WINDOWS\system32\VTTimer.exe]
                      "S3Trayp"="S3trayp.exe" [2006-07-10 20:33 C:\WINDOWS\system32\S3Trayp.exe]
                      "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-06-21 21:54]
                      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
                      "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 06:24]
                      "H2O"="C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe" [2005-10-23 00:00]
                      "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 12:48]
                      "CTHelper"="CTHELPER.EXE" [2004-08-25 10:48 C:\WINDOWS\system32\CTHELPER.EXE]

                      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]
                      "SetDefaultMIDI"="MIDIDef.exe" [2003-06-20 12:13 C:\WINDOWS\MIDIDEF.EXE]
                      "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
                      "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-09-20 15:17]

                      R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys
                      R0 xfilt;VIA SATA IDE Hot-plug Driver;C:\WINDOWS\system32\DRIVERS\xfilt.sys
                      R3 CLEDX;Team H2O CLEDX service;C:\WINDOWS\system32\DRIVERS\cledx.sys
                      R3 S3GIGP;S3GIGP;C:\WINDOWS\system32\DRIVERS\S3gIGPm.sys
                      S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

                      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
                      AutoRun\command - D:\setup.exe

                      .
                      Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
                      "2007-10-08 10:50:27 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
                      - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
                      .
                      **************************************************************************

                      catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                      Rootkit scan 2007-10-19 14:16:00
                      Windows 5.1.2600 Service Pack 2 NTFS

                      scanning hidden processes ...

                      scanning hidden autostart entries ...

                      scanning hidden files ...

                      scan completed successfully
                      hidden files: 0

                      **************************************************************************
                      .
                      Completion time: 2007-10-19 14:17:03 - machine was rebooted
                      .
                      --- E O F ---

                      voici la rapport clean avant nettoyage :

                      Script execute en mode sans echec
                      Rapport clean par Malekal_morte - http://www.malekal.com
                      Script execute en mode sans echec 19/10/2007 a 14:30:12,48

                      Microsoft Windows XP [version 5.1.2600]

                      *** Suppression des fichiers dans C:

                      *** Suppression des fichiers dans C:\WINDOWS\

                      *** Suppression des fichiers dans C:\WINDOWS\system32
                      tentative de suppression de "C:\WINDOWS\Downloaded Program Files\CONFLICT.1"

                      *** Suppression des fichiers dans C:\Program Files

                      *** Suppression des clefs du registre effectuee..
                      *** Fin du rapport !

                      et apres nettoyage :

                      Script execute en mode sans echec
                      Rapport clean par Malekal_morte - http://www.malekal.com
                      Script execute en mode sans echec 19/10/2007 a 14:30:12,48

                      Microsoft Windows XP [version 5.1.2600]

                      *** Suppression des fichiers dans C:

                      *** Suppression des fichiers dans C:\WINDOWS\

                      *** Suppression des fichiers dans C:\WINDOWS\system32
                      tentative de suppression de "C:\WINDOWS\Downloaded Program Files\CONFLICT.1"

                      *** Suppression des fichiers dans C:\Program Files

                      *** Suppression des clefs du registre effectuee..
                      *** Fin du rapport !

                      et enfin le rapport hijackthis :

                      Logfile of HijackThis v1.99.1
                      Scan saved at 14:37:06, on 19/10/2007
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                      C:\WINDOWS\SYSTEM32\GEARSEC.EXE
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\WINDOWS\system32\wscntfy.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\system32\VTTimer.exe
                      C:\WINDOWS\system32\S3trayp.exe
                      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                      C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
                      C:\WINDOWS\system32\CTHELPER.EXE
                      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      C:\Program Files\MSN Messenger\MsnMsgr.Exe
                      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                      C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPatchMixDSP.exe
                      C:\Documents and Settings\jerome\Bureau\HijackThis.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                      O2 - BHO: AcroIEAdvHlprObj - {8673347E-6D08-4B61-8794-E101DC448950} - C:\WINDOWS\system32\AcroIEAdvHelper.dll
                      O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
                      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
                      O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
                      O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
                      O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                      O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
                      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
                      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
                      O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                      O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
                      O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
                      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                      O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
                      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

                      ... et mon virus est toujours là!
                      1. jlpjlp Contributeur sécurité
                        desinstalle navilog

                        ____________

                        desinstalle avg 7 et remplace le par antivir et scan avec et colle le rapport:

                        https://www.01net.com/

                        _____________

                        combofix (colle le rapport)

                        http://mickael.barroux.free.fr/securite/combofix.php

                        ______________

                        Colle le rapport :
                        Clean permettra de faire du nettoyage et supprimer des fichiers que des anti-virus et anti-spywares n'ont pas pu trouver. Le logiciel est régulièrement mis à jour, vous devrez donc le re-téléchargé pour obtenir une version plus récente.

