Publicite

j'ai telecharger ccleaner par contre si jelance le nettoyage ca me donne un message que tous les fichiers selectionner seront definitivement efface je dis ok

je voulais te dire que j'ai etais oblige d'areeter ccleaner et que depuis je n'ai plus de pub qu'en pense tu est ce que je relance ccleaner ?

ok je le reprend detoute facon les pub sont de retour

bonsoir voici le rapport---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 19:55:19 06/01/2007

+ Résultat de l'analyse:

HKLM\SOFTWARE\Altnet -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Messages -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\CLSID\{C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} -> Adware.Generic : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} -> Adware.Generic : Ignoré.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Ignoré.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Ignoré.
HKU\S-1-5-21-2196854727-2814917726-1424574960-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\Config.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\db -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\db\Aliases.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\db\Sites.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\dwld -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\dwld\WhiteList.xip -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\persist.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report\ag.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report\ag.xml.db -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report\send.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report\send.xml.db -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\res1 -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\res1\WhiteList.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\shprrprt.log -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\WinTools -> Adware.WebSearch : Ignoré.
HKLM\SOFTWARE\WinTools\nlibx4m -> Adware.WebSearch : Ignoré.
HKLM\SOFTWARE\WinTools\nlibx4m\1v -> Adware.WebSearch : Ignoré.
HKLM\SOFTWARE\WinTools\nlibx4m\8p -> Adware.WebSearch : Ignoré.
HKLM\SOFTWARE\WinTools\nlibx4m\8q -> Adware.WebSearch : Ignoré.
HKLM\SOFTWARE\WinTools\nlibx4m\vg -> Adware.WebSearch : Ignoré.
C:\Documents and Settings\MIDO\Cookies\mido@247realmedia[2].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\PIERRE\Local Settings\Temp\Cookies\pierre@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\PIERRE\Local Settings\Temp\Cookies\pierre@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\PIERRE\Local Settings\Temp\Cookies\pierre@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\PIERRE\Local Settings\Temp\Cookies\pierre@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.

Fin du rapport

bonjour, non j'ai pas reussi a mttre en quarantaine en faites j'ai fais que l'analyse complete car je ne vois pas ou je dois cliquer pour faire tout ce que tu m'as dit.

je viens de refaire un scan avec tout ce qu tu m'avais dis e faire je te poste le rapport---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 14:51:24 09/01/2007

+ Résultat de l'analyse:

HKLM\SOFTWARE\Altnet -> Adware.Altnet : Erreur lors du nettoyage.
HKLM\SOFTWARE\Altnet\Dashboard -> Adware.Altnet : Erreur lors du nettoyage.
HKLM\SOFTWARE\Altnet\Dashboard\Messages -> Adware.Altnet : Erreur lors du nettoyage.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\CLSID\{C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-2196854727-2814917726-1424574960-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\Config.xml -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\db -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\db\Aliases.dbs -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\db\Sites.dbs -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\dwld -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\dwld\WhiteList.xip -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\persist.dbs -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report\ag.xml -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report\ag.xml.db -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report\send.xml -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\report\send.xml.db -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\res1 -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\cs\res1\WhiteList.dbs -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\PIERRE\Application Data\ShopperReports\shprrprt.log -> Adware.HotBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\WinTools -> Adware.WebSearch : Erreur lors du nettoyage.
HKLM\SOFTWARE\WinTools\nlibx4m -> Adware.WebSearch : Erreur lors du nettoyage.
HKLM\SOFTWARE\WinTools\nlibx4m\1v -> Adware.WebSearch : Erreur lors du nettoyage.
HKLM\SOFTWARE\WinTools\nlibx4m\8p -> Adware.WebSearch : Erreur lors du nettoyage.
HKLM\SOFTWARE\WinTools\nlibx4m\8q -> Adware.WebSearch : Erreur lors du nettoyage.
HKLM\SOFTWARE\WinTools\nlibx4m\vg -> Adware.WebSearch : Erreur lors du nettoyage.
C:\Documents and Settings\MIDO\Cookies\mido@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\MIDO\Cookies\mido@247realmedia[3].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\MIDO\Cookies\mido@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\PIERRE\Local Settings\Temp\Cookies\pierre@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\MIDO\Cookies\mido@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\PIERRE\Local Settings\Temp\Cookies\pierre@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\MIDO\Cookies\mido@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\PIERRE\Local Settings\Temp\Cookies\pierre@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\MIDO\Cookies\mido@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\MIDO\Cookies\mido@estat[2].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\MIDO\Cookies\mido@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\PIERRE\Local Settings\Temp\Cookies\pierre@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\MIDO\Cookies\mido@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.

