fenêtre.de.pub.intempestives

tysonette56 · le 23 Aoû 2012 13:01

je.voudrais.svp.avoir.une.solution.pour.empêché.les.fenêtres.de.publicité.Merci.par.avance.désolé.pour.les.points.mais.la.touche.espace.ne.fonctionne.plus.Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:24:29, on 23/08/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Users\Yann\AppData\Local\eojet\eojet.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Free Download Manager\fdm.exe
C:\Users\Yann\AppData\Roaming\eType\eType.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\Yann\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files (x86)\Microsoft Works\WkCalRem.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\Alibaba\TradeManager\TradeManager.exe
C:\Users\Yann\AppData\Local\combroadcaster\combroadcaster.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Yann\AppData\Roaming\eType\eTypeUpdate.exe
C:\Program Files\BitDefender\BitDefender 2009\antispam32\bdimguiaux.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Windows\SysWOW64\conime.exe
C:\hp\kbd\kbd.exe
C:\Users\Yann\Desktop\01net_HijackThis.exe
C:\Users\Yann\AppData\Local\Temp\nszA802.tmp\ProxyInstaller.exe
C:\Users\Yann\AppData\Local\Temp\nszA802.tmp\SecondOffer1.exe
C:\Users\Yann\AppData\Local\Temp\GLBE9C2.tmp
C:\Users\Yann\Desktop\HiJackThis.exe
C:\Users\Yann\AppData\Local\Temp\CT3128~1\STUBWR~1.EXE
C:\Users\Yann\AppData\Local\Temp\conduitinstaller.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
c:\users\yann\appdata\local\temp\ct3128284\ct3128284_ch.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cndt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT3128284
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=wbst&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: 01NET.com Toolbar - {8e5025c2-8ea3-430d-80b8-a14151068a6d} - C:\Program Files (x86)\01NET.com\prxtb01NE.dll
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.29.1\bh\BabylonToolbar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: 01NET.com - {8e5025c2-8ea3-430d-80b8-a14151068a6d} - C:\Program Files (x86)\01NET.com\prxtb01NE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\npchrome_frame.dll
O2 - BHO: OfferBox - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files (x86)\OfferBox\OfferBoxBHO.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - "C:\Program Files\BitDefender\BitDefender 2009\Antispam32\IEToolbar.dll" (file missing)
O3 - Toolbar: (no name) - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - (no file)
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll
O3 - Toolbar: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.29.1\BabylonToolbarTlbr.dll
O3 - Toolbar: 01NET.com Toolbar - {8e5025c2-8ea3-430d-80b8-a14151068a6d} - C:\Program Files (x86)\01NET.com\prxtb01NE.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] c:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files (x86)\Hercules\Dualpix Infinite\Camservice.exe /startup
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [TradeManager] C:\PROGRA~2\Alibaba\TRADEM~1\TradeManager -hideframe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [combroadcaster] "C:\Users\Yann\AppData\Local\combroadcaster\combroadcaster.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [eojet.exe] C:\Users\Yann\AppData\Local\eojet\eojet.exe -runonce
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [aaqmo] "c:\users\yann\appdata\local\aaqmo.exe" aaqmo
O4 - HKCU\..\Run: [Power2GoExpress] NA
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files (x86)\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [ywwei] "c:\users\yann\appdata\local\ywwei.exe" ywwei
O4 - HKCU\..\Run: [Google Update] "C:\Users\Yann\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [eType] C:\Users\Yann\AppData\Roaming\eType\eType.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Yann\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\SysWOW64\Adobe\Shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; WOW64; Trident/4.0; GTB6; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30618; FDM)" -"http://www.cannelle.com/LABO/amenagement/fournil276.htm"
O4 - HKCU\..\RunOnce: [Application Restart #5] C:\Users\Yann\AppData\Local\Google\Chrome\Application\chrome.exe --flag-switches-begin --enable-print-preview --flag-switches-end --restore-last-session -- http://ads.alpha00001.com/cgi-bin/adver ... F3ja%3D%3D
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3892552874-2955998548-3286312655-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - Startup: Notification de cadeaux MSN.lnk = Yann\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: wkcalrem.LNK = C:\Program Files (x86)\Microsoft Works\WkCalRem.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b56986.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/i ... ction2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Games ... meHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\npchrome_frame.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Service d'état ASP.NET (aspnet_state) - BitDefender S.R.L. http://www.bitdefender.com - (no file)
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Service Google Update (gupdate1c9bade3c4ce623) (gupdate1c9bade3c4ce623) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: SafeUpdater - Unknown owner - C:\Users\Yann\AppData\Local\safeupdater\SafeUpdater.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 19597 bytes

H3bus · le 23 Aoû 2012 13:21

Code: Tout sélectionner: Merci.par.avance.désolé.pour.les.points.mais.la.touche.espace.ne.fonctionne.plus.

Ca faisait longtemps que j'avais pas vu ça :lol:

Deux solutions : Tu gardes un espace dans ton presse papier que tu colles tout le temps (un peu chiant mais bon...) ou tu achètes un clavier USB...

H3bus · le 23 Aoû 2012 13:21

Code: Tout sélectionner: Merci.par.avance.désolé.pour.les.points.mais.la.touche.espace.ne.fonctionne.plus.

Ca faisait longtemps que j'avais pas vu ça :lol:

Deux solutions : Tu gardes un espace dans ton presse papier que tu colles tout le temps (un peu chiant mais bon...) ou tu achètes un clavier USB...

bernard53 · le 23 Aoû 2012 16:22

Bonjour a tous
Ceci s.t.p tysonette56

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
http://general-changelog-team.fr/telech ... adwcleaner

Lance le, clique sur [Suppression]puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

Ensuite;
Télécharger sur le bureau<< RogueKiller >> (by tigzy)
Quitter tous les programmes
Lancer RogueKiller.exe.
Attendre que le Prescan ait fini ...
Cliquer sur Scan. Cliquer sur Rapport et copier-coller le contenu du notepad

Cliquer sur Suppression. Cliquer sur Rapport et copier-coller le contenu du notepad

Ensuite:

* Télécharge >> OTL <<sur ton bureau.

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal " soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL " Personnalisation"

HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl|FEATURE_BROWSER_EMULATION /rs
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\FeatureControl|feature_enable_ie_compression /rs
HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\FeatureControl|feature_enable_ie_compression /rs
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers /s
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32 /s
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc /s
%temp%\smtmp\1\*.* /s
%temp%\smtmp\2\*.* /s
%temp%\smtmp\4\*.* /s
nslookup http://www.google.fr /c
SAVEMBR:0
NetSvcs
%systemroot%\system32\drivers\*.sys /lockedfiles
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés
Mets le rapport ici car il prend bien de la place.

http://cjoint.com/
ou.
http://www.1fichier.com/

tysonette56 · le 23 Aoû 2012 17:01

Bon pour commencer j'ai racheté un clavier

je tiens à remercier les personnes qui consacrent un peu de temps à mon problême ....

