sympatico msn

Bonjour vous tous

Ça fait un bail, comme l'on dit
j'ai besoin de vos lumières svp

Voilà c'est pour une copine, mais j'ai déjà
eu ce genre d'affichage auparavant mais
je ne me souviens plus quelle solution
j'avais trouvée, il me semble avoir supprimé
dans panneau un programme ou module
mais je ne sais

Voici :

L'apparence de la page
d'accueil de sympatico.msn
je ne sais si c'est une extension ou module mais
plus que tout, au centre du site sympatico se
retrouve les sites ou forums qu'elle visite,
elle veut garder son sympatico msn mais pouvoir
ouvrir ses pages visitées ailleurs, voici en capture :


Page sympatico msn :




Page site à l'intérieur de sympatico msn et
barre d’adresse :



Internet s'ouvre à même sur le site
sympatico msn ???

Est-ce une
extension, un module ?
A l'aide ...

Avec remerciements d'avance !

bonjour
poste ce rapport stp
http://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
comme il est long tu risques d'avoir à le couper en plusieurs morceaux

Bonjour chrifleur, gentil de bien vouloir aider !

Voilà j'ai communiqué avec ma grande amie
et elle a fait le rapport que voici, oufff, beaucoup
d'écriture, bien je vous laisse déchiffrer, moi
nulle !


Logfile of random's system information tool 1.05 (written by random/random)
Run by Lise at 2009-01-24 13:07:07
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 37 GB (48%) free of 76 GB
Total RAM: 511 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:07:10, on 2009-01-24
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\Ati2evxx.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\Program Files\\Fichiers communs\\Symantec Shared\\ccSvcHst.exe
C:\\WINDOWS\\system32\\Ati2evxx.exe
C:\\WINDOWS\\Explorer.EXE
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\Program Files\\Symantec\\LiveUpdate\\AluSchedulerSvc.exe
C:\\Program Files\\Java\\jre6\\bin\\jqs.exe
C:\\Program Files\\CyberLink\\Shared Files\\RichVideo.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\Program Files\\Canon\\CAL\\CALMAIN.exe
C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\mwsoemon.exe
C:\\Program Files\\iTunes\\iTunesHelper.exe
C:\\Program Files\\Fichiers communs\\Symantec Shared\\ccSvcHst.exe
C:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe
C:\\Program Files\\lg_fwupdate\\fwupdate.exe
C:\\Program Files\\Microsoft IntelliPoint\\ipoint.exe
C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe
C:\\Program Files\\Microsoft IntelliPoint\\dpupdchk.exe
C:\\Program Files\\Picasa2\\PicasaMediaDetector.exe
C:\\WINDOWS\\system32\\ctfmon.exe
C:\\Program Files\\Windows Live\\Messenger\\MsnMsgr.Exe
C:\\Program Files\\iPod\\bin\\iPodService.exe
C:\\Program Files\\PROMT98\\INTEGRAL\\pinmenu.exe
C:\\WINDOWS\\System32\\wbem\\wmiapsrv.exe
C:\\Program Files\\Messenger\\msmsgs.exe
C:\\WINDOWS\\system32\\wuauclt.exe
C:\\PROGRA~1\\FICHIE~1\\SYMANT~1\\CCPD-LC\\symlcsvc.exe
C:\\Documents and Settings\\Lise\\Bureau\\RSIT.exe
C:\\Program Files\\trend micro\\Lise.exe