Fin du rapport

bonjour je suis desolee de ne pas etre revenue plus vite voici le rapport de l'analysBitDefender Online Scanner

Rapport d'analyse généré à: Tue, Jan 09, 2007 - 13:31:16

Voie d'analyse: C:\Documents and Settings\MIDO\Mes documents;C:\Documents and Settings\MIDO\Bureau\Raccourcis Bureau non utilisés;

Statistiques

Temps
00:10:15

Fichiers
19408

Directoires
167

Secteurs de boot
3

Archives
210

Paquets programmes
4894

Résultats

Virus identifiés
0

Fichiers infectés
0

Fichiers suspects
0

Avertissements
0

Désinfectés
0

Fichiers effacés
0

Info sur les moteurs

Définition virus
368783

Version des moteurs
AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)

Analyse des plugins
14

Archive des plugins
38

Unpack des plugins
6

E-mail plugins
6

Système plugins
1

Paramètres d'analyse

Première action
Désinfecté

Seconde Action
Supprimé

Heuristique
Oui

Acceptez les avertissements
Oui

Extensions analysées
*;

Excludez les extensions

Analyse d'emails
Oui

Analyse des Archives
Oui

Analyser paquets programmes
Oui

Analyse des fichiers
Oui

Analyse de boot
Oui

Fichier analysé
Statut

Aucun virus trouvé.

e anti virus que j'ai fais en ligne merci

ok je sais pas si tu as vu mon rapport avec le scan plus haut par contre tout est en anglais pour ce que tu me demande de faire la et je ne suis pas une pro alors aide moi svp

et surtout comment je dezippe

le texte que tu me dis de copeir je le met ou ?

Rapport fait à 15:55:42,53 le 09/01/2007

******************************************
## Répertoires Application Data

Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\All Users\Application Data

30/09/2002 12:54 <REP> .
30/09/2002 12:54 <REP> ..
19/03/2004 16:22 <REP> Adobe
05/09/2005 19:55 <REP> Apple Computer
02/09/2006 18:26 <REP> CanonBJ
21/11/2006 18:32 <REP> EnterNHelp
29/07/2006 09:47 <REP> Google
06/01/2007 14:17 <REP> Google Updater
14/08/2006 18:47 <REP> Kaspersky Anti-Virus Personal Pro
26/05/2005 16:24 <REP> Messenger Plus!
30/09/2002 12:54 <REP> Microsoft
09/05/2004 01:15 <REP> MSN6
21/11/2006 20:49 <REP> muvee Technologies
21/11/2006 18:21 <REP> Nikon
03/12/2005 13:03 <REP> POPWWPROFILES
19/03/2004 16:25 <REP> QuickTime
30/09/2002 14:00 <REP> SBSI
13/11/2004 14:13 <REP> Skype
26/11/2005 18:59 <REP> Sony Ericsson
15/08/2005 13:19 <REP> Spybot - Search & Destroy
08/05/2004 22:52 <REP> Symantec
06/12/2006 23:43 <REP> Teleca
26/05/2005 16:23 <REP> type second setup live
21/11/2006 18:32 <REP> Ultima_T15
30/11/2005 19:47 <REP> Windows Genuine Advantage
04/01/2007 15:18 <REP> Windows Live Toolbar
30/09/2002 12:55 62 desktop.ini
21/11/2006 18:32 20 PKP_DLec.DAT
26/11/2005 18:16 1ÿ767 QTSBandwidthCache
3 fichier(s) 1ÿ849 octets
26 R‚p(s) 56ÿ174ÿ911ÿ488 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\Default User\Application Data

