Probleme de fenêtres CiD ( resolu)

Salut,

Pas de bonjour ?

XP ou Vista ?

• Désactive l'UAC le temps de la désinfection.

• Télécharge Lop S&D sur ton Bureau.
• Double-clique dessus pour lancer l'installation.
• Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.

(Sous Vista, il faut cliquer droit sur le raccourci de Lop S&D et choisir Exécuter en tant qu'administrateur)

• Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche) .
• Patiente jusqu'à la fin du scan.
• Poste le rapport généré (C:\lopR.txt).

C'est bien sur le raccourci de Lop S&D que tu cliques et non sur l'installateur ?

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Phenom(tm) 9500 Quad-Core Processor )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Elchiguiro ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:455 Go (Free:229 Go)
D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
E:\ (Local Disk) - NTFS - Total:465 Go (Free:465 Go)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (Local Disk) - NTFS - Total:74 Go (Free:74 Go)
L:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 05/03/2009|16:20 )

[ UAC => 0 ]

--------------------\\ Listing des dossiers dans Local

[12/11/2008|14:35] C:\Users\ELCHIG~1\AppData\Local\Application Data
[04/03/2009|14:54] C:\Users\ELCHIG~1\AppData\Local\Ares
[06/01/2009|18:05] C:\Users\ELCHIG~1\AppData\Local\d3d9caps.dat
[04/03/2009|01:55] C:\Users\ELCHIG~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[08/12/2008|22:45] C:\Users\ELCHIG~1\AppData\Local\GDIPFONTCACHEV1.DAT
[17/01/2009|11:43] C:\Users\ELCHIG~1\AppData\Local\Google
[12/11/2008|14:40] C:\Users\ELCHIG~1\AppData\Local\Hewlett-Packard
[12/11/2008|14:35] C:\Users\ELCHIG~1\AppData\Local\Historique
[05/03/2009|01:13] C:\Users\ELCHIG~1\AppData\Local\HP Guide
[05/03/2009|16:11] C:\Users\ELCHIG~1\AppData\Local\IconCache.db
[03/12/2008|21:29] C:\Users\ELCHIG~1\AppData\Local\KodakGallery
[01/03/2009|22:58] C:\Users\ELCHIG~1\AppData\Local\Microsoft
[24/11/2008|15:25] C:\Users\ELCHIG~1\AppData\Local\Microsoft Games
[14/11/2008|02:08] C:\Users\ELCHIG~1\AppData\Local\Mozilla
[06/01/2009|18:05] C:\Users\ELCHIG~1\AppData\Local\Shareaza
[05/03/2009|16:18] C:\Users\ELCHIG~1\AppData\Local\Temp
[12/11/2008|14:35] C:\Users\ELCHIG~1\AppData\Local\Temporary Internet Files
[15/11/2008|14:47] C:\Users\ELCHIG~1\AppData\Local\VirtualStore
[02/03/2009|20:03] C:\Users\ELCHIG~1\AppData\Local\wfvfwnd.bat

