trojan-spy.win32@mx

Bonjour
depuis quelque temps déjà, j'ai un trojan nommé trojan-spy.win32@mx. Pourriez-vous m'aider à m'en débarrasser s'il-vous-plaît? À cause de ce trojan, des dizaines de pops-up pornographique s'ouvrent, et un triangle jaune avec un point d'exclamation s'ouvre pour me dire que mon ordinateur est infecté et de cliquer sur Ok, mais lorsque l'on clique sur Ok, cela nous amènes sur des sites de programmes de trojan (system doctor, malware, etc.)
Merci de bien vouloir m'aider.
Voici le raport hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 20:14:55, on 21/11/2008
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
EDITION MODERATEUR : Règle du forum à respecter :

Pas de rapport avant qu'il n'en soit demandé un !

Veuillez lire l'article suivant :
http://forum.telecharger.01net.com/telecharger/securite_virus_et_assimiles/a_(...)

Merci d'en prendre connaissance.

bonsoir,

1) Télécharge SmitFraudFix
Guide d'utilisation : http://www.site-naheulbeuk.com/smitfraudfix.php

Double clic sur SmitfraudFix.exe pour le lancer
Choisis l'option 1 (Recherche)
Post moi le rapport !

2) Redémarre en mode sans échec (F8 lors du boot)
Aide : http://www.site-naheulbeuk.com/smitfraudfix.php#nettoyage
Relance SmitfraudFix et choisis cette fois l’option 2 et réponds oui à chaque question

3) Redémarre en mode normal
Post moi le 2ème rapport !

bonsoir

voila le raport en mode normal

mitFraudFix v2.376

Scan done at 0:10:21,81, 22/11/2008
Run from C:\Users\David\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\Windows\system32\csrss.exe
C:\Windows\SYSTEM32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\SYSTEM32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Windows\system32\IoctlSvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Fighters\configservice.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Fighters\licenseservice.exe
C:\Program Files\Fighters\updateservice.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Fighters\ScannerService.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\SYSTEM32\taskeng.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SYSTEM32\taskeng.exe
C:\Program Files\WebMediaViewer\qttask.exe
C:\Program Files\WebMediaViewer\hpmon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\ctfmon.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\ICQ6\ICQ.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\eMule\emule.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\hp\kbd\kbd.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe
C:\Windows\SYSTEM32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\DllHost.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

hosts file corrupted !

127.0.0.1 www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\David


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\David\AppData\Local\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\David\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\David\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, following keys are not inevitably infected!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, following keys are not inevitably infected!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~1\\KASPER~1\\KASPER~1\\mzvkbd.dll"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\Windows\\system32\\userinit.exe,"


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter
DNS Server Search Order: 212.27.40.240
DNS Server Search Order: 212.27.40.241

HKLM\SYSTEM\CCS\Services\Tcpip\..\{F2C44A40-7606-416A-BD52-AB4A241303B9}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{F2C44A40-7606-416A-BD52-AB4A241303B9}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\..\{F2C44A40-7606-416A-BD52-AB4A241303B9}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{F2C44A40-7606-416A-BD52-AB4A241303B9}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

et voila le raport en mode sans échec

SmitFraudFix v2.376

Scan done at 0:24:00,15, 22/11/2008
Run from C:\Users\David\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost
::1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
[.....] EDIT BY NAHEULBEUK

re,

Télécharge ComboFix (créé par sUBs) sur ton Bureau

Démarre en mode sans échec : http://forum.telecharger.01net.com/telecharger/virus_et_assimiles/failles_de_(...)

Double clique combofix.exe.

Tape sur la touche 1 pour démarrer le scan puis laisse toi guider.

ComboFix redémarrera ton PC

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

bonjour

voila le raport

ComboFix 08-11-21.05 - David 2008-11-22 14:10:54.1 - NTFSx86 MINIMAL
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1527 [GMT 1:00]
Lancé depuis: c:\users\David\Desktop\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\David\AppData\Local\kcqiy.dat
c:\users\David\AppData\Local\kcqiy.exe
c:\users\David\AppData\Local\kcqiy_nav.dat
c:\users\David\AppData\Local\kcqiy_navps.dat
c:\users\David\AppData\Local\meuakui_navfx.dat
c:\users\David\Documents\My Documents.url
c:\windows\Downloaded Program Files\setup.inf

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-22 au 2008-11-22 ))))))))))))))))))))))))))))))))))))
.

Pas de nouveau fichier créé dans ce laps de temps

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-22 13:07 892,960 --sha-w c:\windows\system32\drivers\fidbox2.dat
2008-11-22 13:07 5,723,680 --sha-w c:\windows\system32\drivers\fidbox.dat
2008-11-22 13:07 46,844 --sha-w c:\windows\system32\drivers\fidbox.idx
2008-11-22 13:07 4,132 --sha-w c:\windows\system32\drivers\fidbox2.idx
2008-11-22 12:57 --------- d-----w c:\users\David\AppData\Roaming\Skype
2008-11-22 12:56 --------- d-----w c:\users\David\AppData\Roaming\skypePM
2008-11-22 12:56 --------- d-----w c:\users\David\AppData\Roaming\Free Download Manager
2008-11-22 12:55 --------- d-----w c:\programdata\Kaspersky Lab
2008-11-21 23:40 --------- d-----w c:\program files\Fighters
2008-11-21 23:24 691 ----a-w c:\users\David\AppData\Roaming\GetValue.vbs
2008-11-21 23:24 35 ----a-w c:\users\David\AppData\Roaming\SetValue.bat
2008-11-21 23:24 1,750 ----a-w c:\windows\System32\tmp.reg
2008-11-21 23:03 --------- d-----w c:\program files\Navilog1
2008-11-21 17:00 --------- d-----w c:\users\David\AppData\Roaming\dvdcss
2008-11-21 16:32 --------- d-----w c:\programdata\Spybot - Search & Destroy
2008-11-21 16:32 --------- d-----w c:\program files\BitTorrent Fastest Tool
2008-11-18 15:24 --------- d-----w c:\programdata\Grisoft
2008-11-16 23:16 --------- d-----w c:\programdata\Fighters
2008-11-16 19:14 --------- d-----w c:\programdata\Boob gram iso
2008-11-16 19:14 --------- d-----w c:\programdata\aim rect help creative
2008-11-16 19:08 --------- d-----w c:\program files\Enigma Software Group
2008-11-16 00:25 --------- d-----w c:\programdata\Lavasoft
2008-11-15 17:21 --------- d-----w c:\program files\Spybot - Search & Destroy
2008-11-15 17:19 --------- d---a-w c:\programdata\TEMP
2008-11-15 01:07 --------- d-----w c:\program files\CCleaner
2008-11-15 01:03 --------- d-----w c:\program files\WebMediaViewer
2008-11-15 00:26 --------- d-----w c:\users\David\AppData\Roaming\uTorrent
2008-11-13 02:12 --------- d-----w c:\program files\Steam
2008-11-12 20:32 --------- d-----w c:\program files\Common Files\Steam
2008-11-12 20:27 --------- d-----w c:\program files\Common Files\Adobe
2008-11-11 18:15 --------- d-----w c:\users\David\AppData\Roaming\NeroDCTemplates
2008-11-09 18:14 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-09 18:14 --------- d-----w c:\users\David\AppData\Roaming\LG Electronics
2008-11-09 17:43 --------- d-----w c:\program files\LG Electronics
2008-11-09 17:11 --------- d-----w c:\users\David\AppData\Roaming\LGSync
2008-11-09 02:37 --------- d-----w c:\program files\FREE Music Downloader
2008-11-04 21:43 --------- d-----w c:\program files\ICQ6
2008-11-04 21:42 --------- d-----w c:\programdata\ICQ
2008-11-04 21:42 --------- d-----w c:\program files\ICQ6Toolbar
2008-10-22 14:45 21,248 ----a-w c:\windows\Help\OEM\scripts\HPScript.exe
2008-10-18 12:32 --------- d-----w c:\programdata\Roxio
2008-10-16 18:35 --------- d-----w c:\program files\Windows Mail
2008-10-14 18:54 --------- d-----w c:\users\David\AppData\Roaming\GlobalSCAPE
2008-10-14 18:54 --------- d-----w c:\programdata\GlobalSCAPE
2008-10-14 18:54 --------- d-----w c:\program files\GlobalSCAPE
2008-10-14 18:53 --------- d-----w c:\program files\Common Files\InstallShield
2008-10-14 18:53 --------- d-----w c:\program files\AskBarDis
2008-10-13 18:19 667,978 ----a-w c:\windows\unins000.exe
2008-10-13 18:17 --------- d-----w c:\program files\clock-desktop
2008-10-13 18:09 48,456 ----a-w c:\windows\System32\UninstallElectricSheep.exe
2008-10-13 18:00 --------- d-----w c:\program files\UselessCreations
2008-10-10 06:58 82,944 ----a-w c:\windows\System32\o4Patch.exe
2008-10-10 06:58 82,944 ----a-w c:\windows\System32\IEDFix.C.exe
2008-10-08 15:32 --------- d-----w c:\users\David\AppData\Roaming\Thinstall
2008-10-08 02:05 --------- d-----w c:\programdata\WindowsSearch
2008-10-06 16:45 --------- d-----w c:\program files\Download Direct
2008-10-03 18:15 191,488 ----a-w c:\windows\System32\hlvdd.dll
2008-10-03 18:12 --------- d-----w c:\program files\Alcohol Soft
2008-10-03 18:04 716,272 ----a-w c:\windows\system32\drivers\sptd.sys
2008-10-03 13:53 --------- d-----w c:\program files\uTorrent
2008-10-02 03:49 827,392 ----a-w c:\windows\System32\wininet.dll
2008-10-01 13:51 87,552 ----a-w c:\windows\System32\VACFix.exe
2008-09-30 15:43 1,286,152 ----a-w c:\windows\System32\msxml4.dll
2008-09-28 18:57 --------- d-----w c:\program files\GTR 2
2008-09-24 16:12 --------- d-----w c:\program files\Common Files\xing shared
2008-09-24 16:12 --------- d-----w c:\program files\Common Files\Real
2008-09-23 13:15 --------- d-----w c:\program files\Common Files\SWF Studio
2008-09-18 05:09 3,601,464 ----a-w c:\windows\System32\ntkrnlpa.exe
2008-09-18 05:09 3,549,240 ----a-w c:\windows\System32\ntoskrnl.exe
2008-09-18 04:56 147,456 ----a-w c:\windows\System32\Faultrep.dll
2008-09-18 04:56 125,952 ----a-w c:\windows\System32\wersvc.dll
2008-09-18 02:16 2,032,640 ----a-w c:\windows\System32\win32k.sys
2008-09-10 03:40 1,334,272 ----a-w c:\windows\System32\msxml6.dll
2008-09-05 05:14 1,191,936 ----a-w c:\windows\System32\msxml3.dll
2008-09-03 03:59 468,992 ----a-w c:\windows\System32\newdev.dll
2008-09-03 03:58 74,752 ----a-w c:\windows\System32\newdev.exe
2008-05-09 21:30 174 --sha-w c:\program files\desktop.ini
2008-04-17 21:37 32 ----a-w c:\users\All Users\ezsid.dat
2008-04-17 21:37 32 ----a-w c:\programdata\ezsid.dat
2008-01-16 17:14 0 ----a-w c:\users\David\AppData\Roaming\wklnhst.dat
2007-04-23 12:21 269,824 ----a-w c:\windows\inf\WG111v3\Vista64\wg111v3.sys
2007-04-23 12:19 227,328 ----a-w c:\windows\inf\WG111v3\WG111v3.sys
2007-04-23 12:19 227,328 ----a-w c:\windows\inf\WG111v3\Vista\wg111v3.sys
2006-12-15 09:30 98,304 ----a-w c:\windows\inf\WG111v3\UScanM.exe
2006-12-15 09:30 315,392 ----a-w c:\windows\inf\WG111v3\InstallDriver.exe
2006-12-15 09:30 28,672 ----a-w c:\windows\inf\WG111v3\SetDrv.exe
2006-12-15 09:30 212,992 ----a-w c:\windows\inf\WG111v3\CopyWHQLDriver.exe
2006-12-15 09:30 20,480 ----a-w c:\windows\inf\WG111v3\RTWUPath.exe
2006-12-15 09:30 19,968 ----a-w c:\windows\inf\WG111v3\RTWREFU.EXE
2008-07-31 18:01 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2008-07-31 18:01 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2008-07-31 18:01 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
2008-05-11 14:31 22 --sha-w c:\windows\SMINST\HPCD.sys
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-07-17 16:20 279944 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Knob ante"="c:\programdata\Sizefirstfirst.dgjsobl" [X]
"Help Creative Meow City"="c:\programdata\settings soft slow.p65saf9" [X]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
"Yahoo! Pager"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 4670704]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-04-30 22058792]
"ICQ"="c:\program files\ICQ6\ICQ.exe" [2008-09-01 173304]
"Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2008-05-20 2474031]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"eMuleAutoStart"="c:\program files\eMule\emule.exe" [2007-05-13 5308416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-09-24 185872]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\Currentversion\policies\explorer\Run]
"QuickTime Task"="c:\program files\WebMediaViewer\qttask.exe" [2008-11-15 53323]
"VMware hptray"="c:\program files\WebMediaViewer\hpmon.exe" [2008-11-15 68776]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2006-05-29 1708032]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\KASPER~1\KASPER~1\mzvkbd.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
--a------ 2008-03-20 17:46 217544 c:\program files\Alcohol Soft\Alcohol 120\AxCmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Veoh]
--a------ 2008-08-28 09:18 3660848 c:\program files\Veoh Networks\Veoh\VeohClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001
"AntiVirusDisableNotify"="0x00000000"
"UpdatesDisableNotify"="0x00000000"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{F9B36BA3-7057-4DF1-9780-049C2D7F1001}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{4A0D9D09-8F96-4D18-883E-7D9CDC186ED4}"= UDP:c:\program files\NETGEAR\WG111v3\WG111v3.exe:NETGEAR WG111v3 Smart Wizard
"{A01465C8-079E-401B-BCCD-A175B6CEE783}"= TCP:c:\program files\NETGEAR\WG111v3\WG111v3.exe:NETGEAR WG111v3 Smart Wizard
"{938D931D-9082-4DC3-B9DC-BE1E3D25FEEF}"= UDP:c:\program files\NETGEAR\WG111v3\WG111v3.exe:NETGEAR WG111v3 Smart Wizard
"{5CB8A0AE-EB52-4A96-B1C3-6C48F839FB7C}"= TCP:c:\program files\NETGEAR\WG111v3\WG111v3.exe:NETGEAR WG111v3 Smart Wizard
"TCP Query User{25E55316-DEDC-498B-AF2B-56EC292173A6}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
"UDP Query User{912E4E59-B96D-4370-8632-2868D9C7AAA4}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule
"TCP Query User{15BAAD66-B2D7-49C1-8D88-9B81D4B2EF99}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= UDP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
"UDP Query User{A8584EB4-3AA2-4CA4-B108-56CC5DFDAF72}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= TCP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
"TCP Query User{55EC8BEF-D3EB-4E34-AF29-387F5833590A}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{78448651-DCCD-4AB2-9713-65AEFBFF8793}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"TCP Query User{66992400-D655-4245-A553-C306ED1F3686}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{7D710BB4-F2C0-4F2F-B42F-60D5C219CFF6}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"TCP Query User{B51E6EBA-FA4D-4E56-AF60-37E1ED792078}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
"UDP Query User{96A0456A-1367-424D-ADDE-FCB7BABA6AEF}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule
"TCP Query User{B3D056E8-94BA-4265-A81F-8FA0F85E409A}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= UDP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
"UDP Query User{9BD39EC0-65C8-470B-8EE1-336ACB189944}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= TCP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
"TCP Query User{6E9216C0-CE51-4983-A06C-39F32D141240}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
"UDP Query User{5D3A1DC9-1DAF-4004-8503-03150D5F422F}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
"TCP Query User{10E6EF2C-43D4-4D54-8A99-BBAE7EE5F7F2}c:\\program files\\real\\realplayer\\realplay.exe"= UDP:c:\program files\real\realplayer\realplay.exe:RealPlayer
"UDP Query User{3FF824EE-C01A-42C5-9059-F77292F42015}c:\\program files\\real\\realplayer\\realplay.exe"= TCP:c:\program files\real\realplayer\realplay.exe:RealPlayer
"{163C996C-CEEA-4C25-89BB-58EC49A0909B}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{4A78B6FF-FAF2-4697-BE50-FF6736F8C911}"= c:\program files\Skype\Phone\Skype.exe:Skype
"TCP Query User{383A6089-F64A-46F9-A43A-206D807FDB6D}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\french\\setup.exe"= UDP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\french\setup.exe:Programme d'installation de Kaspersky Anti-Virus 7.0
"UDP Query User{4D89C847-68FF-42AF-AE13-C9F50A69FBAA}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\french\\setup.exe"= TCP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\french\setup.exe:Programme d'installation de Kaspersky Anti-Virus 7.0
"TCP Query User{D6B1126B-51DC-4753-8C35-82902336EC3F}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
"UDP Query User{0CB43A4C-8F6D-4FBC-95E9-3891725D91D5}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
"TCP Query User{2787A6A5-C037-4010-8021-ADA4DB628531}c:\\program files\\webmediaplayer\\webmediaplayer.exe"= UDP:c:\program files\webmediaplayer\webmediaplayer.exe:WebMediaPlayer
"UDP Query User{660DF119-7DD2-4C96-ABF5-459D1B51DDB3}c:\\program files\\webmediaplayer\\webmediaplayer.exe"= TCP:c:\program files\webmediaplayer\webmediaplayer.exe:WebMediaPlayer
"TCP Query User{83853563-0030-4EEA-8B0E-16ED0EBDB50E}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\french\\setup.exe"= UDP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\french\setup.exe:Programme d'installation de Kaspersky Anti-Virus 7.0
"UDP Query User{FC3116CD-2C49-4C89-97F7-64B99A64ECA1}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\french\\setup.exe"= TCP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\french\setup.exe:Programme d'installation de Kaspersky Anti-Virus 7.0
"{E1198D60-F0E7-4B76-9568-B36987592896}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{DE736E3F-15FD-4F43-900D-86C234139E58}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{F9EF5560-14C8-41E9-912B-76E592E0A2CD}"= UDP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"{E1FBB334-C170-4B4E-8ADA-9F8B337C6AC8}"= TCP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"TCP Query User{6EF90AFA-3980-4D8C-B66A-F9912454F008}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{70B166BB-D4CD-4417-AC42-F4E8F6958A97}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"TCP Query User{22E90A89-6D5A-43BB-8651-2A1840746ADA}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= UDP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"UDP Query User{D6653D4A-669C-4059-BCFD-B46EE0A13DDC}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= TCP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"TCP Query User{B1EFAC10-5A88-4D84-83C2-F44157644354}c:\\users\\david\\appdata\\local\\temp\\onlineupdate8\\setupxu.exe"= UDP:c:\users\david\appdata\local\temp\onlineupdate8\setupxu.exe:setupxu.exe
"UDP Query User{357DAA7D-D3CE-40B4-9D15-94897281F38F}c:\\users\\david\\appdata\\local\\temp\\onlineupdate8\\setupxu.exe"= TCP:c:\users\david\appdata\local\temp\onlineupdate8\setupxu.exe:setupxu.exe
"TCP Query User{A5BEDDC2-9B73-470A-880B-F3A14D786C1C}c:\\program files\\windows sidebar\\sidebar.exe"= UDP:c:\program files\windows sidebar\sidebar.exe:Volet Windows
"UDP Query User{111FD349-0356-4722-B7E4-47D03659ED5C}c:\\program files\\windows sidebar\\sidebar.exe"= TCP:c:\program files\windows sidebar\sidebar.exe:Volet Windows
"{67241D21-5E4C-4E0A-AC1B-22F2D90AC525}"= UDP:c:\program files\VoipBuster.com\VoipBuster\VoipBuster.exe:VoipBuster
"{6E09D35A-721F-4221-8CBB-C8F1AC7775F7}"= TCP:c:\program files\VoipBuster.com\VoipBuster\VoipBuster.exe:VoipBuster
"TCP Query User{D7C8A304-EF8C-4F8A-ADED-0FFDE6F5ECB8}c:\\program files\\utorrent\\utorrent.exe"= UDP:c:\program files\utorrent\utorrent.exe:uTorrent
"UDP Query User{5EDB9FD8-7C4E-4613-B8D2-AAA08A4DF991}c:\\program files\\utorrent\\utorrent.exe"= TCP:c:\program files\utorrent\utorrent.exe:uTorrent
"{F8407F76-923A-496D-BC57-77E6FAA1E088}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
"{754B51AF-8AA2-4280-A8F4-885CCCA24AEF}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
"TCP Query User{C3B743B7-1FC7-4D4C-8D91-46EA11EDB3A4}c:\\windows\\system32\\electricsheep.scr"= UDP:c:\windows\system32\electricsheep.scr:ElectricSheep
"UDP Query User{35E28DEB-239D-4D9B-A2C8-6A6CEE2EE25E}c:\\windows\\system32\\electricsheep.scr"= TCP:c:\windows\system32\electricsheep.scr:ElectricSheep