30/09/2002 12:54 <REP> .
30/09/2002 12:54 <REP> ..
08/05/2004 20:32 <REP> Identities
30/09/2002 12:54 <REP> Microsoft
08/05/2004 20:32 <REP> Real
08/05/2004 20:32 <REP> Sonic
30/09/2002 12:55 62 desktop.ini
1 fichier(s) 62 octets
6 R‚p(s) 56ÿ174ÿ907ÿ392 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\Default User\Local Settings\Application Data

30/09/2002 12:55 <REP> .
30/09/2002 12:55 <REP> ..
08/05/2004 20:32 <REP> Microsoft
08/05/2004 20:32 <REP> Powercinema
0 fichier(s) 0 octets
4 R‚p(s) 56ÿ174ÿ907ÿ392 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\Gis

Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\LocalService\Application Data

30/09/2002 13:09 <REP> .
30/09/2002 13:09 <REP> ..
01/03/2005 21:16 <REP> Help
30/09/2002 13:09 <REP> Microsoft
0 fichier(s) 0 octets
4 R‚p(s) 56ÿ174ÿ907ÿ392 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data

30/09/2002 13:09 <REP> .
30/09/2002 13:09 <REP> ..
01/03/2005 21:16 <REP> Help
30/09/2002 13:09 <REP> Microsoft
0 fichier(s) 0 octets
4 R‚p(s) 56ÿ174ÿ907ÿ392 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\MIDO\Application Data

08/05/2004 20:33 <REP> .
08/05/2004 20:33 <REP> ..
01/09/2004 20:00 <REP> Adobe
13/10/2005 11:18 <REP> AdobeAUM
01/09/2004 20:05 <REP> AdobeUM
05/09/2005 19:55 <REP> Apple Computer
22/08/2005 14:40 <REP> Block Checker
08/05/2004 23:03 <REP> CyberLink
10/07/2006 14:04 <REP> Google
23/01/2005 20:47 <REP> Help
08/05/2004 20:33 <REP> Identities
01/09/2004 20:00 <REP> InterTrust
27/12/2004 20:54 <REP> Leadertech
31/10/2004 13:07 <REP> Macromedia
08/05/2004 20:33 <REP> Microsoft
04/01/2007 17:51 <REP> Mozilla
09/05/2004 01:15 <REP> MSN6
21/11/2006 20:49 <REP> muvee Technologies
21/11/2006 18:21 <REP> Nikon
15/07/2006 15:15 <REP> PC Suite
08/05/2004 20:33 <REP> Real
31/08/2004 20:51 <REP> ROXIO
26/05/2005 16:23 <REP> shim barb
13/11/2004 14:13 <REP> Skype
11/11/2006 17:01 <REP> Snapfish
08/05/2004 20:33 <REP> Sonic
09/12/2005 14:07 <REP> Sun
08/05/2004 22:52 <REP> Symantec
06/12/2006 00:22 <REP> Teleca
11/05/2004 23:20 <REP> ubi.com
28/12/2006 12:52 <REP> vlc
01/11/2004 19:53 <REP> Yahoo! Messenger
09/11/2005 13:10 1ÿ756 AdobeDLM.log
08/05/2004 20:33 62 desktop.ini
09/11/2005 13:10 0 dm.ini
05/09/2004 14:19 12ÿ824 wklnhst.dat
4 fichier(s) 14ÿ642 octets
32 R‚p(s) 56ÿ174ÿ903ÿ296 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\MIDO\Local Settings\Application Data

