Rapport de securite

Bonjour,voici le rapport de securite, dites moi ce que je dois faire.....merci

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "peinar"

Mise à jour le 09.04.2008 à 20h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6001
Internet Explorer : 7.0.6001.18000
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans C:\Windows ***

*** Recherche dossiers dans C:\Program Files ***

C:\Program Files\Instant Access trouvé !
C:\Program Files\MessengerSkinner trouvé !

*** Recherche dossiers dans C:\ProgramData ***

*** Recherche dossiers dans C:\ProgramData\Microsoft\Windows\Start Menu\Programs ***

...\MessengerSkinner trouvé !

*** Recherche dossiers dans c:\users\peinar\appdata\roaming\microsoft\windows\start menu\programs ***

...\MessengerSkinner trouvé !

*** Recherche dossiers dans C:\Users\peinar\AppData\Roaming ***

...\MessengerSkinner trouvé !

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\Windows\system32 *

Fichiers trouvés :

wmudoatvq.exe trouvé !

Fichiers suspects :

C:\Windows\system32\nsinet.exe trouvé !

* Recherche dans C:\Users\peinar\AppData\Local\Microsoft *

* Recherche dans C:\Users\peinar\AppData\Local *

Fichiers trouvés :

wmudoatvq.exe trouvé !
wmudoatvq.dat trouvé !
wmudoatvq_nav.dat trouvé !
wmudoatvq_navps.dat trouvé !

*** Recherche fichiers ***

C:\Windows\Downloaded Program Files\IaLdr32.inf trouvé !
C:\Windows\pack.epk trouvé !
C:\Windows\system32\nvs2.inf trouvé !

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé !
HKEY_CURRENT_USER\Software\mc trouvé !

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

C:\Windows\system32\nsinet.exe trouvé !

2)Recherche Heuristique :

* Dans C:\Windows\system32 :

* Dans C:\Users\peinar\AppData\Local\Microsoft :

* Dans C:\Users\peinar\AppData\Local :

thpmobh.dat trouvé !
thpmobh_nav.dat trouvé !
thpmobh_navps.dat trouvé !
wmudoatvq.dat trouvé !
wmudoatvq_nav.dat trouvé !
wmudoatvq_navps.dat trouvé !

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

*** Analyse terminée le 12/04/2008 à 12:12:58,51 ***
Configuration: Windows Vista
AOL 9.0

21 réponses

  1. voila le dernier rapport, je n'ai pas fait l'étape 3, car je n'ai pas le disque de sauvegarde de norton et de toutes facons, je ne m'en sers pas, autant le supprimer totalement....
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 09:21:48, on 16/04/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\Program Files\Common Files\AOL\1189067097\ee\aolsoftware.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    C:\Windows\RtHDVCpl.exe
    C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\AOL 9.0 VR\waol.exe
    C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Synaptics\SynTP\SynToshiba.exe
    C:\Program Files\Common Files\AOL\Loader\aolload.exe
    C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
    C:\Program Files\AOL 9.0 VR\shellmon.exe
    C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
    R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
    O1 - Hosts: ::1 localhost
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [HostManager] "C:\Program Files\Common Files\AOL\1189067097\ee\AOLSoftware.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{3A037E22-A0C2-423D-9A36-56C09A1AABFF}
    O4 - HKCU\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
    O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0 VR\AOL.EXE" -b
    O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe"
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
    O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
    O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?FR (file missing)
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\Windows\system32\Shdocvw.dll
    O13 - Gopher Prefix:
    O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
    O21 - SSODL: Version1 - {DA88571D-B598-455A-ABA3-0428EB3CAB09} - direct3dfx.dll (file missing)
    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Unknown owner - C:\Program Files\Norton Internet Security\isPwdSvc.exe (file missing)
    O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
    O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
    O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    0
    1. OK!
      Maintenant je vois parfaitement les problèmes encore présent sur ton PC.
      Première chose à faire --> finir de désinstaller entièrement Norton --> ton ancien anti-virus. Ensuite nous réglerons les problèmes de Spyware Secure et NaviPromo.

      Fais ceci.
      va sur ce lien --> http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924
      > Télécharge Norton Removal Vista
      > Applique les étapes 1,2 et 3
      > A l'issue de tout cela (simple et rapide) poste moi un nouveau rapport HijackThis.
      0
      1. ComboFix 08-04-14.2 - peinar 2008-04-15 17:15:53.1 - NTFSx86
        Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.224 [GMT 2:00]
        Endroit: C:\Users\peinar\Downloads\ComboFix.exe
        * Création d'un nouveau point de restauration
        .

        ((((((((((((((((((((((((((((( Fichiers créés 2008-03-15 to 2008-04-15 ))))))))))))))))))))))))))))))))))))
        .