S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 32784]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2008-03-26 20496]
S3 LVRS;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs.sys [2008-09-07 627864]
S3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\system32\DRIVERS\wg111v3.sys [2008-10-24 227328]
S3 Steam Client Service;Steam Client Service;c:\program files\Common Files\Steam\SteamService.exe /RunAsService [2008-11-12 99576]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

*Newly Created Service* - ECACHE
*Newly Created Service* - PROCEXP90
.
Contenu du dossier 'Tâches planifiées'

2008-11-21 c:\windows\Tasks\User_Feed_Synchronization-{31DF0D02-808A-4ED2-9355-0EAF40D469EC}.job
- c:\windows\system32\msfeedssync.exe [2008-01-19 08:33]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-HPAdvisor - c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
HKCU-Run-fsm - (no file)
HKCU-Run-DLD.EXE - (no file)
HKCU-RunOnce-Shockwave Updater - c:\windows\System32\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100465 -Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; FDM; .NET
HKLM-RunOnce-<NO NAME> - (no file)
MSConfigStartUp-Software Informer - c:\program files\Free Download Manager\softinfo.exe
MSConfigStartUp-spywarefighterguard - c:\program files\Fighters\spywarefighter\SpywarefighterUser.exe


.
------- Examen supplémentaire -------
.
FireFox -: Profile - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\xap7e7td.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fr/
FF -: plugin - c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
FF -: plugin - c:\program files\Virtools\3D Life Player\npvirtools.dll
FF -: plugin - c:\program files\Yahoo!\Shared\npYState.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-22 14:15:59
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2008-11-22 14:16:56
ComboFix-quarantined-files.txt 2008-11-22 13:16:42

Avant-CF: Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
Après-CF: 151,677,186,048 octets libres

277 --- E O F --- 2008-11-21 21:20:23

re,

Télécharge Toolbar-S&D (de la Team IDN) sur ton Bureau : http://eric.71.mespages.googlepages.com/ToolBarSD.exe

Si tu es sous Vista Clique-droit sur le fichier téléchargé > Exécuter en tant qu'administrateur

Toujours pour les utilisateurs Vista : Clique-droit sur le raccourci de Toolbar-S&D > Exécuter en tant qu'administrateur

Choisis F pour Français, et valide par Entrée

Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.

Poste le rapport généré. (C:\TB.txt)

re,

-----------\\ ToolBar S&D 1.2.5 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : David ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:225 Go (Free:139 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
Option : [1] ( 22/11/2008|14:47 )

[ UAC => 0 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\AskBarDis
C:\Program Files\AskBarDis\bar
C:\Program Files\AskBarDis\unins000.dat
C:\Program Files\AskBarDis\unins000.exe
C:\Program Files\AskBarDis\bar\bin
C:\Program Files\AskBarDis\bar\Settings
C:\Program Files\AskBarDis\bar\bin\askBar.dll
C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
C:\Program Files\AskBarDis\bar\bin\psvince.dll
C:\Program Files\AskBarDis\bar\Settings\config.dat
C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
C:\Program Files\AskTBar
C:\Program Files\AskTBar\bar
C:\Windows\iun6002.exe

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.fr/"
"Local Page"="C:\\windows\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Rambler Search"="http://www.rambler.ru/srch?utf8=1&umon=icq6def&words={searchTerms}"
"ICQ Search"="http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Local Page"="C:\\windows\\system32\\blank.htm"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack
C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\SERIAL.txt
C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\soundforge90a_enu.exe


[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 22/11/2008|14:48 - Option : [1]

-----------\\ Fin du rapport a 14:48:35,22

re,

Utilisateur de Vista : Vérifie que l'UAC est désactivé

Relance Toolbar-S&D,

Choisis 2 puis valide en appuyant par Entrée

/!\ Ne ferme pas la fenêtre pendant le scan /!\

voila le raport mais je ne sais pas comment voir si l UAC est desactive

-----------\\ ToolBar S&D 1.2.5 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : David ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:225 Go (Free:142 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
Option : [2] ( 22/11/2008|16:53 )

[ UAC => 1 ]

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\AskBarDis\bar
Supprime! - C:\Program Files\AskBarDis\unins000.dat
Supprime! - C:\Program Files\AskBarDis\unins000.exe
Supprime! - C:\Program Files\AskTBar\bar
Supprime! - C:\Windows\iun6002.exe
Supprime! - C:\Program Files\AskBarDis
Supprime! - C:\Program Files\AskTBar

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.fr/"
"Local Page"="C:\\windows\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Rambler Search"="http://www.rambler.ru/srch?utf8=1&umon=icq6def&words={searchTerms}"
"ICQ Search"="http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Local Page"="C:\\windows\\system32\\blank.htm"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack
C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\SERIAL.txt
C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\soundforge90a_enu.exe


[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 22/11/2008|14:48 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 22/11/2008|16:57 - Option : [2]

-----------\\ Fin du rapport a 16:57:08,92

re,

Télécharge HijackThis

Guide d'utilisation : http://www.site-naheulbeuk.com/hijackthis.php

Clique alors sur "Do a system scan and save a logfile"
Le scan se fait très rapidement, puis un bloc-note apparaît
(le "logfile")
Dans ce bloc-note, va dans "Edition", puis "Selectionner Tout",
le texte est alors séléctionné, retourne dans "Edition" toujours
en laissant le texte séléctionné, et clique sur copier.
Colle le contenu ici dans ta prochaine réponse !

voila

Logfile of HijackThis v1.99.1
Scan saved at 17:33:55, on 22/11/2008
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\WebMediaViewer\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ICQ6\ICQ.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\WebMediaViewer\qttaskm.exe
C:\Program Files\WebMediaViewer\hpmom.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\conime.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\system32\jusched.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Users\David\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: (no name) - {64466B8E-20A7-4A4A-AFF4-AAD9CA68B52C} - C:\Program Files\WebMediaViewer\hpmun.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O3 - Toolbar: Rambler-Àññèñòåíò - {468CD8A9-7C25-45FA-969E-3D925C689DC4} - C:\Program Files\Rambler Assistant\ramblertoolbarU5090.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Knob ante] "C:\ProgramData\Sizefirstfirst.dgjsobl"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6\ICQ.exe" silent
O4 - HKCU\..\Run: [Help Creative Meow City] "C:\ProgramData\settings soft slow.p65saf9"
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100465 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; FDM)" -"http://www.jeux-gratuits.com/jeu/125/jeu+gratuit+sudoku+ultimate+sudoku/"
O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
O9 - Extra button: C????????? ?????? ???-??????? - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.ietoolexpress.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IExplorer Security - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.ietoolexpress.com/redirect.php (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O13 - Gopher Prefix:
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll
O20 - Winlogon Notify: klogon - C:\Windows\system32\klogon.dll
O23 - Service: Kaspersky Anti-Virus (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" -r (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

re,

il reste une infection lop et quelques programmes infectés à virer

Désactive l'UAC ( Menu Démarrer \ Panneau de Configuration \ Comptes d'utilisateurs et protection des utilisateurs \ Comptes d'utilisateurs \ Activer ou désactiver le contrôle des comptes d'utilisateurs \ décoche la case Utiliser le contrôle ... et valide par OK , il te sera demandé de redémarrer , fais le )

Télécharge Lop S&D de Angeldark et Eric71 sur ton bureau.

