Popups

bonsoir,

cela peut être correct suivant ce que tu fais.

j'ai 512mO DE RAM. c'est peu ou beaucoup????

Bonsoir

une méthode rapide pour savoir combien l'ordi a de ram

démarrer < panneau de configuration < système < onglet général, là tu auras une brève description de la configuration du pc, dont le nombre de ram

@+

bonsoir

tu télécharges SIW

Bonsoir,
Et oui, c'est encore moi...;désolée....

comment puis-je savoir de combien je dispose pour ma ram ???

bonjour,

1 - Cooment puis-je le booster (en faisant autre chose qu'une défrag, que j'ai déjà faite) ?

combien de mémoire de ram as tu ?

2 - Comment puis-je supprimer des programmes au démarrage sans supprimer le programme de mon disque dur, càdire  autrement que dans "ajouter ou supprimer des programmes". Je voudrais qimplement que le démarrage soit moins long (1/4 d'heure environ pour obtenir ma connexion ) ;

oui effectivement c'est un peu longuet ! tu n'as pourtant pas énormément de programmes qui se lancent au démarrage, mais retire ceux qui sont inutiles et que tu peux démarrer manuellement bien sûr il faut garder antivirus et parefeu.
démarrer----------------exécuter---------tu tapes msconfig--------------ok onglet démarrage, et tu décoches les lignes que tu veux.
ensuite il faudra rebooter le pc

3 - qu'est-ce que je fais avec AVG. J'avais déjà telechargé d'autres versions? Est-ce que je les garde?

D'autres versions ? supprimes les anciennes alors. AVG tu peux le conserver, il sera en protection résidente pour sa période d'essai, ensuite il ne l'aura plus, tu devrais pour l'utiliser pour un scan faire les mises à jour manuellement. Mais il peut être utile.

maintenant :

* Tu peux supprimer tous les logiciels que nous avons utilisés (Type: SmitFraufix, Blacklight, SDFix, ect.....)
qui traitent des infections spécifiques et qui sont mis à jour réguliérement.

puis IMPORTANT

* démarrer-----------panneau de configuration------------système----------
onglet Restauration système-----------coche la case (Désactiver la restauration système)--------------
redémarre l'ordinateur
réactive la ensuite

* Pour améliorer la sécurité de ton PC prend quelques instants pour lire

CECI

bon we

Bonjour,
Où j'en suis? Les popups ont totalement disparu et je t'en remercie. il y avait vraiment beaucoup à faire. mais, maintenant, j'ai 3 questions à te poser.
Mon PC est très très ent maintenant (aors qu'i l ne l'était pas auparavant).

1 - Cooment puis-je le booster (en faisant autre chose qu'une défrag, que j'ai déjà faite) ?

2 - Comment puis-je supprimer des programmes au démarrage sans supprimer le programme de mon disque dur, càdire autrement que dans "ajouter ou supprimer des programmes". Je voudrais qimplement que le démarrage soit moins long (1/4 d'heure environ pour obtenir ma connexion ) ;

3 - qu'est-ce que je fais avec AVG. J'avais déjà telechargé d'autres versions? Est-ce que je les garde?

merci encore.

Bon week-end quand même !!!

bonsoir,

où en es tu de tes problèmes maintenant ?

Bonsoir,
Voilà, c'est enfin terminé. En route, j'ai supprimé un trojan. j'espère que ça va aller maintenant</gras></gras>.

C:\System Volume Information\_restore{E1DDEA5C-0797-4040-B26D-1A77C281B096}\RP1480\A1288235.exe -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{E1DDEA5C-0797-4040-B26D-1A77C281B096}\RP1480\A1288236.exe -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Common Files\Companion Wizard\compwiz.exe -> Adware.Companion : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-1813695884-1367642660-1282664909-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{202A961F-23AE-42B1-9505-FFE3C818D717} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{E1DDEA5C-0797-4040-B26D-1A77C281B096}\RP1602\A1443327.dll -> Adware.Shopper : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\michele strobbe\Mes documents\Mes images\mes images\fichiers animés\optique\f0018.exe -> Not-A-Virus.BadJoke.Win32.Deskop : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.8:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.24:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.20:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.21:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.22:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.23:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\cuajbxs8.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\michele strobbe\Cookies\michele_strobbe@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\System Volume Information\_restore{E1DDEA5C-0797-4040-B26D-1A77C281B096}\RP1574\A1414239.exe -> Trojan.Inject.gl : Nettoyé et sauvegardé (mise en quarantaine).

