pub cid help

j'ai un souci avec les pubs cid suite a l'installation de torrent.
merci pour votre aide.

je vous envoie les rapports hijack + scan.bat

Logfile of HijackThis v1.99.1
Scan saved at 18:45:48, on 15/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\mHotkey.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\Fichiers communs\InterVideo\FastTVSync\FastTVSync.exe
C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\WINDOWS\System32\LXSUPMON.EXE
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\DitExp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\WINDOWS\system32\srvreg.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Nokia\PC Suite for Nokia 6600\connmngmntbox.exe
C:\Program Files\Nokia\PC Suite for Nokia 6600\ectaskscheduler.exe
C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Documents and Settings\Johann\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: FiveGramBags - {861A4F2B-8D8C-477C-D15E-64C015C7D0C3} - C:\PROGRA~1\SITEGR~1\Road 32.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: aim seek - {E4D6C771-39B7-7FF1-63FB-99FDCE501652} - C:\PROGRA~1\SITEGR~1\Road 32.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [FastTVSync] "C:\Program Files\Fichiers communs\InterVideo\FastTVSync\FastTVSync.exe"
O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [WINCINEMAMGR] "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\System32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [MS_Critical_Update] c:\CriticalUpdate.exe
O4 - HKLM\..\Run: [RegistryMon] c:\registry.pif
O4 - HKLM\..\Run: [Microsoft Security Hot Fix] "%SystemRoot%\mshotfix.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [jugsclosemultidale] C:\Documents and Settings\All Users\Application Data\Knob Download Jugs Close\Exit barb.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [srvreg] C:\WINDOWS\system32\srvreg.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Ball Hold] C:\DOCUME~1\Johann\APPLIC~1\PROCDA~1\Browseway.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Registration-InstantCopy.lnk = C:\Program Files\Pinnacle\Shared Files\InstantCDDVD\Pixie\RegTool.exe
O4 - Startup: TribalWeb.net.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: InterVideo Scheduler server.lnk = C:\Program Files\InterVideo\DVD5R\SchSvr.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: PCSuiteForNokia6600 Detect.lnk = ?
O4 - Global Startup: PCSuiteForNokia6600 TS.lnk = ?
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolb [...] xdm802YYFR
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.carrefour.fr/
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.f [...] r_cert.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/n [...] 0.0.15.cab
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/g [...] er_gmn.cab
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/251 [...] o-eula.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://jrouie.spaces.live.com//Pho [...] nPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/window [...] 6642515921
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.hp.com/ediags/d [...] utions.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Client de licence CA (CA_LIC_CLNT) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
O23 - Service: Serveur de licence CA (CA_LIC_SRVR) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

************************************************

voici le scan.bat
Rapport fait à 18:46:47,21 le 15/04/2007

Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\Documents and Settings\Administrateur\Application Data

05/03/2004 14:36 62 desktop.ini
05/03/2004 14:36 <REP> Adobe
05/03/2004 14:36 <REP> AdobeUM
05/03/2004 14:36 <REP> Ahead
05/03/2004 14:36 <REP> Identities
05/03/2004 14:36 <REP> Help
05/03/2004 14:36 <REP> InterVideo
05/03/2004 14:36 <REP> Macromedia
05/03/2004 14:36 <REP> .
05/03/2004 14:36 <REP> ..
05/03/2004 14:36 <REP> Microsoft
1 fichier(s) 62 octets
10 R‚p(s) 5952786432 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\Documents and Settings\All Users\Application Data

14/03/2007 09:46 <REP> Knob Download Jugs Close
14/09/2006 00:04 <REP> Google
19/08/2006 16:20 1755 QTSBandwidthCache
25/04/2006 22:37 <REP> BOONTY
15/03/2006 20:04 <REP> Messenger Plus!
01/03/2006 22:31 <REP> Skype
07/02/2006 20:27 <REP> Apple Computer
07/01/2006 17:17 <REP> Windows Genuine Advantage
30/11/2005 10:29 <REP> HP
30/11/2005 10:28 <REP> Sonic
30/11/2005 10:18 1793 hpzinstall.log
08/04/2004 22:39 <REP> MSN6
12/03/2004 15:51 <REP> Adobe
05/03/2004 13:20 <REP> Symantec
10/02/2004 14:36 <REP> InterVideo
10/02/2004 13:08 <REP> nView_Profiles
09/02/2004 23:52 <REP> SBSI
09/02/2004 23:45 62 desktop.ini
09/02/2004 23:45 <REP> Microsoft
09/02/2004 23:45 <REP> .
09/02/2004 23:45 <REP> ..
3 fichier(s) 3610 octets
18 R‚p(s) 5952786432 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\Documents and Settings\Default User\Application Data