Double-clique dessus pour lancer l'installation

Puis double-clique sur le raccourci Lop S&D présent sur ton bureau

Séléctionne la langue souhaitée, puis choisis l'Option 1 ( Recherche )

Patiente jusqu'à la fin du scan

Poste le rapport généré ( C:\lopR.txt )

( Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide).

voila

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : David ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:225 Go (Free:142 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 22/11/2008|18:12 )

[ UAC => 0 ]

--------------------\\ Listing des dossiers dans Local

[02/07/2008|15:03] C:\Users\David\AppData\Local\Adobe
[29/04/2008|15:06] C:\Users\David\AppData\Local\Ahead
[16/01/2008|15:33] C:\Users\David\AppData\Local\Application Data
[18/11/2008|20:34] C:\Users\David\AppData\Local\d3d9caps.dat
[19/11/2008|15:45] C:\Users\David\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[16/01/2008|21:52] C:\Users\David\AppData\Local\eMule
[01/07/2008|20:09] C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
[14/10/2008|19:54] C:\Users\David\AppData\Local\GlobalSCAPE
[22/11/2008|17:00] C:\Users\David\AppData\Local\Google
[16/01/2008|15:39] C:\Users\David\AppData\Local\Hewlett-Packard
[16/01/2008|15:33] C:\Users\David\AppData\Local\Historique
[15/04/2008|16:46] C:\Users\David\AppData\Local\HP
[22/11/2008|18:04] C:\Users\David\AppData\Local\IconCache.db
[16/07/2008|15:41] C:\Users\David\AppData\Local\Installer19396
[16/07/2008|15:49] C:\Users\David\AppData\Local\Installer9544
[22/11/2008|00:00] C:\Users\David\AppData\Local\Microsoft
[11/02/2008|23:53] C:\Users\David\AppData\Local\Microsoft Games
[27/03/2008|18:10] C:\Users\David\AppData\Local\Mozilla
[29/04/2008|15:11] C:\Users\David\AppData\Local\Nero
[26/06/2008|11:07] C:\Users\David\AppData\Local\Panda Software
[19/02/2008|18:31] C:\Users\David\AppData\Local\Sony
[22/11/2008|18:10] C:\Users\David\AppData\Local\Temp
[08/10/2008|16:42] C:\Users\David\AppData\Local\TempData.ldb
[08/10/2008|16:41] C:\Users\David\AppData\Local\TempData.mdb
[16/01/2008|15:33] C:\Users\David\AppData\Local\Temporary Internet Files
[30/06/2008|10:51] C:\Users\David\AppData\Local\Virtools
[30/01/2008|19:55] C:\Users\David\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[21/11/2008 18:02][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{31DF0D02-808A-4ED2-9355-0EAF40D469EC}.job
[22/11/2008 18:07][--ah-----] C:\Windows\tasks\SA.DAT
[22/11/2008 18:05][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[12/11/2008|21:27] C:\ProgramData\Adobe
[27/01/2008|20:17] C:\ProgramData\Ahead
[16/11/2008|20:14] C:\ProgramData\aim rect help creative
[02/11/2006|14:02] C:\ProgramData\Application Data
[16/11/2008|20:14] C:\ProgramData\Boob gram iso
[16/01/2008|15:30] C:\ProgramData\Bureau
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[16/01/2008|21:52] C:\ProgramData\eMule
[17/04/2008|22:37] C:\ProgramData\ezsid.dat
[16/01/2008|15:30] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[17/11/2008|00:16] C:\ProgramData\Fighters
[01/07/2008|20:09] C:\ProgramData\FLEXnet
[11/06/2008|03:23] C:\ProgramData\FreeDownloadManager.ORG
[14/10/2008|19:54] C:\ProgramData\GlobalSCAPE
[22/11/2008|16:59] C:\ProgramData\Google
[18/11/2008|16:24] C:\ProgramData\Grisoft
[16/01/2008|15:40] C:\ProgramData\Hewlett-Packard
[24/10/2007|22:36] C:\ProgramData\HP
[24/10/2007|22:36] C:\ProgramData\hpzinstall.log
[04/11/2008|22:42] C:\ProgramData\ICQ
[22/11/2008|18:07] C:\ProgramData\Kaspersky Lab
[27/07/2008|02:16] C:\ProgramData\Kaspersky Lab Setup Files
[16/11/2008|01:25] C:\ProgramData\Lavasoft
[29/04/2008|14:56] C:\ProgramData\LightScribe
[07/09/2008|13:09] C:\ProgramData\Logishrd
[30/04/2008|08:46] C:\ProgramData\Logitech
[15/03/2008|23:41] C:\ProgramData\LUUnInstall.LiveUpdate
[16/01/2008|15:30] C:\ProgramData\Menu D‚marrer
[30/04/2008|08:23] C:\ProgramData\Microsoft
[16/01/2008|15:30] C:\ProgramData\ModŠles
[24/10/2007|22:43] C:\ProgramData\muvee Technologies
[10/06/2008|11:45] C:\ProgramData\NCH Software
[10/06/2008|11:42] C:\ProgramData\NCH Swift Sound
[22/08/2008|12:06] C:\ProgramData\Nero
[30/08/2008|21:31] C:\ProgramData\NVIDIA
[24/10/2007|22:49] C:\ProgramData\PC-Doctor
[18/10/2008|13:32] C:\ProgramData\Roxio
[05/05/2008|17:48] C:\ProgramData\Sect barb funk.mrt72m
[26/05/2008|23:40] C:\ProgramData\settings soft slow.p65saf9
[18/06/2008|16:56] C:\ProgramData\Sizefirstfirst.03ioe
[20/06/2008|23:17] C:\ProgramData\Sizefirstfirst.06bqkpc
[18/06/2008|17:39] C:\ProgramData\Sizefirstfirst.084whq
[17/06/2008|17:15] C:\ProgramData\Sizefirstfirst.0g5e2g
[20/06/2008|21:06] C:\ProgramData\Sizefirstfirst.0tncnig
[20/06/2008|15:38] C:\ProgramData\Sizefirstfirst.12qat1
[20/06/2008|18:11] C:\ProgramData\Sizefirstfirst.167kmgy
[21/06/2008|18:33] C:\ProgramData\Sizefirstfirst.1ywi9
[17/06/2008|20:10] C:\ProgramData\Sizefirstfirst.256vj
[19/06/2008|16:19] C:\ProgramData\Sizefirstfirst.2a1xvv
[20/06/2008|21:50] C:\ProgramData\Sizefirstfirst.2bt10e
[22/06/2008|20:20] C:\ProgramData\Sizefirstfirst.2jnpd
[17/06/2008|15:03] C:\ProgramData\Sizefirstfirst.2r9gs
[18/06/2008|00:54] C:\ProgramData\Sizefirstfirst.2tpq98
[05/05/2008|17:47] C:\ProgramData\Sizefirstfirst.329e8fl
[20/06/2008|13:05] C:\ProgramData\Sizefirstfirst.32uuk
[17/06/2008|17:37] C:\ProgramData\Sizefirstfirst.3314a9
[22/06/2008|17:25] C:\ProgramData\Sizefirstfirst.34f5fae
[19/06/2008|14:30] C:\ProgramData\Sizefirstfirst.36acn6s
[19/06/2008|14:08] C:\ProgramData\Sizefirstfirst.37sbhmj
[19/06/2008|17:03] C:\ProgramData\Sizefirstfirst.3a0s0dz
[16/06/2008|23:56] C:\ProgramData\Sizefirstfirst.3bv1v
[17/06/2008|01:45] C:\ProgramData\Sizefirstfirst.3gu4c
[21/06/2008|15:16] C:\ProgramData\Sizefirstfirst.3i51e
[19/06/2008|19:36] C:\ProgramData\Sizefirstfirst.3iid7y
[20/06/2008|16:22] C:\ProgramData\Sizefirstfirst.3niuu0
[20/06/2008|22:55] C:\ProgramData\Sizefirstfirst.3r10ju4
[19/06/2008|13:25] C:\ProgramData\Sizefirstfirst.3t6zw
[20/06/2008|10:32] C:\ProgramData\Sizefirstfirst.3vvag
[19/06/2008|21:03] C:\ProgramData\Sizefirstfirst.3z4ti
[17/06/2008|16:53] C:\ProgramData\Sizefirstfirst.41naqh
[21/06/2008|17:27] C:\ProgramData\Sizefirstfirst.4an4btr
[21/06/2008|17:49] C:\ProgramData\Sizefirstfirst.4ldewm
[20/04/2008|23:18] C:\ProgramData\Sizefirstfirst.4mtfa55
[18/06/2008|03:27] C:\ProgramData\Sizefirstfirst.4vzuu8r
[20/06/2008|14:33] C:\ProgramData\Sizefirstfirst.4y5iq0
[17/06/2008|23:48] C:\ProgramData\Sizefirstfirst.4zfwlx
[18/06/2008|20:12] C:\ProgramData\Sizefirstfirst.50bun
[18/06/2008|09:39] C:\ProgramData\Sizefirstfirst.5106kva
[19/06/2008|22:31] C:\ProgramData\Sizefirstfirst.57za7
[17/06/2008|01:01] C:\ProgramData\Sizefirstfirst.5e601ea
[18/06/2008|00:32] C:\ProgramData\Sizefirstfirst.5kluk
[21/06/2008|14:33] C:\ProgramData\Sizefirstfirst.5kmhrgp
[18/06/2008|00:10] C:\ProgramData\Sizefirstfirst.5lnyi
[19/06/2008|19:58] C:\ProgramData\Sizefirstfirst.5q3fa
[20/06/2008|23:44] C:\ProgramData\Sizefirstfirst.5qq68a
[17/06/2008|14:19] C:\ProgramData\Sizefirstfirst.5wks1u
[18/06/2008|16:34] C:\ProgramData\Sizefirstfirst.5xfr0j
[19/06/2008|18:09] C:\ProgramData\Sizefirstfirst.5z8vb
[18/06/2008|21:18] C:\ProgramData\Sizefirstfirst.67gb8w
[18/06/2008|11:28] C:\ProgramData\Sizefirstfirst.67w1pf
[20/06/2008|17:27] C:\ProgramData\Sizefirstfirst.69thg
[19/06/2008|15:36] C:\ProgramData\Sizefirstfirst.6dfdt
[16/06/2008|23:34] C:\ProgramData\Sizefirstfirst.6szufg
[20/06/2008|13:49] C:\ProgramData\Sizefirstfirst.72j6hhm
[21/06/2008|20:22] C:\ProgramData\Sizefirstfirst.79nzo
[20/06/2008|10:11] C:\ProgramData\Sizefirstfirst.7c17ega
[17/06/2008|22:43] C:\ProgramData\Sizefirstfirst.7nn7be
[20/06/2008|18:33] C:\ProgramData\Sizefirstfirst.7nu4323
[17/06/2008|19:48] C:\ProgramData\Sizefirstfirst.84dq28p
[20/06/2008|22:11] C:\ProgramData\Sizefirstfirst.85k8g
[17/06/2008|22:21] C:\ProgramData\Sizefirstfirst.8fdww
[17/06/2008|13:36] C:\ProgramData\Sizefirstfirst.8kc68
[17/06/2008|16:31] C:\ProgramData\Sizefirstfirst.8lfcqnh
[17/06/2008|18:42] C:\ProgramData\Sizefirstfirst.8sltu5k
[20/06/2008|13:27] C:\ProgramData\Sizefirstfirst.8yuel
[20/06/2008|10:54] C:\ProgramData\Sizefirstfirst.90jvug
[21/06/2008|13:05] C:\ProgramData\Sizefirstfirst.90ufp9v
[22/06/2008|21:03] C:\ProgramData\Sizefirstfirst.93ejm
[18/06/2008|19:07] C:\ProgramData\Sizefirstfirst.95do4
[18/06/2008|17:17] C:\ProgramData\Sizefirstfirst.97tjud3
[21/06/2008|14:55] C:\ProgramData\Sizefirstfirst.99l3kf
[18/06/2008|10:44] C:\ProgramData\Sizefirstfirst.9anedh
[21/06/2008|14:11] C:\ProgramData\Sizefirstfirst.9g129t
[22/06/2008|17:03] C:\ProgramData\Sizefirstfirst.9i8gct
[22/06/2008|16:41] C:\ProgramData\Sizefirstfirst.9i9ubfr
[18/06/2008|04:32] C:\ProgramData\Sizefirstfirst.a6uduc
[19/06/2008|22:09] C:\ProgramData\Sizefirstfirst.agxrr
[17/06/2008|21:59] C:\ProgramData\Sizefirstfirst.aiurj
[26/05/2008|23:39] C:\ProgramData\Sizefirstfirst.arc2qz
[18/06/2008|19:50] C:\ProgramData\Sizefirstfirst.ash5tdi
[19/06/2008|14:52] C:\ProgramData\Sizefirstfirst.b1l8fk5
[17/06/2008|20:31] C:\ProgramData\Sizefirstfirst.bauw0
[19/06/2008|15:58] C:\ProgramData\Sizefirstfirst.bi4nu5
[18/06/2008|15:50] C:\ProgramData\Sizefirstfirst.bo2yi
[19/06/2008|17:47] C:\ProgramData\Sizefirstfirst.c320z
[18/06/2008|14:23] C:\ProgramData\Sizefirstfirst.c4kfl
[22/06/2008|18:30] C:\ProgramData\Sizefirstfirst.cnyib
[19/06/2008|20:20] C:\ProgramData\Sizefirstfirst.crwn0nt
[20/06/2008|12:44] C:\ProgramData\Sizefirstfirst.cs9ixr
[21/06/2008|12:22] C:\ProgramData\Sizefirstfirst.cy84pb
[18/06/2008|15:28] C:\ProgramData\Sizefirstfirst.d7cjs3d
[21/06/2008|19:17] C:\ProgramData\Sizefirstfirst.dcfoqhp
[21/06/2008|15:38] C:\ProgramData\Sizefirstfirst.dchtk
[21/06/2008|12:43] C:\ProgramData\Sizefirstfirst.de5uo8
[23/06/2008|09:37] C:\ProgramData\Sizefirstfirst.dgjsobl
[19/06/2008|16:41] C:\ProgramData\Sizefirstfirst.dpic4s6
[17/06/2008|13:14] C:\ProgramData\Sizefirstfirst.e1ldq
[16/06/2008|18:50] C:\ProgramData\Sizefirstfirst.eczm46
[18/06/2008|04:10] C:\ProgramData\Sizefirstfirst.eopx1
[18/06/2008|13:17] C:\ProgramData\Sizefirstfirst.f8vzt6m
[18/06/2008|20:56] C:\ProgramData\Sizefirstfirst.fajbx
[19/06/2008|21:47] C:\ProgramData\Sizefirstfirst.fbo3y
[20/06/2008|19:17] C:\ProgramData\Sizefirstfirst.fd6sor3
[20/06/2008|14:55] C:\ProgramData\Sizefirstfirst.ffg41
[18/06/2008|18:01] C:\ProgramData\Sizefirstfirst.fgv1jz
[17/06/2008|20:53] C:\ProgramData\Sizefirstfirst.fr6sb
[21/06/2008|21:50] C:\ProgramData\Sizefirstfirst.fttdgrp
[18/06/2008|21:39] C:\ProgramData\Sizefirstfirst.geep84
[20/06/2008|20:44] C:\ProgramData\Sizefirstfirst.gf7gq9
[21/06/2008|13:49] C:\ProgramData\Sizefirstfirst.ghgk3
[16/06/2008|19:12] C:\ProgramData\Sizefirstfirst.gjb8dqp
[19/06/2008|11:57] C:\ProgramData\Sizefirstfirst.gldaj
[18/06/2008|04:54] C:\ProgramData\Sizefirstfirst.gu9d4
[21/06/2008|21:06] C:\ProgramData\Sizefirstfirst.h0wfg6
[19/06/2008|22:53] C:\ProgramData\Sizefirstfirst.h3a9lt
[18/06/2008|11:06] C:\ProgramData\Sizefirstfirst.h3qpl
[17/06/2008|01:23] C:\ProgramData\Sizefirstfirst.h6bxfah
[18/06/2008|16:12] C:\ProgramData\Sizefirstfirst.hegm0
[21/06/2008|20:44] C:\ProgramData\Sizefirstfirst.hm3euqw
[17/06/2008|15:47] C:\ProgramData\Sizefirstfirst.hxtsk
[16/06/2008|17:01] C:\ProgramData\Sizefirstfirst.hxvrpc
[17/06/2008|02:07] C:\ProgramData\Sizefirstfirst.i3kzkw
[22/06/2008|14:52] C:\ProgramData\Sizefirstfirst.i7uyx
[20/06/2008|09:49] C:\ProgramData\Sizefirstfirst.ibfv73i
[16/06/2008|17:22] C:\ProgramData\Sizefirstfirst.iej69a
[16/06/2008|16:39] C:\ProgramData\Sizefirstfirst.ifxft57
[21/06/2008|22:11] C:\ProgramData\Sizefirstfirst.imp6zer
[16/06/2008|20:39] C:\ProgramData\Sizefirstfirst.ip7nv
[22/06/2008|16:19] C:\ProgramData\Sizefirstfirst.ireckq6