                        • Téléchargez clean.zip, décompressez-le sur votre bureau (clic droit / extraire tout), vous obtenez alors un dossier clean
                        • Démarrez Windows en mode sans échec : Guide pour redémarrer en mode sans échec
                        • Ouvrez le dossier clean qui se trouve sur ton bureau, et double-cliquez sur clean.cmd, une fenêtre noire va apparaître pendant un instant, laissez la ouverte jusqu'à ce qu'elle se ferme.
                        Manuel de clean :
                        http://kerio.probb.fr/tuto-Clean-h37.html

                        _________________

                        recolle hijackthis
                        2. ketzakoalt
                          voici le rapport adaware :

                          Ad-Aware 2007 Build
                          Log File Created on: 2007-10-16 21:28:56
                          Using Definitions File: C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\core.aawdef
                          Computer name: MONPC
                          Name of user performing scan: SYSTEM

                          System information
                          ===========================
                          Number of processors: 1
                          Processor type: AMD Sempron(tm) Processor 3200+
                          Memory Available: 50%
                          Total Physical Memory: 937934848 Bytes
                          Available Physical Memory: 461877248 Bytes
                          Total Page File Size: 2272387072 Bytes
                          Available On Page File: 1789014016 Bytes
                          Total Virtual Memory: 2147352576 Bytes
                          Available Virtual Memory: 1976729600 Bytes
                          OS: Microsoft Windows XP Service Pack 2 (Build 2600)

                          Ad-Aware 2007 Settings
                          ===========================
                          Skipping files larger than 1048576 kB
                          Ignoring infections with lower TAI than: 3

                          Extended Ad-Aware 2007 Settings
                          ===========================
                          Unloading known modules during scan
                          Ignoring spanned files when scanning cab archives
                          Scanning registry for all users
                          Using permanent archive caching
                          Reanalyzing results after scanning before displaying results
                          Trying to unload modules prior to removal
                          Let Windows remove files currently in use at next reboot
                          Removing quarantined objects after restore
                          Logging Ad-Aware events
                          Blocking Pop-Ups aggressively
                          Deactivating Ad-Watch during scans
                          Writeprotecting system files after repairs
                          Including Ad-aware command line parameters in log file
                          Include info about ignored objects in log file
                          Including basic settings in log file
                          Including advanced settings in log file
                          Including user and computer name in log file
                          Include reference summary in log file
                          Creating log file for removal operations
                          Including module info in log file
                          Include Alternate Data Stream details in log file
                          Create and save WebUpdate log file

                          Databaseinfo
                          ===========================
                          Version number: 7
                          Build Number: 0
                          Build Date and Time: 2007/07/05 07:55:33

                          Scan Statistics
                          ===========================
                          Method: Smart
                          Scan tracking cookies.............................: On
                          Scan ADS filestreams..............................: Off

                          Item Scanned: 90910
                          Infections Detected: 33
                          Infections Ignored: 0

                          Scan detailed statistics
                          ===========================
                          Type Critical Total
                          Process Scan....: 0 0
                          Registry Scan...: 0 0
                          Registry PE Scan: 0 0
                          Hosts File Scan.: 0 0
                          File Scan.......: 0 0
                          Folder Scan.....: 0 0
                          LSP Scan........: 0 0
                          ADS Scan........: 0 0
                          Cookie Scan.....: 30 30
                          File Hash Scan..: 0 0

                          Infections Found
                          ===========================
                          Family Id: 725 Name: Tracking Cookie Category: DataMiner TAI:3
                          Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com A2 /
                          Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com B2 /
                          Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com C3 /
                          Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com D3 /
                          Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat serving-sys.com E2 /
                          Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat advertising.com ACID /
                          Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat advertising.com BASE /
                          Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat advertising.com F1 /
                          Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat advertising.com ROLL /
                          Item Id: 600000144 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat doubleclick.net id /
                          Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat weborama.fr AFFICHE_W /
                          Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat weborama.fr wbo_temps_reel /
                          Item Id: 600000173 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat bluestreak.com id /
                          Item Id: 600000171 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat bs.serving-sys.com eyeblaster /
                          Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat smartadserver.com TestIfCookieP /
                          Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat smartadserver.com pbw /
                          Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat smartadserver.com pid /
                          Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\jerome\Cookies\index.dat smartadserver.com pbwmaj /
                          Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat smartadserver.com TestIfCookieP /
                          Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat smartadserver.com pbw /
                          Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat smartadserver.com pid /
                          Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat smartadserver.com pbwmaj /
                          Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat msnportal.112.2o7.net s_vi /
                          Item Id: 600000295 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat adtech.de JEB2 /
                          Item Id: 600000173 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat bluestreak.com id /
                          Item Id: 600000144 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat doubleclick.net id /
                          Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat advertising.com ACID /
                          Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat advertising.com F1 /
                          Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat advertising.com BASE /
                          Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\cubase\Cookies\index.dat advertising.com ROLL /
                          Family Id: 9999 Name: MRU Object Category: MRU Object TAI:0
                          Item Id: 1 Value: MRU Path: C:\Documents and Settings\jerome\Recent Count: 55
                          Item Id: 2 Value: MRU Registry Key: S-1-5-21-448539723-926492609-839522115-1003\Software\Microsoft\Search Assistant\ACMru\5603 Count: 1
                          Item Id: 3 Value: MRU Registry Key: S-1-5-21-448539723-926492609-839522115-1003\Software\Microsoft\Internet Explorer\TypedURLs Count: 16

                          Items Ignored During Scan
                          ===========================

                          Listing of running processes
                          ===========================
                          C:\WINDOWS\SYSTEM32\SMSS.EXE
                          c:\windows\system32\smss.exe

                          c:\windows\system32\ntdll.dll

                          C:\WINDOWS\SYSTEM32\CSRSS.EXE
                          c:\windows\system32\csrss.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\csrsrv.dll

