Problème de pub cid intempestives

bonjour, depuis que j'ai installé msn plus! j'ai des CID: qui s'ouvrent, j'ai déjà ad aware, avast, c cleaner, spybot d'installés mais cela ne change rien, du coup je suis parti à la recherche de solutions sur les forum, et je suis tombé sur celui-ci http://www.infos-du-net.com/forum/ [...] ves-resolu qui est très !!! le seul souci que j'ai c'est que j'ai téléchargé tous les logiciels demandés dans ce forum, mais je ne sais pas analyser mes rapports qui sont différents de ceux postés ! je voudrais avoir de l'aide pour me débarasser de ces pubs svp !!! merci
kimi89

Logfile of HijackThis v1.99.1
Scan saved at 16:18:57, on 13/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Documents and Settings\Benjamin\Mes documents\DOSSIER BEN\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile\Mobile Phone Monitor\epmworker.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Documents and Settings\Alexandre\Bureau\Internet\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.club-internet.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 64.34.113.120:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [eDonkey2000] C:\Documents and Settings\Benjamin\Mes documents\Mes vidéos\Nouveau dossier\eDonkey2000\eDonkey2000.exe -t
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [GRIDTHATCORNTRAY] C:\Documents and Settings\All Users\Application Data\For mail grid that\for delete.exe
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\documents and settings\benjamin\mes documents\dossier ben\WCESCOMM.EXE"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Odebit Multimedia V2] C:\Program Files\Odebit Multimédia\V2\Odebit.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Ping about] C:\DOCUME~1\ALEXAN~1\APPLIC~1\MFCDCR~1\PollMessFour.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: SWF Capture tool - C:\Program Files\Eltima Software\Flash Decompiler\iebt.html
O8 - Extra context menu item: Tout télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddList.html
O8 - Extra context menu item: Télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddLink.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - c:\documents and settings\benjamin\mes documents\dossier ben\inetrepl.dll (file missing)
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - c:\documents and settings\benjamin\mes documents\dossier ben\inetrepl.dll (file missing)
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - c:\documents and settings\benjamin\mes documents\dossier ben\inetrepl.dll (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Documents and Settings\Benjamin\Mes documents\DOSSIER BEN\btsendto_ie.htm (file missing)
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Documents and Settings\Benjamin\Mes documents\DOSSIER BEN\btsendto_ie.htm (file missing)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Flash Decompiler SWF Capture tool - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\Program Files\Eltima Software\Flash Decompiler\iebt.dll (HKCU)
O9 - Extra 'Tools' menuitem: Flash Decompiler SWF Capture tool menu - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\Program Files\Eltima Software\Flash Decompiler\iebt.dll (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.medion.fr/
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/251 [...] o-eula.cab
O16 - DPF: {29D73455-3ADA-49BB-9067-44822F6728F5} (Google Video Uploader ActX) - http://www.joga.com/activex/uploadactx.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://my6dead6star6world.spaces.l [...] nPUpld.cab
O16 - DPF: {5054F860-748D-4840-B7B4-DDDB428421AF} (phoneaccess Class) - http://ip.sponsoradulto.com/cab/4/fr/phoneaccess.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft. [...] 8178069468
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/micros [...] 4230113765
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ [...] loader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://mvnet.xlontech.net/qm/fox/0 [...] 101001.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by119fd.bay119.hotmail.msn. [...] Atchmt.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Documents and Settings\Benjamin\Mes documents\DOSSIER BEN\bin\btwdins.exe
O23 - Service: Client de licence CA (CA_LIC_CLNT) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
O23 - Service: Serveur de licence CA (CA_LIC_SRVR) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

------------------------------------------------------------------------------------------------------------------------------------------