04/03/2004 23:08 <REP> Adobe
04/03/2004 23:08 <REP> AdobeUM
04/03/2004 23:08 <REP> InterVideo
04/03/2004 23:08 <REP> Ahead
04/03/2004 23:08 <REP> Help
04/03/2004 23:08 <REP> Macromedia
09/02/2004 23:49 <REP> Identities
09/02/2004 23:45 62 desktop.ini
09/02/2004 23:45 <REP> .
09/02/2004 23:45 <REP> ..
09/02/2004 23:45 <REP> Microsoft
1 fichier(s) 62 octets
10 R‚p(s) 5952786432 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\Documents and Settings\Invit‚\Application Data

11/04/2006 23:25 <REP> WholeSecurity
11/04/2006 23:25 <REP> PC Suite
11/04/2006 23:24 62 desktop.ini
11/04/2006 23:24 <REP> AdobeUM
11/04/2006 23:24 <REP> Adobe
11/04/2006 23:24 <REP> Ahead
11/04/2006 23:24 <REP> Help
11/04/2006 23:24 <REP> Identities
11/04/2006 23:24 <REP> InterVideo
11/04/2006 23:24 <REP> Macromedia
11/04/2006 23:24 <REP> ..
11/04/2006 23:24 <REP> .
11/04/2006 23:24 <REP> Microsoft
1 fichier(s) 62 octets
12 R‚p(s) 5952786432 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\Documents and Settings\Johann\Application Data

14/03/2007 09:46 <REP> BitDownload
14/03/2007 09:45 <REP> PROC DATE CAST
29/12/2006 17:56 <REP> U3
12/12/2006 14:20 <REP> ICAClient
14/11/2006 18:32 0 HelpFilesUpdatePatch_HELPFILEREPLACE.log
14/11/2006 18:32 357 HelpFilesUpdatePatch_PRINTHELPWRAPPER.log
25/10/2006 23:28 <REP> SlySoft
25/10/2006 23:28 88 .zreglib
09/10/2006 19:47 <REP> iSilo
06/07/2006 21:06 <REP> Google
16/06/2006 20:24 38404 PatchUpdate_HP_CounterReport_Update_HPSU.log
16/06/2006 20:24 2070 HPSU_48BitScanUpdate.log
16/06/2006 20:13 2769 PatchUpdate_HP_ISRegionListUpdatelog_HPSU.log
16/06/2006 19:51 3150 PatchUpdate_InstantShareJPG.log
16/06/2006 19:49 3959 PatchUpdate_IZClosingDiscError.log
16/06/2006 19:41 7218 GdiplusUpgrade_MSIApproach_Wrapper.log
16/06/2006 19:40 53033 Update_HP_RedboxHprblog_HPSU.log
25/04/2006 23:53 <REP> Real
11/03/2006 19:58 2508 $_hpcst$.hpc
06/03/2006 20:21 <REP> Visicom Media
01/03/2006 22:31 <REP> Skype
07/02/2006 20:32 <REP> Apple Computer
03/02/2006 20:35 <REP> vlc
27/01/2006 13:13 <REP> WholeSecurity
26/01/2006 20:25 300 Hewlett-PackardHP Photosmart 2570 series1133339361_PROTOCOL.log
26/01/2006 20:25 0 Hewlett-PackardHP Photosmart 2570 series1133339361_API.log
26/01/2006 20:25 591 Hewlett-PackardHP Photosmart 2570 series1133339361_UI.log
30/11/2005 10:18 <REP> HP
27/08/2005 12:52 <REP> Nokia Multimedia Player
27/08/2005 12:36 <REP> Nokia
27/08/2005 12:36 <REP> Datalayer
27/08/2005 12:35 <REP> PC Suite
29/12/2004 22:34 <REP> Leadertech
29/05/2004 18:58 <REP> AdobeAUM
08/04/2004 22:39 <REP> MSN6
04/04/2004 22:06 <REP> MobileAction
22/03/2004 18:54 <REP> Watchtower
12/03/2004 02:54 <REP> The Labyrinth Plus! Edition
05/03/2004 13:21 <REP> Symantec
04/03/2004 23:09 62 desktop.ini
04/03/2004 23:09 <REP> Adobe
04/03/2004 23:09 <REP> AdobeUM
04/03/2004 23:09 <REP> Identities
04/03/2004 23:09 <REP> Ahead
04/03/2004 23:09 <REP> Help
04/03/2004 23:09 <REP> InterVideo
04/03/2004 23:09 <REP> Macromedia
04/03/2004 23:09 <REP> ..
04/03/2004 23:09 <REP> .
04/03/2004 23:09 <REP> Microsoft
15 fichier(s) 114509 octets
35 R‚p(s) 5952782336 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\Documents and Settings\Lou-Anna\Application Data