                          c:\windows\system32\basesrv.dll

                          c:\windows\system32\winsrv.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\sxs.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          C:\WINDOWS\SYSTEM32\WINLOGON.EXE
                          c:\windows\system32\winlogon.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\authz.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\nddeapi.dll

                          c:\windows\system32\profmap.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\psapi.dll

                          c:\windows\system32\regapi.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\winsta.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\imagehlp.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\msgina.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\odbc32.dll

                          c:\windows\system32\comdlg32.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\odbcint.dll

                          c:\windows\system32\shsvcs.dll

                          c:\windows\system32\sfc.dll

                          c:\windows\system32\sfc_os.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\winscard.dll

                          c:\windows\system32\wtsapi32.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\cscdll.dll

                          c:\windows\system32\wlnotify.dll

                          c:\windows\system32\winspool.drv

                          c:\windows\system32\mpr.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\samlib.dll

                          c:\windows\system32\sxs.dll

                          c:\windows\system32\msv1_0.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\windows\system32\cscui.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\ntmarta.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\wdmaud.drv

                          c:\windows\system32\msacm32.drv

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\midimap.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\wbem\wbemprox.dll

                          c:\windows\system32\wbem\wbemcomn.dll

                          c:\windows\system32\wbem\wbemsvc.dll

                          c:\windows\system32\wbem\fastprox.dll

                          c:\windows\system32\msvcp60.dll

                          c:\windows\system32\ntdsapi.dll

                          c:\windows\system32\dnsapi.dll

                          C:\WINDOWS\SYSTEM32\SERVICES.EXE
                          c:\windows\system32\services.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\scesrv.dll

                          c:\windows\system32\authz.dll

                          c:\windows\system32\umpnpmgr.dll

                          c:\windows\system32\winsta.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\ncobjapi.dll

                          c:\windows\system32\msvcp60.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\eventlog.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\psapi.dll

                          c:\windows\system32\wtsapi32.dll

                          C:\WINDOWS\SYSTEM32\LSASS.EXE
                          c:\windows\system32\lsass.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\lsasrv.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\samsrv.dll

                          c:\windows\system32\cryptdll.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\samlib.dll

                          c:\windows\system32\mpr.dll

                          c:\windows\system32\ntdsapi.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\msprivs.dll

                          c:\windows\system32\kerberos.dll

                          c:\windows\system32\msv1_0.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\windows\system32\netlogon.dll

                          c:\windows\system32\w32time.dll

                          c:\windows\system32\msvcp60.dll

                          c:\windows\system32\schannel.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\wdigest.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\scecli.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\ipsecsvc.dll

                          c:\windows\system32\authz.dll

                          c:\windows\system32\oakley.dll

                          c:\windows\system32\winipsec.dll

                          c:\windows\system32\pstorsvc.dll

                          c:\windows\system32\psbase.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          c:\windows\system32\dssenh.dll

                          C:\WINDOWS\SYSTEM32\SVCHOST.EXE
                          c:\windows\system32\svchost.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\ntmarta.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\samlib.dll

                          c:\windows\system32\rpcss.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\termsrv.dll

                          c:\windows\system32\icaapi.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\imagehlp.dll

                          c:\windows\system32\authz.dll

                          c:\windows\system32\mstlsapi.dll

                          c:\windows\system32\activeds.dll

                          c:\windows\system32\adsldpc.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\atl.dll

                          c:\windows\system32\regapi.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\wtsapi32.dll

                          c:\windows\system32\winsta.dll

                          c:\windows\system32\msv1_0.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\windows\system32\svchost.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\rpcss.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\windows\system32\winrnr.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\rasadhlp.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\svchost.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\ntmarta.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\samlib.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\shsvcs.dll

                          c:\windows\system32\winsta.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\dhcpcsvc.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          c:\windows\system32\wzcsvc.dll

                          c:\windows\system32\rtutils.dll

                          c:\windows\system32\wmi.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\wtsapi32.dll

                          c:\windows\system32\esent.dll

                          c:\windows\system32\atl.dll

                          c:\windows\system32\rastls.dll

                          c:\windows\system32\cryptui.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\imagehlp.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\mprapi.dll

                          c:\windows\system32\activeds.dll

                          c:\windows\system32\adsldpc.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\rasapi32.dll

                          c:\windows\system32\rasman.dll

                          c:\windows\system32\tapi32.dll

                          c:\windows\system32\schannel.dll

                          c:\windows\system32\winscard.dll

                          c:\windows\system32\raschap.dll

                          c:\windows\system32\msv1_0.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\schedsvc.dll