Rapport fait à 15:52:02,01 le 13/07/2007

Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Alexandre\Application Data

30/05/2007 23:09 15828 NMM-MetaData.db
30/05/2007 18:44 <REP> Nokia Multimedia Player
30/05/2007 18:41 <REP> Nokia
30/05/2007 18:29 <REP> PC Suite
08/05/2007 16:53 <REP> Screenshot Sender
08/05/2007 16:53 <REP> Mfcd Creative
20/04/2007 22:44 <REP> Leadertech
01/03/2007 01:03 <REP> Sony Ericsson
01/03/2007 01:03 <REP> Teleca
06/02/2007 21:18 <REP> MessengerSkinner
27/01/2007 22:45 <REP> Free Download Manager
17/01/2007 20:48 <REP> BitTorrent
17/01/2007 19:30 <REP> Crystal FTP
26/12/2006 00:13 <REP> DivX
23/11/2006 18:35 <REP> SoundSpectrum
23/11/2006 17:33 <REP> ICAClient
16/11/2006 22:48 <REP> Eltima Software
04/11/2006 01:22 <REP> Real
16/09/2006 01:23 <REP> Google
14/09/2006 19:28 <REP> vlc
01/09/2006 15:30 <REP> Mozilla
30/04/2006 15:35 <REP> Nero
07/03/2006 22:57 <REP> Babylon
21/02/2006 01:48 <REP> Media Player Classic
30/01/2006 00:00 <REP> Datalayer
10/01/2006 18:26 84304 GDIPFONTCACHEV1.DAT
26/11/2005 23:13 <REP> FileMaker
26/11/2005 20:15 <REP> Lavasoft
26/11/2005 17:58 <REP> iScreensaver
26/11/2005 16:40 <REP> Apple Computer
06/11/2005 20:10 <REP> Kazaa Lite
19/10/2005 14:07 <REP> Sun
25/05/2005 12:34 <REP> ArcSoft
21/03/2005 18:52 <REP> Axialis
21/03/2005 18:50 <REP> Help
20/02/2005 20:28 <REP> The Labyrinth Plus! Edition
18/01/2005 20:57 <REP> Microsoft Web Folders
06/01/2005 17:57 <REP> Ahead
06/12/2004 13:41 <REP> ScanSoft
30/11/2004 15:42 44480 wklnhst.dat
14/11/2004 22:49 <REP> Brother
14/11/2004 21:44 <REP> Template
12/11/2004 17:51 62 desktop.ini
12/11/2004 17:51 <REP> AdobeUM
12/11/2004 17:51 <REP> Adobe
12/11/2004 17:51 <REP> CyberLink
12/11/2004 17:51 <REP> Identities
12/11/2004 17:51 <REP> Macromedia
12/11/2004 17:51 <REP> Microsoft
12/11/2004 17:51 <REP> ..
12/11/2004 17:51 <REP> .
4 fichier(s) 144674 octets
47 R‚p(s) 7211208704 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\All Users\Application Data

12/07/2007 18:57 <REP> PlayFirst
25/06/2007 09:25 <REP> TEMP
02/06/2007 15:40 <REP> Nokia
30/05/2007 18:48 <REP> Installations
30/05/2007 18:29 <REP> PC Suite
30/05/2007 18:24 <REP> Downloaded Installations
08/05/2007 17:16 <REP> Messenger Plus!
08/05/2007 16:53 <REP> For mail grid that
16/04/2007 01:02 <REP> Spybot - Search & Destroy
01/03/2007 00:59 <REP> Sony Ericsson
01/03/2007 00:59 <REP> Teleca
07/02/2007 20:35 <REP> Windows Live Toolbar
20/01/2007 16:39 <REP> Sandlot Games
20/01/2007 16:39 <REP> Zylom
17/01/2007 20:27 <REP> Zabersoft
30/11/2006 20:51 <REP> Adobe Systems
14/11/2006 20:08 <REP> Move Networks
14/11/2006 00:07 <REP> Yahoo! Companion
22/09/2006 00:11 <REP> Google
16/08/2006 21:40 <REP> Adobe
03/06/2006 20:21 <REP> Kazaa
09/03/2006 18:14 <REP> Windows Genuine Advantage
08/01/2006 18:38 1383 QTSBandwidthCache
27/11/2005 16:58 <REP> DVD Shrink
26/11/2005 16:38 <REP> Apple Computer
04/11/2005 20:20 <REP> pixelStorm
14/11/2004 22:33 <REP> ScanSoft
14/11/2004 22:32 <REP> Brother
19/10/2004 13:48 <REP> nView_Profiles
19/10/2004 11:03 <REP> Ahead
19/10/2004 10:48 <REP> CyberLink
18/10/2004 20:53 62 desktop.ini
18/10/2004 20:53 <REP> Microsoft
18/10/2004 20:53 <REP> ..
18/10/2004 20:53 <REP> .
18/10/2004 20:02 <REP> SBSI
2 fichier(s) 1445 octets
34 R‚p(s) 7211204608 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Baptiste Bonaparte\Application Data