Alors résultat du premier scanne avec ADWCleaner :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:24:29, on 23/08/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Users\Yann\AppData\Local\eojet\eojet.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Free Download Manager\fdm.exe
C:\Users\Yann\AppData\Roaming\eType\eType.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\Yann\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files (x86)\Microsoft Works\WkCalRem.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\Alibaba\TradeManager\TradeManager.exe
C:\Users\Yann\AppData\Local\combroadcaster\combroadcaster.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Yann\AppData\Roaming\eType\eTypeUpdate.exe
C:\Program Files\BitDefender\BitDefender 2009\antispam32\bdimguiaux.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Windows\SysWOW64\conime.exe
C:\hp\kbd\kbd.exe
C:\Users\Yann\Desktop\01net_HijackThis.exe
C:\Users\Yann\AppData\Local\Temp\nszA802.tmp\ProxyInstaller.exe
C:\Users\Yann\AppData\Local\Temp\nszA802.tmp\SecondOffer1.exe
C:\Users\Yann\AppData\Local\Temp\GLBE9C2.tmp
C:\Users\Yann\Desktop\HiJackThis.exe
C:\Users\Yann\AppData\Local\Temp\CT3128~1\STUBWR~1.EXE
C:\Users\Yann\AppData\Local\Temp\conduitinstaller.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
c:\users\yann\appdata\local\temp\ct3128284\ct3128284_ch.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cndt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT3128284
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=wbst&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: 01NET.com Toolbar - {8e5025c2-8ea3-430d-80b8-a14151068a6d} - C:\Program Files (x86)\01NET.com\prxtb01NE.dll
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.29.1\bh\BabylonToolbar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: 01NET.com - {8e5025c2-8ea3-430d-80b8-a14151068a6d} - C:\Program Files (x86)\01NET.com\prxtb01NE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\npchrome_frame.dll
O2 - BHO: OfferBox - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files (x86)\OfferBox\OfferBoxBHO.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - "C:\Program Files\BitDefender\BitDefender 2009\Antispam32\IEToolbar.dll" (file missing)
O3 - Toolbar: (no name) - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - (no file)
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll
O3 - Toolbar: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.29.1\BabylonToolbarTlbr.dll
O3 - Toolbar: 01NET.com Toolbar - {8e5025c2-8ea3-430d-80b8-a14151068a6d} - C:\Program Files (x86)\01NET.com\prxtb01NE.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] c:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files (x86)\Hercules\Dualpix Infinite\Camservice.exe /startup
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [TradeManager] C:\PROGRA~2\Alibaba\TRADEM~1\TradeManager -hideframe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [combroadcaster] "C:\Users\Yann\AppData\Local\combroadcaster\combroadcaster.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [eojet.exe] C:\Users\Yann\AppData\Local\eojet\eojet.exe -runonce
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [aaqmo] "c:\users\yann\appdata\local\aaqmo.exe" aaqmo
O4 - HKCU\..\Run: [Power2GoExpress] NA
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files (x86)\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [ywwei] "c:\users\yann\appdata\local\ywwei.exe" ywwei
O4 - HKCU\..\Run: [Google Update] "C:\Users\Yann\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [eType] C:\Users\Yann\AppData\Roaming\eType\eType.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Yann\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\SysWOW64\Adobe\Shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; WOW64; Trident/4.0; GTB6; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30618; FDM)" -"http://www.cannelle.com/LABO/amenagement/fournil276.htm"
O4 - HKCU\..\RunOnce: [Application Restart #5] C:\Users\Yann\AppData\Local\Google\Chrome\Application\chrome.exe --flag-switches-begin --enable-print-preview --flag-switches-end --restore-last-session -- http://ads.alpha00001.com/cgi-bin/adver ... F3ja%3D%3D
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3892552874-2955998548-3286312655-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - Startup: Notification de cadeaux MSN.lnk = Yann\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: wkcalrem.LNK = C:\Program Files (x86)\Microsoft Works\WkCalRem.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b56986.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/i ... ction2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Games ... meHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.83\npchrome_frame.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Service d'état ASP.NET (aspnet_state) - BitDefender S.R.L. http://www.bitdefender.com - (no file)
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Service Google Update (gupdate1c9bade3c4ce623) (gupdate1c9bade3c4ce623) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: SafeUpdater - Unknown owner - C:\Users\Yann\AppData\Local\safeupdater\SafeUpdater.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 19597 bytes

tysonette56 · le 23 Aoû 2012 17:11

suite ...désolé précédement j'ai posté le rapport avant la suppression :cry:

Donc voici le rapport après redémarrage :

# AdwCleaner v1.801 - Rapport créé le 23/08/2012 à 18:02:01
# Mis à jour le 14/08/2012 par Xplode
# Système d'exploitation : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Nom d'utilisateur : Yann - PC-DE-YANN
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Yann\Desktop\adwcleaner.exe
# Option [Suppression]

***** [Services] *****

Arrêté & Supprimé : SafeUpdater

***** [Fichiers / Dossiers] *****

Supprimé au redémarrage : C:\Users\Yann\AppData\Local\combroadcaster
Supprimé au redémarrage : C:\Users\Yann\AppData\Local\Conduit
Supprimé au redémarrage : C:\Users\Yann\AppData\Local\EoJet
Supprimé au redémarrage : C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Supprimé au redémarrage : C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehdmaehkiiampolokajdcelladmnopgp
Supprimé au redémarrage : C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif
Supprimé au redémarrage : C:\Users\Yann\AppData\Local\safeupdater
Supprimé au redémarrage : C:\Users\Yann\AppData\Local\Tuto4pc
Supprimé au redémarrage : C:\Users\Yann\AppData\LocalLow\01NET.com
Supprimé au redémarrage : C:\Users\Yann\AppData\LocalLow\facemoods.com
Supprimé au redémarrage : C:\Users\Yann\AppData\LocalLow\vShare
Supprimé au redémarrage : C:\Users\Yann\AppData\Roaming\Babylon
Supprimé au redémarrage : C:\Users\Yann\AppData\Roaming\BabylonToolbar
Supprimé au redémarrage : C:\Users\Yann\AppData\Roaming\EoRezo
Supprimé au redémarrage : C:\Users\Yann\AppData\Roaming\eType
Supprimé au redémarrage : C:\Users\Yann\AppData\Roaming\OfferBox
Supprimé au redémarrage : C:\Users\Yann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eType
Supprimé au redémarrage : C:\ProgramData\Babylon
Supprimé au redémarrage : C:\Program Files (x86)\01NET.com
Supprimé au redémarrage : C:\Program Files (x86)\BabylonToolbar
Supprimé au redémarrage : C:\Program Files (x86)\Bandoo
Supprimé au redémarrage : C:\Program Files (x86)\Conduit
Supprimé au redémarrage : C:\Program Files (x86)\facemoods.com
Supprimé au redémarrage : C:\Program Files (x86)\OfferBox
Supprimé au redémarrage : C:\Program Files (x86)\vShare
Fichier Supprimé : C:\Users\Public\Desktop\Babylon.lnk
Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml
Fichier Supprimé : C:\user.js