                          c:\windows\system32\ntdsapi.dll

                          c:\windows\system32\msidle.dll

                          c:\windows\system32\audiosrv.dll

                          c:\windows\system32\wkssvc.dll

                          c:\windows\system32\cryptsvc.dll

                          c:\windows\system32\certcli.dll

                          c:\windows\system32\es.dll

                          c:\windows\system32\ersvc.dll

                          c:\windows\system32\dmserver.dll

                          c:\windows\pchealth\helpctr\binaries\pchsvc.dll

                          c:\windows\system32\netman.dll

                          c:\windows\system32\netshell.dll

                          c:\windows\system32\credui.dll

                          c:\windows\system32\wzcsapi.dll

                          c:\windows\system32\srvsvc.dll

                          c:\windows\system32\hidserv.dll

                          c:\windows\system32\hid.dll

                          c:\windows\system32\trkwks.dll

                          c:\windows\system32\srsvc.dll

                          c:\windows\system32\powrprof.dll

                          c:\windows\system32\sens.dll

                          c:\windows\system32\seclogon.dll

                          c:\windows\system32\sxs.dll

                          c:\windows\system32\w32time.dll

                          c:\windows\system32\msvcp60.dll

                          c:\windows\system32\browser.dll

                          c:\windows\system32\wuauserv.dll

                          c:\windows\system32\wbem\wmisvc.dll

                          c:\windows\system32\vssapi.dll

                          c:\windows\system32\wuaueng.dll

                          c:\windows\system32\advpack.dll

                          c:\windows\system32\shfolder.dll

                          c:\windows\system32\winspool.drv

                          c:\windows\system32\winhttp.dll

                          c:\windows\system32\cabinet.dll

                          c:\windows\system32\mspatcha.dll

                          c:\windows\system32\sfc.dll

                          c:\windows\system32\sfc_os.dll

                          c:\windows\system32\ipnathlp.dll

                          c:\windows\system32\authz.dll

                          c:\windows\system32\comsvcs.dll

                          c:\windows\system32\mtxclu.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\colbact.dll

                          c:\windows\system32\clusapi.dll

                          c:\windows\system32\resutils.dll

                          c:\windows\system32\wscsvc.dll

                          c:\windows\system32\msi.dll

                          c:\windows\system32\wbem\wbemcomn.dll

                          c:\windows\system32\wbem\wbemcore.dll

                          c:\windows\system32\wbem\esscli.dll

                          c:\windows\system32\wbem\fastprox.dll

                          c:\windows\system32\wbem\wmiutils.dll

                          c:\windows\system32\wbem\repdrvfs.dll

                          c:\windows\system32\wbem\wmiprvsd.dll

                          c:\windows\system32\ncobjapi.dll

                          c:\windows\system32\wbem\wbemess.dll

                          c:\windows\system32\upnp.dll

                          c:\windows\system32\ssdpapi.dll

                          c:\windows\system32\rasadhlp.dll

                          c:\windows\system32\wbem\ncprov.dll

                          c:\windows\system32\rasdlg.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\svchost.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\dnsrslvr.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          c:\windows\system32\svchost.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\ntmarta.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\samlib.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\lmhsvc.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\webclnt.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\urlmon.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\regsvc.dll

                          c:\windows\system32\ssdpsrv.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\wshtcpip.dll

                          C:\WINDOWS\EXPLORER.EXE
                          c:\windows\explorer.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\browseui.dll

                          c:\windows\system32\shdocvw.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\cryptui.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\imagehlp.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\cscui.dll

                          c:\windows\system32\cscdll.dll

                          c:\windows\system32\themeui.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\msimg32.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\actxprxy.dll

                          c:\windows\system32\msutb.dll

                          c:\windows\system32\msctf.dll

                          c:\windows\system32\linkinfo.dll

                          c:\windows\system32\ntshrui.dll

                          c:\windows\system32\atl.dll

                          c:\windows\system32\urlmon.dll

                          c:\windows\system32\msi.dll

                          c:\windows\system32\winsta.dll

                          c:\windows\system32\webcheck.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\stobject.dll

                          c:\windows\system32\batmeter.dll

                          c:\windows\system32\powrprof.dll

                          c:\windows\system32\wtsapi32.dll

                          c:\windows\system32\wdmaud.drv

                          c:\windows\system32\msacm32.drv

                          c:\windows\system32\midimap.dll

                          c:\windows\system32\netshell.dll

                          c:\windows\system32\rtutils.dll

                          c:\windows\system32\credui.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\program files\grisoft\avg anti-spyware 7.5\shellexecutehook.dll

                          c:\program files\incredimail\bin\b4imapp.dll

                          c:\windows\system32\sxs.dll

                          c:\windows\system32\mpr.dll

                          c:\windows\system32\drprov.dll

                          c:\windows\system32\ntlanman.dll

                          c:\windows\system32\netui0.dll

                          c:\windows\system32\netui1.dll

                          c:\windows\system32\netrap.dll

                          c:\windows\system32\samlib.dll

                          c:\windows\system32\davclnt.dll

                          c:\windows\system32\shdoclc.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\browselc.dll

                          c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx

                          c:\windows\system32\duser.dll

                          c:\windows\system32\msgina.dll

                          c:\windows\system32\odbc32.dll

                          c:\windows\system32\comdlg32.dll

                          c:\windows\system32\odbcint.dll

                          c:\windows\system32\mlang.dll

                          c:\windows\system32\rasapi32.dll

                          c:\windows\system32\rasman.dll

                          c:\windows\system32\tapi32.dll

                          c:\windows\system32\sensapi.dll

                          c:\windows\system32\cryptnet.dll

                          c:\windows\system32\winhttp.dll

                          c:\progra~1\spybot~1\sdhelper.dll

                          c:\windows\system32\faultrep.dll

                          c:\windows\system32\olepro32.dll

                          c:\windows\system32\msisip.dll

                          c:\windows\system32\wshext.dll

                          c:\windows\system32\mfc42.dll

                          c:\windows\system32\mfc42loc.dll

                          c:\windows\system32\wshfr.dll

                          C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
                          c:\windows\system32\spoolsv.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\spoolss.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\rasadhlp.dll