08/05/2004 20:33 <REP> .
08/05/2004 20:33 <REP> ..
01/09/2004 20:05 <REP> Adobe
05/09/2005 19:55 <REP> Apple Computer
06/12/2006 00:26 <REP> ApplicationHistory
25/03/2006 22:35 <REP> Google
27/06/2004 08:10 <REP> Help
30/09/2004 12:41 <REP> Identities
21/05/2005 19:58 <REP> IM
08/05/2004 20:33 <REP> Microsoft
26/01/2005 13:03 <REP> MicroVision Applications
04/01/2007 18:00 <REP> Mozilla
18/01/2005 10:56 <REP> NFS Underground 2 Demo
21/11/2006 18:32 <REP> Nikon
21/11/2006 18:31 <REP> Pixology
08/05/2004 20:33 <REP> Powercinema
26/11/2005 22:09 <REP> Sony Ericsson
20/01/2006 19:42 <REP> Stardock
13/05/2004 13:25 <REP> WMTools Downloaded Files
15/05/2004 22:28 58ÿ880 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
06/12/2006 00:26 127 fusioncache.dat
05/09/2004 14:19 73ÿ144 GDIPFONTCACHEV1.DAT
3 fichier(s) 132ÿ151 octets
19 R‚p(s) 56ÿ174ÿ903ÿ296 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\NetworkService\Application Data

30/09/2002 13:09 <REP> .
30/09/2002 13:09 <REP> ..
30/09/2002 13:09 <REP> Microsoft
01/01/2005 15:17 <REP> Symantec
0 fichier(s) 0 octets
4 R‚p(s) 56ÿ174ÿ903ÿ296 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data

30/09/2002 13:09 <REP> .
30/09/2002 13:09 <REP> ..
30/09/2002 13:09 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 56ÿ174ÿ903ÿ296 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\PIERRE\Application Data

09/05/2004 01:52 <REP> .
09/05/2004 01:52 <REP> ..
10/05/2004 17:58 <REP> Adobe
10/05/2004 17:58 <REP> AdobeUM
16/05/2004 13:07 <REP> CyberLink
09/05/2004 01:52 <REP> Identities
11/05/2004 13:14 <REP> InterTrust
02/11/2004 13:04 <REP> Macromedia
09/05/2004 01:52 <REP> Microsoft
02/12/2004 09:51 <REP> MSN6
09/05/2004 01:52 <REP> Real
15/11/2004 23:42 <REP> Skype
09/05/2004 01:52 <REP> Sonic
11/05/2004 13:16 <REP> ubi.com
09/05/2004 01:52 62 desktop.ini
04/11/2004 21:20 324 wklnhst.dat
2 fichier(s) 386 octets
14 R‚p(s) 56ÿ174ÿ899ÿ200 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\PIERRE\Local Settings\Application Data

09/05/2004 01:52 <REP> .
09/05/2004 01:52 <REP> ..
10/05/2004 17:58 <REP> Adobe
30/07/2004 14:55 <REP> Help
04/11/2004 13:05 <REP> Identities
09/05/2004 01:52 <REP> Microsoft
09/05/2004 01:52 <REP> Powercinema
01/09/2004 20:59 31ÿ232 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
14/11/2004 18:24 66ÿ008 GDIPFONTCACHEV1.DAT
2 fichier(s) 97ÿ240 octets
7 R‚p(s) 56ÿ174ÿ899ÿ200 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Documents and Settings\Propri‚taire

Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Application Data

30/09/2002 13:08 <REP> .
30/09/2002 13:08 <REP> ..
08/05/2004 20:32 <REP> Identities
30/09/2002 13:08 <REP> Microsoft
17/09/2004 14:56 <REP> MSN6
08/05/2004 20:32 <REP> Real
08/05/2004 20:32 <REP> Sonic
30/09/2002 13:08 62 desktop.ini
1 fichier(s) 62 octets
7 R‚p(s) 56ÿ174ÿ899ÿ200 octets libres
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data

30/09/2002 13:08 <REP> .
30/09/2002 13:08 <REP> ..
08/05/2004 20:19 <REP> Microsoft
08/05/2004 20:32 <REP> Powercinema
08/05/2004 20:32 2ÿ656ÿ130 IconCache.db
1 fichier(s) 2ÿ656ÿ130 octets
4 R‚p(s) 56ÿ174ÿ899ÿ200 octets libres