14/04/2007 17:35 <REP> Teleca
14/04/2007 17:35 <REP> Real
28/07/2006 11:11 <REP> Brother
11/06/2006 14:36 <REP> Datalayer
03/06/2006 10:41 <REP> Kazaa Lite
03/06/2006 09:38 <REP> Media Player Classic
27/05/2006 11:41 <REP> PC Suite
27/05/2006 11:40 62 desktop.ini
27/05/2006 11:40 <REP> Adobe
27/05/2006 11:40 <REP> AdobeUM
27/05/2006 11:40 <REP> Identities
27/05/2006 11:40 <REP> CyberLink
27/05/2006 11:40 <REP> Macromedia
27/05/2006 11:40 <REP> ..
27/05/2006 11:40 <REP> .
27/05/2006 11:40 <REP> Microsoft
1 fichier(s) 62 octets
15 R‚p(s) 7211204608 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Benjamin\Application Data

01/03/2007 12:24 <REP> Teleca
28/01/2007 20:15 <REP> Free Download Manager
28/01/2007 18:12 <REP> Mozilla
06/01/2007 01:58 <REP> Lavasoft
27/12/2006 11:25 <REP> DivX
20/11/2006 22:17 <REP> PC Suite
05/11/2006 06:18 <REP> Real
15/10/2006 17:09 <REP> Nokia Multimedia Player
22/09/2006 00:23 <REP> Google
19/09/2006 14:33 <REP> vlc
07/07/2006 08:01 <REP> Help
26/03/2006 13:39 77216 GDIPFONTCACHEV1.DAT
08/03/2006 10:36 <REP> Babylon
04/03/2006 18:25 <REP> Line 6
01/03/2006 19:33 <REP> Media Player Classic
08/01/2006 18:23 <REP> Ahead
25/12/2005 15:31 <REP> Apple Computer
25/12/2005 15:16 <REP> Nokia
25/12/2005 15:16 <REP> Datalayer
06/11/2005 13:50 <REP> Kazaa Lite
22/10/2005 21:03 <REP> Sun
15/12/2004 17:25 <REP> Brother
15/12/2004 16:55 11370 wklnhst.dat
12/11/2004 18:10 62 desktop.ini
12/11/2004 18:10 <REP> Adobe
12/11/2004 18:10 <REP> AdobeUM
12/11/2004 18:10 <REP> CyberLink
12/11/2004 18:10 <REP> Identities
12/11/2004 18:10 <REP> Macromedia
12/11/2004 18:10 <REP> ..
12/11/2004 18:10 <REP> .
12/11/2004 18:10 <REP> Microsoft
3 fichier(s) 88648 octets
29 R‚p(s) 7211204608 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Default User\Application Data

12/11/2004 17:50 <REP> AdobeUM
12/11/2004 17:50 <REP> Adobe
12/11/2004 17:50 <REP> CyberLink
12/11/2004 17:50 <REP> Macromedia
18/10/2004 20:53 62 desktop.ini
18/10/2004 20:53 <REP> Microsoft
18/10/2004 20:53 <REP> ..
18/10/2004 20:53 <REP> .
18/10/2004 19:58 <REP> Identities
1 fichier(s) 62 octets
8 R‚p(s) 7211200512 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Isabelle\Application Data

11/04/2007 21:31 <REP> DivX
02/03/2007 20:14 <REP> Teleca
10/11/2006 21:50 <REP> Real
02/11/2006 18:56 <REP> Datalayer
22/09/2006 12:10 <REP> Google
04/03/2006 20:38 <REP> Media Player Classic
27/01/2006 19:45 75592 GDIPFONTCACHEV1.DAT
25/01/2006 20:18 <REP> Ahead
18/01/2006 22:05 <REP> Brother
27/12/2005 19:07 <REP> PC Suite
02/12/2005 10:58 <REP> Help
01/12/2005 19:55 <REP> iScreensaver
10/11/2005 14:28 <REP> Kazaa Lite
01/11/2005 17:48 <REP> Sun
15/12/2004 16:53 7212 wklnhst.dat
12/11/2004 23:34 62 desktop.ini
12/11/2004 23:34 <REP> Adobe
12/11/2004 23:34 <REP> AdobeUM
12/11/2004 23:34 <REP> Identities
12/11/2004 23:34 <REP> CyberLink
12/11/2004 23:34 <REP> Macromedia
12/11/2004 23:34 <REP> Microsoft
12/11/2004 23:34 <REP> .
12/11/2004 23:34 <REP> ..
3 fichier(s) 82866 octets
21 R‚p(s) 7211200512 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Propri‚taire

Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Sarah dc\Application Data

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\WINDOWS\Tasks

08/05/2007 16:53 280 B5B73E1393B8A893.job
07/02/2007 20:35 260 V‚rifier les mises … jour de Windows Live Toolbar.job
15/09/2006 18:33 284 AppleSoftwareUpdate.job
18/10/2004 19:58 6 SA.DAT
18/10/2004 19:57 <REP> ..
18/10/2004 19:57 <REP> .
18/10/2004 19:49 65 desktop.ini
5 fichier(s) 895 octets
2 R‚p(s) 7ÿ211ÿ200ÿ512 octets libres