                          c:\windows\system32\localspl.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\sfc_os.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\imagehlp.dll

                          c:\windows\system32\winspool.drv

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\cnbjmon.dll

                          c:\windows\system32\pjlmon.dll

                          c:\windows\system32\tcpmon.dll

                          c:\windows\system32\usbmon.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\winrnr.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\win32spl.dll

                          c:\windows\system32\netrap.dll

                          c:\windows\system32\ntdsapi.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\inetpp.dll

                          c:\windows\system32\xpsp2res.dll

                          C:\PROGRAM FILES\SYNCROSOFT\POS\H2O\CLEDX.EXE
                          c:\program files\syncrosoft\pos\h2o\cledx.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\newdev.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\credui.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\program files\syncrosoft\pos\h2o\emu.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\system32\msctf.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\imagehlp.dll

                          C:\WINDOWS\SYSTEM32\CTFMON.EXE
                          c:\windows\system32\ctfmon.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\msctf.dll

                          c:\windows\system32\msutb.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
                          c:\program files\msn messenger\msnmsgr.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcr80.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msimg32.dll

                          c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll

                          c:\program files\msn messenger\msncore.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\system32\imm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\windows\system32\msacm32.dll

                          c:\program files\msn messenger\msidcrl40.dll

                          c:\windows\system32\sensapi.dll

                          c:\windows\system32\psapi.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\imagehlp.dll

                          c:\program files\msn messenger\contactsux.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\cryptnet.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\winhttp.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\msctf.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\inetcomm.dll

                          c:\windows\system32\msoert2.dll

                          c:\windows\system32\inetres.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\program files\msn messenger\msgslang.8.1.0178.00.dll

                          c:\program files\msn messenger\msgsres.dll

                          c:\windows\system32\wtsapi32.dll

                          c:\windows\system32\winsta.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\es.dll

                          c:\windows\system32\urlmon.dll

                          c:\windows\system32\sxs.dll

                          c:\program files\msn messenger\msgswcam.dll

                          c:\windows\system32\sirenacm.dll

                          c:\windows\system32\devenum.dll

                          c:\windows\system32\msdmo.dll

                          c:\windows\system32\riched20.dll

                          c:\program files\incredimail\bin\b4imapp.dll

                          c:\program files\msn messenger\lmcdata.dll

                          c:\program files\msn messenger\contact.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\schannel.dll

                          c:\windows\system32\rasadhlp.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          c:\windows\system32\rasapi32.dll

                          c:\windows\system32\rasman.dll

                          c:\windows\system32\tapi32.dll

                          c:\windows\system32\rtutils.dll

                          c:\windows\system32\msxml3.dll

                          c:\windows\system32\dssenh.dll

                          c:\windows\system32\winrnr.dll

                          c:\windows\system32\mlang.dll

                          c:\windows\system32\shdocvw.dll

                          c:\windows\system32\cryptui.dll

                          c:\program files\msn messenger\abssm.dll

                          c:\program files\msn messenger\dfsr.dll

                          c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll

                          c:\windows\system32\esent.dll

                          c:\program files\msn messenger\custsat.dll

                          c:\program files\msn messenger\usnsvcps.dll

                          c:\windows\system32\shdoclc.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\cscui.dll

                          c:\windows\system32\cscdll.dll

                          c:\windows\system32\linkinfo.dll

                          c:\windows\system32\ntshrui.dll

                          c:\windows\system32\atl.dll

                          c:\windows\system32\jscript.dll

                          c:\windows\system32\vbscript.dll

                          c:\windows\system32\mfc42.dll

                          c:\windows\system32\mfc42loc.dll

                          c:\windows\system32\wdmaud.drv

                          c:\windows\system32\msacm32.drv

                          c:\windows\system32\midimap.dll

                          c:\windows\system32\ddraw.dll

                          c:\windows\system32\dciman32.dll

                          c:\windows\system32\ddrawex.dll

                          c:\windows\system32\msi.dll

                          c:\windows\system32\wmvcore.dll

                          c:\windows\system32\wmasf.dll

                          C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE
                          c:\windows\system32\drivers\cdac11ba.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          C:\WINDOWS\SYSTEM32\GEARSEC.EXE
                          c:\windows\system32\gearsec.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          C:\WINDOWS\SYSTEM32\WDFMGR.EXE
                          c:\windows\system32\wdfmgr.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\imagehlp.dll

                          C:\PROGRA~1\INCRED~1\BIN\IMAPP.EXE
                          c:\progra~1\incred~1\bin\imapp.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\progra~1\incred~1\bin\imutilsu.dll

                          c:\progra~1\incred~1\bin\imntutilu.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\mfc42u.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\mpr.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\urlmon.dll

                          c:\windows\system32\msvcp60.dll

                          c:\progra~1\incred~1\bin\imlooku.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\mfc42loc.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\dbghelp.dll

                          c:\windows\system32\msctf.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\program files\incredimail\bin\imappru.dll

                          c:\windows\system32\oleacc.dll

                          c:\windows\system32\sxs.dll

                          c:\program files\incredimail\bin\imcomutlu.dll

                          c:\program files\incredimail\bin\imspoolu.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\msvcirt.dll