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\WINDOWS\Tasks

04/01/2007 15:26 266 AEB0DDF691FB5C96.job
10/12/2004 16:40 362 Symantec NetDetect.job
08/05/2004 20:32 258 Rappel d'enregistrement 3.job
08/05/2004 20:32 258 Rappel d'enregistrement 2.job
30/09/2002 13:04 6 SA.DAT
30/09/2002 13:02 <REP> ..
30/09/2002 13:02 <REP> .
30/09/2002 12:49 65 desktop.ini
6 fichier(s) 1ÿ215 octets
2 R‚p(s) 56ÿ174ÿ899ÿ200 octets libres

******************************************
## Répertoires de Program files

Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\Program Files

07/01/2007 12:43 <REP> .
07/01/2007 12:43 <REP> ..
22/07/2006 11:24 <REP> Adobe
10/09/2006 10:24 <REP> Advanced Messenger Plus
04/01/2007 15:23 <REP> Adverts
15/08/2005 13:00 <REP> AOL 8.0
19/10/2004 12:00 <REP> AOL 8.0a
16/05/2004 10:58 <REP> AOL Compagnon
21/11/2006 18:18 <REP> ArcSoft
09/01/2007 15:39 <REP> a-squared Free
11/04/2005 19:30 <REP> ATI Technologies
02/09/2006 18:28 <REP> Canon
30/01/2006 13:51 <REP> Cdiscount photos
13/10/2005 12:54 <REP> Common files
30/09/2002 13:01 <REP> ComPlus Applications
10/05/2004 20:57 <REP> Creative
19/03/2004 16:25 <REP> CyberLink
21/05/2006 12:17 <REP> DIFX
10/05/2004 17:55 <REP> directx
04/06/2004 20:34 <REP> DivX
14/08/2006 22:01 <REP> Doom 3
09/05/2004 11:08 <REP> EHMINSTALL
03/01/2007 20:11 <REP> eMule
11/10/2006 12:25 <REP> ESET
08/02/2006 22:07 <REP> EZFace
04/01/2007 17:56 <REP> Fichiers communs
20/10/2005 16:53 <REP> FUJIFILM CAMERA DIGITAL Q1
15/08/2005 13:05 <REP> GameSpy Arcade
07/01/2007 20:29 <REP> Google
25/12/2004 13:35 <REP> GSpot
30/10/2006 20:12 <REP> Incomplete
09/08/2004 19:36 <REP> InterActual
28/11/2006 13:46 <REP> Internet Explorer
16/04/2006 17:27 <REP> iPod
20/10/2005 16:55 <REP> iSee Media
15/05/2006 15:11 <REP> iTunes
27/10/2006 10:07 <REP> Java
09/05/2004 11:06 <REP> JavaSoft
14/08/2006 16:47 <REP> Kaspersky Lab
02/12/2004 13:33 <REP> Kit ADSL
08/11/2004 16:20 <REP> K-Lite Codec Pack
04/01/2007 21:57 <REP> Lavasoft
06/07/2006 22:20 <REP> LAventure
04/11/2004 16:05 <REP> Mafia
06/06/2005 14:19 <REP> Matroska Pack
09/02/2005 19:14 <REP> Messenger
04/01/2007 15:23 <REP> MessengerPlus! 3
19/01/2005 00:54 <REP> Micro Application
05/09/2004 14:16 <REP> Microsoft Encarta
30/09/2002 13:05 <REP> microsoft frontpage
05/09/2004 14:14 <REP> Microsoft Money
29/10/2004 11:42 <REP> microsoft office
29/10/2004 11:41 <REP> Microsoft Visual Studio
05/09/2004 14:14 <REP> Microsoft Works
05/09/2004 14:10 <REP> Microsoft Works Suite 2004
29/10/2004 11:43 <REP> Microsoft.NET
14/11/2004 08:58 <REP> Movie Maker
04/01/2007 18:04 <REP> Mozilla Firefox
30/09/2002 13:00 <REP> MSN
30/09/2002 13:00 <REP> MSN Gaming Zone
04/01/2007 15:31 <REP> MSN Messenger
19/11/2006 01:54 <REP> MSXML 4.0
22/12/2004 18:08 <REP> MUSK Codec Pack v5
04/03/2006 19:48 <REP> NASDAK
02/12/2004 19:28 <REP> NetMeeting
21/11/2006 18:21 <REP> Nikon
20/12/2004 13:52 <REP> NimoCodec Pack
15/07/2006 15:14 <REP> Nokia
19/03/2004 16:24 <REP> Nullsoft
04/03/2006 19:49 <REP> Omni
17/12/2006 11:50 <REP> Outlook Express
09/01/2007 15:48 <REP> Packard Bell EverSafe
26/08/2004 21:15 <REP> Patrouille de France
12/12/2004 22:25 <REP> PhotoFiltre
04/01/2007 17:50 <REP> Picasa2
15/05/2006 15:14 <REP> QuickTime
30/12/2004 21:30 <REP> QuickZip4
10/05/2004 17:55 <REP> Rage Software
19/03/2004 16:24 <REP> Real
14/08/2006 17:35 <REP> Roxio
14/08/2006 19:55 <REP> Saitek
19/09/2004 19:48 <REP> Serials 2000
30/09/2002 13:00 <REP> Services en ligne
04/01/2007 15:25 <REP> shim barb
13/11/2004 14:13 <REP> Skype
25/12/2004 13:25 <REP> SLD Codec Pack
19/03/2004 16:26 <REP> Sonic
06/12/2006 23:43 <REP> Sony Ericsson
15/08/2005 13:20 <REP> Spybot - Search & Destroy
14/08/2006 18:48 <REP> Symantec
09/01/2005 01:37 <REP> Tcl
04/01/2007 15:38 <REP> Ubisoft
15/11/2004 17:10 <REP> UnzipThemAll
04/11/2004 13:21 <REP> USB Driver-Express
04/01/2007 22:01 <REP> VideoLAN
19/03/2004 16:24 <REP> Viewpoint
06/09/2006 18:27 <REP> Vimicro
19/03/2004 16:30 <REP> Virtual CD v4 SDK
04/01/2007 15:37 <REP> Windows Live Toolbar
21/08/2006 17:17 <REP> Windows Media Player
14/11/2004 08:55 <REP> Windows NT
22/07/2006 11:16 <REP> WinRAR
30/09/2002 13:05 <REP> xerox
06/06/2005 13:55 <REP> XviD
06/01/2007 16:09 <REP> Yahoo!
0 fichier(s) 0 octets
105 R‚p(s) 56ÿ174ÿ886ÿ912 octets libres