R0 - HKCU\\\\Software\\\\Microsoft\\\\Internet Explorer\\\\Main,Start Page = about:blank
R1 - HKLM\\\\Software\\\\Microsoft\\\\Internet Explorer\\\\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\\\\Software\\\\Microsoft\\\\Internet Explorer\\\\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\\\\Software\\\\Microsoft\\\\Internet Explorer\\\\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\\\\Software\\\\Microsoft\\\\Internet Explorer\\\\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\\\\Software\\\\Microsoft\\\\Internet Explorer\\\\Search,CustomizeSearch =
R1 - HKCU\\\\Software\\\\Microsoft\\\\Internet Connection Wizard,ShellNext = http://www.google.ca/
R0 - HKCU\\\\Software\\\\Microsoft\\\\Internet Explorer\\\\Toolbar,LinksFolderName = Liens
R3
- URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} -
C:\\\\Program Files\\\\MyWebSearch\\\\SrchAstt\\\\2.bin\\\\MWSSRCAS.DLL
O2 -
BHO: MyWebSearch Search Assistant BHO -
{00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\\\\Program
Files\\\\MyWebSearch\\\\SrchAstt\\\\2.bin\\\\MWSSRCAS.DLL
O2 - BHO: Aide
pour le lien d'Adobe PDF Reader -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\\\Program Files\\\\Fichiers
communs\\\\Adobe\\\\Acrobat\\\\ActiveX\\\\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\\\\Program Files\\\\MyWebSearch\\\\bar\\\\1.bin\\\\MWSBAR.DLL
O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\\\\Program Files\\\\Freecorder\\\\tbFree.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\\\\Program Files\\\\EoRezo\\\\EoAdv\\\\EoRezoBHO.dll
O2
- BHO: Symantec Intrusion Prevention -
{6D53EC84-6AAE-4787-AEEE-F4628F01010C} -
C:\\\\PROGRA~1\\\\FICHIE~1\\\\SYMANT~1\\\\IDS\\\\IPSBHO.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\\\Program Files\\\\Java\\\\jre6\\\\bin\\\\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2
- BHO: Windows Live Sign-in Helper -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\\\\Program Files\\\\Fichiers
communs\\\\Microsoft Shared\\\\Windows Live\\\\WindowsLiveLogin.dll
O2 - BHO: MEGAUPLOADTOOLBAR - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\\\\PROGRA~1\\\\MEGAUP~2\\\\MEGAUP~1.DLL
O2
- BHO: Windows Live Toolbar Helper -
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\\\\Program Files\\\\Windows
Live Toolbar\\\\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper -
{DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\\\\Program
Files\\\\Java\\\\jre6\\\\bin\\\\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl
- {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\\\\Program
Files\\\\Java\\\\jre6\\\\lib\\\\deploy\\\\jqs\\\\ie\\\\jqs_plugin.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\\\\PROGRA~1\\\\COPERN~1\\\\COPERN~1.DLL
O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\\\\Program Files\\\\Freecorder\\\\tbFree.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\\\\Program Files\\\\Windows Live Toolbar\\\\msntb.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\\\\Program Files\\\\MyWebSearch\\\\bar\\\\1.bin\\\\MWSBAR.DLL
O3 - Toolbar: MEGAUPLOADTOOLBAR - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\\\\PROGRA~1\\\\MEGAUP~2\\\\MEGAUP~1.DLL
O4 - HKLM\\\\..\\\\Run: [MyWebSearch Email Plugin] C:\\\\PROGRA~1\\\\MYWEBS~1\\\\bar\\\\1.bin\\\\mwsoemon.exe
O4 - HKLM\\\\..\\\\Run: [Adobe Reader Speed Launcher] "C:\\\\Program Files\\\\Adobe\\\\Reader 8.0\\\\Reader\\\\Reader_sl.exe"
O4 - HKLM\\\\..\\\\Run: [QuickTime Task] "C:\\\\Program Files\\\\QuickTime\\\\qttask.exe" -atboottime
O4 - HKLM\\\\..\\\\Run: [My Web Search Bar Search Scope Monitor] "C:\\\\PROGRA~1\\\\MYWEBS~1\\\\bar\\\\1.bin\\\\m3SrchMn.exe" /m=2 /w
O4 - HKLM\\\\..\\\\Run: [iTunesHelper] "C:\\\\Program Files\\\\iTunes\\\\iTunesHelper.exe"
O4 - HKLM\\\\..\\\\Run: [ccApp] "C:\\\\Program Files\\\\Fichiers communs\\\\Symantec Shared\\\\ccApp.exe"
O4 - HKLM\\\\..\\\\Run: [osCheck] "C:\\\\Program Files\\\\Norton AntiVirus\\\\osCheck.exe"
O4 - HKLM\\\\..\\\\Run: [RemoteControl] "C:\\\\Program Files\\\\CyberLink\\\\PowerDVD\\\\PDVDServ.exe"
O4 - HKLM\\\\..\\\\Run: [LanguageShortcut] "C:\\\\Program Files\\\\CyberLink\\\\PowerDVD\\\\Language\\\\Language.exe"
O4 - HKLM\\\\..\\\\Run: [LGODDFU] "C:\\\\Program Files\\\\lg_fwupdate\\\\fwupdate.exe" blrun
O4 - HKLM\\\\..\\\\Run: [NeroCheck] C:\\\\WINDOWS\\\\system32\\\\NeroCheck.exe
O4 - HKLM\\\\..\\\\Run: [IntelliPoint] "C:\\\\Program Files\\\\Microsoft IntelliPoint\\\\ipoint.exe"
O4 - HKLM\\\\..\\\\Run: [SunJavaUpdateSched] "C:\\\\Program Files\\\\Java\\\\jre1.5.0_11\\\\bin\\\\jusched.exe"
O4 - HKLM\\\\..\\\\Run: [SiSUSBRG] C:\\\\WINDOWS\\\\SiSUSBrg.exe
O4 - HKLM\\\\..\\\\Run: [Picasa Media Detector] C:\\\\Program Files\\\\Picasa2\\\\PicasaMediaDetector.exe
O4 - HKLM\\\\..\\\\Run: [NeroFilterCheck] C:\\\\WINDOWS\\\\system32\\\\NeroCheck.exe
O4 - HKLM\\\\..\\\\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKCU\\\\..\\\\Run: [ctfmon.exe] C:\\\\WINDOWS\\\\system32\\\\ctfmon.exe
O4 - HKCU\\\\..\\\\Run: [updateMgr] C:\\\\Program Files\\\\Adobe\\\\Acrobat 7.0\\\\Reader\\\\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\\\\..\\\\Run: [msnmsgr] "C:\\\\Program Files\\\\Windows Live\\\\Messenger\\\\MsnMsgr.Exe" /background
O4 - HKCU\\\\..\\\\Run: [Uniblue RegistryBooster 2] C:\\\\Program Files\\\\Uniblue\\\\RegistryBooster 2\\\\RegistryBooster.exe /S
O4 - HKCU\\\\..\\\\Run: [MyWebSearch Email Plugin] C:\\\\PROGRA~1\\\\MYWEBS~1\\\\bar\\\\1.bin\\\\mwsoemon.exe
O4 - HKCU\\\\..\\\\Run: [Windows update loader] C:\\\\Windows\\\\xpupdate.exe
O4 - HKCU\\\\..\\\\Run: [07326974531970044864184563051322] C:\\\\Program Files\\\\XP Antivirus\\\\xpa.exe
O4 - HKUS\\\\S-1-5-18\\\\..\\\\Run: [Picasa Media Detector] C:\\\\Program Files\\\\Picasa2\\\\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\\\\.DEFAULT\\\\..\\\\Run: [Picasa Media Detector] C:\\\\Program Files\\\\Picasa2\\\\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: Intégrateur PROjectMT 98.lnk = C:\\\\Program Files\\\\PROMT98\\\\INTEGRAL\\\\PINSTART.EXE

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKxdm021YYCA
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\\\\PROGRA~1\\\\COPERN~1\\\\COPERN~1.EXE
O9
- Extra 'Tools' menuitem: Démarrer Copernic Agent -
{193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} -
C:\\\\PROGRA~1\\\\COPERN~1\\\\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\\\\PROGRA~1\\\\COPERN~1\\\\COPERN~1.EXE
O9
- Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} -
C:\\\\Program Files\\\\PROMT98\\\\promtie4\\\\promtie5.htm
O9
- Extra 'Tools' menuitem: Traduire -
{7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\\\\Program
Files\\\\PROMT98\\\\promtie4\\\\promtie5.htm
O9
- Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} -
C:\\\\Program Files\\\\PROMT98\\\\promtie4\\\\options.htm
O9
- Extra 'Tools' menuitem: Personnalisez traduction -
{7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\\\\Program
Files\\\\PROMT98\\\\promtie4\\\\options.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\\\\PROGRA~1\\\\MICROS~2\\\\Office12\\\\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\\\\WINDOWS\\\\Network Diagnostic\\\\xpnetdiag.exe
O9
- Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\\\\WINDOWS\\\\Network
Diagnostic\\\\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\\\Program Files\\\\Messenger\\\\msmsgs.exe
O9
- Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\\\Program
Files\\\\Messenger\\\\msmsgs.exe
O12 - Plugin for .spop: C:\\\\Program Files\\\\Internet Explorer\\\\Plugins\\\\NPDocBox.dll
O16
- DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage
Validation Tool) - http://go.microsoft.com/fwlink/?linkid=67633
O16 - DPF: {1A26F07F-0D60-4835-91CF-1E1766A0EC56} - http://scanner2.malware-scan.com/setup/webinst_fr.cab
O16
- DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/WebfettiInitialSetup1.0.0.15-3.cab
O16
- DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF:
{74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16
- DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment
1.6.0) -
http://sdlc-esd.sun.com/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?AuthParam=1229902500_fb48ac9c65a6d108225a284ae696a6e7&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab&File=jinstall-6u11-windows-i586-jc.cab
O16
- DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
- http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\\\\WINDOWS\\\\system32\\\\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\\\\WINDOWS\\\\system32\\\\ati2sgag.exe
O23
- Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate
Scheduler) - Symantec Corporation - C:\\\\Program
Files\\\\Symantec\\\\LiveUpdate\\\\AluSchedulerSvc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\\\\Program Files\\\\Canon\\\\CAL\\\\CALMAIN.exe
O23
- Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
C:\\\\Program Files\\\\Fichiers communs\\\\Symantec Shared\\\\ccSvcHst.exe
O23
- Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation
- C:\\\\Program Files\\\\Fichiers communs\\\\Symantec Shared\\\\ccSvcHst.exe
O23
- Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec
Corporation - C:\\\\Program Files\\\\Fichiers communs\\\\Symantec
Shared\\\\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) -
Google - C:\\\\Program Files\\\\Google\\\\Common\\\\Google
Updater\\\\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\\\\Program Files\\\\iPod\\\\bin\\\\iPodService.exe
O23
- Service: Java Quick Starter (JavaQuickStarterService) - Sun
Microsystems, Inc. - C:\\\\Program Files\\\\Java\\\\jre6\\\\bin\\\\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\\\\Program Files\\\\Symantec\\\\LiveUpdate\\\\LuComServer_3_4.EXE
O23
- Service: LiveUpdate Notice - Symantec Corporation - C:\\\\Program
Files\\\\Fichiers communs\\\\Symantec Shared\\\\ccSvcHst.exe
O23
- Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown
owner - C:\\\\Program Files\\\\CyberLink\\\\Shared Files\\\\RichVideo.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\\\\PROGRA~1\\\\FICHIE~1\\\\SYMANT~1\\\\CCPD-LC\\\\symlcsvc.exe
End of file - 11834 bytes