Fin du rapport

bonsoir,

* lance hijackthis puis coche ces lignes :

O4 - HKLM\..\Run: [Stimulation Cérébrale - Planificateur] "C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe" -----------je ne pense pas que ce soit nécessaire au démarrage si ?

O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
----------celui ci non + tu peux le lancer manuellement pour le nettoyage

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe -----------inutile au démarrage

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab
O22 - SharedTaskScheduler: - bestreak - (no file)

* clique sur fix checked

il te reste aussi du symantec.
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

* télécharge AVG Anti-Spyware (ewido)

https://www.avg.com/en-ww/free-antivirus-download

* tu l'installes

* lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente

puis

Lance AVG Anti-Spyware

Clique sur le bouton Analyse (de la barre d'outils)

puis fait dans l'ordre stp. Tu sauvegardes le rapport APRES avoir mis les actions.

Puis sur l'onglet Paramètres,
sous : "Comment réagir "clique sur Actions recommandées. Sélectionne Quarantaine.

Reviens à l'onglet Analyse. Clique sur Analyse complète du système.

A la fin du scan, choisis l'option 3

"Appliquer toutes les actions " en bas.

Clique sur "Enregistrer le rapport".

Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

Poste le.

Merci de ta patience !!!!

j'ai énormément de mal à me connceter.
Voici le nouveau rapport hijackthis.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:34:26, on 30/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AOL 9.0h\aoltray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Delux\PS2 Keyboard English Edition\keyboard.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Antipub\antipub.exe
C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
C:\Program Files\Fichiers communs\AOL\1145953506\ee\aolsoftware.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\AOL 9.0h\waol.exe
C:\Program Files\AOL 9.0h\shellmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Stimulation Cérébrale - Planificateur] "C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Wallpaper] "C:\Documents and Settings\michele strobbe\Mes documents\photos\vacances\2007 venise\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0h\aoltray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: PS2 Keyboard English Edition.lnk = ?
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 2.0\resources\fr-FR\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.creaf.com
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{11389026-0515-446D-9F4A-1170FDCEC47C}: NameServer = 205.188.146.145
O22 - SharedTaskScheduler: - bestreak - (no file)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

bonjour,

pour la 02 c'est normal que tu ne l'aies pas trouvée

reposte un nouveau rapport hijackthis stp

Bonjour,

j'ai donc tenté de faire ce que tu me demandais mais je n'ai pas trouvé ceci :

O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [neebbszyqq] c:\windows\system32\neebbszyqq.exe neebbszyqq (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [azmxuwihse] c:\windows\system32\azmxuwihse.exe azmxuwihse (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nabspjziu] c:\windows\system32\nabspjziu.exe nabspjziu (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [fpvvunv] c:\windows\system32\fpvvunv.exe fpvvunv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [htuwqqauc] c:\windows\system32\htuwqqauc.exe htuwqqauc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gvswnpjkhm] c:\windows\system32\gvswnpjkhm.exe gvswnpjkhm (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [qtarokals] c:\windows\system32\qtarokals.exe qtarokals (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nnpfmmswo] c:\windows\system32\nnpfmmswo.exe nnpfmmswo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vrrfmzgo] c:\windows\system32\vrrfmzgo.exe vrrfmzgo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [icxjjch] c:\windows\system32\icxjjch.exe icxjjch (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vohwjvh] c:\windows\system32\vohwjvh.exe vohwjvh (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [kukqoxc] c:\windows\system32\kukqoxc.exe kukqoxc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vpycfx] c:\windows\system32\vpycfx.exe vpycfx (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gmkmbshk] c:\windows\system32\gmkmbshk.exe gmkmbshk (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [eqcpjksl] c:\windows\system32\eqcpjksl.exe eqcpjksl (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [mogsya] c:\windows\system32\mogsya.exe mogsya (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hkkohqv] c:\windows\system32\hkkohqv.exe hkkohqv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hxkgel] c:\windows\system32\hxkgel.exe hxkgel (User 'yann strobbe')
-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program