                          c:\program files\incredimail\bin\imfoldrsu.dll

                          c:\program files\incredimail\bin\imservu.dll

                          c:\program files\incredimail\bin\imjunku.dll

                          c:\program files\incredimail\bin\imnotfyu.dll

                          c:\program files\incredimail\bin\b4imapp.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\rasapi32.dll

                          c:\windows\system32\rasman.dll

                          c:\windows\system32\tapi32.dll

                          c:\windows\system32\rtutils.dll

                          c:\windows\system32\sensapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\mprapi.dll

                          c:\windows\system32\activeds.dll

                          c:\windows\system32\adsldpc.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\atl.dll

                          c:\windows\system32\samlib.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\winhttp.dll

                          c:\windows\system32\mlang.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\rasadhlp.dll

                          c:\windows\system32\winrnr.dll

                          c:\windows\system32\apphelp.dll

                          C:\WINDOWS\SYSTEM32\WSCNTFY.EXE
                          c:\windows\system32\wscntfy.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\msctf.dll

                          C:\WINDOWS\SYSTEM32\ALG.EXE
                          c:\windows\system32\alg.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\atl.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\shimeng.dll

                          c:\windows\apppatch\acgenral.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
                          c:\program files\internet explorer\iexplore.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\shdocvw.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\cryptui.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\imagehlp.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\version.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\msctf.dll

                          c:\windows\system32\browseui.dll

                          c:\windows\system32\browselc.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\urlmon.dll

                          c:\windows\system32\cscui.dll

                          c:\windows\system32\cscdll.dll

                          c:\windows\system32\setupapi.dll

                          c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx

                          c:\windows\system32\sxs.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\program files\java\jre1.6.0_03\bin\ssv.dll

                          c:\program files\java\jre1.6.0_03\bin\msvcr71.dll

                          c:\windows\system32\acroieadvhelper.dll

                          c:\windows\system32\olepro32.dll

                          c:\windows\system32\msxml3.dll

                          c:\windows\system32\winhttp.dll

                          c:\windows\system32\shdoclc.dll

                          c:\windows\system32\mlang.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          c:\program files\incredimail\bin\b4imapp.dll

                          c:\windows\system32\rasapi32.dll

                          c:\windows\system32\rasman.dll

                          c:\windows\system32\tapi32.dll

                          c:\windows\system32\rtutils.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\sensapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\rasadhlp.dll

                          c:\windows\system32\mshtml.dll

                          c:\windows\system32\msls31.dll

                          c:\windows\system32\msimtf.dll

                          c:\windows\system32\imm32.dll

                          c:\windows\system32\jscript.dll

                          c:\windows\system32\iepeers.dll

                          c:\windows\system32\winspool.drv

                          c:\windows\system32\macromed\flash\flash9d.ocx

                          c:\windows\system32\comdlg32.dll

                          c:\windows\system32\wdmaud.drv

                          c:\windows\system32\msacm32.drv

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\midimap.dll

                          c:\windows\system32\plugin.ocx

                          c:\windows\system32\schannel.dll

                          c:\windows\system32\ddrawex.dll

                          c:\windows\system32\ddraw.dll

                          c:\windows\system32\dciman32.dll

                          c:\windows\system32\mshtmled.dll

                          c:\windows\system32\dxtrans.dll

                          c:\windows\system32\atl.dll

                          c:\windows\system32\vbscript.dll

                          c:\windows\system32\mfc42.dll

                          c:\windows\system32\mfc42loc.dll

                          c:\windows\system32\imgutil.dll

                          c:\windows\system32\pngfilt.dll

                          c:\windows\system32\inetcpl.cpl

                          c:\windows\system32\inetcplc.dll

                          c:\windows\system32\rsaenh.dll

                          c:\windows\system32\dssenh.dll

                          c:\windows\system32\wmp.dll

                          c:\windows\system32\msvfw32.dll

                          c:\windows\system32\wmploc.dll

                          c:\windows\system32\dxtmsft.dll

                          c:\windows\system32\usp10.dll

                          c:\windows\system32\actxprxy.dll

                          c:\windows\system32\ntshrui.dll

                          c:\windows\system32\linkinfo.dll

                          c:\windows\system32\corpol.dll

                          c:\windows\system32\cryptnet.dll

                          c:\windows\system32\winrnr.dll

                          c:\windows\system32\iphlpapi.dll

                          c:\progra~1\spybot~1\sdhelper.dll

                          c:\windows\system32\msimg32.dll

                          c:\windows\system32\faultrep.dll

                          c:\windows\system32\winsta.dll

                          c:\windows\system32\wtsapi32.dll

                          c:\windows\system32\msieftp.dll

                          c:\program files\internet explorer\iexplore.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\shdocvw.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\cryptui.dll

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\imagehlp.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\wldap32.dll

                          c:\windows\system32\version.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\comctl32.dll

                          c:\windows\system32\msctf.dll

                          c:\windows\system32\browseui.dll

                          c:\windows\system32\browselc.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\urlmon.dll

                          c:\windows\system32\cscui.dll

                          c:\windows\system32\cscdll.dll

                          c:\windows\system32\setupapi.dll

                          c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx

                          c:\windows\system32\sxs.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\program files\java\jre1.6.0_03\bin\ssv.dll