======Scheduled tasks folder======

C:\\\\WINDOWS\\\\tasks\\\\1 Copernic Intra-Daily ~LISE-X417VFDUNK Lise.job
C:\\\\WINDOWS\\\\tasks\\\\2 Copernic Daily ~LISE-X417VFDUNK Lise.job
C:\\\\WINDOWS\\\\tasks\\\\3 Copernic Weekly ~LISE-X417VFDUNK Lise.job
C:\\\\WINDOWS\\\\tasks\\\\4 Copernic Monthly ~LISE-X417VFDUNK Lise.job
C:\\\\WINDOWS\\\\tasks\\\\Check Updates for Windows Live Toolbar.job
C:\\\\WINDOWS\\\\tasks\\\\Norton AntiVirus - Effectuer une analyse complète du système - Lise.job
C:\\\\WINDOWS\\\\tasks\\\\SpywareBot Scheduled Scan.job


======Registry dump======

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{00A6FAF1-072E-44cf-8957-5838F569A31D}]
MyWebSearch Search Assistant BHO - C:\\\\Program Files\\\\MyWebSearch\\\\SrchAstt\\\\2.bin\\\\MWSSRCAS.DLL [2008-04-17 57344]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le
lien d'Adobe PDF Reader - C:\\\\Program Files\\\\Fichiers
communs\\\\Adobe\\\\Acrobat\\\\ActiveX\\\\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
mwsBar BHO - C:\\\\Program Files\\\\MyWebSearch\\\\bar\\\\1.bin\\\\MWSBAR.DLL [2008-04-17 381012]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
Freecorder Toolbar - C:\\\\Program Files\\\\Freecorder\\\\tbFree.dll [2007-07-31 1391640]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{64F56FC1-1272-44CD-BA6E-39723696E350}]
EoBho Class - C:\\\\Program Files\\\\EoRezo\\\\EoAdv\\\\EoRezoBHO.dll [2007-01-25 106496]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\\\\PROGRA~1\\\\FICHIE~1\\\\SYMANT~1\\\\IDS\\\\IPSBHO.dll [2008-06-02 116088]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\\\\Program Files\\\\Java\\\\jre6\\\\bin\\\\ssv.dll [2008-12-21 320920]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live
Sign-in Helper - C:\\\\Program Files\\\\Fichiers communs\\\\Microsoft
Shared\\\\Windows Live\\\\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{A057A204-BACC-4D26-C39E-35F1D2A32EC8}]
MEGAUPLOADTOOLBAR - C:\\\\PROGRA~1\\\\MEGAUP~2\\\\MEGAUP~1.DLL [2008-08-04 1947080]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\\\\Program Files\\\\Windows Live Toolbar\\\\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\\\\Program Files\\\\Java\\\\jre6\\\\bin\\\\jp2ssv.dll [2008-12-21 34816]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser
Helper Objects\\\\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl
Class - C:\\\\Program
Files\\\\Java\\\\jre6\\\\lib\\\\deploy\\\\jqs\\\\ie\\\\jqs_plugin.dll
[2008-12-21 73728]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Internet Explorer\\\\Toolbar]
{F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - Copernic Agent - C:\\\\PROGRA~1\\\\COPERN~1\\\\COPERN~1.DLL [2004-12-02 1142744]
{1392b8d2-5c05-419f-a8f6-b9f15a596612}
- Freecorder Toolbar - C:\\\\Program Files\\\\Freecorder\\\\tbFree.dll
[2007-07-31 1391640]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
- Windows Live Toolbar - C:\\\\Program Files\\\\Windows Live
Toolbar\\\\msntb.dll [2007-10-19 546320]
{07B18EA9-A523-4961-B6BB-170DE4475CCA}
- My Web Search - C:\\\\Program
Files\\\\MyWebSearch\\\\bar\\\\1.bin\\\\MWSBAR.DLL [2008-04-17 381012]
{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - MEGAUPLOADTOOLBAR - C:\\\\PROGRA~1\\\\MEGAUP~2\\\\MEGAUP~1.DLL [2008-08-04 1947080]

[HKEY_LOCAL_MACHINE\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Run]
"MyWebSearch Email Plugin"=C:\\\\PROGRA~1\\\\MYWEBS~1\\\\bar\\\\1.bin\\\\mwsoemon.exe [2008-04-17 28672]
"Adobe Reader Speed Launcher"=C:\\\\Program Files\\\\Adobe\\\\Reader 8.0\\\\Reader\\\\Reader_sl.exe [2008-01-11 39792]
"QuickTime Task"=C:\\\\Program Files\\\\QuickTime\\\\qttask.exe [2008-03-28 413696]
"My Web Search Bar Search Scope Monitor"=C:\\\\PROGRA~1\\\\MYWEBS~1\\\\bar\\\\1.bin\\\\m3SrchMn.exe /m=2 /w []
"iTunesHelper"=C:\\\\Program Files\\\\iTunes\\\\iTunesHelper.exe [2008-03-30 267048]
"ccApp"=C:\\\\Program Files\\\\Fichiers communs\\\\Symantec Shared\\\\ccApp.exe [2008-10-17 51048]
"osCheck"=C:\\\\Program Files\\\\Norton AntiVirus\\\\osCheck.exe [2007-08-24 714608]
"RemoteControl"=C:\\\\Program Files\\\\CyberLink\\\\PowerDVD\\\\PDVDServ.exe [2006-11-23 56928]
"LanguageShortcut"=C:\\\\Program Files\\\\CyberLink\\\\PowerDVD\\\\Language\\\\Language.exe [2006-12-05 54832]
"LGODDFU"=C:\\\\Program Files\\\\lg_fwupdate\\\\fwupdate.exe [2008-12-27 548864]
"NeroCheck"=C:\\\\WINDOWS\\\\system32\\\\NeroCheck.exe [2001-07-09 155648]
"IntelliPoint"=C:\\\\Program Files\\\\Microsoft IntelliPoint\\\\ipoint.exe [2007-08-31 1037736]
"SunJavaUpdateSched"=C:\\\\Program Files\\\\Java\\\\jre1.5.0_11\\\\bin\\\\jusched.exe [2006-12-15 75520]
"SiSUSBRG"=C:\\\\WINDOWS\\\\SiSUSBrg.exe [2002-07-12 106496]
"Picasa Media Detector"=C:\\\\Program Files\\\\Picasa2\\\\PicasaMediaDetector.exe [2007-09-27 443968]
"NeroFilterCheck"=C:\\\\WINDOWS\\\\system32\\\\NeroCheck.exe [2001-07-09 155648]
"Cmaudio"=RunDll32 cmicnfg.cpl []