        2008-04-15 14:36 . 2008-04-15 15:09 <REP> d-------- C:\Windows\BDOSCAN8
        2008-04-14 11:57 . 2008-04-14 11:57 <REP> d-------- C:\Program Files\Trend Micro
        2008-04-12 12:00 . 2008-04-14 16:17 <REP> d-------- C:\Program Files\Navilog1
        2008-04-11 17:25 . 2008-04-11 17:25 <REP> d-------- C:\Program Files\Eidos Interactive
        2008-04-11 09:41 . 2008-04-15 14:47 <REP> d-------- C:\Program Files\Spyware-Secure
        2008-04-11 08:59 . 2008-02-28 13:26 1,414,440 --a------ C:\Windows\System32\ShellManager310E2D762.dll
        2008-04-11 08:59 . 2008-02-28 13:01 774,144 --a------ C:\Windows\System32\NEROINSTAEC43759.DB
        2008-04-09 10:08 . 2008-02-29 06:21 2,032,128 --a------ C:\Windows\System32\win32k.sys
        2008-04-09 10:08 . 2008-02-22 06:57 295,936 --a------ C:\Windows\System32\gdi32.dll
        2008-04-08 21:29 . 2008-04-08 21:32 <REP> d-------- C:\Users\All Users\Kiwee Toolbar2
        2008-04-08 21:29 . 2008-04-08 21:32 <REP> d-------- C:\ProgramData\Kiwee Toolbar2
        2008-04-08 21:29 . 2008-04-08 21:29 <REP> d-------- C:\Program Files\Kiwee Toolbar2
        2008-04-01 20:18 . 2008-04-01 20:18 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
        2008-03-31 13:37 . 2008-04-04 10:41 69 --a------ C:\Windows\NeroDigital.ini
        2008-03-31 13:11 . 2008-03-31 13:11 <REP> d-------- C:\Program Files\NeroInstall.bak
        2008-03-31 13:08 . 2008-03-31 13:08 <REP> d-------- C:\Users\peinar\AppData\Roaming\Nero
        2008-03-31 13:02 . 2008-04-11 09:00 <REP> d-------- C:\Users\All Users\Nero
        2008-03-31 13:02 . 2008-04-11 09:00 <REP> d-------- C:\ProgramData\Nero
        2008-03-31 13:02 . 2008-03-31 13:02 <REP> d-------- C:\Program Files\Nero
        2008-03-31 13:02 . 2008-04-11 09:00 <REP> d-------- C:\Program Files\Common Files\Nero
        2008-03-29 20:12 . 2008-03-29 20:12 <REP> dr------- C:\Users\Public\Videos
        2008-03-29 20:12 . 2008-03-29 20:12 <REP> dr------- C:\Users\Public\Pictures
        2008-03-29 20:12 . 2008-03-29 20:12 <REP> dr------- C:\Users\Public\Downloads
        2008-03-29 19:17 . 2008-01-19 09:33 2,623,488 --a------ C:\Windows\System32\SLsvc.exe
        2008-03-29 19:17 . 2008-01-19 09:36 1,541,120 --a------ C:\Windows\System32\onex.dll
        2008-03-29 19:15 . 2008-01-19 09:35 4,875,776 --a------ C:\Windows\System32\NlsData0009.dll
        2008-03-29 19:14 . 2008-01-19 09:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll
        2008-03-29 19:13 . 2008-01-19 08:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
        2008-03-29 19:12 . 2008-01-19 09:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll
        2008-03-29 19:12 . 2008-01-19 09:36 357,888 --a------ C:\Windows\System32\wbemcomn.dll
        2008-03-29 19:12 . 2008-01-19 09:36 139,264 --a------ C:\Windows\System32\SmiInstaller.dll
        2008-03-29 19:11 . 2008-01-19 09:34 305,152 --a------ C:\Windows\System32\msdelta.dll
        2008-03-29 19:11 . 2008-01-19 09:34 258,560 --a------ C:\Windows\System32\dpx.dll
        2008-03-29 19:11 . 2008-01-19 09:34 246,784 --a------ C:\Windows\System32\drvstore.dll
        2008-03-29 19:11 . 2008-01-19 09:36 218,624 --a------ C:\Windows\System32\wdscore.dll
        2008-03-29 19:11 . 2008-01-19 09:33 130,560 --a------ C:\Windows\System32\PkgMgr.exe
        2008-03-29 19:11 . 2008-01-19 09:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
        2008-03-29 18:15 . 2008-03-29 18:15 0 --ah----- C:\ProgramData.LOG2
        2008-03-29 18:15 . 2008-03-29 18:15 0 --ah----- C:\ProgramData.LOG1
        2008-03-23 17:42 . 2006-11-29 14:06 3,426,072 --a------ C:\Windows\System32\d3dx9_32.dll
        2008-03-23 17:40 . 2008-03-23 17:40 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
        2008-03-23 17:39 . 2008-03-23 17:39 <REP> d-------- C:\Program Files\Windows Live Favorites
        2008-03-15 23:47 . 2008-03-23 17:35 <REP> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
        2008-03-15 23:46 . 2008-03-29 21:07 <REP> d-------- C:\Program Files\Windows Live
        2008-03-15 23:45 . 2008-03-23 17:27 <REP> d-------- C:\Users\All Users\WLInstaller
        2008-03-15 23:45 . 2008-03-23 17:27 <REP> d-------- C:\ProgramData\WLInstaller

        .
        (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2008-04-15 07:23 --------- d-----w C:\Users\peinar\AppData\Roaming\OpenOffice.org2
        2008-04-14 15:12 --------- d-----w C:\ProgramData\Google Updater
        2008-04-14 13:13 --------- d-----w C:\Program Files\Windows Live Toolbar
        2008-04-14 13:13 --------- d-----w C:\Program Files\Google
        2008-04-10 11:23 --------- d-----w C:\Program Files\Windows Mail
        2008-03-29 19:13 --------- d-----w C:\ProgramData\Symantec
        2008-03-29 19:13 --------- d-----w C:\Program Files\Common Files\Symantec Shared
        2008-03-29 19:04 --------- d-----w C:\Users\peinar\AppData\Roaming\Lavasoft
        2008-03-29 18:12 174 --sha-w C:\Program Files\desktop.ini
        2008-03-29 18:01 --------- d-----w C:\Program Files\Windows Sidebar
        2008-03-29 18:01 --------- d-----w C:\Program Files\Windows Photo Gallery
        2008-03-29 18:01 --------- d-----w C:\Program Files\Windows Journal
        2008-03-29 18:01 --------- d-----w C:\Program Files\Windows Defender
        2008-03-29 18:01 --------- d-----w C:\Program Files\Windows Collaboration
        2008-03-29 18:01 --------- d-----w C:\Program Files\Windows Calendar
        2008-03-29 17:34 82,432 ----a-w C:\Windows\System32\axaltocm.dll
        2008-03-29 17:34 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
        2008-03-29 16:27 --------- d-----w C:\Program Files\Symantec
        2008-03-29 16:16 --------- d---a-w C:\ProgramData\TEMP
        2008-03-27 13:30 --------- d-----w C:\Program Files\Java
        2008-03-04 20:32 --------- d-----w C:\Program Files\Common Files\Adobe
        2008-02-29 07:14 19,000 ----a-w C:\Windows\System32\kd1394.dll
        2008-02-29 07:11 988,216 ----a-w C:\Windows\System32\winload.exe
        2008-02-29 07:11 927,288 ----a-w C:\Windows\System32\winresume.exe
        2008-02-29 06:53 46,592 ----a-w C:\Windows\System32\setbcdlocale.dll
        2008-02-29 06:53 40,960 ----a-w C:\Windows\System32\srclient.dll
        2008-02-29 06:53 378,368 ----a-w C:\Windows\System32\srcore.dll
        2008-02-29 06:35 6,656 ----a-w C:\Windows\System32\kbd106n.dll
        2008-02-29 04:12 318,464 ----a-w C:\Windows\System32\rstrui.exe
        2008-02-29 04:12 14,848 ----a-w C:\Windows\System32\srdelayed.exe
        2008-02-22 05:05 615,992 ----a-w C:\Windows\System32\ci.dll
        2008-02-22 05:01 826,880 ----a-w C:\Windows\System32\wininet.dll
        2008-02-21 16:41 --------- d-----w C:\ProgramData\MGS
        2008-01-19 07:43 376,376 ----a-w C:\Windows\System32\mcupdate_GenuineIntel.dll
        2008-01-19 07:43 3,600,440 ----a-w C:\Windows\System32\ntkrnlpa.exe
        2008-01-19 07:43 3,548,728 ----a-w C:\Windows\System32\ntoskrnl.exe
        2008-01-19 07:42 94,776 ----a-w C:\Windows\System32\MigAutoPlay.exe
        2008-01-19 07:42 51,768 ----a-w C:\Windows\System32\PSHED.DLL
        2008-01-19 07:42 247,352 ----a-w C:\Windows\System32\clfs.sys
        2008-01-19 07:42 177,208 ----a-w C:\Windows\System32\halmacpi.dll
        2008-01-19 07:42 141,880 ----a-w C:\Windows\System32\halacpi.dll
        2008-01-19 07:41 24,120 ----a-w C:\Windows\System32\BOOTVID.DLL
        2008-01-19 07:41 21,560 ----a-w C:\Windows\System32\kdusb.dll
        2008-01-19 07:41 19,512 ----a-w C:\Windows\System32\kdcom.dll
        2008-01-19 07:38 46,080 ----a-w C:\Windows\System32\NAPCRYPT.DLL
        2008-01-19 07:38 4,595,712 ----a-w C:\Windows\System32\AuthFWSnapin.dll
        2008-01-19 07:38 242,744 ----a-w C:\Windows\System32\rsaenh.dll
        2008-01-19 07:38 155,704 ----a-w C:\Windows\System32\dssenh.dll
        2008-01-19 07:38 131,640 ----a-w C:\Windows\System32\basecsp.dll
        2008-01-19 07:38 103,936 ----a-w C:\Windows\System32\NAPHLPR.DLL
        2008-01-19 07:38 1,203,792 ----a-w C:\Windows\System32\ntdll.dll
        2008-01-19 07:36 996,352 ----a-w C:\Windows\System32\WMNetMgr.dll
        2008-01-19 07:35 98,304 ----a-w C:\Windows\System32\mssitlb.dll
        2008-01-19 07:34 98,816 ----a-w C:\Windows\System32\mfps.dll
        2008-01-19 07:33 98,304 ----a-w C:\Windows\System32\makecab.exe
        2008-01-19 07:32 879,616 ----a-w C:\Windows\System32\Bubbles.scr
        2008-01-19 07:32 704,512 ----a-w C:\Windows\System32\PhotoScreensaver.scr
        2008-01-19 07:32 5,714,432 ----a-w C:\Windows\System32\logon.scr
        2008-01-19 07:32 258,048 ----a-w C:\Windows\System32\winspool.drv
        2008-01-19 07:32 221,184 ----a-w C:\Windows\System32\Mystify.scr
        2008-01-19 07:32 220,672 ----a-w C:\Windows\System32\Ribbons.scr
        2008-01-19 07:32 21,504 ----a-w C:\Windows\System32\msacm32.drv
        2008-01-19 07:32 166,912 ----a-w C:\Windows\System32\wdmaud.drv
        2008-01-19 07:32 1,370,624 ----a-w C:\Windows\System32\Aurora.scr
        2008-01-19 07:31 7,680 ----a-w C:\Windows\System32\spwizres.dll
        2008-01-19 07:31 57,856 ----a-w C:\Windows\System32\nlsbres.dll
        2008-01-19 07:31 118,272 ----a-w C:\Windows\System32\RDPENCDD.dll
        2008-01-19 07:30 17,920 ----a-w C:\Windows\System32\netevent.dll
        2008-01-19 07:29 705,536 ----a-w C:\Windows\System32\imagesp1.dll
        2008-01-19 07:29 58,880 ----a-w C:\Windows\System32\msobjs.dll
        2008-01-19 07:28 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
        2008-01-19 07:26 36,864 ----a-w C:\Windows\System32\cdd.dll
        2008-01-19 06:01 14,336 ----a-w C:\Windows\System32\tsddd.dll
        2008-01-19 06:01 134,656 ----a-w C:\Windows\System32\rdpdd.dll
        2008-01-19 05:52 56,320 ----a-w C:\Windows\System32\vga256.dll
        2008-01-19 05:52 21,504 ----a-w C:\Windows\System32\vga64k.dll
        2008-01-19 05:52 11,776 ----a-w C:\Windows\System32\framebuf.dll
        2008-01-19 05:52 10,752 ----a-w C:\Windows\System32\vga.dll
        2008-01-19 05:50 14,848 ----a-w C:\Windows\System32\iscsilog.dll
        2008-01-19 05:49 2,048 ----a-w C:\Windows\System32\dmdskres2.dll
        2008-01-19 05:48 20,992 ----a-w C:\Windows\System32\msdtcVSp1res.dll
        2008-01-19 05:48 1,291,264 ----a-w C:\Windows\System32\comres.dll
        2008-01-19 05:46 4,240,384 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
        2008-01-19 05:39 13,312 ----a-w C:\Windows\System32\WsmRes.dll
        2008-01-19 05:39 1,536 ----a-w C:\Windows\System32\WsmCl.dll
        2008-01-19 05:36 289,792 ----a-w C:\Windows\System32\atmfd.dll
        2008-01-19 05:33 56,320 ----a-w C:\Windows\System32\graftabl.com
        2008-01-19 05:31 8,322,048 ----a-w C:\Windows\System32\spwizimg.dll
        2008-01-19 05:27 2,560 ----a-w C:\Windows\System32\bootstr.dll
        2008-01-19 05:26 605,696 ----a-w C:\Windows\System32\adtschema.dll
        2008-01-19 03:17 100,043 ----a-w C:\Windows\System32\StructuredQuerySchema.bin
        2007-08-31 15:38 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
        2007-08-31 15:38 32,768 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
        2007-08-31 15:38 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
        2008-01-03 22:04 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Feeds Cache\index.dat
        2007-10-02 15:09 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007092420071001\index.dat
        2007-09-28 19:44 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007092820070929\index.dat
        2007-10-02 15:09 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007100220071003\index.dat
        2007-10-05 10:07 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007100520071006\index.dat
        2007-11-09 21:52 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007110920071110\index.dat
        2008-01-03 22:04 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008010320080104\index.dat
        .

        ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        REGEDIT4
        *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

        [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
        2008-03-14 14:08 265360 --a------ C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
        "{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"= "C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll" [2008-03-14 14:08 265360]

        [HKEY_CLASSES_ROOT\clsid\{6638a9de-0745-4292-8a2e-ae530e7b9b3f}]
        [HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar.1]
        [HKEY_CLASSES_ROOT\TypeLib\{259EEB17-79AA-44DF-8410-8E55F82A902A}]
        [HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
        "{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"= C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll [2008-03-14 14:08 265360]

        [HKEY_CLASSES_ROOT\clsid\{6638a9de-0745-4292-8a2e-ae530e7b9b3f}]
        [HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar.1]
        [HKEY_CLASSES_ROOT\TypeLib\{259EEB17-79AA-44DF-8410-8E55F82A902A}]
        [HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar]

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
        "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 09:33 125952]
        "RunSpySweeperScheduleAtStartup"="C:\Windows\system32\msfeedssync.exe" [2008-01-19 09:33 12800]
        "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2007-10-14 19:09 103712]
        "AOL Fast Start"="C:\Program Files\AOL 9.0 VR\AOL.exe" [2007-06-21 13:44 50480]
        "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 09:33 202240]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-09-01 15:40 98304]
        "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2007-10-14 19:09 103712]
        "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
        "HostManager"="C:\Program Files\Common Files\AOL\1189067097\ee\AOLSoftware.exe" [2006-09-26 02:52 50736]
        "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
        "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-02-02 14:36 835584]
        "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
        "RtHDVCpl"="RtHDVCpl.exe" [2007-01-18 15:46 4349952 C:\Windows\RtHDVCpl.exe]
        "KiweeHook"="C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe" [2008-03-14 14:07 56456]

        C:\Users\peinar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
        OpenOffice.org 2.3.lnk - C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 22:57:56 393216]

        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
        Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2007-12-20 00:53:36 124400]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
        "EnableLUA"= 0 (0x0)
        "EnableUIADesktopToggle"= 0 (0x0)

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
        "Version1"= {DA88571D-B598-455A-ABA3-0428EB3CAB09} - direct3dfx.dll [ ]

        [HKLM\~\startupfolder\C:^Users^peinar^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 2.2.lnk]
        path=C:\Users\peinar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 2.2.lnk
        backup=C:\Windows\pss\OpenOffice.org 2.2.lnk.Startup
        backupExtension=.Startup

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\[u]0/u0TCrdMain]
        --a------ 2007-01-17 14:46 534648 C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Fast Start]
        --a------ 2007-06-21 13:44 50480 C:\Program Files\AOL 9.0 VR\AOL.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLSAV]
        C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Camera Assistant Software]
        --a------ 2007-02-13 09:30 405504 C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
        --a------ 2006-10-24 23:08 107112 C:\Program Files\Common Files\Symantec Shared\ccApp.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop SMS]
        C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
        --a------ 2008-01-19 09:33 125952 C:\Windows\ehome\ehTray.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]
        --a------ 2006-09-26 02:52 50736 C:\Program Files\Common Files\AOL\1189067097\ee\AOLSoftware.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
        --a------ 2006-11-28 21:17 106496 C:\Windows\system32\hkcmd.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HSON]
        --a------ 2006-12-07 17:49 55416 C:\Program Files\TOSHIBA\TBS\HSON.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HWSetup]
        --a------ 2006-11-01 09:06 413696 C:\Program Files\TOSHIBA\Utilities\HWSetup.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
        --a------ 2006-11-28 21:14 98304 C:\Windows\system32\igfxtray.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KeNotify]
        --a------ 2006-11-06 18:14 34352 C:\Program Files\TOSHIBA\Utilities\KeNotify.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
        ~C:\Program Files\MSN Messenger\MsnMsgr.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NDSTray.exe]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
        --a------ 2006-11-02 11:45 44544 C:\Windows\System32\rundll32.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
        --a------ 2006-11-02 11:45 44544 C:\Windows\System32\rundll32.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]
        --a------ 2006-11-02 11:45 44544 C:\Windows\System32\rundll32.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\osCheck]
        --a------ 2006-10-27 01:18 22696 C:\Program Files\Norton Internet Security\osCheck.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
        --a------ 2006-11-28 21:13 81920 C:\Windows\system32\igfxpers.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
        --a------ 2004-03-10 16:26 406016 C:\Windows\system32\PSDrvCheck.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
        --a------ 2007-09-01 15:40 98304 C:\Program Files\QuickTime\qttask.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
        --a------ 2007-01-18 15:46 4349952 C:\Windows\RtHDVCpl.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RunSpySweeperScheduleAtStartup]
        --a------ 2008-01-19 09:33 12800 C:\Windows\system32\msfeedssync.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
        --a------ 2008-01-19 09:33 1233920 C:\Program Files\Windows Sidebar\sidebar.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmoothView]
        --a------ 2007-02-06 15:21 509496 C:\Program Files\Toshiba\SmoothView\SmoothView.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SVPWUTIL]
        --a------ 2006-11-01 12:08 438272 C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
        -ra------ 2007-10-14 19:09 103712 C:\Program Files\Macrogaming\SweetIM\SweetIM.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
        C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec PIF AlertEng]
        C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
        --a------ 2007-02-02 14:36 835584 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\topi]
        --a------ 2007-03-02 15:10 577536 C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TOSCDSPD]
        --a------ 2006-11-13 14:01 413696 C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Toshiba Registration]
        --a------ 2007-02-19 16:00 571024 C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPwrMain]
        --a------ 2006-12-20 00:16 411768 C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
        --a------ 2008-01-19 09:38 1008184 C:\Program Files\Windows Defender\MSASCui.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
        --a------ 2008-01-19 09:33 202240 C:\Program Files\Windows Media Player\WMPNSCFG.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\security center]
        "UacDisableNotify"=dword:00000001
        "InternetSettingsDisableNotify"=dword:00000001
        "AutoUpdateDisableNotify"=dword:00000001

        [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
        "DisableMonitoring"=dword:00000001

        [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
        "DisableMonitoring"=dword:00000001

        [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
        "DisableMonitoring"=dword:00000001

        [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2008456943-3662863264-3751428849-1000]
        "EnableNotificationsRef"=dword:00000004

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
        "EnableFirewall"= 0 (0x0)

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
        "{0F18E819-8446-4FCE-89BC-DD1240D7189C}"= UDP:C:\Program Files\Common Files\AOL\Loader\aolload.exe:AOL Loader
        "{4077B756-FEA1-4E9E-912D-5E7D3E0769CD}"= TCP:C:\Program Files\Common Files\AOL\Loader\aolload.exe:AOL Loader
        "{B1F24446-AF23-4053-82C5-3D3B462057DA}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
        "{4351813A-44CB-4D40-B522-3E983A11DAD5}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
        "{1A73A37A-E8A7-45FE-A925-E1E20453C428}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
        "{1BCE12A3-A8E2-461A-A6CF-0AC4AA34E357}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
        "{05C683FE-D463-48AB-A010-C60D643F525C}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
        "{20DB794F-5F85-424A-AC1C-A6ABAE28119D}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
        "{E5B37A4D-3139-45C1-B183-4BBB28F97FF8}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
        "{DB1688D5-F313-4877-9E59-4B50AC3EE69F}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
        "{6E67F3A2-7621-4242-9995-410A7976F037}"= UDP:C:\Program Files\Common Files\AOL\acs\AOLDial.exe:AOL Autoconnect
        "{0CBA06F2-8597-4F84-910B-27B1CDF777FE}"= TCP:C:\Program Files\Common Files\AOL\acs\AOLDial.exe:AOL Autoconnect
        "{69CFC234-EA8D-42CC-850C-B093EFD7BE2E}"= UDP:C:\Program Files\Common Files\AOL\acs\AOLacsd.exe:module de connexion AOL
        "{39E5F916-DFC1-4517-A91E-56894C4B1273}"= TCP:C:\Program Files\Common Files\AOL\acs\AOLacsd.exe:module de connexion AOL
        "{98E0AFE9-2779-459C-A192-3A3B288F4525}"= UDP:C:\Program Files\Common Files\AOL\1189067097\ee\aolsoftware.exe:AOL Shared Components
        "{760B19ED-811F-4EAB-845A-C71FA02D1A72}"= TCP:C:\Program Files\Common Files\AOL\1189067097\ee\aolsoftware.exe:AOL Shared Components
        "{82C229A8-3ED3-4CA8-80BF-AA21E2303E2F}"= UDP:C:\Program Files\AOL 9.0 VR\waol.exe:AOL
        "{AF5C8ED0-353C-4A41-A4FB-851EC6521270}"= TCP:C:\Program Files\AOL 9.0 VR\waol.exe:AOL
        "{5B4C8043-076C-4306-8D54-5FFF61C538A3}"= UDP:C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:AOL TopSpeed
        "{EB499923-44D5-4F50-8A09-6B950C4BAADA}"= TCP:C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:AOL TopSpeed
        "{F93DEF2F-D055-4AD0-8770-7AB3BDFF94A2}"= UDP:C:\Program Files\Common Files\AOL\System Information\sinf.exe:AOL System Information
        "{474678EF-2A3C-49F5-AC4B-8F61EDCAB485}"= TCP:C:\Program Files\Common Files\AOL\System Information\sinf.exe:AOL System Information
        "{B60BB657-2C58-4F39-ABDE-5DB863E3FD69}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
        "{FEE254F4-1457-4CBD-B2EE-EE06000EA7D6}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
        "EnableFirewall"= 0 (0x0)

        R0 LPCFilter;LPC Lower Filter Driver;C:\Windows\system32\DRIVERS\LPCFilter.sys [2006-07-28 17:25]
        R1 IDSvix86;Symantec Intrusion Prevention Driver;C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20070913.004\IDSvix86.sys [2007-09-13 16:49]
        R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 16:52]
        R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service;c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-02 15:56]
        R3 athr;Atheros Extensible Wireless LAN device driver;C:\Windows\system32\DRIVERS\athr.sys [2007-01-23 16:25]
        R3 igfx;igfx;C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-11-28 22:39]
        R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver;C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 12:50]
        R3 UVCFTR;UVCFTR;C:\Windows\system32\DRIVERS\UVCFTR_S.SYS [2007-01-26 17:13]
        S3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2006-10-24 14:40]
        S3 tosrfec;Bluetooth ACPI;C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 17:32]
        S4 KR10I;KR10I;C:\Windows\system32\drivers\kr10i.sys [2007-01-18 16:40]
        S4 KR10N;KR10N;C:\Windows\system32\drivers\kr10n.sys [2007-01-18 16:47]

        *Newly Created Service* - COMHOST
        .
        Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
        "2008-04-11 18:00:02 C:\Windows\Tasks\Norton Internet Security - Analyse système complète - peinar.job"
        - C:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exeB/TASK:
        "2008-04-14 15:34:02 C:\Windows\Tasks\User_Feed_Synchronization-{3A037E22-A0C2-423D-9A36-56C09A1AABFF}.job"
        - C:\Windows\system32\msfeedssync.exe
        "2008-04-15 15:04:02 C:\Windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
        - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
        .
        **************************************************************************

        catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2008-04-15 17:22:28
        Windows 6.0.6001 Service Pack 1 NTFS

        Balayage processus cachés ...

        Balayage caché autostart entries ...

        Balayage des fichiers cachés ...

        Scan terminé avec succès
        Les fichiers cachés: 52

        **************************************************************************
        .
        Temps d'accomplissement: 2008-04-15 17:24:56
        ComboFix-quarantined-files.txt 2008-04-15 15:24:42

        Pre-Run: 24,644,173,824 octets libres
        Post-Run: 24,538,341,376 octets libres
        .
        2008-04-10 11:07:08 --- E O F ---
        0
        1. Je viens de percuter --> Tu es sous Vista en SP1 et non XP en SP1!!!!!
          Je comprends mieux maintenant.

          Fais ceci:

          1/ Désactive l'UAC de ton PC :
          https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html
          > redémarre ton PC

          2/ Télécharge ComboFix (de sUBs) par un de ces liens :
          http://download.bleepingcomputer.com/sUBs/ComboFix.exe
          http://www.geekstogo.com/forum/files/file/197-combofix-by-subs/
          https://forospyware.com

          - Sauvegarde le sur ton Bureau.
          - Clic droit sur Combofix.exe > Exécuter en tant qu'Administrateur > suis les instructions.
          - Lorsqu'il aura terminé, un rapport apparaîtra à l'écran (fichier texte).
          - Copie/colle le contenu du rapport dans ta prochaine réponse.

          Le rapport est également sauvegardé ici : C:\ComboFix.txt

          **Note : Ne pas cliquer dans la fenêtre de Combofix durant l'analyse ; ceci provoquerait le gel du programme.
          0
          1. voila le rapport

            BitDefender Online Scanner - Rapport virus en temps réel

            Généré à: Tue, Apr 15, 2008 - 15:09:37

            --------------------------------------------------------------------------------

            Info d'analyse

            Fichiers scannés
            90225

            Infectés Fichiers
            4

            Virus Détectés

            Adware.SpywareSecure.B
            1

            Adware.SpywareSecure.D
            1

            Adware.Navipromo.BYN
            2

            --------------------------------------------------------------------------------

            Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.
            0
            1. fais un scan complet de ton PC.

              Fais un scan de ton PC en ligne ici :
              https://www.bitdefender.fr/
              Clique sur le bouton "BitDefender Scan Online"
              > Accepte l'installation de l'ActiveX > laisse se dérouler le scan
              > Poste le rapport

              démo (de balltrap34)
              http://pageperso.aol.fr/balltrap34/defender.htm
              0
              1. non, il n'y a plus rien de genproc actuellement..
                0
                1. En fin de procédure je te ferais un nettoyage des logiciels installés sur ton PC - Pas de soucis.

                  Dis moi : as-tu un dossier nommé GenProc (jaune) sur ton Bureau?
                  0
                  1. j'obtiens toujours la même chose, ce que je t'ai donné déjà....pour le moment, tout remarche, crois tu qu'il faille encore que je fasse des désinfections, ou serai je debarassée de mes soucis pour le moment???? je ne sais pas trop faire tout ca et là, je suis un peu paumée dans toutes ces manip'.....en toput cas merci de ton aide, mon ordi n'a jamais aussi bien marché que ce soir.....dois je garder navilog et hijack, ou est ce que je dois tout virer????
                    0
                    1. Pas grave.

                      Reprends cette procédure :
                      Télécharge GenProc (Narco4 & jean-chretien1) sur ton Bureau.
                      http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip
                      Dézippe le dossier: clic droit dessus > Extraire ici ou Tout Extrait.
                      Ouvre le dossier jaune GenProc sur ton Bureau > double-clique sur GenProc.bat
                      Suis les instructions ...
                      Poste ici le rapport qui sera généré.
                      0
                      1. pas de fichier compresse, desolée...j'ai balancé l"autre definitivement....
                        0
                        1. Sur ton Bureau tu as deux dossiers nommés GenProc.
                          1 --> le fichier compressé (livres entassés)
                          2 --> le dossier jaune contenant genproc.bat / arguments /canneds ... <-- celui là le dossier complet à la poubelle.

                          Clic droit sur GenProc (livres entassés) --> Extraire ici --> nouveau dossier jaune GenProc --> ouvre le et double clics sur Genproc.bat (roue dentée) --> copie et colle ici le rapport.
                          0
                          1. je n'ai que ca!!! quel dossier jaune aut jeter???? je suis nulle, désolée....
                            0
                            1. Jète à la poubelle le dossier jaune GenProc.
                              Redézippe le dossier GenProc.zip > Extraire ici ou Tout Extrait.
                              Ouvre ce nouveau dossier jaune GenProc > double clics sur GenProc.bat --> copie et colle ici son rapport.
                              C'est celui-là que j'ai besoin pour t'aider.
                              0
                              1. en fait, je n'arrive pas a activer le lien, donc j'ai seulement ce rapport là: par ereur j'avais eliminé tout, mais j'ai vite restauré, je pouvais plus rien faire sur le net...... et mon souci etait des deconnections aol, des ma mise en ligne, puis au bout de qq deconnections, ca arrete..... là, ca a l'air d'aller mieux, mais je ne suis pas une pro du net.....merci a toi pour ton aide, c'est vraiment sympa....au fait, je ne sais pas coment mon ordi est protege, je bidouille un peu les pares feu et cie, mais vista, je maitrise pas du tout...

                                Running processes:
                                C:\Windows\system32\Dwm.exe
                                C:\Windows\Explorer.EXE
                                C:\Windows\system32\taskeng.exe
                                C:\Program Files\QuickTime\qttask.exe
                                C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
                                C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                                C:\Program Files\Common Files\AOL\1189067097\ee\aolsoftware.exe
                                C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                C:\Windows\RtHDVCpl.exe
                                C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe
                                C:\Windows\ehome\ehtray.exe
                                C:\Program Files\Synaptics\SynTP\SynToshiba.exe
                                C:\Program Files\Windows Media Player\wmpnscfg.exe
                                C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                                C:\Program Files\AOL 9.0 VR\waol.exe
                                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                C:\Windows\ehome\ehmsas.exe
                                C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
                                C:\Program Files\Common Files\AOL\Loader\aolload.exe
                                C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
                                C:\Windows\System32\mobsync.exe
                                C:\Program Files\AOL 9.0 VR\shellmon.exe
                                C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
                                C:\Windows\system32\conime.exe
                                C:\Program Files\Spyware-Secure\Spyware-Secure_trial.exe
                                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                O1 - Hosts: ::1 localhost
                                O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
                                O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                                O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
                                O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                O4 - HKLM\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
                                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                                O4 - HKLM\..\Run: [HostManager] "C:\Program Files\Common Files\AOL\1189067097\ee\AOLSoftware.exe"
                                O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                                O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe"
                                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                                O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{3A037E22-A0C2-423D-9A36-56C09A1AABFF}
                                O4 - HKCU\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
                                O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0 VR\AOL.EXE" -b
                                O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe"
                                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
                                O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                                O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html
                                O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                                O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?FR (file missing)
                                O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\Windows\system32\Shdocvw.dll
                                O13 - Gopher Prefix:
                                O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                                O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
                                O21 - SSODL: Version1 - {DA88571D-B598-455A-ABA3-0428EB3CAB09} - direct3dfx.dll (file missing)
                                O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
                                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                                O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
                                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
                                O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
                                O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
                                O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
                                O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
                                O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
                                O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
                                0
                                1. en fait, je n'arrive pas a activer le lien, donc j'ai seulement ce rapport là: par ereur j'avais eliminé tout, mais j'ai vite restauré, je pouvais plus rien faire sur le net...... et mon souci etait des deconnections aol, des ma mise en ligne, puis au bout de qq deconnections, ca arrete..... là, ca a l'air d'aller mieux, mais je ne suis pas une pro du net.....merci a toi pour ton aide, c'est vraiment sympa....au fait, je ne sais pas coment mon ordi est protege, je bidouille un peu les pares feu et cie, mais vista, je maitrise pas du tout...

                                  Running processes:
                                  C:\Windows\system32\Dwm.exe
                                  C:\Windows\Explorer.EXE
                                  C:\Windows\system32\taskeng.exe
                                  C:\Program Files\QuickTime\qttask.exe
                                  C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
                                  C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                                  C:\Program Files\Common Files\AOL\1189067097\ee\aolsoftware.exe
                                  C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                  C:\Windows\RtHDVCpl.exe
                                  C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe
                                  C:\Windows\ehome\ehtray.exe
                                  C:\Program Files\Synaptics\SynTP\SynToshiba.exe
                                  C:\Program Files\Windows Media Player\wmpnscfg.exe
                                  C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                                  C:\Program Files\AOL 9.0 VR\waol.exe
                                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                  C:\Windows\ehome\ehmsas.exe
                                  C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
                                  C:\Program Files\Common Files\AOL\Loader\aolload.exe
                                  C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
                                  C:\Windows\System32\mobsync.exe
                                  C:\Program Files\AOL 9.0 VR\shellmon.exe
                                  C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
                                  C:\Windows\system32\conime.exe
                                  C:\Program Files\Spyware-Secure\Spyware-Secure_trial.exe
                                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                  R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                  R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                  R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                  O1 - Hosts: ::1 localhost
                                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                  O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
                                  O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                  O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                                  O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                  O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                  O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                  O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                  O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
                                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                  O4 - HKLM\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
                                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                                  O4 - HKLM\..\Run: [HostManager] "C:\Program Files\Common Files\AOL\1189067097\ee\AOLSoftware.exe"
                                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                                  O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe"
                                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                                  O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{3A037E22-A0C2-423D-9A36-56C09A1AABFF}
                                  O4 - HKCU\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
                                  O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0 VR\AOL.EXE" -b
                                  O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe"
                                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                  O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
                                  O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                                  O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html
                                  O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                  O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                                  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                  O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                  O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?FR (file missing)
                                  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\Windows\system32\Shdocvw.dll
                                  O13 - Gopher Prefix:
                                  O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                                  O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
                                  O21 - SSODL: Version1 - {DA88571D-B598-455A-ABA3-0428EB3CAB09} - direct3dfx.dll (file missing)
                                  O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
                                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                  O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                                  O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                  O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
                                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                  O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
                                  O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
                                  O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
                                  O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
                                  O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
                                  O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
                                  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
                                  0
                                  1. Poste moi le rapport STP.

                                    Si tu as fermé celui-ci, ouvre le dossier Argument <-- copie et colle ici son contenu.

                                    Tu n'arrives pas à utiliser Smit? C'est cela? <-- que se passe-t-il réellement?
                                    0
                                    1. ce lien ne passe pas dans le genproc...

                                      - SmitfrauFix de S!Ri: Moe et Balltrap34 http://siri.urz.free.fr/Fix/SmitfraudFix.exe
                                      0
                                      1. Re,
                                        Il va falloir passer au SP2 sur ton XP - Depuis le 5 octobre 2005 il n'existe plus de mise à jour pour le SP1.
                                        On verra cela en fin de procédure.

                                        Fais ceci maintenant:
                                        Télécharge GenProc de (Narco4 & jean-chretien1) sur ton Bureau.
                                        http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip
                                        Dézippe le dossier: clic droit dessus > Extraire ici ou Tout Extrait.
                                        Ouvre le dossier jaune GenProc sur ton Bureau > double-clique sur GenProc.bat
                                        Suis les instructions ...
                                        Poste ici le rapport qui sera généré.

                                        Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
                                        0
                                        1. voila le rapport merci de ton aide...

                                          Logfile of Trend Micro HijackThis v2.0.2
                                          Scan saved at 12:01:41, on 14/04/2008
                                          Platform: Windows Vista SP1 (WinNT 6.00.1905)
                                          MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                                          Boot mode: Normal

                                          Running processes:
                                          C:\Windows\system32\taskeng.exe
                                          C:\Windows\system32\Dwm.exe
                                          C:\Windows\Explorer.EXE
                                          C:\Program Files\QuickTime\qttask.exe
                                          C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
                                          C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                                          C:\Program Files\Common Files\AOL\1189067097\ee\aolsoftware.exe
                                          C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                          C:\Windows\RtHDVCpl.exe
                                          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                          C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe
                                          C:\Windows\ehome\ehtray.exe
                                          C:\Program Files\Windows Media Player\wmpnscfg.exe
                                          C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                                          C:\Program Files\Synaptics\SynTP\SynToshiba.exe
                                          C:\Windows\ehome\ehmsas.exe
                                          C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
                                          C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
                                          C:\Program Files\Common Files\AOL\Loader\aolload.exe
                                          C:\Program Files\AOL 9.0 VR\waol.exe
                                          C:\Program Files\AOL 9.0 VR\shellmon.exe
                                          C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
                                          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
                                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
                                          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                          R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                          R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                          O1 - Hosts: ::1 localhost
                                          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                          O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
                                          O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                          O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                                          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                                          O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                          O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
                                          O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                          O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                          O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.4.127\KiweeIEToolbar.dll
                                          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                                          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                          O4 - HKLM\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
                                          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                                          O4 - HKLM\..\Run: [HostManager] "C:\Program Files\Common Files\AOL\1189067097\ee\AOLSoftware.exe"
                                          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                          O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                          O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                                          O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar2\1.4.127\kwtbaim.exe"
                                          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                          O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                                          O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{3A037E22-A0C2-423D-9A36-56C09A1AABFF}
                                          O4 - HKCU\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
                                          O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0 VR\AOL.EXE" -b
                                          O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe"
                                          O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                          O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                          O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                          O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
                                          O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                                          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                          O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
                                          O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?FR (file missing)
                                          O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\Windows\system32\Shdocvw.dll
                                          O13 - Gopher Prefix:
                                          O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                                          O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
                                          O21 - SSODL: Version1 - {DA88571D-B598-455A-ABA3-0428EB3CAB09} - direct3dfx.dll (file missing)
                                          O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
                                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                          O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                          O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                          O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                                          O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                                          O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
                                          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                          O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
                                          O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
                                          O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
                                          O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
                                          O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
                                          O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
                                          O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

                                          --
                                          0
                                          • 1
                                          • 2