                          c:\program files\java\jre1.6.0_03\bin\msvcr71.dll

                          c:\windows\system32\acroieadvhelper.dll

                          c:\windows\system32\olepro32.dll

                          c:\windows\system32\msxml3.dll

                          c:\windows\system32\winhttp.dll

                          c:\windows\system32\shdoclc.dll

                          c:\windows\system32\mlang.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\mswsock.dll

                          c:\windows\system32\hnetcfg.dll

                          c:\windows\system32\wshtcpip.dll

                          c:\windows\system32\rasapi32.dll

                          c:\windows\system32\rasman.dll

                          c:\windows\system32\tapi32.dll

                          c:\windows\system32\rtutils.dll

                          c:\windows\system32\winmm.dll

                          c:\program files\incredimail\bin\b4imapp.dll

                          c:\windows\system32\sensapi.dll

                          c:\windows\system32\userenv.dll

                          c:\windows\system32\dnsapi.dll

                          c:\windows\system32\rasadhlp.dll

                          c:\windows\system32\mshtml.dll

                          c:\windows\system32\msls31.dll

                          c:\windows\system32\msimtf.dll

                          c:\windows\system32\imm32.dll

                          c:\windows\system32\jscript.dll

                          c:\windows\system32\iepeers.dll

                          c:\windows\system32\winspool.drv

                          c:\windows\system32\imgutil.dll

                          c:\windows\system32\pngfilt.dll

                          c:\windows\system32\mshtmled.dll

                          c:\windows\system32\usp10.dll

                          c:\windows\system32\macromed\flash\flash9d.ocx

                          c:\windows\system32\comdlg32.dll

                          c:\windows\system32\wdmaud.drv

                          c:\windows\system32\msacm32.drv

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\midimap.dll

                          c:\windows\system32\dxtrans.dll

                          c:\windows\system32\atl.dll

                          c:\windows\system32\ddrawex.dll

                          c:\windows\system32\ddraw.dll

                          c:\windows\system32\dciman32.dll

                          c:\windows\system32\dxtmsft.dll

                          c:\windows\system32\schannel.dll

                          c:\windows\system32\inetcpl.cpl

                          c:\windows\system32\inetcplc.dll

                          c:\windows\system32\occache.dll

                          c:\windows\system32\actxprxy.dll

                          c:\windows\system32\winrnr.dll

                          c:\windows\system32\iphlpapi.dll

                          C:\PROGRAM FILES\MSN MESSENGER\USNSVC.EXE
                          c:\program files\msn messenger\usnsvc.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\version.dll

                          c:\program files\msn messenger\usnsvcps.dll

                          c:\windows\system32\rsaenh.dll

                          C:\PROGRA~1\INCRED~1\BIN\INCMAIL.EXE
                          c:\progra~1\incred~1\bin\incmail.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\progra~1\incred~1\bin\imutilsu.dll

                          c:\progra~1\incred~1\bin\imntutilu.dll

                          c:\windows\system32\ole32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\mfc42u.dll