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[05/03/2009 04:22][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{FB5C1494-CA6F-492C-AB2C-F3861E7AA3BD}.job
[05/03/2009 16:13][--ah-----] C:\Windows\tasks\SA.DAT
[05/03/2009 16:11][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[28/02/2009|22:37] C:\ProgramData\Admin Inter 1 Mags
[06/01/2009|18:45] C:\ProgramData\Adobe
[12/11/2008|14:31] C:\ProgramData\Application Data
[12/11/2008|14:31] C:\ProgramData\Bureau
[24/01/2009|19:35] C:\ProgramData\Creative
[14/01/2009|03:37] C:\ProgramData\CyberLink
[12/11/2008|14:31] C:\ProgramData\Documents
[12/11/2008|14:31] C:\ProgramData\Favoris
[17/01/2009|01:34] C:\ProgramData\Google
[12/11/2008|14:40] C:\ProgramData\Hewlett-Packard
[15/01/2007|20:23] C:\ProgramData\HP
[15/01/2007|20:23] C:\ProgramData\hpzinstall.log
[03/12/2008|18:29] C:\ProgramData\Kodak
[28/02/2009|22:37] C:\ProgramData\LIST UP UP.3064i
[28/02/2009|22:37] C:\ProgramData\LIST UP UP.yd6xcl
[02/03/2009|23:06] C:\ProgramData\Malwarebytes
[12/11/2008|14:31] C:\ProgramData\Menu D‚marrer
[05/03/2009|14:42] C:\ProgramData\Messenger Plus!
[01/03/2009|16:37] C:\ProgramData\Microsoft
[12/11/2008|14:31] C:\ProgramData\ModŠles
[15/01/2007|20:31] C:\ProgramData\muvee Technologies
[08/02/2009|03:44] C:\ProgramData\NVIDIA
[15/01/2007|20:37] C:\ProgramData\PC-Doctor
[16/11/2008|23:46] C:\ProgramData\Skype
[28/02/2009|22:37] C:\ProgramData\SLOWARMY
[05/03/2009|14:42] C:\ProgramData\Spybot - Search & Destroy
[01/03/2009|16:33] C:\ProgramData\Symantec
[12/11/2008|14:59] C:\ProgramData\Ubisoft
[16/11/2008|17:00] C:\ProgramData\WildTangent
[04/03/2009|23:59] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[06/01/2009|18:45] C:\Program Files\Adobe
[01/03/2009|14:44] C:\Program Files\Alwil Software
[28/11/2008|14:49] C:\Program Files\AOL
[06/01/2009|17:57] C:\Program Files\Ares
[11/02/2009|01:40] C:\Program Files\CamStudio
[01/03/2009|19:13] C:\Program Files\Common Files
[13/11/2008|01:46] C:\Program Files\Creative
[15/01/2007|20:30] C:\Program Files\CyberLink
[08/12/2008|00:15] C:\Program Files\DAEMON Tools Lite
[16/11/2008|18:01] C:\Program Files\DivX
[16/01/2007|03:49] C:\Program Files\EasyBits
[06/01/2009|18:10] C:\Program Files\eMule
[11/02/2009|00:16] C:\Program Files\Fake Webcam
[12/11/2008|14:31] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[17/01/2009|01:44] C:\Program Files\Google
[15/01/2007|20:38] C:\Program Files\Hewlett-Packard
[13/02/2009|14:44] C:\Program Files\HP
[15/01/2007|20:42] C:\Program Files\HP Games
[22/01/2009|17:45] C:\Program Files\InstallShield Installation Information
[08/02/2009|03:33] C:\Program Files\Internet Explorer
[15/01/2007|20:33] C:\Program Files\Java
[22/01/2009|17:45] C:\Program Files\Joymax
[13/11/2008|02:24] C:\Program Files\K-Lite Codec Pack
[03/12/2008|18:27] C:\Program Files\Kodak
[02/03/2009|23:06] C:\Program Files\Malwarebytes' Anti-Malware
[05/03/2009|01:31] C:\Program Files\Messenger Plus! Live
[12/11/2008|17:39] C:\Program Files\Microsoft Games
[15/01/2007|20:34] C:\Program Files\Microsoft Office
[15/01/2007|20:34] C:\Program Files\Microsoft Works
[08/02/2009|03:33] C:\Program Files\Movie Maker
[05/03/2009|01:38] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[05/03/2009|00:01] C:\Program Files\MSECACHE
[05/03/2009|01:31] C:\Program Files\MSN Messenger
[13/11/2008|00:04] C:\Program Files\MSXML 4.0
[15/01/2007|20:31] C:\Program Files\muvee Technologies
[15/01/2007|20:51] C:\Program Files\PC-Doctor 5 for Windows
[05/03/2009|15:27] C:\Program Files\QUAD Utilities
[15/01/2007|20:19] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[15/01/2007|20:43] C:\Program Files\Services en ligne
[12/11/2008|23:25] C:\Program Files\SFR
[06/01/2009|18:05] C:\Program Files\Shareaza
[03/03/2009|01:42] C:\Program Files\Silkroad
[16/11/2008|23:46] C:\Program Files\Skype
[05/03/2009|00:50] C:\Program Files\Spybot - Search & Destroy
[05/03/2009|16:13] C:\Program Files\Steam
[12/11/2008|14:45] C:\Program Files\Ubisoft
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[08/12/2008|00:18] C:\Program Files\VirtualDJ
[08/02/2009|03:33] C:\Program Files\Windows Calendar
[08/02/2009|03:33] C:\Program Files\Windows Collaboration
[08/02/2009|03:33] C:\Program Files\Windows Defender
[04/03/2009|16:58] C:\Program Files\Windows Installer Clean Up
[08/02/2009|03:33] C:\Program Files\Windows Journal
[05/03/2009|00:19] C:\Program Files\Windows Live
[11/02/2009|03:00] C:\Program Files\Windows Mail
[08/02/2009|03:33] C:\Program Files\Windows Media Player
[12/11/2008|14:31] C:\Program Files\Windows NT
[08/02/2009|03:33] C:\Program Files\Windows Photo Gallery
[08/02/2009|03:33] C:\Program Files\Windows Sidebar
[17/11/2008|15:26] C:\Program Files\WinRAR
[15/01/2007|20:18] C:\Program Files\WinTV
[08/01/2009|10:31] C:\Program Files\XtalViD-Player
[04/03/2009|14:54] C:\Program Files\Yahoo!
[20/01/2009|07:11] C:\Program Files\YesMessenger

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[06/01/2009|18:45] C:\Program Files\Common Files\Adobe
[15/01/2007|20:23] C:\Program Files\Common Files\HP
[15/01/2007|20:49] C:\Program Files\Common Files\InstallShield
[15/01/2007|20:33] C:\Program Files\Common Files\Java
[03/12/2008|18:13] C:\Program Files\Common Files\Kodak
[15/01/2007|20:31] C:\Program Files\Common Files\LightScribe
[15/01/2007|20:30] C:\Program Files\Common Files\LS Getting Started
[12/11/2008|23:41] C:\Program Files\Common Files\microsoft shared
[03/12/2008|18:12] C:\Program Files\Common Files\MSSoap
[15/01/2007|20:31] C:\Program Files\Common Files\muvee Technologies
[16/11/2008|18:01] C:\Program Files\Common Files\PX Storage Engine
[01/03/2009|19:13] C:\Program Files\Common Files\Scanner
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[16/11/2008|23:46] C:\Program Files\Common Files\Skype
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[09/02/2009|13:11] C:\Program Files\Common Files\Steam
[01/03/2009|20:54] C:\Program Files\Common Files\Symantec Shared
[08/02/2009|03:33] C:\Program Files\Common Files\System
[12/11/2008|23:39] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 71 Processes )

iexplore.exe ~ [PID:2624]
iexplore.exe ~ [PID:2720]
iexplore.exe ~ [PID:2636]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\LIST UP UP.3064i
C:\ProgramData\LIST UP UP.yd6xcl

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\Admin Inter 1 Mags
C:\ProgramData\Admin Inter 1 Mags\Regs List.dat
C:\ProgramData\Admin Inter 1 Mags\Regs List.exe
C:\Users\ELCHIG~1\AppData\Roaming\MICROS~1\Windows\Cookies\elchiguiro@advertising[1].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"linkremote"="\"C:\\ProgramData\\LIST UP UP.yd6xcl\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-05 16:20:39
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\ELCHIG~1\AppData\Roaming\Microsoft\Windows\Recent\ophcrack-livecd-1.0.lnk
C:\Users\ELCHIG~1\Shared\Videos\Videos de musique\Chamillionnaire - Ridin feat Krayzie Bone - CrackHoodRIPteam.mpg


[F:378][D:36]-> C:\Users\ELCHIG~1\AppData\Local\Temp
[F:296][D:1]-> C:\Users\ELCHIG~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:430][D:11]-> C:\Users\ELCHIG~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:48][D:8]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 05/03/2009|16:22 - Option : [1]

--------------------\\ Fin du rapport a 16:22:32
[ UAC => 1 ]

Spybot c'est declenché et me dis qu'un element important du registre a été modifié il me demande si j'authorise la modif de C:\ProgramData\LIST UP UP.yd6xcl je fais quoi ???