[HKEY_CURRENT_USER\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Run]
"ctfmon.exe"=C:\\\\WINDOWS\\\\system32\\\\ctfmon.exe [2004-08-19 15360]
"updateMgr"=C:\\\\Program Files\\\\Adobe\\\\Acrobat 7.0\\\\Reader\\\\AdobeUpdateManager.exe AcRdB7_0_9 []
"msnmsgr"=C:\\\\Program Files\\\\Windows Live\\\\Messenger\\\\MsnMsgr.Exe [2007-10-18 5724184]
"Uniblue RegistryBooster 2"=C:\\\\Program Files\\\\Uniblue\\\\RegistryBooster 2\\\\RegistryBooster.exe /S []
"MyWebSearch Email Plugin"=C:\\\\PROGRA~1\\\\MYWEBS~1\\\\bar\\\\1.bin\\\\mwsoemon.exe [2008-04-17 28672]
"Windows update loader"=C:\\\\Windows\\\\xpupdate.exe []
"07326974531970044864184563051322"=C:\\\\Program Files\\\\XP Antivirus\\\\xpa.exe []

C:\\\\Documents and Settings\\\\Lise\\\\Menu Démarrer\\\\Programmes\\\\Démarrage
Intégrateur PROjectMT 98.lnk - C:\\\\Program Files\\\\PROMT98\\\\INTEGRAL\\\\PINSTART.EXE

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\Winlogon\\\\Notify\\\\AtiExtEvent]
C:\\\\WINDOWS\\\\system32\\\\Ati2evxx.dll [2005-12-11 47104]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\Winlogon\\\\Notify\\\\WgaLogon]
C:\\\\WINDOWS\\\\system32\\\\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\\\\WINDOWS\\\\system32\\\\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\\\\SYSTEM\\\\CurrentControlSet\\\\Control\\\\SafeBoot\\\\network\\\\UploadMgr]

[HKEY_LOCAL_MACHINE\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Policies\\\\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Policies\\\\explorer]
"NoDriveTypeAutoRun"=145
"NoActiveDesktop"=0

[HKEY_LOCAL_MACHINE\\\\system\\\\currentcontrolset\\\\services\\\\sharedaccess\\\\parameters\\\\firewallpolicy\\\\standardprofile\\\\authorizedapplications\\\\list]
"%windir%\\\\system32\\\\sessmgr.exe"="%windir%\\\\system32\\\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\\\Program Files\\\\LimeWire\\\\LimeWire.exe"="C:\\\\Program Files\\\\LimeWire\\\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\\\WINDOWS\\\\system32\\\\ZoneLabs\\\\vsmon.exe"="C:\\\\WINDOWS\\\\system32\\\\ZoneLabs\\\\vsmon.exe:*:Enabled:TrueVector
Service"
"C:\\\\Program
Files\\\\Microsoft Office\\\\Office12\\\\OUTLOOK.EXE"="C:\\\\Program
Files\\\\Microsoft Office\\\\Office12\\\\OUTLOOK.EXE:*:Enabled:Microsoft
Office Outlook"
"%windir%\\\\Network
Diagnostic\\\\xpnetdiag.exe"="%windir%\\\\Network
Diagnostic\\\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\\\Program
Files\\\\Windows Live\\\\Messenger\\\\msnmsgr.exe"="C:\\\\Program
Files\\\\Windows Live\\\\Messenger\\\\msnmsgr.exe:*:Enabled:Windows Live
Messenger"
"C:\\\\Program Files\\\\Windows
Live\\\\Messenger\\\\livecall.exe"="C:\\\\Program Files\\\\Windows
Live\\\\Messenger\\\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\\\Program Files\\\\Messenger\\\\MsMsgs.EXE"="C:\\\\Program Files\\\\Messenger\\\\MsMsgs.EXE:*:Enabled:Windows Messenger"
"C:\\\\Program Files\\\\iTunes\\\\iTunes.exe"="C:\\\\Program Files\\\\iTunes\\\\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\\\\system\\\\currentcontrolset\\\\services\\\\sharedaccess\\\\parameters\\\\firewallpolicy\\\\domainprofile\\\\authorizedapplications\\\\list]

"%windir%\\\\system32\\\\sessmgr.exe"="%windir%\\\\system32\\\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\\\\Network
Diagnostic\\\\xpnetdiag.exe"="%windir%\\\\Network
Diagnostic\\\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\\\\Program

Files\\\\Windows Live\\\\Messenger\\\\msnmsgr.exe"="C:\\\\Program

Files\\\\Windows Live\\\\Messenger\\\\msnmsgr.exe:*:Enabled:Windows Live

Messenger"

"C:\\\\Program Files\\\\Windows

Live\\\\Messenger\\\\livecall.exe"="C:\\\\Program Files\\\\Windows

Live\\\\Messenger\\\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"


[HKEY_CURRENT_USER\\\\software\\\\microsoft\\\\windows\\\\currentversion\\\\explorer\\\\mountpoints2\\\\{ba6bfd30-3885-11dc-ae50-00115b553318}]

shell\\\\AutoRun\\\\command - F:\\\\LaunchU3.exe





======List of files/folders created in the last 1 months======



2009-01-24 13:05:35 ----D---- C:\\\\Program Files\\\\trend micro

2009-01-24 13:05:34 ----D---- C:\\\\rsit

2009-01-14 23:35:34 ----HDC---- C:\\\\WINDOWS\\\\$NtUninstallKB958687$

2008-12-29 19:50:20 ----A---- C:\\\\WINDOWS\\\\MegaManager.INI

2008-12-27 13:58:47 ----D---- C:\\\\Documents and Settings\\\\Lise\\\\Application Data\\\\Megaupload

2008-12-27 13:22:31 ----D---- C:\\\\Documents and Settings\\\\All Users\\\\Application Data\\\\Megaupload

2008-12-27 13:22:30 ----D---- C:\\\\Documents and Settings\\\\Lise\\\\Application Data\\\\EmailNotifier

2008-12-27 13:22:30 ----D---- C:\\\\Documents and Settings\\\\All Users\\\\Application Data\\\\EmailNotifier

2008-12-27 13:22:23 ----D---- C:\\\\Program Files\\\\MegauploadToolbar

2008-12-27 13:22:18 ----D---- C:\\\\Documents and Settings\\\\Lise\\\\Application Data\\\\MegauploadToolbar