Voici le rapport de Bit defender
BitDefender Online Scanner

Rapport d'analyse généré à: Tue, Oct 30, 2007 - 15:49:56

Voie d'analyse: C:\;E:\;F:\;

Statistiques

Temps
02:33:12

Fichiers
497813

Directoires
13077

Secteurs de boot
2

Archives
8962

Paquets programmes
26527

Résultats

Virus identifiés
11

Fichiers infectés
77

Fichiers suspects
0

Avertissements
0

Désinfectés
0

Fichiers effacés
79

Info sur les moteurs

Définition virus
858860

Version des moteurs
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Analyse des plugins
14

Archive des plugins
38

Unpack des plugins
7

E-mail plugins
6

Système plugins
1

Paramètres d'analyse

Première action
Désinfecté

Seconde Action
Supprimé

Heuristique
Oui

Acceptez les avertissements
Oui

Extensions analysées
*;

Excludez les extensions

Analyse d'emails
Oui

Analyse des Archives
Oui

Analyser paquets programmes
Oui

Analyse des fichiers
Oui

Analyse de boot
Oui

Fichier analysé
Statut

C:\Documents and Settings\michele strobbe\.housecall\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
Infecté par: Joke.Melter.A

C:\Documents and Settings\michele strobbe\.housecall\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
Echec de la désinfection

C:\Documents and Settings\michele strobbe\.housecall\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
Supprimé

C:\Documents and Settings\michele strobbe\.housecall6.6\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
Infecté par: Joke.Melter.A

C:\Documents and Settings\michele strobbe\.housecall6.6\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
Echec de la désinfection