******************************************
## Popups autorisées

* Internet Explorer

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow

* Mozilla Firefox (1 autorisé 2 interdit)

---------- C:\DOCUMENTS AND SETTINGS\MIDO\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\JQIGTK1L.DEFAULT\HOSTPERM.1

******************************************
## Registre

* [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
PCSuiteTrayApplication REG_SZ C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
Sony Ericsson PC Suite REG_SZ "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
SetupLiveSizeUpload REG_SZ C:\Documents and Settings\All Users\Application Data\type second setup live\webidle.exe

* [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
program comp REG_SZ C:\DOCUME~1\MIDO\APPLIC~1\SHIMBA~1\bitstray.exe

******************************************
## Zones de sécurité

* HKCU Domains (4)

* P3P History (5)

******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"

Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\WINDOWS

Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 88B0-E368

R‚pertoire de C:\WINDOWS

*************** Fin du rapport ****************

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\dxkuvgci

*******************

Script file located at: \??\C:\WINDOWS\system32\dgmbvmfr.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Registry key HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbTools.HbtCommBand HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbTools.HbtCommBand HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar.1 HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar.1 HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices.1 HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices.1 HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtHostIE.Bho not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtHostIE.Bho failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim.1 HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend.1 HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim.1 HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend.1 HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI.1 HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI.1 HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl.1 HKLM\SOFTWARE\Classes\HbtTools.HbMain not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl.1 HKLM\SOFTWARE\Classes\HbtTools.HbMain failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\HbtTools.HbMain.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\HbtTools.HbMain.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter not found!
Deletion of registry key HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.HbAx not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.HbAx failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.HbAx.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.HbAx.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.IEButton not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.IEButton failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.IEButton.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.IEButton.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl.1 failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager not found!
Deletion of registry key HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager failed!
Status: 0xc0000034

Registry key HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 not found!
Deletion of registry key HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 failed!
Status: 0xc0000034

Completed script processing.