2008-12-27 13:21:55 ----D---- C:\\\\Program Files\\\\Megaupload

2008-12-27 13:20:56 ----D---- C:\\\\Documents and Settings\\\\Lise\\\\Application Data\\\\InstallShield



======List of files/folders modified in the last 1 months======



2009-01-24 13:06:11 ----D---- C:\\\\WINDOWS\\\\Prefetch

2009-01-24 13:05:35 ----RD---- C:\\\\Program Files

2009-01-24 10:53:02 ----A---- C:\\\\WINDOWS\\\\SchedLgU.Txt

2009-01-24 10:13:26 ----D---- C:\\\\WINDOWS\\\\Temp

2009-01-24 09:57:42 ----D---- C:\\\\Program Files\\\\lg_fwupdate

2009-01-24 09:57:41 ----A---- C:\\\\WINDOWS\\\\lgfwup.ini

2009-01-24 09:57:35 ----D---- C:\\\\WINDOWS\\\\system32\\\\CatRoot2

2009-01-20 10:31:26 ----D---- C:\\\\Program Files\\\\Fichiers communs\\\\Symantec Shared

2009-01-19 18:51:44 ----D---- C:\\\\Documents and Settings\\\\Lise\\\\Application Data\\\\Vso

2009-01-19 09:27:20 ----RASH---- C:\\\\boot.ini

2009-01-19 09:27:20 ----A---- C:\\\\WINDOWS\\\\win.ini

2009-01-19 09:27:20 ----A---- C:\\\\WINDOWS\\\\system.ini

2009-01-18 07:53:54 ----D---- C:\\\\WINDOWS\\\\system32\\\\CatRoot_bak

2009-01-18 07:53:53 ----D---- C:\\\\WINDOWS\\\\system32\\\\CatRoot

2009-01-18 07:53:52 ----HD---- C:\\\\WINDOWS\\\\inf

2009-01-15 13:34:51 ----D---- C:\\\\Documents and Settings\\\\Lise\\\\Application Data\\\\Adobe

2009-01-15 13:34:51 ----D---- C:\\\\Documents and Settings\\\\All Users\\\\Application Data\\\\Adobe

2009-01-15 08:25:42 ----D---- C:\\\\WINDOWS

2009-01-14 23:36:21 ----SHD---- C:\\\\WINDOWS\\\\Installer

2009-01-14 23:36:20 ----D---- C:\\\\Documents and Settings\\\\All Users\\\\Application Data\\\\Microsoft Help

2009-01-14 23:35:36 ----RSHDC---- C:\\\\WINDOWS\\\\system32\\\\dllcache

2009-01-14 23:35:36 ----D---- C:\\\\WINDOWS\\\\system32\\\\drivers

2009-01-14 23:35:35 ----D---- C:\\\\WINDOWS\\\\system32

2009-01-14 23:35:03 ----HD---- C:\\\\WINDOWS\\\\$hf_mig$

2009-01-08 21:29:29 ----D---- C:\\\\Program Files\\\\Symantec

2009-01-08 21:29:29 ----A---- C:\\\\WINDOWS\\\\system32\\\\S32EVNT1.DLL

2008-12-27 15:24:13 ----D---- C:\\\\Temp

2008-12-27 13:21:54 ----HD---- C:\\\\Program Files\\\\InstallShield Installation Information



======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======



R1 AmdK7;Pilote de processeur AMD K7; C:\\\\WINDOWS\\\\System32\\\\DRIVERS\\\\amdk7.sys [2004-08-19 41600]

R1
eeCtrl;Symantec Eraser Control driver; \\\\??\\\\C:\\\\Program
Files\\\\Fichiers communs\\\\Symantec Shared\\\\EENGINE\\\\eeCtrl.sys []

R1 SPBBCDrv;SPBBCDrv; \\\\??\\\\C:\\\\Program Files\\\\Fichiers communs\\\\Symantec Shared\\\\SPBBC\\\\SPBBCDrv.sys []

R1 SRTSP;SRTSP; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SRTSP.SYS [2007-11-30 279088]

R1 SRTSPX;SRTSPX; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SRTSPX.SYS [2007-11-30 43696]

R1 SYMTDI;SYMTDI; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SYMTDI.SYS [2008-06-13 184240]

R2 ElbyCDIO;ElbyCDIO Driver; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\ElbyCDIO.sys [2006-12-26 15440]

R3 ati2mtag;ati2mtag; C:\\\\WINDOWS\\\\System32\\\\DRIVERS\\\\ati2mtag.sys [2005-12-11 1414656]

R3 cmuda;C-Media WDM Audio Interface; C:\\\\WINDOWS\\\\system32\\\\drivers\\\\cmuda.sys [2004-08-23 821760]

R3 ElbyCDFL;ElbyCDFL; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\ElbyCDFL.sys [2006-12-26 34760]

R3

EraserUtilRebootDrv;EraserUtilRebootDrv; \\\\??\\\\C:\\\\Program

Files\\\\Fichiers communs\\\\Symantec

Shared\\\\EENGINE\\\\EraserUtilRebootDrv.sys []

R3 GEARAspiWDM;GEARAspiWDM; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\GEARAspiWDM.sys [2008-01-29 16168]

R3 MxlW2k;MxlW2k; C:\\\\WINDOWS\\\\system32\\\\drivers\\\\MxlW2k.sys [2008-09-10 28276]

R3 NAVENG;NAVENG; \\\\??\\\\C:\\\\PROGRA~1\\\\FICHIE~1\\\\SYMANT~1\\\\VIRUSD~1\\\\20090123.050\\\\NAVENG.SYS []

R3 NAVEX15;NAVEX15; \\\\??\\\\C:\\\\PROGRA~1\\\\FICHIE~1\\\\SYMANT~1\\\\VIRUSD~1\\\\20090123.050\\\\NAVEX15.SYS []

R3 pfc;Padus ASPI Shell; C:\\\\WINDOWS\\\\system32\\\\drivers\\\\pfc.sys [2007-07-07 10368]

R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\\\\WINDOWS\\\\System32\\\\DRIVERS\\\\sisnic.sys [2002-07-10 32256]

R3 SYMDNS;SYMDNS; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SYMDNS.SYS [2008-06-13 13616]

R3 SymEvent;SymEvent; \\\\??\\\\C:\\\\WINDOWS\\\\system32\\\\Drivers\\\\SYMEVENT.SYS []

R3 SYMFW;SYMFW; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SYMFW.SYS [2008-06-13 96432]

R3 SYMIDS;SYMIDS; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SYMIDS.SYS [2008-06-13 38576]

R3 SYMIDSCO;SYMIDSCO; \\\\??\\\\C:\\\\PROGRA~1\\\\FICHIE~1\\\\SYMANT~1\\\\SymcData\\\\ipsdefs\\\\20090120.001\\\\SymIDSCo.sys []

R3 SymIMMP;SymIMMP; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\SymIM.sys [2008-06-13 31280]

R3 SYMNDIS;SYMNDIS; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SYMNDIS.SYS [2008-06-13 37424]

R3 SYMREDRV;SYMREDRV; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SYMREDRV.SYS [2008-06-13 22320]