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Phenom(tm) 9500 Quad-Core Processor )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Elchiguiro ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:455 Go (Free:229 Go)
D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
E:\ (Local Disk) - NTFS - Total:465 Go (Free:465 Go)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (Local Disk) - NTFS - Total:74 Go (Free:74 Go)
L:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 05/03/2009|16:30 )

[ UAC => 1 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\ProgramData\Admin Inter 1 Mags\Regs List.dat
Supprime! - C:\ProgramData\Admin Inter 1 Mags\Regs List.exe
Supprime! - C:\Users\ELCHIG~1\AppData\Roaming\MICROS~1\Windows\Cookies\elchiguiro@advertising[1].txt
Supprime! - C:\ProgramData\LIST UP UP.3064i
Supprime! - C:\ProgramData\LIST UP UP.yd6xcl
Supprime! - C:\ProgramData\Admin Inter 1 Mags
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[12/11/2008|14:35] C:\Users\ELCHIG~1\AppData\Local\Application Data
[04/03/2009|14:54] C:\Users\ELCHIG~1\AppData\Local\Ares
[06/01/2009|18:05] C:\Users\ELCHIG~1\AppData\Local\d3d9caps.dat
[04/03/2009|01:55] C:\Users\ELCHIG~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[08/12/2008|22:45] C:\Users\ELCHIG~1\AppData\Local\GDIPFONTCACHEV1.DAT
[17/01/2009|11:43] C:\Users\ELCHIG~1\AppData\Local\Google
[12/11/2008|14:40] C:\Users\ELCHIG~1\AppData\Local\Hewlett-Packard
[12/11/2008|14:35] C:\Users\ELCHIG~1\AppData\Local\Historique
[05/03/2009|01:13] C:\Users\ELCHIG~1\AppData\Local\HP Guide
[05/03/2009|16:11] C:\Users\ELCHIG~1\AppData\Local\IconCache.db
[03/12/2008|21:29] C:\Users\ELCHIG~1\AppData\Local\KodakGallery
[01/03/2009|22:58] C:\Users\ELCHIG~1\AppData\Local\Microsoft
[24/11/2008|15:25] C:\Users\ELCHIG~1\AppData\Local\Microsoft Games
[14/11/2008|02:08] C:\Users\ELCHIG~1\AppData\Local\Mozilla
[06/01/2009|18:05] C:\Users\ELCHIG~1\AppData\Local\Shareaza
[05/03/2009|16:30] C:\Users\ELCHIG~1\AppData\Local\Temp
[12/11/2008|14:35] C:\Users\ELCHIG~1\AppData\Local\Temporary Internet Files
[15/11/2008|14:47] C:\Users\ELCHIG~1\AppData\Local\VirtualStore
[02/03/2009|20:03] C:\Users\ELCHIG~1\AppData\Local\wfvfwnd.bat