[16/06/2008|23:12] C:\ProgramData\Sizefirstfirst.iyoyh
[20/06/2008|11:16] C:\ProgramData\Sizefirstfirst.j7rmpn
[18/06/2008|20:34] C:\ProgramData\Sizefirstfirst.jowj0
[18/06/2008|05:38] C:\ProgramData\Sizefirstfirst.jt1hz
[21/06/2008|13:27] C:\ProgramData\Sizefirstfirst.k3316v
[26/05/2008|23:39] C:\ProgramData\Sizefirstfirst.k3q21t
[18/06/2008|19:28] C:\ProgramData\Sizefirstfirst.ka761cq
[20/06/2008|09:05] C:\ProgramData\Sizefirstfirst.kn6lk8f
[16/06/2008|16:17] C:\ProgramData\Sizefirstfirst.ko3av
[18/06/2008|08:11] C:\ProgramData\Sizefirstfirst.kot9l
[17/06/2008|23:26] C:\ProgramData\Sizefirstfirst.l39f1
[18/06/2008|12:55] C:\ProgramData\Sizefirstfirst.ltfouiy
[16/06/2008|21:45] C:\ProgramData\Sizefirstfirst.lypwhgk
[22/06/2008|21:25] C:\ProgramData\Sizefirstfirst.m74h2t0
[16/06/2008|17:44] C:\ProgramData\Sizefirstfirst.miqpb4n
[16/06/2008|18:06] C:\ProgramData\Sizefirstfirst.mlrktn
[18/06/2008|01:16] C:\ProgramData\Sizefirstfirst.mr2vy
[18/06/2008|05:59] C:\ProgramData\Sizefirstfirst.muu90
[18/06/2008|01:59] C:\ProgramData\Sizefirstfirst.mwdienx
[20/06/2008|15:16] C:\ProgramData\Sizefirstfirst.mx74ep
[18/06/2008|01:37] C:\ProgramData\Sizefirstfirst.n9oioq7
[18/06/2008|02:43] C:\ProgramData\Sizefirstfirst.naws7
[18/06/2008|12:12] C:\ProgramData\Sizefirstfirst.nbdf3
[20/06/2008|17:49] C:\ProgramData\Sizefirstfirst.nheci
[20/06/2008|22:33] C:\ProgramData\Sizefirstfirst.nkgjyt7
[18/06/2008|13:39] C:\ProgramData\Sizefirstfirst.nmup08
[21/06/2008|16:44] C:\ProgramData\Sizefirstfirst.nzvnwfi
[21/06/2008|21:28] C:\ProgramData\Sizefirstfirst.o4gih
[18/06/2008|09:17] C:\ProgramData\Sizefirstfirst.oldl0
[20/06/2008|19:39] C:\ProgramData\Sizefirstfirst.omb5w
[19/06/2008|13:03] C:\ProgramData\Sizefirstfirst.oqn99zd
[19/06/2008|21:25] C:\ProgramData\Sizefirstfirst.oxdl80a
[22/06/2008|15:57] C:\ProgramData\Sizefirstfirst.p1dx1
[22/06/2008|19:14] C:\ProgramData\Sizefirstfirst.p259siv
[21/06/2008|20:00] C:\ProgramData\Sizefirstfirst.p7n1w
[20/06/2008|18:55] C:\ProgramData\Sizefirstfirst.pgi3kj
[17/06/2008|19:26] C:\ProgramData\Sizefirstfirst.plgqs
[17/06/2008|13:57] C:\ProgramData\Sizefirstfirst.pn43pr6
[18/06/2008|22:01] C:\ProgramData\Sizefirstfirst.porbst4
[21/06/2008|12:00] C:\ProgramData\Sizefirstfirst.ppaj2k4
[21/06/2008|11:38] C:\ProgramData\Sizefirstfirst.ptazu
[22/06/2008|18:52] C:\ProgramData\Sizefirstfirst.ptyht
[20/06/2008|17:06] C:\ProgramData\Sizefirstfirst.q3bdjm
[20/06/2008|16:44] C:\ProgramData\Sizefirstfirst.q8rdoo
[19/06/2008|23:14] C:\ProgramData\Sizefirstfirst.qh3hyo
[21/06/2008|22:33] C:\ProgramData\Sizefirstfirst.qpn97
[17/06/2008|19:04] C:\ProgramData\Sizefirstfirst.qqy451
[17/06/2008|02:50] C:\ProgramData\Sizefirstfirst.qt169di
[18/06/2008|11:50] C:\ProgramData\Sizefirstfirst.r00wz
[18/06/2008|05:16] C:\ProgramData\Sizefirstfirst.r010x
[19/06/2008|19:14] C:\ProgramData\Sizefirstfirst.r3w8y
[20/06/2008|12:22] C:\ProgramData\Sizefirstfirst.r6j85
[21/06/2008|16:00] C:\ProgramData\Sizefirstfirst.r9ev89
[19/06/2008|15:14] C:\ProgramData\Sizefirstfirst.ra1c0
[18/06/2008|03:48] C:\ProgramData\Sizefirstfirst.ra6ug2k
[16/06/2008|19:34] C:\ProgramData\Sizefirstfirst.rf4dps
[22/06/2008|18:09] C:\ProgramData\Sizefirstfirst.rfmpz
[22/06/2008|22:09] C:\ProgramData\Sizefirstfirst.rhbng
[18/06/2008|12:33] C:\ProgramData\Sizefirstfirst.rhl0pm9
[18/06/2008|18:23] C:\ProgramData\Sizefirstfirst.rk03fk
[18/06/2008|08:33] C:\ProgramData\Sizefirstfirst.rv5ym
[21/06/2008|17:06] C:\ProgramData\Sizefirstfirst.ryfok6
[19/06/2008|18:30] C:\ProgramData\Sizefirstfirst.s6mqp2
[19/06/2008|12:19] C:\ProgramData\Sizefirstfirst.s9rqlq
[21/06/2008|18:55] C:\ProgramData\Sizefirstfirst.say67v
[16/06/2008|18:28] C:\ProgramData\Sizefirstfirst.splnx
[19/06/2008|20:41] C:\ProgramData\Sizefirstfirst.t1hapke
[17/06/2008|14:41] C:\ProgramData\Sizefirstfirst.t334j
[22/06/2008|15:36] C:\ProgramData\Sizefirstfirst.t46qpq
[16/06/2008|22:28] C:\ProgramData\Sizefirstfirst.t4uj3p
[20/06/2008|21:28] C:\ProgramData\Sizefirstfirst.tb36s6p
[22/06/2008|19:36] C:\ProgramData\Sizefirstfirst.tguhsz
[19/06/2008|12:41] C:\ProgramData\Sizefirstfirst.th50vtw
[20/06/2008|16:00] C:\ProgramData\Sizefirstfirst.tjje7
[16/06/2008|20:17] C:\ProgramData\Sizefirstfirst.tmuupu
[17/06/2008|00:39] C:\ProgramData\Sizefirstfirst.ty06a
[17/06/2008|23:04] C:\ProgramData\Sizefirstfirst.u1ggu9
[22/06/2008|17:47] C:\ProgramData\Sizefirstfirst.u68l2bz
[20/06/2008|12:00] C:\ProgramData\Sizefirstfirst.uamzzq
[21/06/2008|22:55] C:\ProgramData\Sizefirstfirst.uhl46m
[21/06/2008|18:11] C:\ProgramData\Sizefirstfirst.ui4hx5
[18/06/2008|10:01] C:\ProgramData\Sizefirstfirst.ulolg
[18/06/2008|10:22] C:\ProgramData\Sizefirstfirst.unv8yx
[17/06/2008|15:25] C:\ProgramData\Sizefirstfirst.use8n
[16/06/2008|21:23] C:\ProgramData\Sizefirstfirst.utyi2az
[16/06/2008|22:06] C:\ProgramData\Sizefirstfirst.uvy91y
[17/06/2008|18:20] C:\ProgramData\Sizefirstfirst.uwwxv9m
[20/06/2008|14:11] C:\ProgramData\Sizefirstfirst.w1f77hl
[20/06/2008|20:22] C:\ProgramData\Sizefirstfirst.w2fzn3
[20/06/2008|11:38] C:\ProgramData\Sizefirstfirst.w3c30
[17/06/2008|00:17] C:\ProgramData\Sizefirstfirst.w827m2
[17/06/2008|21:15] C:\ProgramData\Sizefirstfirst.w8gez
[22/06/2008|19:58] C:\ProgramData\Sizefirstfirst.wev3gx
[17/06/2008|16:09] C:\ProgramData\Sizefirstfirst.wf420dp
[21/06/2008|19:38] C:\ProgramData\Sizefirstfirst.xgeuuq
[22/06/2008|21:47] C:\ProgramData\Sizefirstfirst.xpnm5
[18/06/2008|02:21] C:\ProgramData\Sizefirstfirst.xwu30
[18/06/2008|15:06] C:\ProgramData\Sizefirstfirst.y0de08
[22/06/2008|20:41] C:\ProgramData\Sizefirstfirst.y1dv5iq
[18/06/2008|14:01] C:\ProgramData\Sizefirstfirst.y1meh
[20/06/2008|09:27] C:\ProgramData\Sizefirstfirst.yaejul
[19/06/2008|13:47] C:\ProgramData\Sizefirstfirst.ybx0t
[18/06/2008|03:05] C:\ProgramData\Sizefirstfirst.yiyy3r
[17/06/2008|21:37] C:\ProgramData\Sizefirstfirst.ykavkq
[19/06/2008|17:25] C:\ProgramData\Sizefirstfirst.yu72ffi
[16/06/2008|19:55] C:\ProgramData\Sizefirstfirst.yw27dd
[21/06/2008|16:22] C:\ProgramData\Sizefirstfirst.z0icc
[18/06/2008|08:55] C:\ProgramData\Sizefirstfirst.z3hq4
[22/06/2008|15:14] C:\ProgramData\Sizefirstfirst.z4k62
[17/06/2008|17:59] C:\ProgramData\Sizefirstfirst.z7uohn
[17/06/2008|02:29] C:\ProgramData\Sizefirstfirst.zb5nqfu
[16/06/2008|21:01] C:\ProgramData\Sizefirstfirst.zfv6kub
[18/06/2008|14:44] C:\ProgramData\Sizefirstfirst.zl0ci
[16/06/2008|22:50] C:\ProgramData\Sizefirstfirst.zmuil
[19/06/2008|18:52] C:\ProgramData\Sizefirstfirst.zuu7r
[20/06/2008|20:00] C:\ProgramData\Sizefirstfirst.zx08x
[18/06/2008|18:45] C:\ProgramData\Sizefirstfirst.zy0ygub
[22/05/2008|11:54] C:\ProgramData\Skype
[24/10/2007|22:37] C:\ProgramData\Sonic
[14/02/2008|23:57] C:\ProgramData\Sony
[21/11/2008|17:32] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|14:02] C:\ProgramData\Start Menu
[15/03/2008|23:43] C:\ProgramData\Symantec
[15/11/2008|18:19] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[08/10/2008|03:05] C:\ProgramData\WindowsSearch
[16/01/2008|17:06] C:\ProgramData\WLInstaller
[29/07/2008|02:16] C:\ProgramData\Yahoo!
[29/07/2008|02:19] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[12/11/2008|21:26] C:\Program Files\Adobe
[03/10/2008|19:12] C:\Program Files\Alcohol Soft
[18/01/2008|00:51] C:\Program Files\Armenian NLS
[10/06/2008|13:19] C:\Program Files\AtomixMP3
[10/06/2008|00:23] C:\Program Files\AviSynth 2.5
[10/06/2008|11:36] C:\Program Files\AVS4YOU
[16/09/2008|16:22] C:\Program Files\BClub
[10/06/2008|11:31] C:\Program Files\Best_Security_Tips
[20/04/2008|23:18] C:\Program Files\BitDownload
[21/11/2008|17:32] C:\Program Files\BitTorrent Fastest Tool
[15/11/2008|02:07] C:\Program Files\CCleaner
[13/10/2008|19:17] C:\Program Files\clock-desktop
[22/11/2008|14:13] C:\Program Files\Common Files
[14/09/2008|20:08] C:\Program Files\DivX
[06/10/2008|17:45] C:\Program Files\Download Direct
[25/10/2007|07:37] C:\Program Files\EasyBits
[18/01/2008|22:28] C:\Program Files\EasyBits For Kids
[16/01/2008|21:52] C:\Program Files\eMule
[08/06/2008|23:40] C:\Program Files\eMule Turbo Accelerator
[16/11/2008|20:08] C:\Program Files\Enigma Software Group
[10/09/2008|13:02] C:\Program Files\EoRezo
[16/01/2008|15:30] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[22/11/2008|00:40] C:\Program Files\Fighters
[11/06/2008|03:24] C:\Program Files\Free Download Manager
[09/11/2008|03:37] C:\Program Files\FREE Music Downloader
[14/10/2008|19:54] C:\Program Files\GlobalSCAPE
[22/11/2008|17:00] C:\Program Files\Google
[18/11/2008|16:24] C:\Program Files\Grisoft
[28/09/2008|19:57] C:\Program Files\GTR 2
[24/10/2007|22:50] C:\Program Files\Hewlett-Packard
[29/08/2008|18:15] C:\Program Files\HP
[04/11/2008|22:43] C:\Program Files\ICQ6
[04/11/2008|22:42] C:\Program Files\ICQ6Toolbar
[09/11/2008|19:14] C:\Program Files\InstallShield Installation Information
[21/09/2008|02:01] C:\Program Files\Internet Explorer
[17/08/2008|02:19] C:\Program Files\IZArc
[10/07/2008|20:17] C:\Program Files\Java
[27/07/2008|02:24] C:\Program Files\Kaspersky Lab
[09/11/2008|18:43] C:\Program Files\LG Electronics
[07/09/2008|13:09] C:\Program Files\Logitech
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[24/10/2007|22:46] C:\Program Files\Microsoft Office
[14/02/2008|23:59] C:\Program Files\Microsoft SQL Server
[10/09/2008|14:02] C:\Program Files\Microsoft Works
[09/05/2008|20:49] C:\Program Files\Movie Maker
[22/11/2008|15:44] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[16/01/2008|17:27] C:\Program Files\MSXML 4.0
[24/10/2007|22:43] C:\Program Files\muvee Technologies
[22/11/2008|00:03] C:\Program Files\Navilog1
[11/06/2008|12:10] C:\Program Files\NCH Software
[22/08/2008|11:40] C:\Program Files\NCH Swift Sound
[22/08/2008|12:06] C:\Program Files\Nero
[29/04/2008|14:55] C:\Program Files\NeroInstall.bak
[16/01/2008|15:50] C:\Program Files\NETGEAR
[02/06/2008|17:09] C:\Program Files\Opera
[24/10/2007|23:04] C:\Program Files\PC-Doctor 5 for Windows
[04/02/2008|22:47] C:\Program Files\Rambler Assistant
[06/03/2008|17:56] C:\Program Files\Real
[28/03/2008|19:47] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[10/06/2008|00:04] C:\Program Files\Replay Converter
[24/10/2007|22:42] C:\Program Files\Roxio
[20/09/2008|16:32] C:\Program Files\San Andreas Mod Installer
[24/10/2007|22:52] C:\Program Files\Services en ligne
[22/05/2008|11:54] C:\Program Files\Skype
[11/06/2008|03:23] C:\Program Files\Software Informer
[19/03/2008|14:43] C:\Program Files\Sony
[19/02/2008|18:28] C:\Program Files\Sony Setup
[15/11/2008|18:21] C:\Program Files\Spybot - Search & Destroy
[13/11/2008|03:12] C:\Program Files\Steam
[10/07/2008|20:18] C:\Program Files\Sun
[15/03/2008|23:41] C:\Program Files\Symantec
[19/03/2008|19:34] C:\Program Files\SystemRequirementsLab
[15/02/2008|00:01] C:\Program Files\Uninstall Information
[13/10/2008|19:00] C:\Program Files\UselessCreations
[03/10/2008|14:53] C:\Program Files\uTorrent
[29/01/2008|20:59] C:\Program Files\Veoh Networks
[17/01/2008|13:57] C:\Program Files\VideoLAN
[30/06/2008|10:51] C:\Program Files\Virtools
[22/11/2008|14:51] C:\Program Files\WebMediaViewer
[09/05/2008|20:49] C:\Program Files\Windows Calendar
[09/05/2008|20:49] C:\Program Files\Windows Collaboration
[09/05/2008|20:49] C:\Program Files\Windows Defender
[09/05/2008|20:49] C:\Program Files\Windows Journal
[16/01/2008|17:10] C:\Program Files\Windows Live
[16/10/2008|19:35] C:\Program Files\Windows Mail
[09/05/2008|20:49] C:\Program Files\Windows Media Player
[16/01/2008|15:30] C:\Program Files\Windows NT
[09/05/2008|20:49] C:\Program Files\Windows Photo Gallery
[09/05/2008|20:49] C:\Program Files\Windows Sidebar
[29/07/2008|02:13] C:\Program Files\Yahoo!
[14/09/2008|19:05] C:\Program Files\Zaycev Downloader