R3

usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB

2.0; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\usbehci.sys [2004-08-03 26624]

R3 usbhub;Concentrateur USB2; C:\\\\WINDOWS\\\\System32\\\\DRIVERS\\\\usbhub.sys [2004-08-03 57600]

R3

usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft;

C:\\\\WINDOWS\\\\System32\\\\DRIVERS\\\\usbohci.sys [2004-08-03 17024]

S3 CCDECODE;Décodeur sous-titre fermé; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\CCDECODE.sys [2004-08-03 17024]

S3 COH_Mon;COH_Mon; \\\\??\\\\C:\\\\WINDOWS\\\\system32\\\\Drivers\\\\COH_Mon.sys []

S3 DCamUSBSQTECH;Dual-Mode DSC(2770); C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SQcaptur.sys [2003-01-10 30921]

S3
MSTEE;Convertisseur en T/site-à-site de répartition Microsoft;
C:\\\\WINDOWS\\\\system32\\\\drivers\\\\MSTEE.sys [2004-08-03 5504]

S3 NABTSFEC;Codec NABTS/FEC VBI; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\NABTSFEC.sys [2004-08-03 85376]

S3 NdisIP;Connection TV/vidéo Microsoft; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\NdisIP.sys [2004-08-03 10880]

S3 SLIP;Détrameur décalage BDA; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\SLIP.sys [2004-08-03 11136]

S3 SRTSPL;SRTSPL; C:\\\\WINDOWS\\\\System32\\\\Drivers\\\\SRTSPL.SYS [2007-11-30 317616]

S3 streamip;BDA IPSink; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\StreamIP.sys [2004-08-03 15360]

S3
SymIM;Symantec Network Security Intermediate Filter Service;
C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\SymIM.sys [2008-06-13 31280]

S3 usbprint;Classe d'imprimantes USB Microsoft; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\usbprint.sys [2004-08-03 25856]

S3 usbscan;Pilote de scanneur USB; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\usbscan.sys [2004-08-03 15104]

S3 USBSTOR;Pilote de stockage de masse USB; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\USBSTOR.SYS [2004-08-03 26496]

S3 WSTCODEC;Codec Teletext standard; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\WSTCODEC.SYS [2004-08-03 19328]

S3

WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform

Driver; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\WudfPf.sys [2006-09-28 77568]

S3

WudfRd;Windows Driver Foundation - User-mode Driver Framework

Reflector; C:\\\\WINDOWS\\\\system32\\\\DRIVERS\\\\wudfrd.sys [2006-09-28 82944]

S4 IntelIde;IntelIde; C:\\\\WINDOWS\\\\system32\\\\drivers\\\\IntelIde.sys []

S4

WS2IFSL;Environnement de prise en charge de Fournisseur de services

non-IFS Windows Sockets 2.0;

C:\\\\WINDOWS\\\\System32\\\\drivers\\\\ws2ifsl.sys [2001-10-04 12032]



======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======



R2 Ati HotKey Poller;Ati HotKey Poller; C:\\\\WINDOWS\\\\system32\\\\Ati2evxx.exe [2005-12-11 393216]

R2

Automatic LiveUpdate Scheduler;Planificateur LiveUpdate automatique;

C:\\\\Program Files\\\\Symantec\\\\LiveUpdate\\\\AluSchedulerSvc.exe

[2007-08-23 243064]

R2 CCALib8;Canon Camera Access Library 8; C:\\\\Program Files\\\\Canon\\\\CAL\\\\CALMAIN.exe [2006-03-30 96341]

R2
ccEvtMgr;Symantec Event Manager; C:\\\\Program Files\\\\Fichiers
communs\\\\Symantec Shared\\\\ccSvcHst.exe [2008-10-17 149352]

R2
ccSetMgr;Symantec Settings Manager; C:\\\\Program Files\\\\Fichiers
communs\\\\Symantec Shared\\\\ccSvcHst.exe [2008-10-17 149352]

R2

CLTNetCnService;Symantec Lic NetConnect service; C:\\\\Program

Files\\\\Fichiers communs\\\\Symantec Shared\\\\ccSvcHst.exe [2008-10-17

149352]

R2 JavaQuickStarterService;Java Quick Starter; C:\\\\Program Files\\\\Java\\\\jre6\\\\bin\\\\jqs.exe [2008-12-21 152984]

R2
LiveUpdate Notice;LiveUpdate Notice; C:\\\\Program Files\\\\Fichiers
communs\\\\Symantec Shared\\\\ccSvcHst.exe [2008-10-17 149352]

R2
RichVideo;Cyberlink RichVideo Service(CRVS); C:\\\\Program
Files\\\\CyberLink\\\\Shared Files\\\\RichVideo.exe [2005-08-07 167936]

R3 iPod Service;Service de l'iPod; C:\\\\Program Files\\\\iPod\\\\bin\\\\iPodService.exe [2008-03-30 504104]

R3 Symantec Core LC;Symantec Core LC; C:\\\\PROGRA~1\\\\FICHIE~1\\\\SYMANT~1\\\\CCPD-LC\\\\symlcsvc.exe [2008-06-02 1251720]

S2 ATI Smart;ATI Smart; C:\\\\WINDOWS\\\\system32\\\\ati2sgag.exe [2005-12-11 520192]

S3
gusvc;Google Updater Service; C:\\\\Program
Files\\\\Google\\\\Common\\\\Google Updater\\\\GoogleUpdaterService.exe
[2007-01-03 136120]

S3 LiveUpdate;LiveUpdate; C:\\\\Program Files\\\\Symantec\\\\LiveUpdate\\\\LuComServer_3_4.EXE [2007-08-23 3192184]

S3

odserv;Microsoft Office Diagnostics Service; C:\\\\Program

Files\\\\Fichiers communs\\\\Microsoft Shared\\\\OFFICE12\\\\ODSERV.EXE

[2007-08-24 443776]

S3
ose;Office Source Engine; C:\\\\Program Files\\\\Fichiers
communs\\\\Microsoft Shared\\\\Source Engine\\\\OSE.EXE [2006-10-26
145184]

S3 WLSetupSvc;Windows Live Setup Service; C:\\\\Program Files\\\\Windows Live\\\\installer\\\\WLSetupSvc.exe [2007-10-25 266240]

S3

WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media;

C:\\\\Program Files\\\\Windows Media Player\\\\WMPNetwk.exe [2006-10-24

918016]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\\\\WINDOWS\\\\system32\\\\svchost.exe [2004-08-19 14336]

S4

usnjsvc;Service Messenger Sharing Folders USN Journal Reader;

C:\\\\Program Files\\\\Windows Live\\\\Messenger\\\\usnsvc.exe [2007-10-18

98328]



-----------------EOF-----------------





Beurghhh, j'en ai des hauts le coeur de voir tout ça hihi !



Merci de tout coeur !