******************************************
Listing des dossiers dans C:\Program Files

7-Zip
Admiresoft
Adobe
Adobe Type Manager
Adverts
Ahead
Alwil Software
Apple Software Update
Apps TMD
Archos MP4SP
ArcSoft
Astrologie & Devenir
Audio Mid Recorder
AviSynth 2.5
AxBx
Axialis
Babylon(2)
BitTorrent
Brother
CA
Cardreader Software
CCleaner
CDRipper
Citrix
Club-Internet
C-Media 3D Audio
Common Files
ComPlus Applications
CyberLink
Desktop Architect
DIFX
directx
DivX
d-lusion
DVD Shrink
EACOM
EasyPHP1-8
Eidos
Eltima Software
Empire Interactive
eMule
eRightSoft
F1 Manager
Fichiers communs
FileZilla
FLV Player
Free Audio Pack
Free Download Manager
GeoVid
Glootub
Google
HighMAT CD Writing Wizard
Home Cinema
HP Photo Idea CD
IEL
Illustrate
ImageServer
Intel
Internet Explorer
iPod
iTunes
Java
Lavasoft
Line6
MediaCoder
Messenger
Messenger Plus! Live
MessengerSkinner
Mfcd Creative
Microsoft Encarta
microsoft frontpage
Microsoft Money
Microsoft Office
Microsoft Picture It! 9
Microsoft Works
Microsoft Works Suite 2004
midi2mp3
MobeeSoft
MoodLogic
MotoGP
Movie Maker
Mozilla Firefox
MSN
MSN Gaming Zone
MSN Messenger
MSXML 4.0
Musicmatch
Neodivx
Nero
NETGEAR
NetMeeting
No-IP
Nokia
NoteWorthy Composer
Odebit Multim‚dia
Outlook Express
Panicware
PC Connectivity Solution
Perfect Icon
PhotoDeluxe HE 3.0
QuickTime
Reader
Real
RM-X© Audio Extractor
Satsuki Decoder Pack
Save Flash
ScanSoft
Services en ligne
SimpleCenter
Sleepy Sound
Smart Projects
sollab
Sony Ericsson
SoundSpectrum
Spybot - Search & Destroy
Swf2Avi
Syncrosoft
Talkway
TallStick
TGTSoft
themexp
TwistedPixel
Ubi Soft
UltraVNC
vanBasco's Karaoke Player
VGP2
VideoLAN
VirtualDub
VSoft
WinAVI Video Converter
WinAVIVideoConverter
Windows Desktop Search
Windows Journal Viewer
Windows Live
Windows Live Safety Center
Windows Live Toolbar
Windows Media Bonus Pack for Windows XP
Windows Media Connect 2
Windows Media Player
Windows NT
WinRAR
WON
X10 Hardware
xerox
Xi
XVideoConverter
Yahoo!
Youer xp(2)
Zylom Games
******************************************
Recherche des dossiers/fichiers LOP

C:\Program Files\Adverts Présent !
C:\WINDOWS\tasks\B5B73E1393B8A893.job Présent !
******************************************
Recherche d'infections connues

Pas d'infection reconnue
******************************************
Vérification du fichier HOSTS

Fichier Hosts : MODIFIE
*************** Fin du Rapport - Version 0.9 ****************
Rapport fait à 16:19:46,14 le 13/07/2007

Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Alexandre\Application Data

30/05/2007 23:09 15828 NMM-MetaData.db
30/05/2007 18:44 <REP> Nokia Multimedia Player
30/05/2007 18:41 <REP> Nokia
30/05/2007 18:29 <REP> PC Suite
08/05/2007 16:53 <REP> Screenshot Sender
08/05/2007 16:53 <REP> Mfcd Creative
20/04/2007 22:44 <REP> Leadertech
01/03/2007 01:03 <REP> Sony Ericsson
01/03/2007 01:03 <REP> Teleca
06/02/2007 21:18 <REP> MessengerSkinner
27/01/2007 22:45 <REP> Free Download Manager
17/01/2007 20:48 <REP> BitTorrent
17/01/2007 19:30 <REP> Crystal FTP
26/12/2006 00:13 <REP> DivX
23/11/2006 18:35 <REP> SoundSpectrum
23/11/2006 17:33 <REP> ICAClient
16/11/2006 22:48 <REP> Eltima Software
04/11/2006 01:22 <REP> Real
16/09/2006 01:23 <REP> Google
14/09/2006 19:28 <REP> vlc
01/09/2006 15:30 <REP> Mozilla
30/04/2006 15:35 <REP> Nero
07/03/2006 22:57 <REP> Babylon
21/02/2006 01:48 <REP> Media Player Classic
30/01/2006 00:00 <REP> Datalayer
10/01/2006 18:26 84304 GDIPFONTCACHEV1.DAT
26/11/2005 23:13 <REP> FileMaker
26/11/2005 20:15 <REP> Lavasoft
26/11/2005 17:58 <REP> iScreensaver
26/11/2005 16:40 <REP> Apple Computer
06/11/2005 20:10 <REP> Kazaa Lite
19/10/2005 14:07 <REP> Sun
25/05/2005 12:34 <REP> ArcSoft
21/03/2005 18:52 <REP> Axialis
21/03/2005 18:50 <REP> Help
20/02/2005 20:28 <REP> The Labyrinth Plus! Edition
18/01/2005 20:57 <REP> Microsoft Web Folders
06/01/2005 17:57 <REP> Ahead
06/12/2004 13:41 <REP> ScanSoft
30/11/2004 15:42 44480 wklnhst.dat
14/11/2004 22:49 <REP> Brother
14/11/2004 21:44 <REP> Template
12/11/2004 17:51 62 desktop.ini
12/11/2004 17:51 <REP> AdobeUM
12/11/2004 17:51 <REP> Adobe
12/11/2004 17:51 <REP> CyberLink
12/11/2004 17:51 <REP> Identities
12/11/2004 17:51 <REP> Macromedia
12/11/2004 17:51 <REP> Microsoft
12/11/2004 17:51 <REP> ..
12/11/2004 17:51 <REP> .
4 fichier(s) 144674 octets
47 R‚p(s) 7206256640 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\All Users\Application Data

12/07/2007 18:57 <REP> PlayFirst
25/06/2007 09:25 <REP> TEMP
02/06/2007 15:40 <REP> Nokia
30/05/2007 18:48 <REP> Installations
30/05/2007 18:29 <REP> PC Suite
30/05/2007 18:24 <REP> Downloaded Installations
08/05/2007 17:16 <REP> Messenger Plus!
08/05/2007 16:53 <REP> For mail grid that
16/04/2007 01:02 <REP> Spybot - Search & Destroy
01/03/2007 00:59 <REP> Sony Ericsson
01/03/2007 00:59 <REP> Teleca
07/02/2007 20:35 <REP> Windows Live Toolbar
20/01/2007 16:39 <REP> Sandlot Games
20/01/2007 16:39 <REP> Zylom
17/01/2007 20:27 <REP> Zabersoft
30/11/2006 20:51 <REP> Adobe Systems
14/11/2006 20:08 <REP> Move Networks
14/11/2006 00:07 <REP> Yahoo! Companion
22/09/2006 00:11 <REP> Google
16/08/2006 21:40 <REP> Adobe
03/06/2006 20:21 <REP> Kazaa
09/03/2006 18:14 <REP> Windows Genuine Advantage
08/01/2006 18:38 1383 QTSBandwidthCache
27/11/2005 16:58 <REP> DVD Shrink
26/11/2005 16:38 <REP> Apple Computer
04/11/2005 20:20 <REP> pixelStorm
14/11/2004 22:33 <REP> ScanSoft
14/11/2004 22:32 <REP> Brother
19/10/2004 13:48 <REP> nView_Profiles
19/10/2004 11:03 <REP> Ahead
19/10/2004 10:48 <REP> CyberLink
18/10/2004 20:53 62 desktop.ini
18/10/2004 20:53 <REP> Microsoft
18/10/2004 20:53 <REP> ..
18/10/2004 20:53 <REP> .
18/10/2004 20:02 <REP> SBSI
2 fichier(s) 1445 octets
34 R‚p(s) 7206252544 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Baptiste Bonaparte\Application Data

14/04/2007 17:35 <REP> Teleca
14/04/2007 17:35 <REP> Real
28/07/2006 11:11 <REP> Brother
11/06/2006 14:36 <REP> Datalayer
03/06/2006 10:41 <REP> Kazaa Lite
03/06/2006 09:38 <REP> Media Player Classic
27/05/2006 11:41 <REP> PC Suite
27/05/2006 11:40 62 desktop.ini
27/05/2006 11:40 <REP> Adobe
27/05/2006 11:40 <REP> AdobeUM
27/05/2006 11:40 <REP> Identities
27/05/2006 11:40 <REP> CyberLink
27/05/2006 11:40 <REP> Macromedia
27/05/2006 11:40 <REP> ..
27/05/2006 11:40 <REP> .
27/05/2006 11:40 <REP> Microsoft
1 fichier(s) 62 octets
15 R‚p(s) 7206252544 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Benjamin\Application Data