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[12/11/2008|21:27] C:\Program Files\Common Files\Adobe
[27/01/2008|21:12] C:\Program Files\Common Files\Ahead
[10/06/2008|11:28] C:\Program Files\Common Files\AVSMedia
[24/10/2007|22:36] C:\Program Files\Common Files\HP
[14/10/2008|19:53] C:\Program Files\Common Files\InstallShield
[24/10/2007|22:45] C:\Program Files\Common Files\Java
[24/10/2007|22:43] C:\Program Files\Common Files\LightScribe
[07/09/2008|13:11] C:\Program Files\Common Files\logishrd
[30/04/2008|08:47] C:\Program Files\Common Files\Logitech
[24/10/2007|22:42] C:\Program Files\Common Files\LS Getting Started
[16/01/2008|17:11] C:\Program Files\Common Files\microsoft shared
[24/10/2007|22:43] C:\Program Files\Common Files\muvee Technologies
[22/08/2008|12:09] C:\Program Files\Common Files\Nero
[27/03/2008|18:29] C:\Program Files\Common Files\PX Storage Engine
[24/09/2008|17:12] C:\Program Files\Common Files\Real
[24/10/2007|22:42] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[22/05/2008|11:54] C:\Program Files\Common Files\Skype
[23/03/2008|19:11] C:\Program Files\Common Files\Softwin
[24/10/2007|22:42] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[12/11/2008|21:32] C:\Program Files\Common Files\Steam
[24/10/2007|22:37] C:\Program Files\Common Files\SureThing Shared
[23/09/2008|14:15] C:\Program Files\Common Files\SWF Studio
[15/03/2008|23:43] C:\Program Files\Common Files\Symantec Shared
[09/05/2008|20:49] C:\Program Files\Common Files\System
[16/01/2008|17:10] C:\Program Files\Common Files\WindowsLiveInstaller
[24/09/2008|17:12] C:\Program Files\Common Files\xing shared

--------------------\\ Process

( 80 Processes )

iexplore.exe ~ [PID:5728]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\Sizefirstfirst.03ioe
C:\ProgramData\Sizefirstfirst.1ywi9
C:\ProgramData\Sizefirstfirst.256vj
C:\ProgramData\Sizefirstfirst.2jnpd
C:\ProgramData\Sizefirstfirst.2r9gs
C:\ProgramData\Sizefirstfirst.32uuk
C:\ProgramData\Sizefirstfirst.3bv1v
C:\ProgramData\Sizefirstfirst.3gu4c
C:\ProgramData\Sizefirstfirst.3i51e
C:\ProgramData\Sizefirstfirst.3t6zw
C:\ProgramData\Sizefirstfirst.3vvag
C:\ProgramData\Sizefirstfirst.3z4ti
C:\ProgramData\Sizefirstfirst.50bun
C:\ProgramData\Sizefirstfirst.57za7
C:\ProgramData\Sizefirstfirst.5kluk
C:\ProgramData\Sizefirstfirst.5lnyi
C:\ProgramData\Sizefirstfirst.5q3fa
C:\ProgramData\Sizefirstfirst.5z8vb
C:\ProgramData\Sizefirstfirst.69thg
C:\ProgramData\Sizefirstfirst.6dfdt
C:\ProgramData\Sizefirstfirst.79nzo
C:\ProgramData\Sizefirstfirst.85k8g
C:\ProgramData\Sizefirstfirst.8fdww
C:\ProgramData\Sizefirstfirst.8kc68
C:\ProgramData\Sizefirstfirst.8yuel
C:\ProgramData\Sizefirstfirst.93ejm
C:\ProgramData\Sizefirstfirst.95do4
C:\ProgramData\Sizefirstfirst.agxrr
C:\ProgramData\Sizefirstfirst.aiurj
C:\ProgramData\Sizefirstfirst.bauw0
C:\ProgramData\Sizefirstfirst.bo2yi
C:\ProgramData\Sizefirstfirst.c320z
C:\ProgramData\Sizefirstfirst.c4kfl
C:\ProgramData\Sizefirstfirst.cnyib
C:\ProgramData\Sizefirstfirst.dchtk
C:\ProgramData\Sizefirstfirst.e1ldq
C:\ProgramData\Sizefirstfirst.eopx1
C:\ProgramData\Sizefirstfirst.fajbx
C:\ProgramData\Sizefirstfirst.fbo3y
C:\ProgramData\Sizefirstfirst.ffg41
C:\ProgramData\Sizefirstfirst.fr6sb
C:\ProgramData\Sizefirstfirst.ghgk3
C:\ProgramData\Sizefirstfirst.gldaj
C:\ProgramData\Sizefirstfirst.gu9d4
C:\ProgramData\Sizefirstfirst.h3qpl
C:\ProgramData\Sizefirstfirst.hegm0
C:\ProgramData\Sizefirstfirst.hxtsk
C:\ProgramData\Sizefirstfirst.i7uyx
C:\ProgramData\Sizefirstfirst.ip7nv
C:\ProgramData\Sizefirstfirst.iyoyh
C:\ProgramData\Sizefirstfirst.jowj0
C:\ProgramData\Sizefirstfirst.jt1hz
C:\ProgramData\Sizefirstfirst.ko3av
C:\ProgramData\Sizefirstfirst.kot9l
C:\ProgramData\Sizefirstfirst.l39f1
C:\ProgramData\Sizefirstfirst.mr2vy
C:\ProgramData\Sizefirstfirst.muu90
C:\ProgramData\Sizefirstfirst.naws7
C:\ProgramData\Sizefirstfirst.nbdf3
C:\ProgramData\Sizefirstfirst.nheci
C:\ProgramData\Sizefirstfirst.o4gih
C:\ProgramData\Sizefirstfirst.oldl0
C:\ProgramData\Sizefirstfirst.omb5w
C:\ProgramData\Sizefirstfirst.p1dx1
C:\ProgramData\Sizefirstfirst.p7n1w
C:\ProgramData\Sizefirstfirst.plgqs
C:\ProgramData\Sizefirstfirst.ptazu
C:\ProgramData\Sizefirstfirst.ptyht
C:\ProgramData\Sizefirstfirst.qpn97
C:\ProgramData\Sizefirstfirst.r00wz
C:\ProgramData\Sizefirstfirst.r010x
C:\ProgramData\Sizefirstfirst.r3w8y
C:\ProgramData\Sizefirstfirst.r6j85
C:\ProgramData\Sizefirstfirst.ra1c0
C:\ProgramData\Sizefirstfirst.rfmpz
C:\ProgramData\Sizefirstfirst.rhbng
C:\ProgramData\Sizefirstfirst.rv5ym
C:\ProgramData\Sizefirstfirst.splnx
C:\ProgramData\Sizefirstfirst.t334j
C:\ProgramData\Sizefirstfirst.tjje7
C:\ProgramData\Sizefirstfirst.ty06a
C:\ProgramData\Sizefirstfirst.ulolg
C:\ProgramData\Sizefirstfirst.use8n
C:\ProgramData\Sizefirstfirst.w3c30
C:\ProgramData\Sizefirstfirst.w8gez
C:\ProgramData\Sizefirstfirst.xpnm5
C:\ProgramData\Sizefirstfirst.xwu30
C:\ProgramData\Sizefirstfirst.y1meh
C:\ProgramData\Sizefirstfirst.ybx0t
C:\ProgramData\Sizefirstfirst.z0icc
C:\ProgramData\Sizefirstfirst.z3hq4
C:\ProgramData\Sizefirstfirst.z4k62
C:\ProgramData\Sizefirstfirst.zl0ci
C:\ProgramData\Sizefirstfirst.zmuil
C:\ProgramData\Sizefirstfirst.zuu7r
C:\ProgramData\Sizefirstfirst.zx08x
C:\ProgramData\Sect barb funk.mrt72m
C:\ProgramData\Sizefirstfirst.084whq
C:\ProgramData\Sizefirstfirst.0g5e2g
C:\ProgramData\Sizefirstfirst.12qat1
C:\ProgramData\Sizefirstfirst.2a1xvv
C:\ProgramData\Sizefirstfirst.2bt10e
C:\ProgramData\Sizefirstfirst.2tpq98
C:\ProgramData\Sizefirstfirst.3314a9
C:\ProgramData\Sizefirstfirst.3iid7y
C:\ProgramData\Sizefirstfirst.3niuu0
C:\ProgramData\Sizefirstfirst.41naqh
C:\ProgramData\Sizefirstfirst.4ldewm
C:\ProgramData\Sizefirstfirst.4y5iq0
C:\ProgramData\Sizefirstfirst.4zfwlx
C:\ProgramData\Sizefirstfirst.5qq68a
C:\ProgramData\Sizefirstfirst.5wks1u
C:\ProgramData\Sizefirstfirst.5xfr0j
C:\ProgramData\Sizefirstfirst.67gb8w
C:\ProgramData\Sizefirstfirst.67w1pf
C:\ProgramData\Sizefirstfirst.6szufg
C:\ProgramData\Sizefirstfirst.7nn7be
C:\ProgramData\Sizefirstfirst.90jvug
C:\ProgramData\Sizefirstfirst.99l3kf
C:\ProgramData\Sizefirstfirst.9anedh
C:\ProgramData\Sizefirstfirst.9g129t
C:\ProgramData\Sizefirstfirst.9i8gct
C:\ProgramData\Sizefirstfirst.a6uduc
C:\ProgramData\Sizefirstfirst.arc2qz
C:\ProgramData\Sizefirstfirst.bi4nu5
C:\ProgramData\Sizefirstfirst.cs9ixr
C:\ProgramData\Sizefirstfirst.cy84pb
C:\ProgramData\Sizefirstfirst.de5uo8
C:\ProgramData\Sizefirstfirst.eczm46
C:\ProgramData\Sizefirstfirst.fgv1jz
C:\ProgramData\Sizefirstfirst.geep84
C:\ProgramData\Sizefirstfirst.gf7gq9
C:\ProgramData\Sizefirstfirst.h0wfg6
C:\ProgramData\Sizefirstfirst.h3a9lt
C:\ProgramData\Sizefirstfirst.hxvrpc
C:\ProgramData\Sizefirstfirst.i3kzkw
C:\ProgramData\Sizefirstfirst.iej69a
C:\ProgramData\Sizefirstfirst.j7rmpn
C:\ProgramData\Sizefirstfirst.k3316v
C:\ProgramData\Sizefirstfirst.k3q21t
C:\ProgramData\Sizefirstfirst.mlrktn
C:\ProgramData\Sizefirstfirst.mx74ep
C:\ProgramData\Sizefirstfirst.nmup08
C:\ProgramData\Sizefirstfirst.pgi3kj
C:\ProgramData\Sizefirstfirst.q3bdjm
C:\ProgramData\Sizefirstfirst.q8rdoo
C:\ProgramData\Sizefirstfirst.qh3hyo
C:\ProgramData\Sizefirstfirst.qqy451
C:\ProgramData\Sizefirstfirst.r9ev89
C:\ProgramData\Sizefirstfirst.rf4dps
C:\ProgramData\Sizefirstfirst.rk03fk
C:\ProgramData\Sizefirstfirst.ryfok6
C:\ProgramData\Sizefirstfirst.s6mqp2
C:\ProgramData\Sizefirstfirst.s9rqlq
C:\ProgramData\Sizefirstfirst.say67v
C:\ProgramData\Sizefirstfirst.t46qpq
C:\ProgramData\Sizefirstfirst.t4uj3p
C:\ProgramData\Sizefirstfirst.tguhsz
C:\ProgramData\Sizefirstfirst.tmuupu
C:\ProgramData\Sizefirstfirst.u1ggu9
C:\ProgramData\Sizefirstfirst.uamzzq
C:\ProgramData\Sizefirstfirst.uhl46m
C:\ProgramData\Sizefirstfirst.ui4hx5
C:\ProgramData\Sizefirstfirst.unv8yx
C:\ProgramData\Sizefirstfirst.uvy91y
C:\ProgramData\Sizefirstfirst.w2fzn3
C:\ProgramData\Sizefirstfirst.w827m2
C:\ProgramData\Sizefirstfirst.wev3gx
C:\ProgramData\Sizefirstfirst.xgeuuq
C:\ProgramData\Sizefirstfirst.y0de08
C:\ProgramData\Sizefirstfirst.yaejul
C:\ProgramData\Sizefirstfirst.yiyy3r
C:\ProgramData\Sizefirstfirst.ykavkq
C:\ProgramData\Sizefirstfirst.yw27dd
C:\ProgramData\Sizefirstfirst.z7uohn
C:\ProgramData\settings soft slow.p65saf9
C:\ProgramData\Sizefirstfirst.06bqkpc
C:\ProgramData\Sizefirstfirst.0tncnig
C:\ProgramData\Sizefirstfirst.167kmgy
C:\ProgramData\Sizefirstfirst.329e8fl
C:\ProgramData\Sizefirstfirst.34f5fae
C:\ProgramData\Sizefirstfirst.36acn6s
C:\ProgramData\Sizefirstfirst.37sbhmj
C:\ProgramData\Sizefirstfirst.3a0s0dz
C:\ProgramData\Sizefirstfirst.3r10ju4
C:\ProgramData\Sizefirstfirst.4an4btr
C:\ProgramData\Sizefirstfirst.4mtfa55
C:\ProgramData\Sizefirstfirst.4vzuu8r
C:\ProgramData\Sizefirstfirst.5106kva
C:\ProgramData\Sizefirstfirst.5e601ea
C:\ProgramData\Sizefirstfirst.5kmhrgp
C:\ProgramData\Sizefirstfirst.72j6hhm
C:\ProgramData\Sizefirstfirst.7c17ega
C:\ProgramData\Sizefirstfirst.7nu4323
C:\ProgramData\Sizefirstfirst.84dq28p
C:\ProgramData\Sizefirstfirst.8lfcqnh
C:\ProgramData\Sizefirstfirst.8sltu5k
C:\ProgramData\Sizefirstfirst.90ufp9v
C:\ProgramData\Sizefirstfirst.97tjud3
C:\ProgramData\Sizefirstfirst.9i9ubfr
C:\ProgramData\Sizefirstfirst.ash5tdi
C:\ProgramData\Sizefirstfirst.b1l8fk5
C:\ProgramData\Sizefirstfirst.crwn0nt
C:\ProgramData\Sizefirstfirst.d7cjs3d
C:\ProgramData\Sizefirstfirst.dcfoqhp
C:\ProgramData\Sizefirstfirst.dgjsobl
C:\ProgramData\Sizefirstfirst.dpic4s6
C:\ProgramData\Sizefirstfirst.f8vzt6m
C:\ProgramData\Sizefirstfirst.fd6sor3
C:\ProgramData\Sizefirstfirst.fttdgrp
C:\ProgramData\Sizefirstfirst.gjb8dqp
C:\ProgramData\Sizefirstfirst.h6bxfah
C:\ProgramData\Sizefirstfirst.hm3euqw
C:\ProgramData\Sizefirstfirst.ibfv73i
C:\ProgramData\Sizefirstfirst.ifxft57
C:\ProgramData\Sizefirstfirst.imp6zer
C:\ProgramData\Sizefirstfirst.ireckq6
C:\ProgramData\Sizefirstfirst.ka761cq
C:\ProgramData\Sizefirstfirst.kn6lk8f
C:\ProgramData\Sizefirstfirst.ltfouiy
C:\ProgramData\Sizefirstfirst.lypwhgk
C:\ProgramData\Sizefirstfirst.m74h2t0
C:\ProgramData\Sizefirstfirst.miqpb4n
C:\ProgramData\Sizefirstfirst.mwdienx
C:\ProgramData\Sizefirstfirst.n9oioq7
C:\ProgramData\Sizefirstfirst.nkgjyt7
C:\ProgramData\Sizefirstfirst.nzvnwfi
C:\ProgramData\Sizefirstfirst.oqn99zd
C:\ProgramData\Sizefirstfirst.oxdl80a
C:\ProgramData\Sizefirstfirst.p259siv
C:\ProgramData\Sizefirstfirst.pn43pr6
C:\ProgramData\Sizefirstfirst.porbst4
C:\ProgramData\Sizefirstfirst.ppaj2k4
C:\ProgramData\Sizefirstfirst.qt169di
C:\ProgramData\Sizefirstfirst.ra6ug2k
C:\ProgramData\Sizefirstfirst.rhl0pm9
C:\ProgramData\Sizefirstfirst.t1hapke
C:\ProgramData\Sizefirstfirst.tb36s6p
C:\ProgramData\Sizefirstfirst.th50vtw
C:\ProgramData\Sizefirstfirst.u68l2bz
C:\ProgramData\Sizefirstfirst.utyi2az
C:\ProgramData\Sizefirstfirst.uwwxv9m
C:\ProgramData\Sizefirstfirst.w1f77hl
C:\ProgramData\Sizefirstfirst.wf420dp
C:\ProgramData\Sizefirstfirst.y1dv5iq
C:\ProgramData\Sizefirstfirst.yu72ffi
C:\ProgramData\Sizefirstfirst.zb5nqfu
C:\ProgramData\Sizefirstfirst.zfv6kub
C:\ProgramData\Sizefirstfirst.zy0ygub