                          c:\windows\system32\shell32.dll

                          c:\windows\system32\shlwapi.dll

                          c:\windows\system32\winmm.dll

                          c:\windows\system32\mpr.dll

                          c:\windows\system32\netapi32.dll

                          c:\windows\system32\wininet.dll

                          c:\windows\system32\crypt32.dll

                          c:\windows\system32\msasn1.dll

                          c:\windows\system32\version.dll

                          c:\windows\system32\urlmon.dll

                          c:\windows\system32\msvcp60.dll

                          c:\progra~1\incred~1\bin\imlooku.dll

                          c:\windows\system32\comctl32.dll

                          c:\progra~1\incred~1\bin\immapiu.dll

                          c:\windows\system32\mfc42loc.dll

                          c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

                          c:\windows\system32\dbghelp.dll

                          c:\windows\system32\msctf.dll

                          c:\windows\system32\clbcatq.dll

                          c:\windows\system32\comres.dll

                          c:\windows\system32\xpsp2res.dll

                          c:\program files\incredimail\bin\incmailru.dll

                          c:\program files\incredimail\bin\imsuppu.dll

                          c:\program files\incredimail\bin\imlookexu.dll

                          c:\program files\incredimail\bin\imwrappu.dll

                          c:\program files\incredimail\bin\sfttv32u.dll

                          c:\program files\incredimail\bin\imsuppru.dll

                          c:\program files\incredimail\bin\imfeatu.dll

                          c:\program files\incredimail\bin\ssce5432.dll

                          c:\windows\system32\comdlg32.dll

                          c:\program files\incredimail\bin\imfeatru.dll

                          c:\windows\system32\sxs.dll

                          c:\windows\system32\secur32.dll

                          c:\windows\system32\wsock32.dll

                          c:\windows\system32\ws2_32.dll

                          c:\windows\system32\ws2help.dll

                          c:\windows\system32\macromed\flash\flash9d.ocx

                          c:\windows\system32\wintrust.dll

                          c:\windows\system32\imagehlp.dll

                          c:\windows\system32\wdmaud.drv

                          c:\windows\system32\msacm32.drv

                          c:\windows\system32\msacm32.dll

                          c:\windows\system32\midimap.dll

                          c:\windows\system32\olepro32.dll

                          c:\program files\incredimail\bin\immangru.dll

                          c:\program files\incredimail\bin\immangrru.dll

                          c:\program files\incredimail\bin\imparseru.dll

                          c:\program files\incredimail\bin\mimepp.dll

                          c:\windows\system32\msvcirt.dll

                          c:\program files\incredimail\bin\imviewu.dll

                          c:\windows\system32\msvfw32.dll

                          c:\program files\incredimail\bin\imviewru.dll

                          c:\windows\system32\mlang.dll

                          c:\windows\system32\shdocvw.dll

                          c:\windows\system32\cryptui.dll

                          c:\windows\system32\wldap32.dll

                          c:\program files\incredimail\bin\imbooku.dll

                          c:\program files\incredimail\bin\imbookru.dll

                          c:\windows\system32\schannel.dll

                          c:\windows\system32\userenv.dll

                          c:\program files\incredimail\bin\imcomutlu.dll

                          c:\program files\incredimail\bin\b4imapp.dll

                          c:\progra~1\incred~1\bin\b4immain.dll

                          c:\windows\system32\setupapi.dll

                          c:\windows\system32\shdoclc.dll

                          c:\windows\system32\mshtml.dll

                          c:\windows\system32\msls31.dll

                          c:\windows\system32\msimtf.dll

                          c:\windows\system32\jscript.dll

                          c:\windows\system32\imm32.dll

                          c:\windows\system32\mshtmled.dll

                          c:\windows\system32\apphelp.dll

                          c:\windows\system32\uxtheme.dll

                          c:\windows\system32\rasapi32.dll

                          c:\windows\system32\rasman.dll

                          c:\windows\system32\tapi32.dll

                          c:\windows\system32\rtutils.dll

                          c:\windows\system32\sensapi.dll

                          C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SPYBOTSD.EXE
                          c:\program files\spybot - search & destroy\spybotsd.exe

                          c:\windows\system32\ntdll.dll

                          c:\windows\system32\kernel32.dll

                          c:\windows\system32\oleaut32.dll

                          c:\windows\system32\msvcrt.dll

                          c:\windows\system32\user32.dll

                          c:\windows\system32\gdi32.dll

                          c:\windows\system32\advapi32.dll

                          c:\windows\system32\rpcrt4.dll

                          c:\windows\system32\o
                          2. ketzakoalt
                            Bon,

                            j'arrive pas a faire fonctionner spybot. il me dit qu'il n'y a pas d'update disponible. ( donc il est à jour , je presume!) et quand je lance "verifier tout , il me dit qu'il faut installer la mise a jour!
                            2. ketzakoalt
                              voici le rapport navifix :

                              Search Navipromo version 3.2.1 commencé le 16/10/2007 à 20:39:03,98

                              !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
                              !!! Poster ce rapport sur le forum pour le faire analyser !!!
                              !!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

                              Fix lancé depuis C:\Program Files\navilog1
                              Mise a jour le 09.10.2007 a 18h00 by IL-MAFIOSO

                              Microsoft Windows XP [version 5.1.2600]
                              Internet Explorer : 6.0.2900.2180

                              *** Recherche Programmes installes ***

                              *** Recherche dossiers dans C:\WINDOWS ***

                              *** Recherche dossiers dans C:\Program Files ***

                              *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

                              *** Recherche dossiers dans C:\Documents and Settings\jerome\Application Data ***

                              *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***

                              *** Recherche avec Catchme-rootkit/stealth malware detector by gmer ***
                              pour + d'infos : http://www.gmer.net

                              Aucun fichier trouvé dans :

                              - C:\WINDOWS\system32
                              - C:\DOCUME~1\jerome\LOCALS~1\APPLIC~1

                              *** Recherche avec GenericNaviSearch ***
                              !!! Tous Ces résultats peuvent révéler des fichiers légitimes !!!
                              !!! A verifier impérativement avant toute suppression manuelle !!!

                              * Scan C:\WINDOWS\system32 *

                              * Scan C:\DOCUME~1\jerome\LOCALS~1\APPLIC~1 *

                              *** Recherche fichiers ***

                              *** Recherche cles registre ***

                              *** Module de Recherche complémentaire ***
                              (Recherche fichiers spécifiques)

                              1)Recherche fichiers connus:

                              2)Recherche Heuristique :

                              3)Recherche Certificats :

                              Certificat Egroup absent !

                              *** Analyse Terminé le 16/10/2007 à 20:39:35,06 ***
                              1. jlpjlp Contributeur sécurité
                                Fais un clic droit sur ce lien : (IL-MAFIOSO)
                                http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
                                Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
                                Ensuite double clique sur navilog1.exe pour lancer l'installation.
                                Une fois l'installation terminée, le fix s'exécutera automatiquement.
                                (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

                                Laisse-toi guider. Au menu principal, choisis 1 et valides.
                                (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

                                Patiente jusqu'au message :
                                *** Analyse Termine le ..... ***
                                Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
                                Copie-colle l'intégralité dans une réponse. Referme le blocnote.
                                Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
                                • 1
                                • 2

                                Discussions similaires

                                Enlever ou désactiver le mode sécurisé Freebox
                                Cycy

                                18 réponses
                                Je veux retirer le mode sécurité de ma TV Freebox
                                beatrice

                                1 réponse
                                Comment supprimer le surlignage sur Word ?
                                luxbanne

                                11 réponses
                                "Mode sécurisé": comment l'enlever ?
                                skander1615

                                2 réponses
                                problème enlever surlignage texte
                                lolomusic667

                                5 réponses