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[05/03/2009 04:22][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{FB5C1494-CA6F-492C-AB2C-F3861E7AA3BD}.job
[05/03/2009 16:13][--ah-----] C:\Windows\tasks\SA.DAT
[05/03/2009 16:11][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[06/01/2009|18:45] C:\ProgramData\Adobe
[12/11/2008|14:31] C:\ProgramData\Application Data
[12/11/2008|14:31] C:\ProgramData\Bureau
[24/01/2009|19:35] C:\ProgramData\Creative
[14/01/2009|03:37] C:\ProgramData\CyberLink
[12/11/2008|14:31] C:\ProgramData\Documents
[12/11/2008|14:31] C:\ProgramData\Favoris
[17/01/2009|01:34] C:\ProgramData\Google
[12/11/2008|14:40] C:\ProgramData\Hewlett-Packard
[15/01/2007|20:23] C:\ProgramData\HP
[15/01/2007|20:23] C:\ProgramData\hpzinstall.log
[03/12/2008|18:29] C:\ProgramData\Kodak
[02/03/2009|23:06] C:\ProgramData\Malwarebytes
[12/11/2008|14:31] C:\ProgramData\Menu D‚marrer
[05/03/2009|14:42] C:\ProgramData\Messenger Plus!
[01/03/2009|16:37] C:\ProgramData\Microsoft
[12/11/2008|14:31] C:\ProgramData\ModŠles
[15/01/2007|20:31] C:\ProgramData\muvee Technologies
[08/02/2009|03:44] C:\ProgramData\NVIDIA
[15/01/2007|20:37] C:\ProgramData\PC-Doctor
[16/11/2008|23:46] C:\ProgramData\Skype
[28/02/2009|22:37] C:\ProgramData\SLOWARMY
[05/03/2009|14:42] C:\ProgramData\Spybot - Search & Destroy
[01/03/2009|16:33] C:\ProgramData\Symantec
[12/11/2008|14:59] C:\ProgramData\Ubisoft
[16/11/2008|17:00] C:\ProgramData\WildTangent
[04/03/2009|23:59] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[06/01/2009|18:45] C:\Program Files\Adobe
[01/03/2009|14:44] C:\Program Files\Alwil Software
[28/11/2008|14:49] C:\Program Files\AOL
[06/01/2009|17:57] C:\Program Files\Ares
[11/02/2009|01:40] C:\Program Files\CamStudio
[01/03/2009|19:13] C:\Program Files\Common Files
[13/11/2008|01:46] C:\Program Files\Creative
[15/01/2007|20:30] C:\Program Files\CyberLink
[08/12/2008|00:15] C:\Program Files\DAEMON Tools Lite
[16/11/2008|18:01] C:\Program Files\DivX
[16/01/2007|03:49] C:\Program Files\EasyBits
[06/01/2009|18:10] C:\Program Files\eMule
[11/02/2009|00:16] C:\Program Files\Fake Webcam
[12/11/2008|14:31] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[17/01/2009|01:44] C:\Program Files\Google
[15/01/2007|20:38] C:\Program Files\Hewlett-Packard
[13/02/2009|14:44] C:\Program Files\HP
[15/01/2007|20:42] C:\Program Files\HP Games
[22/01/2009|17:45] C:\Program Files\InstallShield Installation Information
[08/02/2009|03:33] C:\Program Files\Internet Explorer
[15/01/2007|20:33] C:\Program Files\Java
[22/01/2009|17:45] C:\Program Files\Joymax
[13/11/2008|02:24] C:\Program Files\K-Lite Codec Pack
[03/12/2008|18:27] C:\Program Files\Kodak
[02/03/2009|23:06] C:\Program Files\Malwarebytes' Anti-Malware
[05/03/2009|01:31] C:\Program Files\Messenger Plus! Live
[12/11/2008|17:39] C:\Program Files\Microsoft Games
[15/01/2007|20:34] C:\Program Files\Microsoft Office
[15/01/2007|20:34] C:\Program Files\Microsoft Works
[08/02/2009|03:33] C:\Program Files\Movie Maker
[05/03/2009|01:38] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[05/03/2009|00:01] C:\Program Files\MSECACHE
[05/03/2009|01:31] C:\Program Files\MSN Messenger
[13/11/2008|00:04] C:\Program Files\MSXML 4.0
[15/01/2007|20:31] C:\Program Files\muvee Technologies
[15/01/2007|20:51] C:\Program Files\PC-Doctor 5 for Windows
[05/03/2009|15:27] C:\Program Files\QUAD Utilities
[15/01/2007|20:19] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[15/01/2007|20:43] C:\Program Files\Services en ligne
[12/11/2008|23:25] C:\Program Files\SFR
[06/01/2009|18:05] C:\Program Files\Shareaza
[03/03/2009|01:42] C:\Program Files\Silkroad
[16/11/2008|23:46] C:\Program Files\Skype
[05/03/2009|00:50] C:\Program Files\Spybot - Search & Destroy
[05/03/2009|16:13] C:\Program Files\Steam
[12/11/2008|14:45] C:\Program Files\Ubisoft
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[08/12/2008|00:18] C:\Program Files\VirtualDJ
[08/02/2009|03:33] C:\Program Files\Windows Calendar
[08/02/2009|03:33] C:\Program Files\Windows Collaboration
[08/02/2009|03:33] C:\Program Files\Windows Defender
[04/03/2009|16:58] C:\Program Files\Windows Installer Clean Up
[08/02/2009|03:33] C:\Program Files\Windows Journal
[05/03/2009|00:19] C:\Program Files\Windows Live
[11/02/2009|03:00] C:\Program Files\Windows Mail
[08/02/2009|03:33] C:\Program Files\Windows Media Player
[12/11/2008|14:31] C:\Program Files\Windows NT
[08/02/2009|03:33] C:\Program Files\Windows Photo Gallery
[08/02/2009|03:33] C:\Program Files\Windows Sidebar
[17/11/2008|15:26] C:\Program Files\WinRAR
[15/01/2007|20:18] C:\Program Files\WinTV
[08/01/2009|10:31] C:\Program Files\XtalViD-Player
[04/03/2009|14:54] C:\Program Files\Yahoo!
[20/01/2009|07:11] C:\Program Files\YesMessenger

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[06/01/2009|18:45] C:\Program Files\Common Files\Adobe
[15/01/2007|20:23] C:\Program Files\Common Files\HP
[15/01/2007|20:49] C:\Program Files\Common Files\InstallShield
[15/01/2007|20:33] C:\Program Files\Common Files\Java
[03/12/2008|18:13] C:\Program Files\Common Files\Kodak
[15/01/2007|20:31] C:\Program Files\Common Files\LightScribe
[15/01/2007|20:30] C:\Program Files\Common Files\LS Getting Started
[12/11/2008|23:41] C:\Program Files\Common Files\microsoft shared
[03/12/2008|18:12] C:\Program Files\Common Files\MSSoap
[15/01/2007|20:31] C:\Program Files\Common Files\muvee Technologies
[16/11/2008|18:01] C:\Program Files\Common Files\PX Storage Engine
[01/03/2009|19:13] C:\Program Files\Common Files\Scanner
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[16/11/2008|23:46] C:\Program Files\Common Files\Skype
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[09/02/2009|13:11] C:\Program Files\Common Files\Steam
[01/03/2009|20:54] C:\Program Files\Common Files\Symantec Shared
[08/02/2009|03:33] C:\Program Files\Common Files\System
[12/11/2008|23:39] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 68 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-05 16:30:36
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\ELCHIG~1\AppData\Roaming\Microsoft\Windows\Recent\ophcrack-livecd-1.0.lnk
C:\Users\ELCHIG~1\Shared\Videos\Videos de musique\Chamillionnaire - Ridin feat Krayzie Bone - CrackHoodRIPteam.mpg