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\aim rect help creative
C:\Program Files\BitDownload
C:\Program Files\BitTorrent Fastest Tool
C:\Program Files\BitTorrent Fastest Tool\BitP.exe
C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
C:\Users\David\AppData\Roaming\MICROS~1\Windows\Cookies\david@advertstream[2].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Knob ante"="\"C:\\ProgramData\\Sizefirstfirst.dgjsobl\""
"Help Creative Meow City"="\"C:\\ProgramData\\settings soft slow.p65saf9\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-22 18:14:04
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 13

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack
C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\SERIAL.txt
C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\soundforge90a_enu.exe


[F:17][D:10]-> C:\Users\David\AppData\Local\Temp
[F:233][D:1]-> C:\Users\David\AppData\Roaming\MICROS~1\Windows\Cookies
[F:2819][D:4]-> C:\Users\David\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:8][D:5]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 22/11/2008|18:17 - Option : [1]

--------------------\\ Fin du rapport a 18:17:41
[ UAC => 1 ]

Re,

Relance Lop S&D

Choisis cette fois ci l'Option 2 ( Suppression )

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré ( C:\lopR.txt )

(Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

voila


--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : David ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:225 Go (Free:141 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 22/11/2008|22:26 )

[ UAC => 1 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Program Files\BitTorrent Fastest Tool\BitP.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
Supprime! - C:\Users\David\AppData\Roaming\MICROS~1\Windows\Cookies\david@advertstream[2].txt
Supprime! - C:\ProgramData\Sizefirstfirst.03ioe
Supprime! - C:\ProgramData\Sizefirstfirst.1ywi9
Supprime! - C:\ProgramData\Sizefirstfirst.256vj
Supprime! - C:\ProgramData\Sizefirstfirst.2jnpd
Supprime! - C:\ProgramData\Sizefirstfirst.2r9gs
Supprime! - C:\ProgramData\Sizefirstfirst.32uuk
Supprime! - C:\ProgramData\Sizefirstfirst.3bv1v
Supprime! - C:\ProgramData\Sizefirstfirst.3gu4c
Supprime! - C:\ProgramData\Sizefirstfirst.3i51e
Supprime! - C:\ProgramData\Sizefirstfirst.3t6zw
Supprime! - C:\ProgramData\Sizefirstfirst.3vvag
Supprime! - C:\ProgramData\Sizefirstfirst.3z4ti
Supprime! - C:\ProgramData\Sizefirstfirst.50bun
Supprime! - C:\ProgramData\Sizefirstfirst.57za7
Supprime! - C:\ProgramData\Sizefirstfirst.5kluk
Supprime! - C:\ProgramData\Sizefirstfirst.5lnyi
Supprime! - C:\ProgramData\Sizefirstfirst.5q3fa
Supprime! - C:\ProgramData\Sizefirstfirst.5z8vb
Supprime! - C:\ProgramData\Sizefirstfirst.69thg
Supprime! - C:\ProgramData\Sizefirstfirst.6dfdt
Supprime! - C:\ProgramData\Sizefirstfirst.79nzo
Supprime! - C:\ProgramData\Sizefirstfirst.85k8g
Supprime! - C:\ProgramData\Sizefirstfirst.8fdww
Supprime! - C:\ProgramData\Sizefirstfirst.8kc68
Supprime! - C:\ProgramData\Sizefirstfirst.8yuel
Supprime! - C:\ProgramData\Sizefirstfirst.93ejm
Supprime! - C:\ProgramData\Sizefirstfirst.95do4
Supprime! - C:\ProgramData\Sizefirstfirst.agxrr
Supprime! - C:\ProgramData\Sizefirstfirst.aiurj
Supprime! - C:\ProgramData\Sizefirstfirst.bauw0
Supprime! - C:\ProgramData\Sizefirstfirst.bo2yi
Supprime! - C:\ProgramData\Sizefirstfirst.c320z
Supprime! - C:\ProgramData\Sizefirstfirst.c4kfl
Supprime! - C:\ProgramData\Sizefirstfirst.cnyib
Supprime! - C:\ProgramData\Sizefirstfirst.dchtk
Supprime! - C:\ProgramData\Sizefirstfirst.e1ldq
Supprime! - C:\ProgramData\Sizefirstfirst.eopx1
Supprime! - C:\ProgramData\Sizefirstfirst.fajbx
Supprime! - C:\ProgramData\Sizefirstfirst.fbo3y
Supprime! - C:\ProgramData\Sizefirstfirst.ffg41
Supprime! - C:\ProgramData\Sizefirstfirst.fr6sb
Supprime! - C:\ProgramData\Sizefirstfirst.ghgk3
Supprime! - C:\ProgramData\Sizefirstfirst.gldaj
Supprime! - C:\ProgramData\Sizefirstfirst.gu9d4
Supprime! - C:\ProgramData\Sizefirstfirst.h3qpl
Supprime! - C:\ProgramData\Sizefirstfirst.hegm0
Supprime! - C:\ProgramData\Sizefirstfirst.hxtsk
Supprime! - C:\ProgramData\Sizefirstfirst.i7uyx
Supprime! - C:\ProgramData\Sizefirstfirst.ip7nv
Supprime! - C:\ProgramData\Sizefirstfirst.iyoyh
Supprime! - C:\ProgramData\Sizefirstfirst.jowj0
Supprime! - C:\ProgramData\Sizefirstfirst.jt1hz
Supprime! - C:\ProgramData\Sizefirstfirst.ko3av
Supprime! - C:\ProgramData\Sizefirstfirst.kot9l
Supprime! - C:\ProgramData\Sizefirstfirst.l39f1
Supprime! - C:\ProgramData\Sizefirstfirst.mr2vy
Supprime! - C:\ProgramData\Sizefirstfirst.muu90
Supprime! - C:\ProgramData\Sizefirstfirst.naws7
Supprime! - C:\ProgramData\Sizefirstfirst.nbdf3
Supprime! - C:\ProgramData\Sizefirstfirst.nheci
Supprime! - C:\ProgramData\Sizefirstfirst.o4gih
Supprime! - C:\ProgramData\Sizefirstfirst.oldl0
Supprime! - C:\ProgramData\Sizefirstfirst.omb5w
Supprime! - C:\ProgramData\Sizefirstfirst.p1dx1
Supprime! - C:\ProgramData\Sizefirstfirst.p7n1w
Supprime! - C:\ProgramData\Sizefirstfirst.plgqs
Supprime! - C:\ProgramData\Sizefirstfirst.ptazu
Supprime! - C:\ProgramData\Sizefirstfirst.ptyht
Supprime! - C:\ProgramData\Sizefirstfirst.qpn97
Supprime! - C:\ProgramData\Sizefirstfirst.r00wz
Supprime! - C:\ProgramData\Sizefirstfirst.r010x
Supprime! - C:\ProgramData\Sizefirstfirst.r3w8y
Supprime! - C:\ProgramData\Sizefirstfirst.r6j85
Supprime! - C:\ProgramData\Sizefirstfirst.ra1c0
Supprime! - C:\ProgramData\Sizefirstfirst.rfmpz
Supprime! - C:\ProgramData\Sizefirstfirst.rhbng
Supprime! - C:\ProgramData\Sizefirstfirst.rv5ym
Supprime! - C:\ProgramData\Sizefirstfirst.splnx
Supprime! - C:\ProgramData\Sizefirstfirst.t334j
Supprime! - C:\ProgramData\Sizefirstfirst.tjje7
Supprime! - C:\ProgramData\Sizefirstfirst.ty06a
Supprime! - C:\ProgramData\Sizefirstfirst.ulolg
Supprime! - C:\ProgramData\Sizefirstfirst.use8n
Supprime! - C:\ProgramData\Sizefirstfirst.w3c30
Supprime! - C:\ProgramData\Sizefirstfirst.w8gez
Supprime! - C:\ProgramData\Sizefirstfirst.xpnm5
Supprime! - C:\ProgramData\Sizefirstfirst.xwu30
Supprime! - C:\ProgramData\Sizefirstfirst.y1meh
Supprime! - C:\ProgramData\Sizefirstfirst.ybx0t
Supprime! - C:\ProgramData\Sizefirstfirst.z0icc
Supprime! - C:\ProgramData\Sizefirstfirst.z3hq4
Supprime! - C:\ProgramData\Sizefirstfirst.z4k62
Supprime! - C:\ProgramData\Sizefirstfirst.zl0ci
Supprime! - C:\ProgramData\Sizefirstfirst.zmuil
Supprime! - C:\ProgramData\Sizefirstfirst.zuu7r
Supprime! - C:\ProgramData\Sizefirstfirst.zx08x
Supprime! - C:\ProgramData\Sect barb funk.mrt72m
Supprime! - C:\ProgramData\Sizefirstfirst.084whq
Supprime! - C:\ProgramData\Sizefirstfirst.0g5e2g
Supprime! - C:\ProgramData\Sizefirstfirst.12qat1
Supprime! - C:\ProgramData\Sizefirstfirst.2a1xvv
Supprime! - C:\ProgramData\Sizefirstfirst.2bt10e
Supprime! - C:\ProgramData\Sizefirstfirst.2tpq98
Supprime! - C:\ProgramData\Sizefirstfirst.3314a9
Supprime! - C:\ProgramData\Sizefirstfirst.3iid7y
Supprime! - C:\ProgramData\Sizefirstfirst.3niuu0
Supprime! - C:\ProgramData\Sizefirstfirst.41naqh
Supprime! - C:\ProgramData\Sizefirstfirst.4ldewm
Supprime! - C:\ProgramData\Sizefirstfirst.4y5iq0
Supprime! - C:\ProgramData\Sizefirstfirst.4zfwlx
Supprime! - C:\ProgramData\Sizefirstfirst.5qq68a
Supprime! - C:\ProgramData\Sizefirstfirst.5wks1u
Supprime! - C:\ProgramData\Sizefirstfirst.5xfr0j
Supprime! - C:\ProgramData\Sizefirstfirst.67gb8w
Supprime! - C:\ProgramData\Sizefirstfirst.67w1pf
Supprime! - C:\ProgramData\Sizefirstfirst.6szufg
Supprime! - C:\ProgramData\Sizefirstfirst.7nn7be
Supprime! - C:\ProgramData\Sizefirstfirst.90jvug
Supprime! - C:\ProgramData\Sizefirstfirst.99l3kf
Supprime! - C:\ProgramData\Sizefirstfirst.9anedh
Supprime! - C:\ProgramData\Sizefirstfirst.9g129t
Supprime! - C:\ProgramData\Sizefirstfirst.9i8gct
Supprime! - C:\ProgramData\Sizefirstfirst.a6uduc
Supprime! - C:\ProgramData\Sizefirstfirst.arc2qz
Supprime! - C:\ProgramData\Sizefirstfirst.bi4nu5
Supprime! - C:\ProgramData\Sizefirstfirst.cs9ixr
Supprime! - C:\ProgramData\Sizefirstfirst.cy84pb
Supprime! - C:\ProgramData\Sizefirstfirst.de5uo8
Supprime! - C:\ProgramData\Sizefirstfirst.eczm46
Supprime! - C:\ProgramData\Sizefirstfirst.fgv1jz
Supprime! - C:\ProgramData\Sizefirstfirst.geep84
Supprime! - C:\ProgramData\Sizefirstfirst.gf7gq9
Supprime! - C:\ProgramData\Sizefirstfirst.h0wfg6
Supprime! - C:\ProgramData\Sizefirstfirst.h3a9lt
Supprime! - C:\ProgramData\Sizefirstfirst.hxvrpc
Supprime! - C:\ProgramData\Sizefirstfirst.i3kzkw
Supprime! - C:\ProgramData\Sizefirstfirst.iej69a
Supprime! - C:\ProgramData\Sizefirstfirst.j7rmpn
Supprime! - C:\ProgramData\Sizefirstfirst.k3316v
Supprime! - C:\ProgramData\Sizefirstfirst.k3q21t
Supprime! - C:\ProgramData\Sizefirstfirst.mlrktn
Supprime! - C:\ProgramData\Sizefirstfirst.mx74ep
Supprime! - C:\ProgramData\Sizefirstfirst.nmup08
Supprime! - C:\ProgramData\Sizefirstfirst.pgi3kj
Supprime! - C:\ProgramData\Sizefirstfirst.q3bdjm
Supprime! - C:\ProgramData\Sizefirstfirst.q8rdoo
Supprime! - C:\ProgramData\Sizefirstfirst.qh3hyo
Supprime! - C:\ProgramData\Sizefirstfirst.qqy451
Supprime! - C:\ProgramData\Sizefirstfirst.r9ev89
Supprime! - C:\ProgramData\Sizefirstfirst.rf4dps
Supprime! - C:\ProgramData\Sizefirstfirst.rk03fk
Supprime! - C:\ProgramData\Sizefirstfirst.ryfok6
Supprime! - C:\ProgramData\Sizefirstfirst.s6mqp2
Supprime! - C:\ProgramData\Sizefirstfirst.s9rqlq
Supprime! - C:\ProgramData\Sizefirstfirst.say67v
Supprime! - C:\ProgramData\Sizefirstfirst.t46qpq
Supprime! - C:\ProgramData\Sizefirstfirst.t4uj3p
Supprime! - C:\ProgramData\Sizefirstfirst.tguhsz
Supprime! - C:\ProgramData\Sizefirstfirst.tmuupu
Supprime! - C:\ProgramData\Sizefirstfirst.u1ggu9
Supprime! - C:\ProgramData\Sizefirstfirst.uamzzq
Supprime! - C:\ProgramData\Sizefirstfirst.uhl46m
Supprime! - C:\ProgramData\Sizefirstfirst.ui4hx5
Supprime! - C:\ProgramData\Sizefirstfirst.unv8yx
Supprime! - C:\ProgramData\Sizefirstfirst.uvy91y
Supprime! - C:\ProgramData\Sizefirstfirst.w2fzn3
Supprime! - C:\ProgramData\Sizefirstfirst.w827m2
Supprime! - C:\ProgramData\Sizefirstfirst.wev3gx
Supprime! - C:\ProgramData\Sizefirstfirst.xgeuuq
Supprime! - C:\ProgramData\Sizefirstfirst.y0de08
Supprime! - C:\ProgramData\Sizefirstfirst.yaejul
Supprime! - C:\ProgramData\Sizefirstfirst.yiyy3r
Supprime! - C:\ProgramData\Sizefirstfirst.ykavkq
Supprime! - C:\ProgramData\Sizefirstfirst.yw27dd
Supprime! - C:\ProgramData\Sizefirstfirst.z7uohn
Supprime! - C:\ProgramData\settings soft slow.p65saf9
Supprime! - C:\ProgramData\Sizefirstfirst.06bqkpc
Supprime! - C:\ProgramData\Sizefirstfirst.0tncnig
Supprime! - C:\ProgramData\Sizefirstfirst.167kmgy
Supprime! - C:\ProgramData\Sizefirstfirst.329e8fl
Supprime! - C:\ProgramData\Sizefirstfirst.34f5fae
Supprime! - C:\ProgramData\Sizefirstfirst.36acn6s
Supprime! - C:\ProgramData\Sizefirstfirst.37sbhmj
Supprime! - C:\ProgramData\Sizefirstfirst.3a0s0dz
Supprime! - C:\ProgramData\Sizefirstfirst.3r10ju4
Supprime! - C:\ProgramData\Sizefirstfirst.4an4btr
Supprime! - C:\ProgramData\Sizefirstfirst.4mtfa55
Supprime! - C:\ProgramData\Sizefirstfirst.4vzuu8r
Supprime! - C:\ProgramData\Sizefirstfirst.5106kva
Supprime! - C:\ProgramData\Sizefirstfirst.5e601ea
Supprime! - C:\ProgramData\Sizefirstfirst.5kmhrgp
Supprime! - C:\ProgramData\Sizefirstfirst.72j6hhm
Supprime! - C:\ProgramData\Sizefirstfirst.7c17ega
Supprime! - C:\ProgramData\Sizefirstfirst.7nu4323
Supprime! - C:\ProgramData\Sizefirstfirst.84dq28p
Supprime! - C:\ProgramData\Sizefirstfirst.8lfcqnh