20/03/2004 19:41 62 desktop.ini
20/03/2004 19:41 <REP> Adobe
20/03/2004 19:41 <REP> AdobeUM
20/03/2004 19:41 <REP> Ahead
20/03/2004 19:41 <REP> Identities
20/03/2004 19:41 <REP> Help
20/03/2004 19:41 <REP> InterVideo
20/03/2004 19:41 <REP> Macromedia
20/03/2004 19:41 <REP> .
20/03/2004 19:41 <REP> ..
20/03/2004 19:41 <REP> Microsoft
1 fichier(s) 62 octets
10 R‚p(s) 5952782336 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\Documents and Settings\Quentin\Application Data

16/05/2006 18:46 <REP> Real
17/02/2006 17:57 <REP> WholeSecurity
10/01/2006 19:02 <REP> PC Suite
06/05/2005 18:59 <REP> Watchtower
15/05/2004 15:12 <REP> The Labyrinth Plus! Edition
05/03/2004 14:04 62 desktop.ini
05/03/2004 14:04 <REP> Adobe
05/03/2004 14:04 <REP> AdobeUM
05/03/2004 14:04 <REP> Help
05/03/2004 14:04 <REP> Ahead
05/03/2004 14:04 <REP> Identities
05/03/2004 14:04 <REP> InterVideo
05/03/2004 14:04 <REP> Macromedia
05/03/2004 14:04 <REP> ..
05/03/2004 14:04 <REP> .
05/03/2004 14:04 <REP> Microsoft
1 fichier(s) 62 octets
15 R‚p(s) 5952778240 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\Documents and Settings\Sylvie\Application Data

05/03/2007 19:37 <REP> Real
05/03/2007 19:37 <REP> PC Suite
10/06/2005 19:32 62 desktop.ini
10/06/2005 19:31 <REP> Adobe
10/06/2005 19:31 <REP> AdobeUM
10/06/2005 19:31 <REP> Ahead
10/06/2005 19:31 <REP> Help
10/06/2005 19:31 <REP> Identities
10/06/2005 19:31 <REP> InterVideo
10/06/2005 19:31 <REP> Macromedia
10/06/2005 19:31 <REP> ..
10/06/2005 19:31 <REP> .
10/06/2005 19:31 <REP> Microsoft
1 fichier(s) 62 octets
12 R‚p(s) 5952778240 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est 4468-4F2D

R‚pertoire de C:\WINDOWS\Tasks

14/03/2007 09:46 264 B5096E93948EE3C7.job
09/02/2004 23:49 6 SA.DAT
09/02/2004 23:47 <REP> ..
09/02/2004 23:47 <REP> .
09/02/2004 23:38 65 desktop.ini
3 fichier(s) 335 octets
2 R‚p(s) 5ÿ952ÿ778ÿ240 octets libres

******************************************
Recherche dans Program files

Pas de dossiers relatifs à Lop
******************************************
Recherche d'infections connues


C:\WINDOWS\system32\csrss.exe Wareout possible ! faux-positif si csrss.exe !
*************** Fin du rapport ****************