01/03/2007 12:24 <REP> Teleca
28/01/2007 20:15 <REP> Free Download Manager
28/01/2007 18:12 <REP> Mozilla
06/01/2007 01:58 <REP> Lavasoft
27/12/2006 11:25 <REP> DivX
20/11/2006 22:17 <REP> PC Suite
05/11/2006 06:18 <REP> Real
15/10/2006 17:09 <REP> Nokia Multimedia Player
22/09/2006 00:23 <REP> Google
19/09/2006 14:33 <REP> vlc
07/07/2006 08:01 <REP> Help
26/03/2006 13:39 77216 GDIPFONTCACHEV1.DAT
08/03/2006 10:36 <REP> Babylon
04/03/2006 18:25 <REP> Line 6
01/03/2006 19:33 <REP> Media Player Classic
08/01/2006 18:23 <REP> Ahead
25/12/2005 15:31 <REP> Apple Computer
25/12/2005 15:16 <REP> Nokia
25/12/2005 15:16 <REP> Datalayer
06/11/2005 13:50 <REP> Kazaa Lite
22/10/2005 21:03 <REP> Sun
15/12/2004 17:25 <REP> Brother
15/12/2004 16:55 11370 wklnhst.dat
12/11/2004 18:10 62 desktop.ini
12/11/2004 18:10 <REP> Adobe
12/11/2004 18:10 <REP> AdobeUM
12/11/2004 18:10 <REP> CyberLink
12/11/2004 18:10 <REP> Identities
12/11/2004 18:10 <REP> Macromedia
12/11/2004 18:10 <REP> ..
12/11/2004 18:10 <REP> .
12/11/2004 18:10 <REP> Microsoft
3 fichier(s) 88648 octets
29 R‚p(s) 7206248448 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Default User\Application Data

12/11/2004 17:50 <REP> AdobeUM
12/11/2004 17:50 <REP> Adobe
12/11/2004 17:50 <REP> CyberLink
12/11/2004 17:50 <REP> Macromedia
18/10/2004 20:53 62 desktop.ini
18/10/2004 20:53 <REP> Microsoft
18/10/2004 20:53 <REP> ..
18/10/2004 20:53 <REP> .
18/10/2004 19:58 <REP> Identities
1 fichier(s) 62 octets
8 R‚p(s) 7206248448 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Isabelle\Application Data

11/04/2007 21:31 <REP> DivX
02/03/2007 20:14 <REP> Teleca
10/11/2006 21:50 <REP> Real
02/11/2006 18:56 <REP> Datalayer
22/09/2006 12:10 <REP> Google
04/03/2006 20:38 <REP> Media Player Classic
27/01/2006 19:45 75592 GDIPFONTCACHEV1.DAT
25/01/2006 20:18 <REP> Ahead
18/01/2006 22:05 <REP> Brother
27/12/2005 19:07 <REP> PC Suite
02/12/2005 10:58 <REP> Help
01/12/2005 19:55 <REP> iScreensaver
10/11/2005 14:28 <REP> Kazaa Lite
01/11/2005 17:48 <REP> Sun
15/12/2004 16:53 7212 wklnhst.dat
12/11/2004 23:34 62 desktop.ini
12/11/2004 23:34 <REP> Adobe
12/11/2004 23:34 <REP> AdobeUM
12/11/2004 23:34 <REP> Identities
12/11/2004 23:34 <REP> CyberLink
12/11/2004 23:34 <REP> Macromedia
12/11/2004 23:34 <REP> Microsoft
12/11/2004 23:34 <REP> .
12/11/2004 23:34 <REP> ..
3 fichier(s) 82866 octets
21 R‚p(s) 7206248448 octets libres
Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Propri‚taire

Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\Documents and Settings\Sarah dc\Application Data

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C s'appelle BOOT
Le num‚ro de s‚rie du volume est F83D-EC94

R‚pertoire de C:\WINDOWS\Tasks

08/05/2007 16:53 280 B5B73E1393B8A893.job
07/02/2007 20:35 260 V‚rifier les mises … jour de Windows Live Toolbar.job
15/09/2006 18:33 284 AppleSoftwareUpdate.job
18/10/2004 19:58 6 SA.DAT
18/10/2004 19:57 <REP> ..
18/10/2004 19:57 <REP> .
18/10/2004 19:49 65 desktop.ini
5 fichier(s) 895 octets
2 R‚p(s) 7ÿ206ÿ248ÿ448 octets libres