Supprime! - C:\ProgramData\Sizefirstfirst.8sltu5k
Supprime! - C:\ProgramData\Sizefirstfirst.90ufp9v
Supprime! - C:\ProgramData\Sizefirstfirst.97tjud3
Supprime! - C:\ProgramData\Sizefirstfirst.9i9ubfr
Supprime! - C:\ProgramData\Sizefirstfirst.ash5tdi
Supprime! - C:\ProgramData\Sizefirstfirst.b1l8fk5
Supprime! - C:\ProgramData\Sizefirstfirst.crwn0nt
Supprime! - C:\ProgramData\Sizefirstfirst.d7cjs3d
Supprime! - C:\ProgramData\Sizefirstfirst.dcfoqhp
Supprime! - C:\ProgramData\Sizefirstfirst.dgjsobl
Supprime! - C:\ProgramData\Sizefirstfirst.dpic4s6
Supprime! - C:\ProgramData\Sizefirstfirst.f8vzt6m
Supprime! - C:\ProgramData\Sizefirstfirst.fd6sor3
Supprime! - C:\ProgramData\Sizefirstfirst.fttdgrp
Supprime! - C:\ProgramData\Sizefirstfirst.gjb8dqp
Supprime! - C:\ProgramData\Sizefirstfirst.h6bxfah
Supprime! - C:\ProgramData\Sizefirstfirst.hm3euqw
Supprime! - C:\ProgramData\Sizefirstfirst.ibfv73i
Supprime! - C:\ProgramData\Sizefirstfirst.ifxft57
Supprime! - C:\ProgramData\Sizefirstfirst.imp6zer
Supprime! - C:\ProgramData\Sizefirstfirst.ireckq6
Supprime! - C:\ProgramData\Sizefirstfirst.ka761cq
Supprime! - C:\ProgramData\Sizefirstfirst.kn6lk8f
Supprime! - C:\ProgramData\Sizefirstfirst.ltfouiy
Supprime! - C:\ProgramData\Sizefirstfirst.lypwhgk
Supprime! - C:\ProgramData\Sizefirstfirst.m74h2t0
Supprime! - C:\ProgramData\Sizefirstfirst.miqpb4n
Supprime! - C:\ProgramData\Sizefirstfirst.mwdienx
Supprime! - C:\ProgramData\Sizefirstfirst.n9oioq7
Supprime! - C:\ProgramData\Sizefirstfirst.nkgjyt7
Supprime! - C:\ProgramData\Sizefirstfirst.nzvnwfi
Supprime! - C:\ProgramData\Sizefirstfirst.oqn99zd
Supprime! - C:\ProgramData\Sizefirstfirst.oxdl80a
Supprime! - C:\ProgramData\Sizefirstfirst.p259siv
Supprime! - C:\ProgramData\Sizefirstfirst.pn43pr6
Supprime! - C:\ProgramData\Sizefirstfirst.porbst4
Supprime! - C:\ProgramData\Sizefirstfirst.ppaj2k4
Supprime! - C:\ProgramData\Sizefirstfirst.qt169di
Supprime! - C:\ProgramData\Sizefirstfirst.ra6ug2k
Supprime! - C:\ProgramData\Sizefirstfirst.rhl0pm9
Supprime! - C:\ProgramData\Sizefirstfirst.t1hapke
Supprime! - C:\ProgramData\Sizefirstfirst.tb36s6p
Supprime! - C:\ProgramData\Sizefirstfirst.th50vtw
Supprime! - C:\ProgramData\Sizefirstfirst.u68l2bz
Supprime! - C:\ProgramData\Sizefirstfirst.utyi2az
Supprime! - C:\ProgramData\Sizefirstfirst.uwwxv9m
Supprime! - C:\ProgramData\Sizefirstfirst.w1f77hl
Supprime! - C:\ProgramData\Sizefirstfirst.wf420dp
Supprime! - C:\ProgramData\Sizefirstfirst.y1dv5iq
Supprime! - C:\ProgramData\Sizefirstfirst.yu72ffi
Supprime! - C:\ProgramData\Sizefirstfirst.zb5nqfu
Supprime! - C:\ProgramData\Sizefirstfirst.zfv6kub
Supprime! - C:\ProgramData\Sizefirstfirst.zy0ygub
Supprime! - C:\ProgramData\aim rect help creative
Supprime! - C:\Program Files\BitDownload
Supprime! - C:\Program Files\BitTorrent Fastest Tool
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[02/07/2008|15:03] C:\Users\David\AppData\Local\Adobe
[29/04/2008|15:06] C:\Users\David\AppData\Local\Ahead
[16/01/2008|15:33] C:\Users\David\AppData\Local\Application Data
[18/11/2008|20:34] C:\Users\David\AppData\Local\d3d9caps.dat
[19/11/2008|15:45] C:\Users\David\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[16/01/2008|21:52] C:\Users\David\AppData\Local\eMule
[01/07/2008|20:09] C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
[14/10/2008|19:54] C:\Users\David\AppData\Local\GlobalSCAPE
[22/11/2008|17:00] C:\Users\David\AppData\Local\Google
[16/01/2008|15:39] C:\Users\David\AppData\Local\Hewlett-Packard
[16/01/2008|15:33] C:\Users\David\AppData\Local\Historique
[15/04/2008|16:46] C:\Users\David\AppData\Local\HP
[22/11/2008|18:04] C:\Users\David\AppData\Local\IconCache.db
[16/07/2008|15:41] C:\Users\David\AppData\Local\Installer19396
[16/07/2008|15:49] C:\Users\David\AppData\Local\Installer9544
[22/11/2008|00:00] C:\Users\David\AppData\Local\Microsoft
[11/02/2008|23:53] C:\Users\David\AppData\Local\Microsoft Games
[27/03/2008|18:10] C:\Users\David\AppData\Local\Mozilla
[29/04/2008|15:11] C:\Users\David\AppData\Local\Nero
[26/06/2008|11:07] C:\Users\David\AppData\Local\Panda Software
[19/02/2008|18:31] C:\Users\David\AppData\Local\Sony
[22/11/2008|22:26] C:\Users\David\AppData\Local\Temp
[08/10/2008|16:42] C:\Users\David\AppData\Local\TempData.ldb
[08/10/2008|16:41] C:\Users\David\AppData\Local\TempData.mdb
[16/01/2008|15:33] C:\Users\David\AppData\Local\Temporary Internet Files
[30/06/2008|10:51] C:\Users\David\AppData\Local\Virtools
[30/01/2008|19:55] C:\Users\David\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[22/11/2008 18:55][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{31DF0D02-808A-4ED2-9355-0EAF40D469EC}.job
[22/11/2008 18:07][--ah-----] C:\Windows\tasks\SA.DAT
[22/11/2008 18:05][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[12/11/2008|21:27] C:\ProgramData\Adobe
[27/01/2008|20:17] C:\ProgramData\Ahead
[02/11/2006|14:02] C:\ProgramData\Application Data
[16/11/2008|20:14] C:\ProgramData\Boob gram iso
[16/01/2008|15:30] C:\ProgramData\Bureau
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[16/01/2008|21:52] C:\ProgramData\eMule
[17/04/2008|22:37] C:\ProgramData\ezsid.dat
[16/01/2008|15:30] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[17/11/2008|00:16] C:\ProgramData\Fighters
[01/07/2008|20:09] C:\ProgramData\FLEXnet
[11/06/2008|03:23] C:\ProgramData\FreeDownloadManager.ORG
[14/10/2008|19:54] C:\ProgramData\GlobalSCAPE
[22/11/2008|16:59] C:\ProgramData\Google
[18/11/2008|16:24] C:\ProgramData\Grisoft
[16/01/2008|15:40] C:\ProgramData\Hewlett-Packard
[24/10/2007|22:36] C:\ProgramData\HP
[24/10/2007|22:36] C:\ProgramData\hpzinstall.log
[04/11/2008|22:42] C:\ProgramData\ICQ
[22/11/2008|18:07] C:\ProgramData\Kaspersky Lab
[27/07/2008|02:16] C:\ProgramData\Kaspersky Lab Setup Files
[16/11/2008|01:25] C:\ProgramData\Lavasoft
[29/04/2008|14:56] C:\ProgramData\LightScribe
[07/09/2008|13:09] C:\ProgramData\Logishrd
[30/04/2008|08:46] C:\ProgramData\Logitech
[15/03/2008|23:41] C:\ProgramData\LUUnInstall.LiveUpdate
[16/01/2008|15:30] C:\ProgramData\Menu D‚marrer
[30/04/2008|08:23] C:\ProgramData\Microsoft
[16/01/2008|15:30] C:\ProgramData\ModŠles
[24/10/2007|22:43] C:\ProgramData\muvee Technologies
[10/06/2008|11:45] C:\ProgramData\NCH Software
[10/06/2008|11:42] C:\ProgramData\NCH Swift Sound
[22/08/2008|12:06] C:\ProgramData\Nero
[30/08/2008|21:31] C:\ProgramData\NVIDIA
[24/10/2007|22:49] C:\ProgramData\PC-Doctor
[18/10/2008|13:32] C:\ProgramData\Roxio
[22/05/2008|11:54] C:\ProgramData\Skype
[24/10/2007|22:37] C:\ProgramData\Sonic
[14/02/2008|23:57] C:\ProgramData\Sony
[21/11/2008|17:32] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|14:02] C:\ProgramData\Start Menu
[15/03/2008|23:43] C:\ProgramData\Symantec
[15/11/2008|18:19] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[08/10/2008|03:05] C:\ProgramData\WindowsSearch
[16/01/2008|17:06] C:\ProgramData\WLInstaller
[29/07/2008|02:16] C:\ProgramData\Yahoo!
[29/07/2008|02:19] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[12/11/2008|21:26] C:\Program Files\Adobe
[03/10/2008|19:12] C:\Program Files\Alcohol Soft
[18/01/2008|00:51] C:\Program Files\Armenian NLS
[10/06/2008|13:19] C:\Program Files\AtomixMP3
[10/06/2008|00:23] C:\Program Files\AviSynth 2.5
[10/06/2008|11:36] C:\Program Files\AVS4YOU
[16/09/2008|16:22] C:\Program Files\BClub
[10/06/2008|11:31] C:\Program Files\Best_Security_Tips
[15/11/2008|02:07] C:\Program Files\CCleaner
[13/10/2008|19:17] C:\Program Files\clock-desktop
[22/11/2008|14:13] C:\Program Files\Common Files
[14/09/2008|20:08] C:\Program Files\DivX
[06/10/2008|17:45] C:\Program Files\Download Direct
[25/10/2007|07:37] C:\Program Files\EasyBits
[18/01/2008|22:28] C:\Program Files\EasyBits For Kids
[16/01/2008|21:52] C:\Program Files\eMule
[08/06/2008|23:40] C:\Program Files\eMule Turbo Accelerator
[16/11/2008|20:08] C:\Program Files\Enigma Software Group
[10/09/2008|13:02] C:\Program Files\EoRezo
[16/01/2008|15:30] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[22/11/2008|00:40] C:\Program Files\Fighters
[11/06/2008|03:24] C:\Program Files\Free Download Manager
[09/11/2008|03:37] C:\Program Files\FREE Music Downloader
[14/10/2008|19:54] C:\Program Files\GlobalSCAPE
[22/11/2008|17:00] C:\Program Files\Google
[18/11/2008|16:24] C:\Program Files\Grisoft
[28/09/2008|19:57] C:\Program Files\GTR 2
[24/10/2007|22:50] C:\Program Files\Hewlett-Packard
[29/08/2008|18:15] C:\Program Files\HP
[04/11/2008|22:43] C:\Program Files\ICQ6
[04/11/2008|22:42] C:\Program Files\ICQ6Toolbar
[09/11/2008|19:14] C:\Program Files\InstallShield Installation Information
[21/09/2008|02:01] C:\Program Files\Internet Explorer
[17/08/2008|02:19] C:\Program Files\IZArc
[10/07/2008|20:17] C:\Program Files\Java
[27/07/2008|02:24] C:\Program Files\Kaspersky Lab
[09/11/2008|18:43] C:\Program Files\LG Electronics
[07/09/2008|13:09] C:\Program Files\Logitech
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[24/10/2007|22:46] C:\Program Files\Microsoft Office
[14/02/2008|23:59] C:\Program Files\Microsoft SQL Server
[10/09/2008|14:02] C:\Program Files\Microsoft Works
[09/05/2008|20:49] C:\Program Files\Movie Maker
[22/11/2008|15:44] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[16/01/2008|17:27] C:\Program Files\MSXML 4.0
[24/10/2007|22:43] C:\Program Files\muvee Technologies
[22/11/2008|00:03] C:\Program Files\Navilog1
[11/06/2008|12:10] C:\Program Files\NCH Software
[22/08/2008|11:40] C:\Program Files\NCH Swift Sound
[22/08/2008|12:06] C:\Program Files\Nero
[29/04/2008|14:55] C:\Program Files\NeroInstall.bak
[16/01/2008|15:50] C:\Program Files\NETGEAR
[02/06/2008|17:09] C:\Program Files\Opera
[24/10/2007|23:04] C:\Program Files\PC-Doctor 5 for Windows
[04/02/2008|22:47] C:\Program Files\Rambler Assistant
[06/03/2008|17:56] C:\Program Files\Real
[28/03/2008|19:47] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[10/06/2008|00:04] C:\Program Files\Replay Converter
[24/10/2007|22:42] C:\Program Files\Roxio
[20/09/2008|16:32] C:\Program Files\San Andreas Mod Installer
[24/10/2007|22:52] C:\Program Files\Services en ligne
[22/05/2008|11:54] C:\Program Files\Skype
[11/06/2008|03:23] C:\Program Files\Software Informer
[19/03/2008|14:43] C:\Program Files\Sony
[19/02/2008|18:28] C:\Program Files\Sony Setup
[15/11/2008|18:21] C:\Program Files\Spybot - Search & Destroy
[13/11/2008|03:12] C:\Program Files\Steam
[10/07/2008|20:18] C:\Program Files\Sun
[15/03/2008|23:41] C:\Program Files\Symantec
[19/03/2008|19:34] C:\Program Files\SystemRequirementsLab
[15/02/2008|00:01] C:\Program Files\Uninstall Information
[13/10/2008|19:00] C:\Program Files\UselessCreations
[03/10/2008|14:53] C:\Program Files\uTorrent
[29/01/2008|20:59] C:\Program Files\Veoh Networks
[17/01/2008|13:57] C:\Program Files\VideoLAN
[30/06/2008|10:51] C:\Program Files\Virtools
[22/11/2008|14:51] C:\Program Files\WebMediaViewer
[09/05/2008|20:49] C:\Program Files\Windows Calendar
[09/05/2008|20:49] C:\Program Files\Windows Collaboration
[09/05/2008|20:49] C:\Program Files\Windows Defender
[09/05/2008|20:49] C:\Program Files\Windows Journal
[16/01/2008|17:10] C:\Program Files\Windows Live
[16/10/2008|19:35] C:\Program Files\Windows Mail
[09/05/2008|20:49] C:\Program Files\Windows Media Player
[16/01/2008|15:30] C:\Program Files\Windows NT
[09/05/2008|20:49] C:\Program Files\Windows Photo Gallery
[09/05/2008|20:49] C:\Program Files\Windows Sidebar
[29/07/2008|02:13] C:\Program Files\Yahoo!
[14/09/2008|19:05] C:\Program Files\Zaycev Downloader