C:\Documents and Settings\michele strobbe\.housecall6.6\Quarantine\Calor.exe.bac_a02780=>(Quarantine-4)
Supprimé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\ooo680fr1592215
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\ooo680fr1592515
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\ooo680fr1667412
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\ooo680fr1667512
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\res_commandimagelist_sc_fr116
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\res_commandimagelist_sc_fr131
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\res_commandimagelist_sc_fr19
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\res_commandimagelist_sc_fr514
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\res_commandimagelist_sc_fr59
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sc680fr2755
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sfx680fr03
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sfx680fr2683
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svt680fr1592167
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svt680fr1592267
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svt680fr1592567
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svx680fr140021
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svx680fr140121
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svx680fr15005
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\svx680fr15015
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr1020
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr15
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr2125412
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr2753
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr3211
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr3311
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr520
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr722
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\imagecache\sw680fr822
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\javasettings_Windows_x86.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\moderne.sog
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\global\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\global\accelerator\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\global\accelerator\fr\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\global\accelerator\fr\current.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\images\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\images\Bitmaps\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\menubar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\statusbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\dbapp\toolbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\accelerator\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\accelerator\fr\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\accelerator\fr\current.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\images\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\images\Bitmaps\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\menubar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\statusbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\scalc\toolbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\accelerator\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\accelerator\fr\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\accelerator\fr\current.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\images\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\images\Bitmaps\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\menubar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\statusbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sdraw\toolbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\accelerator\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\accelerator\fr\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\accelerator\fr\current.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\images\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\images\Bitmaps\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\menubar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\statusbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sglobal\toolbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\accelerator\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\accelerator\fr\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\accelerator\fr\current.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\images\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\images\Bitmaps\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\menubar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\statusbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\simpress\toolbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\accelerator\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\accelerator\fr\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\accelerator\fr\current.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\images\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\images\Bitmaps\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\menubar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\statusbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\StartModule\toolbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\images\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\images\Bitmaps\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\menubar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\statusbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\sweb\toolbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\accelerator\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\accelerator\fr\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\accelerator\fr\current.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\images\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\images\Bitmaps\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\menubar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\statusbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\soffice.cfg\modules\swriter\toolbar\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E48284FC1.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000000800000008913C8356.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E229C8222.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E706D9D1A.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005ECB5F19AD.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EC3443446.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EB758AAC8.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E2AC2D17B.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/10000000000000B4000000874138D207.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EC3FCE171.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EC7B70664.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E2FA489E1.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E18D2F70E.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E803C4F28.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E513A4C71.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E469E6667.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E7F0C5E7C.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EB9C46970.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E43C87AF2.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005EE2D09D89.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Pictures/100000000000005E0000005E134DD71B.png
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>Content.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sob=>META-INF/manifest.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.soc
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sod
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.soe
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.sog
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\standard.soh
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\sun-color.soc
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\config\web.soc
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\crashdat.chk
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\crashdat.dmp
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\crashdat.prv
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\crashdata\crashdat.stk
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio\biblio.dbf
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio\biblio.dbf=>REMOVED_NULLS
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio\biblio.dbt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb=>mimetype
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb=>content.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb=>settings.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\database\biblio.odb=>META-INF/manifest.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\01PKG7064.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\02PKG7201.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\03PKG4220.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\04PKG50C0.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\05PKG52A3.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\06PKG60B3.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\07PKG6284.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\30sound001.wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\APPPHOTO.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\CLIC.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Crissement de freins.wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Enter the Matado_J04 FAIT.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\fart.wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Noelancien (2m 06s).wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Paillarde002.wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Ramona.wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\RICOCHET.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg100.sdv
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg100.thm
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg30.sdg
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg30.sdv
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\sg30.thm
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Sobs female_SR082401.WAV
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\type.wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\Vai trabalhar vagabundo.wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\gallery\woody2.wav
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.FirstStartWizard.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Inet.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.LDAP.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Addons.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Calc.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Commands.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Common.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Compatibility.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.DataAccess.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Draw.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Embedding.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Events.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Impress.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Java.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Jobs.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Linguistic.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.ProtocolHandler.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Recovery.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Scripting.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Security.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.SFX.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Substitution.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.TypeDetection.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.CalcCommands.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.CalcWindowState.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.Controller.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.DbuCommands.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.DrawImpressCommands.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.DrawWindowState.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.Effects.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.Factories.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.GenericCommands.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.ImpressWindowState.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.StartModuleCommands.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.StartModuleWindowState.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.WriterCommands.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.WriterGlobalWindowState.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.WriterWebWindowState.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.UI.WriterWindowState.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Views.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.Writer.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Office.WriterWeb.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.Setup.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.System.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.TypeDetection.Filter.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.TypeDetection.GraphicFilter.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.TypeDetection.Misc.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.TypeDetection.Types.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.TypeDetection.UISort.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.ucb.Configuration.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.ucb.Hierarchy.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.ucb.Store.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.UserProfile.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\cache\org.openoffice.VCL.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\Common.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\Common.xcu.bak
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\Linguistic.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\Recovery.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI\CalcWindowState.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI\DrawWindowState.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI\ImpressWindowState.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI\StartModuleWindowState.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI\WriterGlobalWindowState.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI\WriterWebWindowState.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI\WriterWindowState.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\UI.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\Views.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\Writer.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Setup.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\ucb\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\ucb\Hierarchy.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\ucb\Store.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\UserProfile.xcu
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\Scripts\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\store\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\store\.templdir.cache
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\temp\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\template\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\uno_packages\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\uno_packages\cache\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\dictionary.lst
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\dictionary.lst.1st
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\dictionary.lst.old
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.aff
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.dic
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.zip
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.zip=>README_fr_FR.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.zip=>fr_FR.dic
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\fr_FR.zip=>fr_FR.aff
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\hyph_fr_FR.dic
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\hyph_fr_FR.zip
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\hyph_fr_FR.zip=>hyph_fr_FR.dic
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\hyph_fr_FR.zip=>README_hyph_fr_FR.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\README_fr_FR.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\README_hyph_fr_FR.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\standard.dic
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\thes_fr_FR_v2.zip
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\thes_fr_FR_v2.zip=>archstored:README_th_fr_FR_v2.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\thes_fr_FR_v2.zip=>archstored:th_fr_FR_v2.idx
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\OpenOffice.org2\user\wordbook\thes_fr_FR_v2.zip=>archstored:th_fr_FR_v2.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\PC Tools\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\PC Tools\Spyware Doctor\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\dinerdash2\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\dinerdash2\logfile.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\dinerdash2\prefs.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\PlayFirst\dinerdash2\survey.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1191531090\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1191531090\barker.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1191531090\PCBoosterStart.smi
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1191531090\pcbooster_cs.swf
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\ipmbase.jpg
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\morpheus.smi
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\morpheus_car_sm_04.gif
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\20_1192054874\morpheus_girl_sm_02.gif
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\Category.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\Messages.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\Msg\SCategory.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealMediaSDK\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealMediaSDK\acb82e17.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealMediaSDK\acb926df.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealMediaSDK\acba0205.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\23.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\26.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\autoplaylist.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000001.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000002.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000003.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000004.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000005.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000006.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000007.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000008.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000009.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000010.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000011.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000012.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000013.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000014.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000015.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000016.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000017.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000018.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000019.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000020.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000021.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000022.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000023.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000024.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000025.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000026.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000027.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000028.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000029.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000030.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000031.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000032.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000033.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000034.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000035.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000036.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000037.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000038.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\000\000039.tmd
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\Backup\iscomplete
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\CD.CDX
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\CD.DBF
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\CDTRAX.CDX
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\CDTRAX.DBF
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYGRPS.CDX
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYGRPS.DBF
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYLIST.CDX
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\playlist.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYLIST.DBF
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYLIST.FPT
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYTRAX.CDX
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\PLAYTRAX.DBF
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRACKS.DBF
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRACKS.FPT
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRACKS2.CDX
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRAKINFO.CDX
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\TRAKINFO.DBF
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\db\version
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\DRM\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\CDBurning.log
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\DownloadMgr.log
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\GenDevices.log
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\log1.dmp
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\Log1.log
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\pdgenctnomad.log
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\ErrorLogs\pdgenwmdm.log
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\Audio\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\Pages Web\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\Radio\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Favorites\Vidéos\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\History\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\lclkdb.son
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\library\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\PMP\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\data\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\data\normal\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\data\normal\imgcache.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\skins\data\normal\state.ini
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\Temp\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\timecache0.ini
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\RealPlayer\viz.ini
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\rnadmin\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Real\rnadmin\rnsystem.dat
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\Application Data\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\Config.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\cs\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\db\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\db\Aliases.dbs
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\db\Sites.dbs
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\Documents and Settings\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\dwld\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\dwld\WhiteList.xip
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\persist.dbs
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\report\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\report\aggr_storage.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\report\send_storage.xml
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\res2\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\cs\res2\WhiteList.dbs
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\ShoppingReport\ShoppingReport\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\attachmentfilter.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\dccfilter\
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\dccfilter\map
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\dccfilter\map.txt
Nettoyé