Je n'y me connais pas beaucoup
mais avec le peu que je connaisse
il semble avoir beaucoup de
parasites là-dedans ... genre
¨Mysearch¨ et le nombre
de ¨toolbars¨ aussi (barres outils)
Infestée beaucoup je crois

J'attends de vos nouvelles

bonjour Colibri
en effet ton amie n'a pas fait semblant!!
bon on commence

• Télécharge Toolbar-S&D d'Eric71, AngelDark, Sham_Rock et XmichouX sur ton Bureau,
  
• Double-clique sur Toolbar-S&D afin de lancer l'installation, un raccourci sera ajouté sur le Bureau.
  
• Double-clique dessus pour démarrer l'outil; choisis la langue.
  
• Sous Vista, faire un clic droit et "Exécuter en tant qu'administrateur" (Elévation des privilèges), puis -> Continuer.
  
• Tape 1 puis sur la touche [Entrée] afin de lancer la recherche.
  
• Patiente jusqu'à la fin de la recherche.
  
• À la fin du scan, le rapport s'ouvrira dans le Bloc-notes.
  
• Poste ce rapport, par copier/coller, dans ta prochaine réponse.
  
• Le rapport se trouve également sous : C:\TB.txt
  

Aide en image : http://toolbarsd.googlepages.com/aideenimages
Nettoyage :

• Désactive ton antivirus, ton antipsyware résidant (spybot par exemple) durant la phase de nettoyage. Voir ici.
  
• Double clique sur le raccourci de Toolbar-S&D présent sur ton bureau. Sous Vista : clic droit -> Exécuter en tant qu'administrateur.
  
• Au menu principal, choisis l'option 2 et valide par la touche [Entrée].
  

/!\ Ne ferme pas la fenêtre lors de la suppression /!\

• Un rapport sera généré. Poste ce rapport avec un nouveau rapport Hijackthis.
  

Note : Pour les utilisateurs de Vista, ToolBar-SD se charge de désactiver le "Contrôle des comptes utilisateurs" (UAC), il va redémarrer l'ordinateur et réactiver l'UAC.
ensuite suivre ce tutoriel et poster le rapport obtenu
http://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
et un nouveau rapport RSIT

du monde hier, je n'ai pu revenir avant...

Bonjour chrifleur

Ouchhh elle ne fait rien à peu près !

Milles excuses, j'ai complètement oublié de
te renseigner sur sa version windows, elle
a XP !!!

Bon je vais y voir et te reviens
peut-être pas aujourd'hui dimanche
mais au début de semaine, elle fête
son anniversaire aujourd'hui, beau
cadeau ça lui fera que ce nettoyage
en règle !!!

Merci et bonne journée chez toi !

ok
comme je retravaille l'après midi, je risque de ne passer que le matin ou le soir après souper, mais j'attends ses rapports
bon anniversaire à elle tout de même

Yellow Chrifleur

Voilà le premier rapport que tu as demandé

Je te sais au travail, donc, bonne journée
et on se voit plus tard !

______________________________________


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : mobile AMD Athlon(tm) XP-M 2600+ )
BIOS : Default System BIOS
USER : Lise ( Administrator )
BOOT : Normal boot
Antivirus : Norton AntiVirus 15.0.0.58 (Activated)
Firewall : Norton AntiVirus 15.0.0.58 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:36 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 2009-01-26|13:47 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\Lise\Cookies\lise@alottoolbars[1].txt
C:\DOCUME~1\Lise\Cookies\lise@alot[1].txt
C:\DOCUME~1\Lise\Cookies\lise@h.alot[2].txt
C:\DOCUME~1\Lise\Cookies\lise@try.alottoolbars[2].txt
C:\DOCUME~1\Lise\Cookies\lise@webcrawler[2].txt
C:\DOCUME~1\Lise\Cookies\lise@www.webcrawler[2].txt
C:\DOCUME~1\Lise\APPLIC~1\FunWebProducts
C:\DOCUME~1\Lise\APPLIC~1\FunWebProducts\Data
C:\DOCUME~1\Lise\APPLIC~1\FunWebProducts\Data\Lise
C:\DOCUME~1\Lise\APPLIC~1\FunWebProducts\Data\Lise\avatar.dat
C:\Program Files\FunWebProducts
C:\Program Files\FunWebProducts\ScreenSaver
C:\Program Files\FunWebProducts\Shared
C:\Program Files\FunWebProducts\ScreenSaver\Images
C:\Program Files\FunWebProducts\ScreenSaver\Images\005788FA.urr
C:\Program Files\FunWebProducts\Shared\Cache
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
C:\DOCUME~1\Lise\Cookies\lise@hotbar[1].txt
C:\DOCUME~1\Lise\Cookies\lise@www.hotbar[2].txt
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar
C:\Program Files\MyWebSearch\SrchAstt
C:\Program Files\MyWebSearch\bar\1.bin
C:\Program Files\MyWebSearch\bar\Avatar
C:\Program Files\MyWebSearch\bar\Cache
C:\Program Files\MyWebSearch\bar\Game
C:\Program Files\MyWebSearch\bar\History
C:\Program Files\MyWebSearch\bar\icons
C:\Program Files\MyWebSearch\bar\Message
C:\Program Files\MyWebSearch\bar\Notifier
C:\Program Files\MyWebSearch\bar\Settings
C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV
C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Cache\011F9A88
C:\Program Files\MyWebSearch\bar\Cache\011F9E9A
C:\Program Files\MyWebSearch\bar\Cache\011FA00C.bin
C:\Program Files\MyWebSearch\bar\Cache\011FA0FC.bin
C:\Program Files\MyWebSearch\bar\Cache\011FA279.bin
C:\Program Files\MyWebSearch\bar\Cache\011FA2E7.bin
C:\Program Files\MyWebSearch\bar\Cache\011FA400.bin
C:\Program Files\MyWebSearch\bar\Cache\011FA4BE.bin
C:\Program Files\MyWebSearch\bar\Cache\011FA518
C:\Program Files\MyWebSearch\bar\Cache\031463B6.bin
C:\Program Files\MyWebSearch\bar\Cache\0314D9CF.bin
C:\Program Files\MyWebSearch\bar\Cache\031581D3.bin
C:\Program Files\MyWebSearch\bar\Cache\files.ini
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
C:\Program Files\MyWebSearch\bar\History\search2
C:\Program Files\MyWebSearch\bar\icons\CM.ICO
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
C:\Program Files\MyWebSearch\bar\icons\WB.ICO
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
C:\Program Files\MyWebSearch\bar\Message\COMMON
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Message\COMMON\ask_logo.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\center.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\index.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\mid_dots.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\mws_logo.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\protect.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\shocked.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\stop.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\systray.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\systrayp.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\tp_grad.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\warn.gif
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm
C:\Program Files\MyWebSearch\bar\Settings\settings.dat
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
C:\Program Files\MyWebSearch\SrchAstt\2.bin
C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL
C:\DOCUME~1\Lise\Cookies\lise@mywebsearch[1].txt
C:\DOCUME~1\Lise\Cookies\lise@hosted.platrium[2].txt
C:\DOCUME~1\Lise\Cookies\lise@7search[2].txt
C:\WINDOWS\System32\f3PSSavr.scr
C:\Program Files\Internet Explorer\msimg32.dll
C:\DOCUME~1\Lise\LOCALS~1\Temp\ICD1.tmp

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Start Page"="about:blank"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68928"
"Url"="http://go.microsoft.com/fwlink/?LinkID=44406"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68929"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Lise\Local Settings\Temporary Internet Files\Content.IE5\B2DZK55P\crack[1].jpg



1 - "C:\ToolBar SD\TB_1.txt" - 2009-01-26|13:50 - Option : [1]

-----------\\ Fin du rapport a 13:50:06,02


Je lui ai transmis tes voeux !

Merci de tout coeur !

Oublié ...

Nous n'avons pas fait le nettoyage !

Est-ce que j'attends ?

Tourlou

oh que non tu le fais tout de suite puis tu me postes le rapport obtenu et un rapport RSIT après nettoyage

D'accord, nous revenons
beurghhh on aime pas ¨fouiller¨
la-dedans !!

Bonjour les AMHis
vue les images que vous avez mise il semblerait que se sois msn explorer
un logiciel comme internet explorer.
si mes souvenir sont bon on doit pourvoir le désinstallé dans:
panneaux de configuration
ajout suppression de programme
ensuite sur la gauche vous allé dans ajouter ou supprimer des composants Windows
descendre avec la fleche et regarder si MSN EXPLORER est cocher ou pas.
si oui il suffi de décoché et de faire suivant
et de suivre ce qu'il y a de maquer.

j'espère vous avoir aidée.

Chrifleur bonjour
excuse moi d'avoir tardé

Voilà une première suppression
Lise n'arrive pas à désactiver
temporairement le pare-feu de Norton 2008 ?


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : mobile AMD Athlon(tm) XP-M 2600+ )
BIOS : Default System BIOS
USER : Lise ( Administrator )
BOOT : Normal boot
Antivirus : Norton AntiVirus 15.0.0.58 (Not Activated)
Firewall : Norton AntiVirus 15.0.0.58 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:35 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 2009-01-26|22:01 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\MyWebSearch\bar
Supprime! - C:\Program Files\MyWebSearch

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Start Page"="about:blank"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68928"
"Url"="http://go.microsoft.com/fwlink/?LinkID=44406"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68929"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Lise\Local Settings\Temporary Internet Files\Content.IE5\B2DZK55P\crack[1].jpg



1 - "C:\ToolBar SD\TB_1.txt" - 2009-01-26|13:50 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 2009-01-26|19:27 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 2009-01-26|22:03 - Option : [2]

-----------\\ Fin du rapport a 22:03:52,15

Rapport après suppression :



-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : mobile AMD Athlon(tm) XP-M 2600+ )
BIOS : Default System BIOS
USER : Lise ( Administrator )
BOOT : Normal boot
Antivirus : Norton AntiVirus 15.0.0.58 (Not Activated)
Firewall : Norton AntiVirus 15.0.0.58 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:35 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 2009-01-27|14:38 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Start Page"="about:blank"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68928"
"Url"="http://go.microsoft.com/fwlink/?LinkID=44406"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68929"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Lise\Local Settings\Temporary Internet Files\Content.IE5\B2DZK55P\crack[1].jpg



1 - "C:\ToolBar SD\TB_1.txt" - 2009-01-26|13:50 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 2009-01-26|19:27 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 2009-01-26|22:03 - Option : [2]
4 - "C:\ToolBar SD\TB_4.txt" - 2009-01-27|14:41 - Option : [2]

-----------\\ Fin du rapport a 14:41:37,33


Merci encore une fois

Bonjour Lx!r

Merci pour le renseignement
je suis allée m'informer sur
msn explorer et j'ai vu des
captures d'écran et c'est
en plein la même page qu'elle
a ... je vais voir ....

Bonne journée

Yellow Chrifleur

Voilà Lise a trouvé le truc pour
désactiver son pare-feu.

Dernier rapport après suppression :


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : mobile AMD Athlon(tm) XP-M 2600+ )
BIOS : Default System BIOS
USER : Lise ( Administrator )
BOOT : Normal boot
Antivirus : Norton AntiVirus 15.0.0.58 (Not Activated)
Firewall : Norton AntiVirus 15.0.0.58 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:35 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 2009-01-27|19:41 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Start Page"="about:blank"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68928"
"Url"="http://go.microsoft.com/fwlink/?LinkID=44406"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68929"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Lise\Local Settings\Temporary Internet Files\Content.IE5\B2DZK55P\crack[1].jpg



1 - "C:\ToolBar SD\TB_1.txt" - 2009-01-26|13:50 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 2009-01-26|19:27 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 2009-01-26|22:03 - Option : [2]
4 - "C:\ToolBar SD\TB_4.txt" - 2009-01-27|14:41 - Option : [2]
5 - "C:\ToolBar SD\TB_5.txt" - 2009-01-27|19:44 - Option : [2]

-----------\\ Fin du rapport a 19:44:01,20


Est-ce que tu veux autres choses ?!!

Bonne fin de soirée

oui il y avait plusieurs infections et je veux véifier ce qu'il reste ou pas ...
envoie moi un rapport RSIT
http://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
fais comme ceci pour l'envoyer
Le rapport étant très long, tu peux m’envoyer celui-ci via : http://www.zshare.net/
Clique sur Parcourir , va "chercher" ton rapport OTScanIt.txt puis coche "I have read ..." puis clique sur Share it
Attends un peu puis copie-colle ici le lien en bleu qui va apparaître dans un petit rectangle.

Yellow vous

D'accord je ferai et reviens

A plus tard

Bonsoir Chrifleur

Voilà le rapport demandé, merci


Logfile of random's system information tool 1.05 (written by random/random)
Run by Lise at 2009-01-28 19:15:08
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 36 GB (47%) free of 76 GB
Total RAM: 511 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:15:14, on 2009-01-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Lise\Bureau\RSIT.exe
C:\Program Files\trend micro\Lise.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.ca/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: MEGAUPLOADTOOLBAR - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: MEGAUPLOADTOOLBAR - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT98\promtie4\promtie5.htm
O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT98\promtie4\promtie5.htm
O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT98\promtie4\options.htm
O9 - Extra 'Tools' menuitem: Personnalisez traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT98\promtie4\options.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=67633
O16 - DPF: {1A26F07F-0D60-4835-91CF-1E1766A0EC56} - http://scanner2.malware-scan.com/setup/webinst_fr.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?AuthParam=1229902500_fb48ac9c65a6d108225a284ae696a6e7&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab&File=jinstall-6u11-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 8910 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1 Copernic Intra-Daily ~LISE-X417VFDUNK Lise.job
C:\WINDOWS\tasks\2 Copernic Daily ~LISE-X417VFDUNK Lise.job
C:\WINDOWS\tasks\3 Copernic Weekly ~LISE-X417VFDUNK Lise.job
C:\WINDOWS\tasks\4 Copernic Monthly ~LISE-X417VFDUNK Lise.job
C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
C:\WINDOWS\tasks\Norton AntiVirus - Effectuer une analyse complète du système - Lise.job
C:\WINDOWS\tasks\SpywareBot Scheduled Scan.job