[F:381][D:36]-> C:\Users\ELCHIG~1\AppData\Local\Temp
[F:297][D:1]-> C:\Users\ELCHIG~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:534][D:11]-> C:\Users\ELCHIG~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:48][D:8]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 05/03/2009|16:22 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 05/03/2009|16:32 - Option : [2]

--------------------\\ Fin du rapport a 16:32:27
[ UAC => 1 ]

DirLook.exe v2.0 by jpshortstuff
Log created at 16:48 on 05/03/2009
==================================
Contents of "C:\ProgramData\SLOWARMY"

[color=blue]---FOLDERS---[/color]

(none found)

[color=blue]---FILES---[/color]

cznstsxu.exe (823296 bytes - created on 28/02/2009 at 21:37, modified on 28/02/2009 at 21:37) --a---
license cool wave one.exe (349184 bytes - created on 28/02/2009 at 21:37, modified on 28/02/2009 at 21:37) --a---
safe spam.exe (636416 bytes - created on 28/02/2009 at 21:37, modified on 28/02/2009 at 21:37) --a---

==================================
[color=blue]=EOF=[/color]

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\ProgramData\SLOWARMY moved successfully.
========== COMMANDS ==========
File delete failed. C:\Users\ELCHIG~1\AppData\Local\Temp\JETCF11.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\ELCHIG~1\AppData\Local\Temp\MainFrame.Log.txt scheduled to be deleted on reboot.
File delete failed. C:\Users\ELCHIG~1\AppData\Local\Temp\~DF1F10.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\ELCHIG~1\AppData\Local\Temp\~DF2015.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\ELCHIG~1\AppData\Local\Temp\~DF5579.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\ELCHIG~1\AppData\Local\Temp\~DF5696.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
FireFox cache emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03052009_170006

Files moved on Reboot...
File C:\Users\ELCHIG~1\AppData\Local\Temp\JETCF11.tmp not found!
C:\Users\ELCHIG~1\AppData\Local\Temp\MainFrame.Log.txt moved successfully.
File C:\Users\ELCHIG~1\AppData\Local\Temp\~DF1F10.tmp not found!
File C:\Users\ELCHIG~1\AppData\Local\Temp\~DF2015.tmp not found!
File C:\Users\ELCHIG~1\AppData\Local\Temp\~DF5579.tmp not found!
File C:\Users\ELCHIG~1\AppData\Local\Temp\~DF5696.tmp not found!

Logfile of random's system information tool 1.05 (written by random/random)
Run by Elchiguiro at 2009-03-05 17:15:17
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 238 GB (51%) free of 466 GB
Total RAM: 3070 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:15:39, on 05/03/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Windows\system32\schtasks.exe
C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\WINDOWS\V0220Mon.exe
C:\Windows\system32\jusched.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\hp\kbd\kbd.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Elchiguiro\Desktop\RSIT.exe
C:\Program Files\trend micro\Elchiguiro.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/disp [...] tbid=60341
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://picperso.com/pageperso.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Creative Live! Cam Manager] C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [qgogmqq] "c:\users\elchiguiro\appdata\local\qgogmqq.exe" qgogmqq
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/re [...] dfr-fr.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/bina [...] b56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6D101A7C-6C9C-4CF1-8915-6DB19DD3F5A9}: NameServer = 84.103.237.144 86.64.145.144
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 8804 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{FB5C1494-CA6F-492C-AB2C-F3861E7AA3BD}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2007-05-18 722472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-04-07 501400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-01-17 251504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2009-01-17 657904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2009-01-17 522224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-01-17 251504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"hpsysdrv"=c:\hp\support\hpsysdrv.exe [2007-04-18 65536]
"KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]
"OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]
"SunJavaUpdateReg"=C:\Windows\system32\jureg.exe [2007-04-07 54936]
""= []
"AVFX Engine"=C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe [2006-06-09 24576]
"V0220Mon.exe"=C:\WINDOWS\V0220Mon.exe [2006-05-16 28672]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2008-01-10 92704]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-01-10 8530464]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-01-10 88608]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"WindowsWelcomeCenter"=C:\Windows\system32\oobefldr.dll [2008-01-19 2153472]
"HPAdvisor"=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2007-10-03 1783136]
"MsnMsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]
"Creative Live! Cam Manager"=C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe [2006-05-31 143360]
"Steam"=c:\program files\steam\steam.exe [2008-11-13 1410296]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-17 39408]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-08-08 490952]
"ares"=C:\Program Files\Ares\Ares.exe [2009-01-03 893952]
"Shareaza"=C:\Program Files\Shareaza\Shareaza.exe [2007-02-05 4354048]
"qgogmqq"=c:\users\elchiguiro\appdata\local\qgogmqq.exe qgogmqq []
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logiciel Kodak EasyShare.lnk - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"FilterAdministratorToken"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{297d0809-c4b3-11dd-a95d-001e9045fdbc}]
shell\AutoRun\command - L:\Install.exe


======List of files/folders created in the last 1 months======

2009-03-05 17:15:17 ----D---- C:\rsit
2009-03-05 17:15:17 ----D---- C:\Program Files\trend micro
2009-03-05 17:00:06 ----D---- C:\_OTMoveIt
2009-03-05 16:49:20 ----A---- C:\DirLook1.txt
2009-03-05 16:48:23 ----A---- C:\DirLook.txt
2009-03-05 16:20:28 ----A---- C:\lopR.txt
2009-03-05 16:16:45 ----D---- C:\Lop SD
2009-03-05 15:27:26 ----D---- C:\Program Files\QUAD Utilities
2009-03-05 14:42:09 ----D---- C:\ProgramData\Messenger Plus!
2009-03-05 00:50:00 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-03-05 00:50:00 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-03-05 00:19:39 ----D---- C:\Program Files\Windows Live
2009-03-05 00:19:38 ----D---- C:\Program Files\Messenger Plus! Live
2009-03-05 00:15:02 ----D---- C:\Program Files\MSN Messenger
2009-03-04 17:31:52 ----A---- C:\Windows\system32\infocardapi.dll
2009-03-04 17:31:51 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-03-04 17:31:50 ----A---- C:\Windows\system32\icardagt.exe
2009-03-04 17:31:49 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-03-04 17:31:49 ----A---- C:\Windows\system32\icardres.dll
2009-03-04 17:31:47 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-03-04 17:31:43 ----A---- C:\Windows\system32\PresentationHost.exe
2009-03-04 17:26:38 ----A---- C:\Windows\system32\dfshim.dll
2009-03-04 17:26:34 ----A---- C:\Windows\system32\mscoree.dll
2009-03-04 17:26:33 ----A---- C:\Windows\system32\netfxperf.dll
2009-03-04 17:26:20 ----A---- C:\Windows\system32\mscorier.dll
2009-03-04 17:26:12 ----A---- C:\Windows\system32\mscories.dll
2009-03-04 16:58:05 ----D---- C:\Program Files\Windows Installer Clean Up
2009-03-04 16:57:09 ----D---- C:\Program Files\MSECACHE
2009-03-04 16:03:52 ----A---- C:\Windows\ntbtlog.txt
2009-03-02 23:06:09 ----D---- C:\Users\Elchiguiro\AppData\Roaming\Malwarebytes
2009-03-02 23:06:00 ----D---- C:\ProgramData\Malwarebytes
2009-03-02 23:06:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-03-01 19:13:36 ----D---- C:\Program Files\Common Files\Scanner
2009-03-01 14:44:01 ----D---- C:\Program Files\Alwil Software
2009-02-17 05:25:02 ----A---- C:\Windows\system32\EncDec.dll
2009-02-17 05:25:01 ----A---- C:\Windows\system32\psisdecd.dll
2009-02-11 00:15:38 ----A---- C:\Windows\system32\BASSMOD.dll
2009-02-11 00:14:49 ----A---- C:\Windows\system32\MSVCR70.DLL
2009-02-11 00:14:48 ----D---- C:\Program Files\Fake Webcam
2009-02-10 21:45:53 ----A---- C:\Windows\system32\mshtml.dll
2009-02-10 21:45:52 ----A---- C:\Windows\system32\ieframe.dll
2009-02-10 21:45:51 ----A---- C:\Windows\system32\wininet.dll
2009-02-10 21:45:51 ----A---- C:\Windows\system32\urlmon.dll
2009-02-10 21:45:51 ----A---- C:\Windows\system32\msfeeds.dll
2009-02-10 21:45:50 ----A---- C:\Windows\system32\mstime.dll
2009-02-10 21:45:50 ----A---- C:\Windows\system32\iertutil.dll
2009-02-10 21:45:49 ----A---- C:\Windows\system32\jsproxy.dll
2009-02-09 03:01:17 ----A---- C:\Windows\system32\msshooks.dll
2009-02-09 03:01:16 ----A---- C:\Windows\system32\msscb.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\thawbrkr.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\srchadmin.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-02-09 03:01:13 ----A---- C:\Windows\system32\propsys.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\propdefs.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\msstrc.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\mssprxy.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\mssitlb.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\msshsq.dll
2009-02-09 03:01:13 ----A---- C:\Windows\system32\korwbrkr.dll
2009-02-09 03:01:11 ----A---- C:\Windows\system32\xmlfilter.dll
2009-02-09 03:01:11 ----A---- C:\Windows\system32\wsepno.dll
2009-02-09 03:01:11 ----A---- C:\Windows\system32\rtffilt.dll
2009-02-09 03:01:11 ----A---- C:\Windows\system32\offfilt.dll
2009-02-09 03:01:11 ----A---- C:\Windows\system32\nlhtml.dll
2009-02-09 03:01:11 ----A---- C:\Windows\system32\msscntrs.dll
2009-02-09 03:01:11 ----A---- C:\Windows\system32\mimefilt.dll
2009-02-09 03:01:10 ----A---- C:\Windows\system32\tquery.dll
2009-02-09 03:01:10 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-02-09 03:01:10 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-02-09 03:01:10 ----A---- C:\Windows\system32\mssvp.dll
2009-02-09 03:01:10 ----A---- C:\Windows\system32\mssrch.dll
2009-02-09 03:01:10 ----A---- C:\Windows\system32\chtbrkr.dll
2009-02-09 03:01:10 ----A---- C:\Windows\system32\chsbrkr.dll
2009-02-09 03:01:09 ----A---- C:\Windows\system32\mssphtb.dll
2009-02-09 03:01:09 ----A---- C:\Windows\system32\mssph.dll
2009-02-08 12:06:57 ----A---- C:\Windows\system32\rpcrt4.dll
2009-02-08 12:06:56 ----A---- C:\Windows\system32\pacerprf.dll
2009-02-08 12:06:54 ----A---- C:\Windows\system32\wersvc.dll
2009-02-08 12:06:54 ----A---- C:\Windows\system32\Faultrep.dll
2009-02-08 12:06:53 ----A---- C:\Windows\system32\emdmgmt.dll
2009-02-08 12:06:53 ----A---- C:\Windows\system32\dataclen.dll
2009-02-08 12:06:53 ----A---- C:\Windows\system32\cdd.dll
2009-02-08 12:06:52 ----A---- C:\Windows\system32\wshext.dll
2009-02-08 12:06:52 ----A---- C:\Windows\system32\wscript.exe
2009-02-08 12:06:52 ----A---- C:\Windows\system32\vbscript.dll
2009-02-08 12:06:52 ----A---- C:\Windows\system32\scrobj.dll
2009-02-08 12:06:52 ----A---- C:\Windows\system32\jscript.dll
2009-02-08 12:06:52 ----A---- C:\Windows\system32\cscript.exe
2009-02-08 12:06:51 ----A---- C:\Windows\system32\scrrun.dll
2009-02-08 03:26:31 ----D---- C:\PerfLogs
2009-02-08 03:10:36 ----A---- C:\Windows\RTKAUDIOSERVICE.EXE

======List of files/folders modified in the last 1 months======

2009-03-05 17:15:20 ----D---- C:\Windows\Temp
2009-03-05 17:15:17 ----RD---- C:\Program Files
2009-03-05 17:08:27 ----D---- C:\Windows\System32
2009-03-05 17:08:27 ----D---- C:\Windows\inf
2009-03-05 17:08:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-03-05 17:03:40 ----D---- C:\Program Files\Steam
2009-03-05 17:00:06 ----HD---- C:\ProgramData
2009-03-05 16:20:30 ----D---- C:\Windows\Prefetch
2009-03-05 16:15:16 ----D---- C:\WINDOWS
2009-03-05 16:15:11 ----D---- C:\Windows\system32\Tasks
2009-03-05 04:03:04 ----SHD---- C:\System Volume Information
2009-03-05 02:44:18 ----D---- C:\Windows\Microsoft.NET
2009-03-05 02:44:09 ----RSD---- C:\Windows\assembly
2009-03-05 01:48:17 ----SD---- C:\Users\Elchiguiro\AppData\Roaming\Microsoft
2009-03-05 01:40:49 ----D---- C:\Windows\system32\drivers
2009-03-05 01:38:12 ----D---- C:\Program Files\Mozilla Firefox
2009-03-05 00:16:36 ----SHD---- C:\Windows\Installer
2009-03-05 00:14:43 ----D---- C:\Windows\rescache
2009-03-05 00:01:06 ----D---- C:\Windows\system32\catroot
2009-03-04 23:59:26 ----D---- C:\ProgramData\WLInstaller
2009-03-04 18:03:45 ----D---- C:\Windows\system32\fr-FR
2009-03-04 18:03:42 ----D---- C:\Windows\system32\XPSViewer
2009-03-04 18:03:42 ----D---- C:\Windows\system32\wbem
2009-03-04 18:03:42 ----D---- C:\Windows\system32\en-US
2009-03-04 17:44:29 ----D---- C:\Windows\winsxs
2009-03-04 17:44:15 ----D---- C:\Windows\system32\catroot2
2009-03-04 14:54:31 ----D---- C:\Program Files\Yahoo!
2009-03-03 01:42:32 ----D---- C:\Program Files\Silkroad
2009-03-02 20:05:09 ----D---- C:\Windows\system32\WDI
2009-03-01 20:54:01 ----D---- C:\Program Files\Common Files\Symantec Shared
2009-03-01 19:13:36 ----D---- C:\Program Files\Common Files
2009-03-01 18:30:01 ----D---- C:\Users\Elchiguiro\AppData\Roaming\Skype
2009-03-01 16:37:03 ----SD---- C:\ProgramData\Microsoft
2009-03-01 16:33:41 ----D---- C:\ProgramData\Symantec
2009-02-20 17:57:16 ----D---- C:\Users\Elchiguiro\AppData\Roaming\CyberLink
2009-02-18 03:06:17 ----D---- C:\Windows\ehome
2009-02-13 14:44:12 ----D---- C:\Program Files\HP
2009-02-11 03:00:31 ----D---- C:\Program Files\Windows Mail
2009-02-11 01:40:03 ----D---- C:\Program Files\CamStudio
2009-02-09 13:11:53 ----D---- C:\Program Files\Common Files\Steam
2009-02-09 03:08:00 ----D---- C:\Windows\PolicyDefinitions
2009-02-08 04:20:37 ----D---- C:\Windows\Logs
2009-02-08 03:44:08 ----D---- C:\ProgramData\NVIDIA
2009-02-08 03:42:22 ----ASH---- C:\Program Files\desktop.ini
2009-02-08 03:42:21 ----SHD---- C:\Boot
2009-02-08 03:33:20 ----D---- C:\Program Files\Windows Calendar
2009-02-08 03:33:19 ----D---- C:\Program Files\Windows Sidebar
2009-02-08 03:33:19 ----D---- C:\Program Files\Movie Maker
2009-02-08 03:33:19 ----D---- C:\Program Files\Internet Explorer
2009-02-08 03:33:18 ----D---- C:\Program Files\Windows Photo Gallery
2009-02-08 03:33:18 ----D---- C:\Program Files\Windows Media Player
2009-02-08 03:33:18 ----D---- C:\Program Files\Windows Journal
2009-02-08 03:33:18 ----D---- C:\Program Files\Windows Collaboration
2009-02-08 03:33:15 ----D---- C:\Windows\servicing
2009-02-08 03:33:15 ----D---- C:\Program Files\Windows Defender
2009-02-08 03:33:15 ----D---- C:\Program Files\Common Files\System
2009-02-08 03:33:07 ----D---- C:\Windows\MSAgent
2009-02-08 03:33:06 ----D---- C:\Windows\L2Schemas
2009-02-08 03:33:06 ----D---- C:\Windows\IME
2009-02-08 03:33:06 ----D---- C:\Windows\DigitalLocker
2009-02-08 03:33:05 ----D---- C:\Windows\system32\ko-KR
2009-02-08 03:33:05 ----D---- C:\Windows\system32\da-DK
2009-02-08 03:33:05 ----D---- C:\Windows\system32\com
2009-02-08 03:33:04 ----D---- C:\Windows\system32\sysprep
2009-02-08 03:33:04 ----D---- C:\Windows\system32\oobe
2009-02-08 03:33:04 ----D---- C:\Windows\system32\migration
2009-02-08 03:33:04 ----D---- C:\Windows\system32\it-IT
2009-02-08 03:33:04 ----D---- C:\Windows\system32\fr
2009-02-08 03:33:04 ----D---- C:\Windows\system32\el-GR
2009-02-08 03:33:04 ----D---- C:\Windows\system32\de-DE
2009-02-08 03:33:02 ----D---- C:\Windows\system32\ru-RU
2009-02-08 03:33:02 ----D---- C:\Windows\system32\ias
2009-02-08 03:33:02 ----D---- C:\Windows\system32\AdvancedInstallers
2009-02-08 03:32:56 ----D---- C:\Windows\system32\sv-SE
2009-02-08 03:32:56 ----D---- C:\Windows\system32\SLUI
2009-02-08 03:32:56 ----D---- C:\Windows\system32\setup
2009-02-08 03:32:56 ----D---- C:\Windows\system32\pt-PT
2009-02-08 03:32:56 ----D---- C:\Windows\system32\hu-HU
2009-02-08 03:32:56 ----D---- C:\Windows\system32\he-IL
2009-02-08 03:32:56 ----D---- C:\Windows\system32\fi-FI
2009-02-08 03:32:56 ----D---- C:\Windows\system32\cs-CZ
2009-02-08 03:32:55 ----D---- C:\Windows\system32\zh-CN
2009-02-08 03:32:54 ----D---- C:\Windows\system32\zh-TW
2009-02-08 03:32:54 ----D---- C:\Windows\system32\ro-RO
2009-02-08 03:32:54 ----D---- C:\Windows\system32\pl-PL
2009-02-08 03:32:54 ----D---- C:\Windows\system32\manifeststore
2009-02-08 03:32:54 ----D---- C:\Windows\system32\ja-JP
2009-02-08 03:32:54 ----D---- C:\Windows\system32\es-ES
2009-02-08 03:32:52 ----D---- C:\Windows\system32\tr-TR
2009-02-08 03:32:51 ----D---- C:\Windows\system32\nb-NO
2009-02-08 03:32:50 ----D---- C:\Windows\system32\pt-BR
2009-02-08 03:32:50 ----D---- C:\Windows\system32\nl-NL
2009-02-08 03:32:50 ----D---- C:\Windows\system32\migwiz
2009-02-08 03:32:50 ----D---- C:\Windows\system32\ar-SA
2009-02-08 03:31:55 ----D---- C:\Windows\AppPatch
2009-02-08 03:26:38 ----D---- C:\Windows\Boot
2009-02-08 03:26:34 ----D---- C:\Windows\system32\Boot
2009-02-08 03:10:18 ----D---- C:\Windows\system32\RTCOM
2009-02-07 19:00:52 ----A---- C:\Windows\system32\ifxcardm.dll
2009-02-07 19:00:51 ----A---- C:\Windows\system32\axaltocm.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 {22D78859-9CE9-4B77-BF18-AC83E81A9263};{22D78859-9CE9-4B77-BF18-AC83E81A9263}; \??\C:\Program Files\HP\DVDPlay\000.fcl [2007-12-18 39408]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture; C:\Windows\system32\drivers\HCW85BDA.sys [2007-10-01 1129344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-15 2047576]
R3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista; C:\Windows\system32\DRIVERS\netr73.sys [2008-02-26 493568]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-09-10 1035168]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-01-10 8237120]
R3 V0220Dev;Live! Cam Video IM; C:\Windows\system32\DRIVERS\V0220Dev.sys [2006-05-24 145472]
R3 V0220Vfx;V0220VFX; C:\Windows\system32\DRIVERS\V0220Vfx.sys [2006-03-24 6272]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S3 azn8ntdi;azn8ntdi; C:\Windows\system32\drivers\azn8ntdi.sys []
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
R2 HPBtnSrv;HP Chasis Button Service; c:\hp\HPEZBTN\HPBtnSrv.exe [2007-05-29 198240]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-09-25 79136]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2008-05-05 165416]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-17 137200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-02-09 316664]

-----------------EOF-----------------

---> Infection Navipromo.


1/

• Démarre Spybot, clique sur Mode, coche Mode avancé.
• A gauche, clique sur Outils, puis sur Résident.
• Décoche la case devant Résident "TeaTimer" :

• Quitte Spybot.

2/

• Désactive l'UAC le temps de la désinfection.
• Télécharge Navilog1 (de IL-MAFIOSO) sur ton Bureau.
• Double-clique sur Navilog1.exe afin de lancer l'installation.
• Si le fix ne lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le Bureau.
• Appuie sur F ou f puis valide par Entrée.
• Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options.
• Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix.
• Patiente jusqu'au message : *** Analyse terminée le ..... ***
• Le scan fini, le Bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse.
• Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

Des fois, il prend plus longtemps que 10 minutes.

• Relance Navilog1, fais l'option 2 et poste le rapport (C:\cleannavi.txt).

• Désinstalle Navilog1 et Java SE Runtime Environment 6 Update 1.

• Mets à jour Java.

• Mets à jour Adobe Reader.

• Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
• Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
• Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
• Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
• Sélectionne Exécuter un examen rapide.
• Clique sur Rechercher.
• L'analyse démarre.
• A la fin de l'analyse, un message s'affiche :

• Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
• Ferme tes navigateurs.
• Si des malwares ont été détectés, clique sur Afficher les résultats.
• Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
• MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

La ça veut dire que c'est bon non??Vu que je n'ai plus eu de pages CiD ni même de fenetre intempestives

oui il est resolu merci j'ai juste une derniere question.Je conserve spybot ??

Merci beaucoup pour ta patience toutes ces manips je n'aurai jamais pu les faire seul

Merci a toi aussi j'y vais jdois bosser la ++