C:\Documents and Settings\michele strobbe\Application Data\Spamihilator\plugins\newsletter\
Nettoyé

C:\Documents and Settings\michele strobbe\Applic

Bonjour

je ne fais que passé rapidement ! merci Philae ;-)

++

re

plusieurs choses encore restent à faire

Une partie de la procédure se déroulera sans avoir accès à internet, prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant cette désinfection.

Les manipulations sont à faire sans interruption et dans l'ordre.

Si tu ne comprends pas quelque chose, demande des explications avant de commencer.

$$ Télécharge Brute Force Uninstaller (de Merijn)

http://www.merijn.org/files/bfu.zip

Créé un nouveau dossier directement sur le C:\ et nomme-le BFU. Décompresse le fichier téléchargé dans ce nouveau dossier (C:\BFU)

$$ FAIS UN CLIC-DROIT sur le lien suivant

http://perso.orange.fr/Chercheur-perso/scripts/toolbar.bfu

et choisis "Enregistrer la cible sous..." afin de télécharger Toolbar.bfu de Chercheur

Sauvegarde dans le dossier créé (C:\BFU).

**Note : si tu utlises Internet Explorer; lors de la sauvegarde, assure-toi que le champs "Type :" affiche "Tous les fichiers". Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : [bToolbar.bfu et BFU.exe (très important).

$$ Redémarre en mode Sans Échec : au redémarrage, tapote immédiatement la touche F8 ou F5; tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée".

Choisis ton compte usuel, et non Administrateur.

$$ Démarre le "Brute Force Uninstaller" en double-cliquant BFU.exe (du dossier C:\BFU)

Clique sur le petit dossier jaune, à la droite de la boîte Scriptline to execute, et double-clique sur :

Toolbar.bfu

Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\Toolbar.bfu

Clique sur Execute et laisse-le faire son travail.

Attendre que Complete script execution apparaîsse et clique sur OK.

Clique Exit pour fermer le programme BFU.

$$ Redémarre normalement

puis

* lance hijackthis "do a system scan only" et coche ces lignes :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr/
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [neebbszyqq] c:\windows\system32\neebbszyqq.exe neebbszyqq (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [azmxuwihse] c:\windows\system32\azmxuwihse.exe azmxuwihse (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nabspjziu] c:\windows\system32\nabspjziu.exe nabspjziu (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [fpvvunv] c:\windows\system32\fpvvunv.exe fpvvunv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [htuwqqauc] c:\windows\system32\htuwqqauc.exe htuwqqauc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gvswnpjkhm] c:\windows\system32\gvswnpjkhm.exe gvswnpjkhm (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [qtarokals] c:\windows\system32\qtarokals.exe qtarokals (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nnpfmmswo] c:\windows\system32\nnpfmmswo.exe nnpfmmswo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vrrfmzgo] c:\windows\system32\vrrfmzgo.exe vrrfmzgo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [icxjjch] c:\windows\system32\icxjjch.exe icxjjch (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vohwjvh] c:\windows\system32\vohwjvh.exe vohwjvh (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [kukqoxc] c:\windows\system32\kukqoxc.exe kukqoxc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vpycfx] c:\windows\system32\vpycfx.exe vpycfx (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gmkmbshk] c:\windows\system32\gmkmbshk.exe gmkmbshk (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [eqcpjksl] c:\windows\system32\eqcpjksl.exe eqcpjksl (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [mogsya] c:\windows\system32\mogsya.exe mogsya (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hkkohqv] c:\windows\system32\hkkohqv.exe hkkohqv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hxkgel] c:\windows\system32\hxkgel.exe hxkgel (User 'yann strobbe')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll ---ces 2 derniers lignes devraient avoir disparues après la manip faite plus haut.
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://www.king.com/ctl/kingcomie.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/downloadcontrol.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O21 - SSODL: bestreak - - (no file)
O22 - SharedTaskScheduler: - bestreak - (no file)

* toutes applications fermées et HORS CONNEXION si possible clique sur FIX CHECKED

puis

Télécharge OTMoveIt (de Old_Timer) sur ton Bureau.
http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe

double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

c:\windows\system32\neebbszyqq.exe 
c:\windows\system32\azmxuwihse.exe
c:\windows\system32\nabspjziu.exe 
c:\windows\system32\fpvvunv.exe
c:\windows\system32\htuwqqauc.exe
c:\windows\system32\gvswnpjkhm.exe
c:\windows\system32\qtarokals.exe
c:\windows\system32\nnpfmmswo.exe
c:\windows\system32\vrrfmzgo.exe
c:\windows\system32\icxjjch.exe 
c:\windows\system32\vohwjvh.exe
c:\windows\system32\kukqoxc.exe
c:\windows\system32\vpycfx.exe
c:\windows\system32\gmkmbshk.exe
c:\windows\system32\eqcpjksl.exe
c:\windows\system32\mogsya.exe 
c:\windows\system32\hkkohqv.exe
c:\windows\system32\hxkgel.exe

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre Results.
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Yes.