******************************************
Listing des dossiers dans C:\Program Files

7-Zip
Admiresoft
Adobe
Adobe Type Manager
Adverts
Ahead
Alwil Software
Apple Software Update
Apps TMD
Archos MP4SP
ArcSoft
Astrologie & Devenir
Audio Mid Recorder
AviSynth 2.5
AxBx
Axialis
Babylon(2)
BitTorrent
Brother
CA
Cardreader Software
CCleaner
CDRipper
Citrix
Club-Internet
C-Media 3D Audio
Common Files
ComPlus Applications
CyberLink
Desktop Architect
DIFX
directx
DivX
d-lusion
DVD Shrink
EACOM
EasyPHP1-8
Eidos
Eltima Software
Empire Interactive
eMule
eRightSoft
F1 Manager
Fichiers communs
FileZilla
FLV Player
Free Audio Pack
Free Download Manager
GeoVid
Glootub
Google
HighMAT CD Writing Wizard
Home Cinema
HP Photo Idea CD
IEL
Illustrate
ImageServer
Intel
Internet Explorer
iPod
iTunes
Java
Lavasoft
Line6
MediaCoder
Messenger
Messenger Plus! Live
MessengerSkinner
Mfcd Creative
Microsoft Encarta
microsoft frontpage
Microsoft Money
Microsoft Office
Microsoft Picture It! 9
Microsoft Works
Microsoft Works Suite 2004
midi2mp3
MobeeSoft
MoodLogic
MotoGP
Movie Maker
Mozilla Firefox
MSN
MSN Gaming Zone
MSN Messenger
MSXML 4.0
Musicmatch
Neodivx
Nero
NETGEAR
NetMeeting
No-IP
Nokia
NoteWorthy Composer
Odebit Multim‚dia
Outlook Express
Panicware
PC Connectivity Solution
Perfect Icon
PhotoDeluxe HE 3.0
QuickTime
Reader
Real
RM-X© Audio Extractor
Satsuki Decoder Pack
Save Flash
ScanSoft
Services en ligne
SimpleCenter
Sleepy Sound
Smart Projects
sollab
Sony Ericsson
SoundSpectrum
Spybot - Search & Destroy
Swf2Avi
Syncrosoft
Talkway
TallStick
TGTSoft
themexp
TwistedPixel
Ubi Soft
UltraVNC
vanBasco's Karaoke Player
VGP2
VideoLAN
VirtualDub
VSoft
WinAVI Video Converter
WinAVIVideoConverter
Windows Desktop Search
Windows Journal Viewer
Windows Live
Windows Live Safety Center
Windows Live Toolbar
Windows Media Bonus Pack for Windows XP
Windows Media Connect 2
Windows Media Player
Windows NT
WinRAR
WON
X10 Hardware
xerox
Xi
XVideoConverter
Yahoo!
Youer xp(2)
Zylom Games
******************************************
Recherche des dossiers/fichiers LOP

C:\Program Files\Adverts Présent !
C:\WINDOWS\tasks\B5B73E1393B8A893.job Présent !
******************************************
Recherche d'infections connues

Pas d'infection reconnue
******************************************
Vérification du fichier HOSTS

Fichier Hosts : MODIFIE
*************** Fin du Rapport - Version 0.9 ****************

Folder cleanup failed. C:\Documents and Settings\All Users\Application Data\For mail grid that scheduled to be deleted on reboot.
C:\Documents and Settings\Alexandre\Application Data\Mfcd Creative moved successfully.
C:\Documents and Settings\Alexandre\Application Data\MessengerSkinner\Userdata moved successfully.
C:\Documents and Settings\Alexandre\Application Data\MessengerSkinner moved successfully.
C:\WINDOWS\Tasks\B5B73E1393B8A893.job moved successfully.
C:\Program Files\Adverts moved successfully.
C:\Program Files\MessengerSkinner\resources moved successfully.
C:\Program Files\MessengerSkinner\download moved successfully.
C:\Program Files\MessengerSkinner moved successfully.
C:\Program Files\Mfcd Creative moved successfully.

Created on 07/13/2007 18:50:07

------------------------------------------------------------------------------------------------------------------------------------------

Search Navipromo version 2.0.5 commencé le 13/07/2007 à 19:01:07,78

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files\navilog1
Mise a jour le 01.07.2007 a 12h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***


merci de m'aider c'est vraiment super simpa !!!

Search Navipromo version 2.0.5 commencé le 13/07/2007 à 19:01:07,78

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files\navilog1
Mise a jour le 01.07.2007 a 12h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***




*** Recherche dossiers dans C:\Program Files ***




*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\Alexandre\Application Data ***



*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
http://www.f-secure.com/blacklight [...] _help.html


F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of October, 2007.
Version information: 2.2.1064.

[+] Started on 07/13/07 at 19:01:09.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items .................................................................................................................................
[+] Scan complete.
[+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
[+] Exited on 07/13/07 at 19:16:52 (return code = 0).


*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !


*** Recherche cles registre ***


Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]



Recherche Clé Magic Control



*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche Heuristique :
*
**
C:\WINDOWS\system32\wfndmfmclu.dat trouvé !
***
****
*****
******
*******
********

3)Recherche Certificats :


*** Analyse Terminé le 13/07/2007 à 19:17:28,09 ***


lol t'avais pas tord j'avais pas vu la suite

------------------------------------------------------------------------------------------------------------------------------------------


Logfile of HijackThis v1.99.1
Scan saved at 19:49:27, on 13/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Documents and Settings\Benjamin\Mes documents\DOSSIER BEN\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Alexandre\Bureau\Internet\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.club-internet.fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 64.34.113.120:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [eDonkey2000] C:\Documents and Settings\Benjamin\Mes documents\Mes vidéos\Nouveau dossier\eDonkey2000\eDonkey2000.exe -t
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\documents and settings\benjamin\mes documents\dossier ben\WCESCOMM.EXE"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Odebit Multimedia V2] C:\Program Files\Odebit Multimédia\V2\Odebit.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: SWF Capture tool - C:\Program Files\Eltima Software\Flash Decompiler\iebt.html
O8 - Extra context menu item: Tout télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddList.html
O8 - Extra context menu item: Télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddLink.html
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - c:\documents and settings\benjamin\mes documents\dossier ben\inetrepl.dll (file missing)
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - c:\documents and settings\benjamin\mes documents\dossier ben\inetrepl.dll (file missing)
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - c:\documents and settings\benjamin\mes documents\dossier ben\inetrepl.dll (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Documents and Settings\Benjamin\Mes documents\DOSSIER BEN\btsendto_ie.htm (file missing)
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Documents and Settings\Benjamin\Mes documents\DOSSIER BEN\btsendto_ie.htm (file missing)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Flash Decompiler SWF Capture tool - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\Program Files\Eltima Software\Flash Decompiler\iebt.dll (HKCU)
O9 - Extra 'Tools' menuitem: Flash Decompiler SWF Capture tool menu - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\Program Files\Eltima Software\Flash Decompiler\iebt.dll (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.medion.fr/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft. [...] 8178069468
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/micros [...] 4230113765
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Documents and Settings\Benjamin\Mes documents\DOSSIER BEN\bin\btwdins.exe
O23 - Service: Client de licence CA (CA_LIC_CLNT) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
O23 - Service: Serveur de licence CA (CA_LIC_SRVR) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe


je crois que tout y est ^^ merci encore de m'aider

Clean Navipromo version 2.0.5 commencé le 13/07/2007 à 22:45:27,28

Fix lancé depuis C:\Program Files\navilog1
Mise a jour le 01.07.2007 a 12h00 by IL-MAFIOSO

Mode suppression automatique avec prise en charge résultats Blacklight



*** fsbl1.txt non trouvé ***
(Assurez-vous que Blacklight n'avait rien trouvé lors de la recherche)


*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\Alexandre\Application Data ***



*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Alexandre\Local Settings\Temp effectué !


*** Sauvegarde du registre vers dossier Backupnavi***

Navilog n'a pas pris en compte tout ce qu'il avait trouvé.

On change la manip.

Double clique sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider.
Au menu principal, choisis 4 et valide.

Le fix va te demander de saisir le nom de fichier.
Saisies ce qui est en gras ci-dessous et rien d'autre puis valide:

wfndmfmclu

Le fix va te demander de le ressaisir, fais-le et valide

Le fix va t'informer qu'il va alors redémarrer ton PC
Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
Appuie sur une touche comme demandé.
(si ton Pc ne redémarre pas automatiquement, fais le toi même)
Au redémarrage de ton PC, choisis ta session habituelle.

Patiente jusqu'au message :
*** Nettoyage Termine le ..... ***
Le blocnote va s'ouvrir.
Sauvegarde le rapport de manière à le retrouver
Referme le blocnote. Ton bureau va réapparaitre

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rend-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
Tape explorer et valide. Celà te fera apparaitre ton bureau

Poste ce nouveau rapport avec un rapport Hijakthis.