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[12/11/2008|21:27] C:\Program Files\Common Files\Adobe
[27/01/2008|21:12] C:\Program Files\Common Files\Ahead
[10/06/2008|11:28] C:\Program Files\Common Files\AVSMedia
[24/10/2007|22:36] C:\Program Files\Common Files\HP
[14/10/2008|19:53] C:\Program Files\Common Files\InstallShield
[24/10/2007|22:45] C:\Program Files\Common Files\Java
[24/10/2007|22:43] C:\Program Files\Common Files\LightScribe
[07/09/2008|13:11] C:\Program Files\Common Files\logishrd
[30/04/2008|08:47] C:\Program Files\Common Files\Logitech
[24/10/2007|22:42] C:\Program Files\Common Files\LS Getting Started
[16/01/2008|17:11] C:\Program Files\Common Files\microsoft shared
[24/10/2007|22:43] C:\Program Files\Common Files\muvee Technologies
[22/08/2008|12:09] C:\Program Files\Common Files\Nero
[27/03/2008|18:29] C:\Program Files\Common Files\PX Storage Engine
[24/09/2008|17:12] C:\Program Files\Common Files\Real
[24/10/2007|22:42] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[22/05/2008|11:54] C:\Program Files\Common Files\Skype
[23/03/2008|19:11] C:\Program Files\Common Files\Softwin
[24/10/2007|22:42] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[12/11/2008|21:32] C:\Program Files\Common Files\Steam
[24/10/2007|22:37] C:\Program Files\Common Files\SureThing Shared
[23/09/2008|14:15] C:\Program Files\Common Files\SWF Studio
[15/03/2008|23:43] C:\Program Files\Common Files\Symantec Shared
[09/05/2008|20:49] C:\Program Files\Common Files\System
[16/01/2008|17:10] C:\Program Files\Common Files\WindowsLiveInstaller
[24/09/2008|17:12] C:\Program Files\Common Files\xing shared

--------------------\\ Process

( 76 Processes )

iexplore.exe ~ [PID:17684]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-22 22:29:51
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 13

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack
C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\SERIAL.txt
C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\soundforge90a_enu.exe


[F:18][D:10]-> C:\Users\David\AppData\Local\Temp
[F:238][D:1]-> C:\Users\David\AppData\Roaming\MICROS~1\Windows\Cookies
[F:3088][D:4]-> C:\Users\David\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:8][D:5]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 22/11/2008|18:17 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 22/11/2008|22:33 - Option : [2]

--------------------\\ Fin du rapport a 22:33:04
[ UAC => 1 ]

bonjour, l'infection lop est virée

1/ désinstalle ces programmes via ajout/suppr de programmes si présents :

- WebMediaViewer
- EoRezo

2/ supprime ces dossiers si encore présents :

C:\Program Files\WebMediaViewer
C:\Program Files\EoRezo

3/ vide ta corbeille

4/ repost moi un nouveau rapport hijackthis stp

bon dimanche

voila leraport, l triangle jaune est disparu mais l pages pub pas encore l reapares.

Logfile of HijackThis v1.99.1
Scan saved at 15:34:07, on 23/11/2008
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ICQ6\ICQ.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\eMule\emule.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\hp\kbd\kbd.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe
C:\Users\David\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: (no name) - {04EE7F17-A81D-499F-ADD1-E75ABCC13220} - C:\Windows\system32\mlJYrrqQ.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O3 - Toolbar: Rambler-Àññèñòåíò - {468CD8A9-7C25-45FA-969E-3D925C689DC4} - C:\Program Files\Rambler Assistant\ramblertoolbarU5090.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\vtUOHWol.dll,#1
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6\ICQ.exe" silent
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\David\AppData\Local\Temp\ddcDspom.dll,#1
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
O9 - Extra button: C????????? ?????? ???-??????? - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.ietoolexpress.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IExplorer Security - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.ietoolexpress.com/redirect.php (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O13 - Gopher Prefix:
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll dchuaw.dll
O20 - Winlogon Notify: klogon - C:\Windows\system32\klogon.dll
O23 - Service: Kaspersky Anti-Virus (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" -r (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

mon ordi est devenu tres lent de que je ves sur inetrnet ( internet explorer ou mozilla firefox) il se bloque

t'inquiète on va arranger ca

Passe un coup de MalwareBytes (scan complet) et nettoie tout ce qu'il trouve
Aide : http://www.site-naheulbeuk.com/malwarebytes.php
Post moi le rapport généré à la fin dans ta prochaine réponse

voila

http://forum.telecharger.01net.com/telecharger/securite_virus_et_assimiles/tr(...)

euh c'est pas le rapport que tu m'as posté là...

tout a rentrer dans l ordre tou march super bien merci!!!!!!!!