* Fait un scan antivirus en ligne avec Internet Explorer
https://www.bitdefender.fr/
et copie colle le résultat ici
* En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
* Dans la nouvelle fenêtre, clique sur I agree
* La fenêtre change encore, clique sur Click here to scan
* Les signatures se chargent, etc.

tuto en image

http://pageperso.aol.fr/rginformatique/mapage/defender.htm

ainsi qu'un nouveau rapport hijackthis

bonjour,

non ce n'est pas ce que j'ai dit, d'ailleurs je n'ai rien dit, je pensais que green day reviendrait. Peut être est elle en vacances

je vais regarder ton dernier rapport qui ne me parait pas être au top

<gras>Mon PC est-il désinfecté maintenant? Si oui, que faut-il faire pour éviter que ça ne recommence, stp?</gras>

c'est ça ??????
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:11:50, on 28/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Documents and Settings\michele strobbe\Mes documents\photos\vacances\2007 venise\Wallpaper\Wallpaper.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\AOL 9.0h\aoltray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Delux\PS2 Keyboard English Edition\keyboard.exe
C:\Program Files\AOL 9.0h\waol.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Antipub\antipub.exe
C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.bing.com/?toHttps=1&redig=76420697312543738FC7AC1F1CA1CB9B
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~2\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1145953506\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Stimulation Cérébrale - Planificateur] "C:\Program Files\SDLL\Boostez vos neurones !\Lettres\data\Launcher.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Wallpaper] "C:\Documents and Settings\michele strobbe\Mes documents\photos\vacances\2007 venise\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [neebbszyqq] c:\windows\system32\neebbszyqq.exe neebbszyqq (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [azmxuwihse] c:\windows\system32\azmxuwihse.exe azmxuwihse (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nabspjziu] c:\windows\system32\nabspjziu.exe nabspjziu (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [fpvvunv] c:\windows\system32\fpvvunv.exe fpvvunv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [htuwqqauc] c:\windows\system32\htuwqqauc.exe htuwqqauc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gvswnpjkhm] c:\windows\system32\gvswnpjkhm.exe gvswnpjkhm (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [qtarokals] c:\windows\system32\qtarokals.exe qtarokals (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [nnpfmmswo] c:\windows\system32\nnpfmmswo.exe nnpfmmswo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vrrfmzgo] c:\windows\system32\vrrfmzgo.exe vrrfmzgo (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [icxjjch] c:\windows\system32\icxjjch.exe icxjjch (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vohwjvh] c:\windows\system32\vohwjvh.exe vohwjvh (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [kukqoxc] c:\windows\system32\kukqoxc.exe kukqoxc (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [vpycfx] c:\windows\system32\vpycfx.exe vpycfx (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [gmkmbshk] c:\windows\system32\gmkmbshk.exe gmkmbshk (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [eqcpjksl] c:\windows\system32\eqcpjksl.exe eqcpjksl (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [mogsya] c:\windows\system32\mogsya.exe mogsya (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hkkohqv] c:\windows\system32\hkkohqv.exe hkkohqv (User 'yann strobbe')
O4 - HKUS\S-1-5-21-1813695884-1367642660-1282664909-1007\..\Run: [hxkgel] c:\windows\system32\hxkgel.exe hxkgel (User 'yann strobbe')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0h\aoltray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: PS2 Keyboard English Edition.lnk = ?
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 2.0\resources\fr-FR\local\search.html
O8 - Extra context menu item: &Search - ?p=ZS
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.creaf.com
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://www.king.com/ctl/kingcomie.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/1335e49ce35f75922917/netzip/RdxIE601_fr.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1187871205015
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/downloadcontrol.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{11389026-0515-446D-9F4A-1170FDCEC47C}: NameServer = 205.188.146.145
O21 - SSODL: bestreak - - (no file)
O22 - SharedTaskScheduler: - bestreak - (no file)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

bonsoir,

visiblement green day n'est pas là. Je disais nouveau rapport HIJACKTHIS, pas navilog

allo????