*******************

Finished! Terminate.

est ce bien ca que tu voulais

bonsoir toujours pas de reponse que dois je faie

bonjour alors j'ai fais tout ce que tu m'as dis alors par contre j'ai pu supprimer program files \adverts et program files\shim barb mais pas les autres je ne l'ai est pas trouver par ailleurs quand j'ai fais ds executer cmd j'ai colle mais en ouvrant replog.eg j'ai pas eu de message
je te poste mon hijackthis sinon j'ai toujours des pub et je suis desolee si je ne suis pas revenue avant mais je suis maman et je le fais qd mon fils n'est pas là je te remeci

Logfile of HijackThis v1.99.1
Scan saved at 12:23:40, on 12/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\NASDAK\OmniMouse Driver\4.06\MOUSE32A.EXE
C:\Program Files\Omni\Omni keyboard driver\5.0\KbdAp32A.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiSmart.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\WINDOWS\VM305_STI.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Advanced Messenger Plus\AdvMsg.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
c:\progra~1\intern~1\iexplore.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Packard Bell EverSafe\TrayControl.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Roxio\GoBack\GBPoll.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {062454F1-29C2-8110-3FEC-80A83E2F62A7} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: MEDIADICO Familial - {CEDDA62B-5FBE-4AB2-AE2E-5E069F444444} - C:\PROGRA~1\LAVENT~1\Toolbar\MEDIAD~1.DLL
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\NASDAK\OmniMouse Driver\4.06\MOUSE32A.EXE
O4 - HKLM\..\Run: [LWBKEYBOARD] C:\Program Files\Omni\Omni keyboard driver\5.0\KbdAp32A.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiSmart] C:\Program Files\Saitek\Software\SaiSmart.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [SetupLiveSizeUpload] C:\Documents and Settings\All Users\Application Data\type second setup live\webidle.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [program comp] C:\DOCUME~1\MIDO\APPLIC~1\SHIMBA~1\bitstray.exe
O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe
O4 - Global Startup: Advanced Messenger Plus.lnk = C:\Program Files\Advanced Messenger Plus\AdvMsg.exe
O4 - Global Startup: AOL 8.0 Icône AOL.lnk = C:\Program Files\AOL 8.0a\aoltray.exe
O4 - Global Startup: GoBack.lnk = C:\Program Files\Roxio\GoBack\GBTray.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Packard Bell EverSafe Tray Control.lnk = C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .ivr: C:\\Program Files\\Internet Explorer\\PLUGINS\\NPRVRT32.dll
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab
O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www2.photoweb.fr/telechargement/Photoweb_uploader.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://metaboli.neuf.fr/components/Metaboli.ocx
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {983AB2CC-3D50-11D9-ADFE-00062919A34C} (ActiveXUpload.UserCtrl) - http://www.photoservice.com/activeX/newUpload.CAB
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://laredoute.pixawin.com/ImageUploader3.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://tiragesphoto.fnac.com/
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{287FDBEA-ACEE-4749-BBF0-B8BDD0712646}: NameServer = 86.64.145.145 84.103.237.145
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GBPoll - Roxio, Inc. - C:\Program Files\Roxio\GoBack\GBPoll.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - C:\Program Files\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

bonjour alors j'ai reussi aujourd'hui a effacer tous les fichiers que tu voulais par coNtre toujours pas reussi a avoir les message avec replog. est ce que je te poste a nouvo mon hijackthis ?