***** [H. Navipromo] *****

Fichier Supprimé : C:\Users\Yann\AppData\Local\ocoiyyk.dat
Fichier Supprimé : C:\Users\Yann\AppData\Local\ocoiyyk_nav.dat
Fichier Supprimé : C:\Users\Yann\AppData\Local\ocoiyyk_navps.dat
Fichier Supprimé : C:\Users\Yann\AppData\Local\woeca.dat
Fichier Supprimé : C:\Users\Yann\AppData\Local\woeca_nav.dat
Fichier Supprimé : C:\Users\Yann\AppData\Local\woeca_navps.dat
Fichier Supprimé : C:\Users\Yann\AppData\Local\ywwei.dat
Fichier Supprimé : C:\Users\Yann\AppData\Local\ywwei_nav.dat
Fichier Supprimé : C:\Users\Yann\AppData\Local\ywwei_navps.dat
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ywwei]

***** [Registre] *****

[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3128284
Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\Conduit
Clé Supprimée : HKCU\Software\DSNR Labs
Clé Supprimée : HKCU\Software\facemoods.com
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdate_is1
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\vShare
Clé Supprimée : HKCU\Software\Offerbox
Clé Supprimée : HKCU\Software\vShare
Clé Supprimée : HKLM\SOFTWARE\01NET.com
Clé Supprimée : HKLM\SOFTWARE\Babylon
Clé Supprimée : HKLM\SOFTWARE\BabylonToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\EoEngineBHO.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\b
Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.escrtSrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\facemoods.dskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\facemoods.dskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\facemoods.xtrnl
Clé Supprimée : HKLM\SOFTWARE\Classes\facemoods.xtrnl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\facemoodsApp.appCore
Clé Supprimée : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\OfferBox.OfferBoxServer
Clé Supprimée : HKLM\SOFTWARE\Classes\OfferBox.OfferBoxServer.1
Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\vsharechrome
Clé Supprimée : HKLM\SOFTWARE\Classes\S
Clé Supprimée : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol
Clé Supprimée : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol.1
Clé Supprimée : HKLM\SOFTWARE\Classes\vShare.PugiObj
Clé Supprimée : HKLM\SOFTWARE\Classes\vShare.PugiObj.1
Clé Supprimée : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers
Clé Supprimée : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers.1
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\facemoods.com
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
Clé Supprimée : HKLM\SOFTWARE\Google\chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\01NET.com Toolbar
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\facemoods
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vShare
Clé Supprimée : HKLM\SOFTWARE\Offerbox
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [eType]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Combroadcaster]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [facemoods]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [offerboxffx@offerbox.com]

***** [Registre - GUID] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A5B99E41-E157-4209-8AAC-DB003A816079}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AD20D01C-C939-4DD2-8C55-56935A48987E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E95EAD3F-18C6-4304-9DC6-BD6FD8E11D37}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{151867D5-7359-40AF-8764-66E58D06283C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{20ED5AF7-D9C4-409E-9EB3-D2A44A77FB6D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{3E315C81-442B-431C-AEC8-ED189699EC24}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F60AE5D1-0031-4518-9717-EC1B81CA3DF8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{689CC6B3-5F41-4835-8937-C172CD0D2D4F}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486B-A045-B233BD0DA8FC}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{151867D5-7359-40AF-8764-66E58D06283C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{043C5167-00BB-4324-AF7E-62013FAEDACF}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{043C5167-00BB-4324-AF7E-62013FAEDACF}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource= ... =CT3128284 --> hxxp://www.google.com
Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://start.facemoods.com/?a=wbst&s={searchTerms}&f=4 --> hxxp://www.google.com

-\\ Google Chrome v21.0.1180.83

Fichier : C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée : "icon_url": "hxxp://www.babylon.com/favicon.ico",
Supprimée : "keyword": "babylon.com",
Supprimée : "name": "Search the web (Babylon)",
Supprimée : "search_url": "hxxp://search.babylon.com/?q={searchTerms}&affID=112543&tt=190712_n_mont_3012_8[...]
Supprimée : "default_icon": "browser_icon_babylon48.png",
Supprimée : "default_title": "Babylon Toolbar"
Supprimée : "description": "Babylon ToolBar",
Supprimée : "128": "babylon48.png",
Supprimée : "48": "babylon48.png"
Supprimée : "name": "Babylon Toolbar",
Supprimée : "path": "BabylonChromeToolBar.dll",
Supprimée : "update_url": "hxxp://img.babylon.com/ext/chrome/update/update1.xml",
Supprimée : "scriptable_host": [ "hxxp://*/*", "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdC[...]
Supprimée : "matches": [ "hxxp://cap1.conduit-apps.com/Apps/jdownloader/jdController.html*", "[...]
Supprimée : "path": "plugins/ConduitChromeApiPlugin.dll",
Supprimée : "update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT312828[...]
Supprimée : "default_icon": "facemoods/img/16.png",
Supprimée : "default_popup": "facemoods/dropdown.html",
Supprimée : "128": "facemoods/img/128.png",
Supprimée : "32": "facemoods/img/32.png",
Supprimée : "48": "facemoods/img/48.png"
Supprimée : "name": "Facemoods",
Supprimée : "update_url": "hxxp://facemoods.com/public/download/chrome/update.xml",

*************************

AdwCleaner[R1].txt - [31322 octets] - [23/08/2012 17:59:00]
AdwCleaner[S1].txt - [20587 octets] - [23/08/2012 18:02:01]

########## EOF - C:\AdwCleaner[S1].txt - [20716 octets] ##########

tysonette56 · le 23 Aoû 2012 17:29

alors voici le rapport Roguekiller :

RogueKiller V7.6.6 [10/08/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion- ... ntees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 64 bits version
Demarrage : Mode normal
Utilisateur: Yann [Droits d'admin]
Mode: Recherche -- Date: 23/08/2012 18:27:25

¤¤¤ Processus malicieux: 2 ¤¤¤
[SUSP PATH] eojet.exe -- C:\Users\Yann\AppData\Local\eojet\eojet.exe -> KILLED [TermProc]
[SUSP PATH] OptChrome.exe -- C:\Users\Yann\AppData\Local\Temp\OptChrome.exe -> KILLED [TermProc]

¤¤¤ Entrees de registre: 9 ¤¤¤
[SUSP PATH] HKCU\[...]\Run : aaqmo ("c:\users\yann\appdata\local\aaqmo.exe" aaqmo) -> FOUND
[SUSP PATH] HKUS\S-1-5-21-3892552874-2955998548-3286312655-1000[...]\Run : aaqmo ("c:\users\yann\appdata\local\aaqmo.exe" aaqmo) -> FOUND
[SUSP PATH] HKLM\[...]\Wow6432Node\RunOnce : eojet.exe (C:\Users\Yann\AppData\Local\eojet\eojet.exe -runonce) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND
[HJ] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [NON CHARGE] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost
::1 localhost

¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: WDC WD6400AAKS-65A7B0 +++++
--- User ---
[MBR] 8b60284f5a27bf552c08ca3b993797bf
[BSP] 309fdfd200901d3359dd1e035123a213 : HP tatooed MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 595934 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1220474115 | Size: 14543 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Generic USB SD Reader USB Device +++++
Error reading User MBR!
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive2: Generic USB CF Reader USB Device +++++
Error reading User MBR!
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive3: Generic USB xD/SM Reader USB Device +++++
Error reading User MBR!
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive4: Generic USB MS Reader USB Device +++++
Error reading User MBR!
User = LL1 ... OK!
Error reading LL2 MBR!

Termine : << RKreport[1].txt >>
RKreport[1].txt

MERCI

tysonette56 · le 23 Aoû 2012 17:31

Rapport Roguekiller après suppression :

RogueKiller V7.6.6 [10/08/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion- ... ntees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 64 bits version
Demarrage : Mode normal
Utilisateur: Yann [Droits d'admin]
Mode: Suppression -- Date: 23/08/2012 18:30:12

¤¤¤ Processus malicieux: 2 ¤¤¤
[SUSP PATH] eojet.exe -- C:\Users\Yann\AppData\Local\eojet\eojet.exe -> KILLED [TermProc]
[SUSP PATH] OptChrome.exe -- C:\Users\Yann\AppData\Local\Temp\OptChrome.exe -> KILLED [TermProc]

¤¤¤ Entrees de registre: 8 ¤¤¤
[SUSP PATH] HKCU\[...]\Run : aaqmo ("c:\users\yann\appdata\local\aaqmo.exe" aaqmo) -> DELETED
[SUSP PATH] HKLM\[...]\Wow6432Node\RunOnce : eojet.exe (C:\Users\Yann\AppData\Local\eojet\eojet.exe -runonce) -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED (0)
[HJ] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED (0)

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [NON CHARGE] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost
::1 localhost

¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: WDC WD6400AAKS-65A7B0 +++++
--- User ---
[MBR] 8b60284f5a27bf552c08ca3b993797bf
[BSP] 309fdfd200901d3359dd1e035123a213 : HP tatooed MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 595934 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1220474115 | Size: 14543 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive2: Generic USB CF Reader USB Device +++++
Error reading User MBR!
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive3: Generic USB xD/SM Reader USB Device +++++
Error reading User MBR!
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive4: Generic USB MS Reader USB Device +++++
Error reading User MBR!
User = LL1 ... OK!
Error reading LL2 MBR!

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

tysonette56 · le 23 Aoû 2012 17:57

ensuite rapport OTL :

http://cjoint.com/?BHxs2ZSdI1i

bernard53 · le 23 Aoû 2012 18:54

ok ceci et par précaution crée un point de restauration avant de faire cette manip.

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case " Rapport minimal" soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Personnalisation"

:OTL
PRC - C:\Program Files (x86)\Iminent\Iminent.exe (Iminent)
PRC - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (Iminent)
PRC - C:\Users\Yann\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe (Microsoft Corporation)
IE - HKLM\..\SearchScopes\{ADC80818-F23A-4DFB-AE78-81B276205496}: "URL" = http://fr.kelkoopartners.net/ctl/do/sea ... archQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
IE - HKLM\..\SearchScopes\{F4307E89-2564-449E-B834-C0940A081462}: "URL" = http://slirsredirect.search.aol.com/sli ... 156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.gdark.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.gdark.com
IE - HKLM\..\SearchScopes\{2B7B7EFC-C234-4532-822B-A8D74D7EF7EB}: "URL" = http://fr.gdark.com/search.php?cx=partn ... e=UTF-8&q={searchTerms}
IE - HKLM\..\SearchScopes\{ADC80818-F23A-4DFB-AE78-81B276205496}: "URL" = http://fr.kelkoopartners.net/ctl/do/sea ... archQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
IE - HKLM\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = http://search.iminent.com/?appId=&ref=toolbox&q={searchTerms}
IE - HKLM\..\SearchScopes\{F4307E89-2564-449E-B834-C0940A081462}: "URL" = http://slirsredirect.search.aol.com/sli ... 156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.gdark.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://fr.gdark.com/search.php?cx=partn ... e=UTF-8&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [String data over 1000 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gdark.com
IE - HKCU\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
IE - HKCU\..\SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&mkt=fr-FR&FORM=MIMWA2
IE - HKCU\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = http://search.iminent.com/?appId=&ref=toolbox&q={searchTerms}
IE - HKCU\..\SearchScopes\{C8F6A8A6-1C43-4077-8FD8-208325014C11}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7RNWN_fr
CHR - homepage: http://search.iminent.com/
CHR - default_search_provider: Iminent (Enabled)
CHR - default_search_provider: search_url = http://search.iminent.com/?appId=3D8331 ... toolbox&q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage: http://search.iminent.com/
O2 - BHO: (TBSB01620 Class) - {58124A0B-DC32-4180-9BFF-E0E21AE34026} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (IMinent WebBooster (BHO)) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll (Iminent)
O2 - BHO: (PricePeep) - {FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} - C:\Program Files (x86)\PricePeep\pricepeep.dll (PricePeep)
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (no name) - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - No CLSID value found.
O3 - HKLM\..\Toolbar: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O4 - HKLM\..\Run: [hpqSRMon] File not found
O4 - HKLM\..\Run: [Iminent] C:\Program Files (x86)\Iminent\Iminent.exe (Iminent)
O4 - HKLM\..\Run: [IminentMessenger] C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (Iminent)
[2009/10/15 20:36:39 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ikdfb.exe
[2009/10/13 11:46:31 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\praeoi.exe
[2009/10/13 11:10:24 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\mkaxdcig.exe
[2009/10/13 10:05:28 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\evfdueu.exe
[2009/10/13 09:05:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nonggn.exe
[2009/10/13 08:05:14 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fmdkiqh.exe
[2009/10/13 07:05:07 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ubovbr.exe
[2009/10/13 06:04:59 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\juxbgil.exe
[2009/10/13 05:04:52 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hqjke.exe
[2009/10/13 04:04:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jdrfz.exe
[2009/10/13 03:04:37 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qloatwrc.exe
[2009/10/13 01:04:23 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\drhwebjy.exe
[2009/10/13 00:04:14 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\thubvcpe.exe
[2009/10/12 23:04:07 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ebrioeul.exe
[2009/10/12 22:03:59 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wiirtc.exe
[2009/10/12 21:03:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ekrgvdza.exe
[2009/10/12 20:03:42 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cqelbvd.exe
[2009/10/12 19:03:34 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ffmml.exe
[2009/10/12 18:03:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\zgtfmrdz.exe
[2009/10/12 17:03:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\icqdxln.exe
[2009/10/12 16:03:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qtwacg.exe
[2009/10/12 15:03:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wxnoxghq.exe
[2009/10/12 14:02:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ggfff.exe
[2009/10/12 13:02:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fibld.exe
[2009/10/12 12:02:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fayzle.exe
[2009/10/12 11:02:32 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\aizldu.exe
[2009/10/12 10:02:24 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cyvjxuj.exe
[2009/10/12 09:02:17 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fmdld.exe
[2009/10/12 08:02:09 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ruxcmptw.exe
[2009/10/12 07:02:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pqzblt.exe
[2009/10/12 06:01:53 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xbbfoy.exe
[2009/10/12 05:01:46 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\utcainut.exe
[2009/10/12 04:01:37 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hxias.exe
[2009/10/12 03:01:29 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pkmwq.exe
[2009/10/12 02:01:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dtkbqhw.exe
[2009/10/12 01:01:15 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fvngfnfv.exe
[2009/10/12 00:01:07 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ljgddyp.exe
[2009/10/11 23:00:59 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nppijk.exe
[2009/10/11 22:00:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ovnvvfve.exe
[2009/10/11 21:00:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\djpdta.exe
[2009/10/11 20:00:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vveddlkz.exe
[2009/10/11 19:00:27 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\whiqsadm.exe
[2009/10/11 18:00:17 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ucdryfnu.exe
[2009/10/11 17:00:09 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\oopqqrs.exe
[2009/10/11 16:00:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iexsoj.exe
[2009/10/11 14:59:52 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fjtfpb.exe
[2009/10/11 13:59:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cwkocqei.exe
[2009/10/11 12:59:37 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\anzfsmy.exe
[2009/10/11 11:46:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jfqnjm.exe
[2009/10/11 10:59:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cajiwf.exe
[2009/10/11 09:59:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pabmwybl.exe
[2009/10/11 08:59:03 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ecrofdbr.exe
[2009/10/11 07:58:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\juqtpbvy.exe
[2009/10/11 06:58:47 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gfrzkd.exe
[2009/10/11 05:58:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\psuxacfh.exe
[2009/10/11 04:58:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cnaoa.exe
[2009/10/11 03:58:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ukbhdka.exe
[2009/10/11 02:58:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\npwxfiah.exe
[2009/10/11 01:58:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\prtdfhyb.exe
[2009/10/11 00:58:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\oghowxh.exe
[2009/10/10 23:57:46 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\reykgrvb.exe
[2009/10/10 22:57:36 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bixesy.exe
[2009/10/10 21:57:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\seydxjoz.exe
[2009/10/10 20:57:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jehkhbd.exe
[2009/10/10 19:57:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qtwadg.exe
[2009/10/10 18:57:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ykoad.exe
[2009/10/10 17:56:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\tqwub.exe
[2009/10/10 16:56:47 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ljhnk.exe
[2009/10/10 15:56:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bdacatps.exe
[2009/10/10 14:56:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jeaoro.exe
[2009/10/10 13:56:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gzlfob.exe
[2009/10/10 12:56:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jfcnjfie.exe
[2009/10/10 11:56:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xgxhy.exe
[2009/10/10 10:56:02 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\aiaew.exe
[2009/10/10 09:55:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\earhhw.exe
[2009/10/10 08:55:47 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\thcjgsf.exe
[2009/10/10 07:55:39 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ijldfa.exe
[2009/10/10 06:55:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vcraoetc.exe
[2009/10/10 05:55:23 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ftdcjai.exe
[2009/10/10 04:53:16 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cajaxge.exe
[2009/10/10 03:53:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vkbjxnvl.exe
[2009/10/10 02:53:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vlcrh.exe
[2009/10/10 01:50:43 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bwsncga.exe
[2009/10/10 00:50:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bqfuj.exe
[2009/10/09 23:50:27 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qnieie.exe
[2009/10/09 22:50:19 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wgpfi.exe
[2009/10/09 21:50:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\safkq.exe
[2009/10/09 20:49:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\abuoa.exe
[2009/10/09 19:49:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qdepz.exe
[2009/10/09 18:49:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\asearewj.exe
[2009/10/09 17:49:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\khebxb.exe
[2009/10/09 16:49:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dsapmbk.exe
[2009/10/09 15:49:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wfvfvndn.exe
[2009/10/09 14:49:09 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\rvbfjnr.exe
[2009/10/09 13:49:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dadzw.exe
[2009/10/09 12:48:54 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\udcjip.exe
[2009/10/09 11:48:46 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\icdhbc.exe
[2009/10/09 11:45:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\tyflq.exe
[2009/10/09 10:48:29 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gaizcse.exe
[2009/10/09 09:48:21 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\mdihndji.exe
[2009/10/09 08:48:14 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jdadrnqf.exe
[2009/10/09 07:48:07 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bebdb.exe
[2009/10/09 06:48:00 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gpyqb.exe
[2009/10/09 05:47:53 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bcybwrna.exe
[2009/10/09 04:47:45 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dcttkjay.exe
[2009/10/09 03:47:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qtxilo.exe
[2009/10/09 02:47:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ggopopwx.exe
[2009/10/09 01:47:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\mffudtl.exe
[2009/10/09 00:47:14 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dsbqhmb.exe
[2009/10/08 23:47:06 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iztuo.exe
[2009/10/08 22:46:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wijscmvx.exe
[2009/10/08 21:46:50 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\yeflpb.exe
[2009/10/08 20:46:43 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ofgnnvv.exe
[2009/10/08 19:46:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\sgjvafrf.exe
[2009/10/08 18:46:28 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\zhdpd.exe
[2009/10/08 17:46:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\swchlx.exe
[2009/10/08 16:46:12 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bbwrfasn.exe
[2009/10/08 15:46:05 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\edvull.exe
[2009/10/08 14:45:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bawbq.exe
[2009/10/08 13:45:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\uiefs.exe
[2009/10/08 12:45:42 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kbfbywtq.exe
[2009/10/08 11:45:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ikeab.exe
[2009/10/08 10:45:28 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fmmtsbyh.exe
[2009/10/08 09:45:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iluxsv.exe
[2009/10/08 08:45:12 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\drgdsav.exe
[2009/10/08 07:45:05 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jmxcd.exe
[2009/10/08 06:44:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nvemudk.exe
[2009/10/08 05:44:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\tagtaobh.exe
[2009/10/08 04:44:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bdanjna.exe
[2009/10/08 03:44:36 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\addqtn.exe
[2009/10/08 02:44:28 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ftkcqh.exe
[2009/10/08 01:44:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ztytfrm.exe
[2009/10/07 23:44:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kifda.exe
[2009/10/07 22:43:54 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\awkamicj.exe
[2009/10/07 21:43:46 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ubpwl.exe
[2009/10/07 20:43:39 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\zgcoswch.exe
[2009/10/07 19:43:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iktwx.exe
[2009/10/07 18:43:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xckmga.exe
[2009/10/07 17:43:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\swjnsgk.exe
[2009/10/07 12:17:14 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dankav.exe
[2009/10/07 11:45:27 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ohowgoh.exe
[2009/10/07 11:22:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\sbeechot.exe
[2009/10/07 10:42:48 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\acceya.exe
[2009/10/07 09:42:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pblugqzk.exe
[2009/10/06 14:45:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nmllrk.exe
[2009/10/06 13:24:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gehqqqj.exe
[2009/10/06 12:24:28 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kaxmcyc.exe
[2009/10/06 11:24:14 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kxcge.exe
[2009/10/06 10:24:09 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\opqazsc.exe
[2009/10/06 00:09:59 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pjrtnwx.exe
[2009/10/05 23:09:52 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iyssm.exe
[2009/10/05 22:09:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hjsuvx.exe
[2009/10/05 21:09:37 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qcmwitv.exe
[2009/10/05 20:09:21 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iztvp.exe
[2009/10/05 19:09:13 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qmhdfb.exe
[2009/10/05 18:09:02 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nnngfgge.exe
[2009/10/05 17:08:54 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vvuvcllk.exe
[2009/10/05 15:08:27 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xbsufq.exe
[2009/10/05 13:30:21 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kqnsq.exe
[2009/10/05 12:31:24 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\apdjesa.exe
[2009/10/05 11:45:21 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fewowo.exe
[2009/10/05 11:31:19 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ophaqrsa.exe
[2009/10/03 11:44:48 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\codqmync.exe
[2009/10/01 10:14:16 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jnyfalps.exe
[2009/09/30 14:00:24 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dobqvr.exe
[2009/09/30 13:00:17 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\mttbih.exe
[2009/09/30 12:00:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hirdm.exe
[2009/09/30 11:00:06 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qcnxjue.exe
[2009/09/30 10:00:00 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\tiodqxlr.exe
[2009/09/30 08:59:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wnfvmdmd.exe
[2009/09/28 20:05:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wxybjstu.exe
[2009/09/28 19:05:45 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\edihf.exe
[2009/09/28 18:05:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kadbwuyn.exe
[2009/09/28 17:05:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ectzr.exe
[2009/09/28 16:05:34 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jdzcploc.exe
[2009/09/28 16:05:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\daaod.exe
[2009/09/27 23:30:52 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fulkb.exe
[2009/09/27 19:28:39 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xrcnexj.exe
[2009/09/27 11:55:36 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kiurvs.exe
[2009/09/27 11:37:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\avbdpehs.exe
[2009/09/27 10:37:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ptvhb.exe
[2009/09/27 09:36:54 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\opiabr.exe
[2009/09/26 21:25:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vembdmc.exe
[2009/09/26 20:25:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fegep.exe
[2009/09/26 19:25:06 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\swinafq.exe
[2009/09/26 18:25:00 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cnbpupdi.exe
[2009/09/26 17:24:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kwtyd.exe
[2009/09/26 16:24:48 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\trxdj.exe
[2009/09/26 15:24:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kgspspd.exe
[2009/09/26 14:24:34 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\difbcx.exe
[2009/09/26 13:24:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\yrdxq.exe
[2009/09/26 12:24:19 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hztfyse.exe
[2009/09/26 11:36:13 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\knrfjmqm.exe
[2009/09/26 11:24:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qlgbef.exe
[2009/09/26 10:24:03 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kgkos.exe
[2009/09/26 09:23:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ykcha.exe
[2009/09/26 08:23:48 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cdzfb.exe
[2009/09/26 07:23:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\rdwbugr.exe
[2009/09/26 06:23:34 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jealgc.exe
[2009/09/26 05:23:27 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\oooppqq.exe
[2009/09/26 04:23:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jdsgbgs.exe
[2009/09/26 03:23:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bwcfshu.exe
[2009/09/26 02:23:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\tgbifbw.exe
[2009/09/26 01:22:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xjtdhrku.exe
[2009/09/26 00:22:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cwtodhbq.exe
[2009/09/25 23:22:42 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\rdgzdic.exe
[2009/09/25 22:22:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\itvijlwy.exe
[2009/09/25 21:22:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hboadw.exe
[2009/09/25 20:22:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\daokawmj.exe
[2009/09/25 19:22:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ggxxxr.exe
[2009/09/25 18:22:02 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vfemmuee.exe
[2009/09/25 17:21:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\codqdrhl.exe
[2009/09/25 16:21:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hyzstefx.exe
[2009/09/25 15:21:32 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\przcmvwf.exe
[2009/09/25 14:21:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\whjzkm.exe
[2009/09/25 13:21:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hcvwjkdi.exe
[2009/09/25 12:21:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cxcrnc.exe
[2009/09/25 11:21:03 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kolpb.exe
[2009/09/25 10:20:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fqrdnoa.exe
[2009/09/25 09:20:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\akchbkw.exe
[2009/09/25 08:20:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\abbdwj.exe
[2009/09/25 07:20:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bcrmae.exe
[2009/09/25 06:20:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\izmfysff.exe
[2009/09/25 05:20:19 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\czigucav.exe
[2009/09/25 04:20:12 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\uudcqp.exe
[2009/09/25 03:20:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ukbie.exe
[2009/09/25 02:19:57 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\lbeush.exe
[2009/09/25 01:19:50 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\yjbgq.exe
[2009/09/25 00:19:39 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xpirja.exe
[2009/09/24 23:19:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\amylgrer.exe
[2009/09/24 22:19:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xaqsc.exe
[2009/09/24 21:19:12 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\anbnauh.exe
[2009/09/24 20:19:05 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qmiehdhb.exe
[2009/09/24 19:18:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xalvxb.exe
[2009/09/24 18:18:45 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\opxizcl.exe
[2009/09/24 17:18:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nnunudtd.exe
[2009/09/24 15:17:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\acfwbe.exe
[2009/09/24 14:17:39 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kawlbyv.exe
[2009/09/24 13:17:23 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dqfubxet.exe
[2009/09/24 12:17:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\daihvsi.exe
[2009/09/24 11:36:03 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dzeuj.exe
[2009/09/24 11:16:47 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bvcer.exe
[2009/09/23 21:17:57 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\juqtpc.exe
[2009/09/23 19:16:47 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ebcyp.exe
[2009/09/23 18:16:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\rfrvamre.exe
[2009/09/23 17:16:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cajivec.exe
[2009/09/23 17:12:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\whirsbd.exe
[2009/09/23 13:48:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\trxvjh.exe
[2009/09/23 12:48:23 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kpbrd.exe
[2009/09/23 11:48:16 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\utihocc.exe
[2009/09/23 10:48:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bjfmjxl.exe
[2009/09/23 09:48:03 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\guffmem.exe
[2009/09/23 08:47:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dvmvmdbd.exe
[2009/09/23 07:47:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\mcbgml.exe
[2009/09/23 06:47:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vmfmdsjk.exe
[2009/09/23 05:47:34 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\felkjjp.exe
[2009/09/23 04:47:27 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jeabx.exe
[2009/09/23 03:47:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\beytw.exe
[2009/09/23 02:47:12 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vdlabj.exe
[2009/09/23 01:47:05 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\abxkf.exe
[2009/09/23 00:46:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\etjhxgea.exe
[2009/09/22 23:46:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dhejeb.exe
[2009/09/22 22:46:34 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hyrrbv.exe
[2009/09/22 21:46:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\reatqcn.exe
[2009/09/22 20:46:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\eblca.exe
[2009/09/22 19:46:07 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\uaocdqg.exe
[2009/09/22 18:45:47 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\blekfob.exe
[2009/09/22 17:45:39 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gwonggw.exe
[2009/09/22 11:36:00 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\sfydje.exe
[2009/09/20 11:35:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\rxbydb.exe
[2009/09/18 16:38:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pyakuv.exe
[2009/09/18 14:45:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iztuohbc.exe
[2009/09/18 13:43:34 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xhxbb.exe
[2009/09/18 12:43:29 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\mllkji.exe
[2009/09/18 11:43:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\csbpfl.exe
[2009/09/18 11:34:54 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bfycqeob.exe
[2009/09/18 11:17:52 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ydwbm.exe
[2009/09/18 10:17:45 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vefvw.exe
[2009/09/18 09:17:43 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ggofh.exe
[2009/09/17 20:12:28 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\czpncax.exe
[2009/09/17 19:12:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qmwto.exe
[2009/09/17 18:12:15 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vgnvfm.exe
[2009/09/17 17:12:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\zfamx.exe
[2009/09/17 16:12:03 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bifli.exe
[2009/09/17 15:11:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ekrah.exe
[2009/09/17 14:11:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\medjb.exe
[2009/09/17 13:11:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\apdqfsg.exe
[2009/09/17 12:11:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jdauj.exe
[2009/09/17 11:11:31 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\lqhmr.exe
[2009/09/17 10:11:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pibrac.exe
[2009/09/17 09:11:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fnvgf.exe
[2009/09/17 00:06:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fycegf.exe
[2009/09/16 23:06:54 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qlfqkgpl.exe
[2009/09/16 22:06:53 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\blflgqdp.exe
[2009/09/16 21:06:48 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nfmmtlss.exe
[2009/09/16 20:06:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ehrkbeo.exe
[2009/09/16 19:06:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ircpa.exe
[2009/09/16 18:57:46 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fjtfpbl.exe
[2009/09/16 15:01:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\sfyea.exe
[2009/09/16 14:01:21 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jfbwsoc.exe
[2009/09/16 13:01:14 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\lqwdi.exe
[2009/09/16 12:01:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jlnqsvxc.exe
[2009/09/16 11:34:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gxpiask.exe
[2009/09/16 11:00:45 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\idfjlg.exe
[2009/09/16 10:00:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gaibc.exe
[2009/09/16 09:00:31 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ucjqxfmt.exe
[2009/09/16 08:00:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iztffal.exe
[2009/09/16 07:00:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hanibugy.exe
[2009/09/16 06:00:11 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\lbfva.exe
[2009/09/16 05:00:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\yefkps.exe
[2009/09/16 03:59:57 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\uutta.exe
[2009/09/16 02:59:50 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\tsrhd.exe
[2009/09/16 01:59:43 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iefbvf.exe
[2009/09/16 00:59:36 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\tagta.exe
[2009/09/15 23:59:29 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cqftpdch.exe
[2009/09/15 22:59:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xbmwadna.exe
[2009/09/15 21:59:15 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fqrceng.exe
[2009/09/15 20:59:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cmksr.exe
[2009/09/15 19:58:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wwhgh.exe
[2009/09/15 18:58:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cxbqfbx.exe
[2009/09/15 17:58:17 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ectkq.exe
[2009/09/15 16:58:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pasbe.exe
[2009/09/15 15:58:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ffhyjqcd.exe
[2009/09/15 14:57:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vdsbpf.exe
[2009/09/15 13:57:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\dfczgda.exe
[2009/09/15 12:57:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ehsdbe.exe
[2009/09/15 11:57:37 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\abeorc.exe
[2009/09/15 10:57:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nneee.exe
[2009/09/15 09:57:23 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gegppo.exe
[2009/09/15 08:57:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wnphpi.exe
[2009/09/14 19:55:59 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\msxfci.exe
[2009/09/14 18:55:53 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wgqzcl.exe
[2009/09/14 16:50:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qbtdpa.exe
[2009/09/14 15:48:58 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\abbdwys.exe
[2009/09/14 14:48:53 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\euebr.exe
[2009/09/14 13:48:48 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pkdeabde.exe
[2009/09/14 12:48:43 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fepgfhxi.exe
[2009/09/14 11:48:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ljgecaeb.exe
[2009/09/14 11:34:39 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\mlkjihvu.exe
[2009/09/14 10:48:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fmueljrb.exe
[2009/09/13 20:14:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ucjxf.exe
[2009/09/13 16:43:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fdeutl.exe
[2009/09/13 15:43:06 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xqslv.exe
[2009/09/13 14:43:02 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kecfcx.exe
[2009/09/13 13:43:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fxqdt.exe
[2009/09/13 12:42:59 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ajuhk.exe
[2009/09/13 11:42:56 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\flscj.exe
[2009/09/13 10:42:54 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vesarao.exe
[2009/09/13 09:42:53 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\mcchg.exe
[2009/09/13 08:42:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\lbaoecz.exe
[2009/09/13 07:42:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fbtmia.exe
[2009/09/13 06:42:47 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\sfsdrocn.exe
[2009/09/13 05:42:45 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\rdatpcnr.exe
[2009/09/13 04:42:43 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\psuprv.exe
[2009/09/13 03:42:42 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nueccj.exe
[2009/09/13 02:42:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\uioerym.exe
[2009/09/13 01:42:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kbxndh.exe
[2009/09/13 00:42:37 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iavhcv.exe
[2009/09/12 23:42:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ilvatwyc.exe
[2009/09/12 22:42:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\zlxcvh.exe
[2009/09/12 21:42:31 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xartfp.exe
[2009/09/12 20:42:29 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\rvzeim.exe
[2009/09/12 19:42:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kvydi.exe
[2009/09/12 11:34:03 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\awkami.exe
[2009/09/12 11:34:02 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jmpru.exe
[2009/09/10 21:14:57 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\xbaegi.exe
[2009/09/10 15:35:09 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\abvqkey.exe
[2009/09/10 09:24:14 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fdvnfhx.exe
[2009/09/10 09:07:03 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cwapdi.exe
[2009/09/09 12:49:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\atfbm.exe
[2009/09/09 10:55:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\lbgdtyo.exe
[2009/09/09 10:55:24 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jhdyvy.exe
[2009/09/08 14:15:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\pktox.exe
[2009/09/08 13:14:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\acxzup.exe
[2009/09/08 09:07:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cmaupc.exe
[2009/09/08 08:07:16 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\uiems.exe
[2009/09/08 07:07:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\iacwj.exe
[2009/09/08 06:07:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wgiyc.exe
[2009/09/08 05:06:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\deneteda.exe
[2009/09/08 04:06:48 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cemcrbq.exe
[2009/09/08 03:06:41 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qnxtece.exe
[2009/09/08 02:06:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\aiaewg.exe
[2009/09/08 01:06:25 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\kplqcsdb.exe
[2009/09/08 00:06:16 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\acxkgiv.exe
[2009/09/07 23:06:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ylwcnado.exe
[2009/09/07 22:06:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hajcdc.exe
[2009/09/07 21:05:51 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\trwcifl.exe
[2009/09/07 20:05:37 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fdgoon.exe
[2009/09/07 19:05:29 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ibxkfbdo.exe
[2009/09/07 01:00:33 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ljwuaxc.exe
[2009/09/05 01:00:10 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cqdlbu.exe
[2009/09/02 19:03:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ewphrjbz.exe
[2009/08/31 19:02:24 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\yenqc.exe
[2009/08/28 14:35:29 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\zlwjboau.exe
[2009/08/28 13:35:26 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\atviuwi.exe
[2009/08/28 12:35:23 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cfvrhdz.exe
[2009/08/28 11:35:22 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qufiadil.exe
[2009/08/28 10:35:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\spuif.exe
[2009/08/28 09:35:19 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\wiqzcsb.exe
[2009/08/27 21:56:49 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qsuxa.exe
[2009/08/27 20:56:46 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\sxcjoty.exe
[2009/08/27 19:56:44 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\rnyegkw.exe
[2009/08/27 18:56:40 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\bchcpjey.exe
[2009/08/27 17:56:38 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\psuga.exe
[2009/08/27 16:56:35 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\fegewvw.exe
[2009/08/27 15:56:34 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qmvrbx.exe
[2009/08/27 14:56:32 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qtwicfps.exe
[2009/08/27 13:56:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ekqfgvc.exe
[2009/08/27 12:56:29 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cmatis.exe
[2009/08/27 11:56:27 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\ebliy.exe
[2009/08/27 10:56:23 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\gaszle.exe
[2009/08/27 09:56:17 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\owgemuce.exe
[2009/08/27 08:55:20 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\vlcrhenv.exe
[2009/08/26 20:28:01 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\frsdfpi.exe
[2009/08/26 19:27:30 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\hirsmn.exe
[2009/08/26 19:21:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\idezd.exe
[2009/08/26 18:22:18 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\oiaauvoh.exe
[2009/08/26 18:22:17 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\oppqra.exe
[2009/08/26 17:00:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\cygerod.exe
[2009/08/26 16:29:12 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\qtvycf.exe
[2009/08/26 15:29:09 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jeuxma.exe
[2009/08/26 14:29:05 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\jnxdecd.exe
[2009/08/24 18:20:08 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\evnwof.exe
[2009/08/21 16:17:04 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\lbgcbyvt.exe
[2009/08/19 06:14:55 | 000,002,026 | ---- | C] () -- C:\Users\Yann\AppData\Local\nnued.exe
[2009/07/24 13:31:33 | 000,000,087 | ---- | C] () -- C:\Users\Yann\AppData\Local\kqmym.bat
[2009/03/20 21:09:33 | 000,000,087 | ---- | C] () -- C:\Users\Yann\AppData\Local\iukiu.bat
@Alternate Data Stream - 153 bytes -> C:\ProgramData\TEMP:D1B5B4F1

:Commands
[emptytemp]

* Cliques sur l'icône Correction (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un rapport s'ouvrir "OTL.log"
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés
Mets le rapport ici car il prend bien de la place.
http://cjoint.com/
ou.
http://www.1fichier.com/
Puis mets bien à jour Malwarebytes' et fait un scan rapide.

tysonette56 · le 23 Aoû 2012 19:37

Voilà c'est fait mais j'ai un doute sur l'utilisation de 1fichier.com je ne suis pas sûr de faire comme il le faut . :cry:

enfin voilà je tente /: le lien est : http://bkuyop.1fichier.com/

Merci encore pour votre attention et votre patience .Déjà je n'ai plus de pub ...

tysonette56 · le 23 Aoû 2012 21:45

Alors dernier rapport de Malwarebytes :

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Version de la base de données: v2012.08.23.07

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
Yann :: PC-DE-YANN [administrateur]

Protection: Activé

23/08/2012 22:32:04
mbam-log-2012-08-23 (22-35-21)rapport Malwarebytes

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 222260
Temps écoulé: 2 minute(s), 46 seconde(s)

Processus mémoire détecté(s): 1
C:\Program Files (x86)\m1988\maj.exe (Trojan.Agent) -> 3296 -> Aucune action effectuée.

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|maj_m1988 (Trojan.Agent) -> Données: C:\Program Files (x86)\m1988\maj.exe -> Aucune action effectuée.

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 2
C:\Users\Yann\Downloads\Setup.exe (PUP.Bundle.Installer.OI) -> Aucune action effectuée.
C:\Program Files (x86)\m1988\maj.exe (Trojan.Agent) -> Aucune action effectuée.

(fin)

bernard53 · le 24 Aoû 2012 07:46

ok déjà pas mal de suppression :wink:

m1988

j'allais justement te demander si tu connaissais ce logiciel mais je vois que "Malwarebytes" l'a supprimer.

Comment va ton pc cette fois?

tysonette56 · le 25 Aoû 2012 17:13

bon me voilà de retour : Alors effectivement je n'ai plus de pages de pub mais par contre j'ai des soucis comme par exemple l'image qui saute , impossibilité d'écrire dans les formulaires ... je ne vois pas du tut d'ou cela peut venir ... si vous pouviez s'il vous plait m'accorder un peu de votre temps :-?

je vous en remercie par avance

tysonette56 · le 25 Aoû 2012 17:26

et puis aussi quand je recherche quelque-chose j'ai un truc qui s'appelle "Iminent" aussi j'ai un truc qui s'ouvre en bas de l'écran une sorte de fenêtre avec écrit : Element ressources network sources Timeline profils audits console

en dessous il est écrit des trucs comme : html lang fr
head head

enfin un truc que je n'arrive pas à vous expliquer avec plein de choses d'écrites ..... :oops:

fenêtre.de.pub.intempestives

fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Re: fenêtre.de.pub.intempestives

Sujets similaires

Qui est en ligne