bonjour voici le rapport par contre mon ordi rame moins et pour le moment j'ai pas eu deLogfile of HijackThis v1.99.1
Scan saved at 15:24:49, on 13/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Roxio\GoBack\GBPoll.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\NASDAK\OmniMouse Driver\4.06\MOUSE32A.EXE
C:\Program Files\Omni\Omni keyboard driver\5.0\KbdAp32A.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiSmart.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\WINDOWS\VM305_STI.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Advanced Messenger Plus\AdvMsg.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Packard Bell EverSafe\TrayControl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {062454F1-29C2-8110-3FEC-80A83E2F62A7} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: MEDIADICO Familial - {CEDDA62B-5FBE-4AB2-AE2E-5E069F444444} - C:\PROGRA~1\LAVENT~1\Toolbar\MEDIAD~1.DLL
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\NASDAK\OmniMouse Driver\4.06\MOUSE32A.EXE
O4 - HKLM\..\Run: [LWBKEYBOARD] C:\Program Files\Omni\Omni keyboard driver\5.0\KbdAp32A.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiSmart] C:\Program Files\Saitek\Software\SaiSmart.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [SetupLiveSizeUpload] C:\Documents and Settings\All Users\Application Data\type second setup live\webidle.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [program comp] C:\DOCUME~1\MIDO\APPLIC~1\SHIMBA~1\bitstray.exe
O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe
O4 - Global Startup: Advanced Messenger Plus.lnk = C:\Program Files\Advanced Messenger Plus\AdvMsg.exe
O4 - Global Startup: AOL 8.0 Icône AOL.lnk = C:\Program Files\AOL 8.0a\aoltray.exe
O4 - Global Startup: GoBack.lnk = C:\Program Files\Roxio\GoBack\GBTray.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Packard Bell EverSafe Tray Control.lnk = C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .ivr: C:\\Program Files\\Internet Explorer\\PLUGINS\\NPRVRT32.dll
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab
O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www2.photoweb.fr/telechargement/Photoweb_uploader.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://metaboli.neuf.fr/components/Metaboli.ocx
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {983AB2CC-3D50-11D9-ADFE-00062919A34C} (ActiveXUpload.UserCtrl) - http://www.photoservice.com/activeX/newUpload.CAB
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://laredoute.pixawin.com/ImageUploader3.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://tiragesphoto.fnac.com/
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{287FDBEA-ACEE-4749-BBF0-B8BDD0712646}: NameServer = 84.103.237.146 86.64.145.146
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GBPoll - Roxio, Inc. - C:\Program Files\Roxio\GoBack\GBPoll.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - C:\Program Files\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

pub en ouvrant internet

bonsoir ca y est j'ai fais tout ce que tu m'as dit
Logfile of HijackThis v1.99.1
Scan saved at 17:49:29, on 13/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\NASDAK\OmniMouse Driver\4.06\MOUSE32A.EXE
C:\Program Files\Omni\Omni keyboard driver\5.0\KbdAp32A.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiSmart.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\WINDOWS\VM305_STI.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Advanced Messenger Plus\AdvMsg.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Packard Bell EverSafe\TrayControl.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Roxio\GoBack\GBPoll.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: MEDIADICO Familial - {CEDDA62B-5FBE-4AB2-AE2E-5E069F444444} - C:\PROGRA~1\LAVENT~1\Toolbar\MEDIAD~1.DLL
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\NASDAK\OmniMouse Driver\4.06\MOUSE32A.EXE
O4 - HKLM\..\Run: [LWBKEYBOARD] C:\Program Files\Omni\Omni keyboard driver\5.0\KbdAp32A.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiSmart] C:\Program Files\Saitek\Software\SaiSmart.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe
O4 - Global Startup: Advanced Messenger Plus.lnk = C:\Program Files\Advanced Messenger Plus\AdvMsg.exe
O4 - Global Startup: AOL 8.0 Icône AOL.lnk = C:\Program Files\AOL 8.0a\aoltray.exe
O4 - Global Startup: GoBack.lnk = C:\Program Files\Roxio\GoBack\GBTray.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Packard Bell EverSafe Tray Control.lnk = C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O12 - Plugin for .ivr: C:\\Program Files\\Internet Explorer\\PLUGINS\\NPRVRT32.dll
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{287FDBEA-ACEE-4749-BBF0-B8BDD0712646}: NameServer = 84.103.237.145 86.64.145.145
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GBPoll - Roxio, Inc. - C:\Program Files\Roxio\GoBack\GBPoll.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - C:\Program Files\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe