Le spybot m'a trouvé des infection, qu'il a supprimé.
J'ai fait un Lop
Voici le rapport :


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1300MHz )
BIOS : Insyde Software MobilePRO BIOS Version 4.20.10
USER : Laurence BOËLLE ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090521-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:19 Go (Free:5 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:2 Go)
E:\ (Local Disk) - FAT32 - Total:7 Go (Free:7 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 22/05/2009|20:00 )

--------------------\\ Listing des dossiers dans APPLIC~1

[21/01/2005|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[05/04/2006|21:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
[05/04/2006|21:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[21/01/2005|11:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[29/12/2005|16:11] C:\DOCUME~1\ALINEJ~1\APPLIC~1\ACD Systems
[03/08/2008|16:50] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Adobe
[08/05/2008|19:22] C:\DOCUME~1\ALINEJ~1\APPLIC~1\AdobeUM
[20/07/2008|17:22] C:\DOCUME~1\ALINEJ~1\APPLIC~1\AlwaysNeat
[05/04/2006|21:24] C:\DOCUME~1\ALINEJ~1\APPLIC~1\AOL
[04/03/2007|17:46] C:\DOCUME~1\ALINEJ~1\APPLIC~1\ArcSoft
[02/03/2008|14:42] C:\DOCUME~1\ALINEJ~1\APPLIC~1\CyberLink
[23/12/2007|13:38] C:\DOCUME~1\ALINEJ~1\APPLIC~1\D-Jix Media
[16/07/2008|14:05] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Gaijin Ent
[11/09/2006|16:27] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Google
[28/08/2006|16:24] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Help
[16/07/2008|15:19] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Identities
[05/04/2006|21:50] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Macromedia
[21/05/2009|13:45] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Microsoft
[14/09/2007|20:06] C:\DOCUME~1\ALINEJ~1\APPLIC~1\MiKTeX
[25/04/2009|17:08] C:\DOCUME~1\ALINEJ~1\APPLIC~1\OpenOffice.org2
[20/03/2007|19:55] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Sony Corporation
[02/06/2007|11:11] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Sun
[21/01/2005|11:11] C:\DOCUME~1\ALINEJ~1\APPLIC~1\You've Got Pictures Screensaver
[16/07/2008|15:19] C:\DOCUME~1\ALINEJ~1\APPLIC~1\Zylom

[27/12/2005|21:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[21/05/2009|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[21/01/2005|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[05/04/2006|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[21/05/2009|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[21/05/2009|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[21/08/2007|13:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Cabrilog
[28/11/2006|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[30/08/2008|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[11/03/2009|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[21/05/2009|17:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[06/10/2006|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application
[21/05/2009|13:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[21/05/2009|15:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[27/12/2005|21:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[21/01/2004|09:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[11/01/2006|21:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBT
[22/05/2009|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[21/05/2009|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[30/08/2008|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[21/01/2005|11:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[13/07/2006|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[16/07/2008|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[21/01/2005|11:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[05/04/2006|21:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
[21/01/2004|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[21/01/2005|11:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[21/01/2005|11:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[02/01/2006|20:22] C:\DOCUME~1\LAUREN~1\APPLIC~1\ACD Systems
[03/08/2008|22:38] C:\DOCUME~1\LAUREN~1\APPLIC~1\Adobe
[16/02/2007|14:35] C:\DOCUME~1\LAUREN~1\APPLIC~1\AdobeUM
[03/01/2006|20:23] C:\DOCUME~1\LAUREN~1\APPLIC~1\Ahead
[05/04/2006|21:24] C:\DOCUME~1\LAUREN~1\APPLIC~1\AOL
[12/11/2008|17:30] C:\DOCUME~1\LAUREN~1\APPLIC~1\ArcSoft
[27/05/2007|17:17] C:\DOCUME~1\LAUREN~1\APPLIC~1\CyberLink
[12/10/2008|17:16] C:\DOCUME~1\LAUREN~1\APPLIC~1\D-Jix Media
[12/10/2008|16:44] C:\DOCUME~1\LAUREN~1\APPLIC~1\EPSON
[30/07/2006|22:43] C:\DOCUME~1\LAUREN~1\APPLIC~1\Google
[18/02/2006|20:45] C:\DOCUME~1\LAUREN~1\APPLIC~1\Help
[16/07/2008|15:47] C:\DOCUME~1\LAUREN~1\APPLIC~1\Identities
[30/08/2008|17:05] C:\DOCUME~1\LAUREN~1\APPLIC~1\InstallShield
[01/04/2006|13:56] C:\DOCUME~1\LAUREN~1\APPLIC~1\Macromedia
[21/05/2009|17:03] C:\DOCUME~1\LAUREN~1\APPLIC~1\Malwarebytes
[27/10/2007|19:50] C:\DOCUME~1\LAUREN~1\APPLIC~1\Microsoft
[11/01/2006|20:56] C:\DOCUME~1\LAUREN~1\APPLIC~1\Microsoft Web Folders
[21/05/2009|14:56] C:\DOCUME~1\LAUREN~1\APPLIC~1\Real
[04/03/2007|13:09] C:\DOCUME~1\LAUREN~1\APPLIC~1\Sony Corporation
[31/05/2007|23:54] C:\DOCUME~1\LAUREN~1\APPLIC~1\Sun
[21/01/2005|11:11] C:\DOCUME~1\LAUREN~1\APPLIC~1\You've Got Pictures Screensaver
[16/07/2008|15:47] C:\DOCUME~1\LAUREN~1\APPLIC~1\Zylom

[06/02/2007|21:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[07/08/2006|08:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[29/12/2005|15:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[21/05/2009 14:39][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
[22/05/2009 12:59][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[30/08/2008|17:09] C:\Program Files\ABBYY FineReader 6.0 Sprint
[30/10/2008|00:47] C:\Program Files\ACD Systems
[21/05/2009|15:08] C:\Program Files\Adobe
[21/01/2005|11:01] C:\Program Files\Ahead
[05/04/2006|22:07] C:\Program Files\Alwil Software
[21/05/2009|14:39] C:\Program Files\Apple Software Update
[04/03/2007|17:41] C:\Program Files\ArcSoft
[21/05/2009|12:05] C:\Program Files\CCleaner
[21/01/2005|11:06] C:\Program Files\CyberLink
[20/12/2007|21:30] C:\Program Files\Design Science
[21/05/2009|13:26] C:\Program Files\DivX
[21/05/2009|13:09] C:\Program Files\epson
[21/05/2009|14:52] C:\Program Files\Fichiers communs
[21/05/2009|12:32] C:\Program Files\filehippo.com
[11/03/2009|20:22] C:\Program Files\Google
[30/04/2006|22:39] C:\Program Files\Hewlett-Packard
[21/01/2005|10:19] C:\Program Files\HighMAT CD Writing Wizard
[30/04/2006|22:40] C:\Program Files\HP
[21/05/2009|12:29] C:\Program Files\InstallShield Installation Information
[21/05/2009|16:31] C:\Program Files\Internet Explorer
[17/08/2006|16:29] C:\Program Files\Inventel
[21/05/2009|13:27] C:\Program Files\Java
[08/03/2009|23:48] C:\Program Files\Kyodai Mahjongg
[31/08/2008|13:13] C:\Program Files\Kyodai Mahjongg 2006
[21/01/2005|11:11] C:\Program Files\Learn2.com
[21/05/2009|14:44] C:\Program Files\licenses
[21/01/2004|09:31] C:\Program Files\ltmoh
[21/05/2009|17:18] C:\Program Files\Malwarebytes' Anti-Malware
[01/02/2008|21:40] C:\Program Files\MarkAny
[02/11/2008|19:09] C:\Program Files\Messenger
[21/05/2009|14:10] C:\Program Files\Microsoft
[21/05/2009|15:52] C:\Program Files\Microsoft ActiveSync
[22/05/2009|10:03] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[11/01/2006|21:02] C:\Program Files\microsoft frontpage
[04/09/2006|13:27] C:\Program Files\Microsoft MapPoint Europe
[09/12/2006|11:34] C:\Program Files\Microsoft Office
[02/11/2008|17:41] C:\Program Files\Movie Maker
[21/05/2009|13:03] C:\Program Files\MSBuild
[21/01/2004|09:06] C:\Program Files\MSN
[21/01/2004|09:06] C:\Program Files\MSN Gaming Zone
[13/11/2008|19:29] C:\Program Files\MSXML 4.0
[02/11/2008|17:38] C:\Program Files\NetMeeting
[21/05/2009|15:00] C:\Program Files\NOS
[21/01/2004|09:07] C:\Program Files\Online Services
[04/09/2008|21:41] C:\Program Files\OpenOffice.org 2.2
[21/05/2009|14:46] C:\Program Files\OpenOffice.org 3
[31/10/2008|00:07] C:\Program Files\OSD
[09/01/2006|21:10] C:\Program Files\Outils Microsoft Office
[02/11/2008|17:37] C:\Program Files\Outlook Express
[21/05/2009|15:07] C:\Program Files\Programme d'installation d'Adobe Reader 9
[21/05/2009|14:42] C:\Program Files\QuickTime
[21/05/2009|14:44] C:\Program Files\readmes
[21/05/2009|14:51] C:\Program Files\Real
[21/05/2009|14:44] C:\Program Files\redist
[21/05/2009|13:03] C:\Program Files\Reference Assemblies
[20/07/2008|17:20] C:\Program Files\ReflexiveArcade
[21/01/2004|09:27] C:\Program Files\S3Inc
[17/08/2006|16:24] C:\Program Files\Securitoo
[21/01/2004|09:08] C:\Program Files\Services en ligne
[11/01/2006|21:03] C:\Program Files\Snapshot Viewer
[04/03/2007|13:01] C:\Program Files\Sony
[22/05/2009|17:14] C:\Program Files\Spybot - Search & Destroy
[21/05/2009|17:52] C:\Program Files\SpywareBlaster
[21/01/2004|09:35] C:\Program Files\Synaptics
[21/05/2009|17:58] C:\Program Files\Trend Micro
[04/03/2007|17:34] C:\Program Files\Trust
[17/12/2007|18:27] C:\Program Files\ViaMichelin
[21/01/2005|11:11] C:\Program Files\Viewpoint
[22/05/2009|14:52] C:\Program Files\Wanadoo
[21/01/2005|10:19] C:\Program Files\Windows Journal Viewer
[21/05/2009|14:10] C:\Program Files\Windows Live
[21/05/2009|14:09] C:\Program Files\Windows Live SkyDrive
[27/01/2007|19:37] C:\Program Files\Windows Media Connect 2
[02/11/2008|19:11] C:\Program Files\Windows Media Player
[02/11/2008|17:37] C:\Program Files\Windows NT
[21/01/2004|09:11] C:\Program Files\xerox
[21/03/2008|21:00] C:\Program Files\Zero G Registry

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[21/05/2009|15:09] C:\Program Files\Fichiers communs\Adobe
[21/01/2005|11:00] C:\Program Files\Fichiers communs\Ahead
[30/10/2008|00:44] C:\Program Files\Fichiers communs\AOL
[04/03/2007|17:43] C:\Program Files\Fichiers communs\ArcSoft
[11/01/2006|20:58] C:\Program Files\Fichiers communs\Designer
[21/05/2009|13:25] C:\Program Files\Fichiers communs\DivX Shared
[30/04/2006|22:39] C:\Program Files\Fichiers communs\HP
[30/08/2008|17:14] C:\Program Files\Fichiers communs\InstallShield
[31/05/2007|23:51] C:\Program Files\Fichiers communs\Java
[21/05/2009|17:34] C:\Program Files\Fichiers communs\Microsoft Shared
[21/01/2004|09:08] C:\Program Files\Fichiers communs\MSSoap
[21/01/2005|11:11] C:\Program Files\Fichiers communs\Nullsoft
[21/05/2009|14:52] C:\Program Files\Fichiers communs\Real
[21/01/2004|09:08] C:\Program Files\Fichiers communs\Services
[21/01/2004|10:01] C:\Program Files\Fichiers communs\SpeechEngines
[02/11/2008|17:37] C:\Program Files\Fichiers communs\System
[21/05/2009|13:50] C:\Program Files\Fichiers communs\Windows Live
[01/01/2009|18:29] C:\Program Files\Fichiers communs\Wise Installation Wizard
[21/05/2009|14:52] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 56 Processes )

IEXPLORE.EXE ~ [PID:3180]
IEXPLORE.EXE ~ [PID:2196]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-22 20:02:29
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:4][D:1]-> C:\DOCUME~1\LAUREN~1\LOCALS~1\Temp
[F:15][D:0]-> C:\DOCUME~1\LAUREN~1\Cookies
[F:363][D:4]-> C:\DOCUME~1\LAUREN~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 22/05/2009|20:03 - Option : [1]

--------------------\\ Fin du rapport a 20:03:34

Je n'avais pas posté le rapport de Spybot parce qu'il est super long. Je lance HijackThis.
En attendant voici le rapport Spybot :


--- Search result list ---
Hotbar: [SBI $769CA1DE] Réglages (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-4279405565-1052714929-4260115243-1006\So­ftware\Microsoft\Windows\CurrentVersion\Ext\Stats\{74CC49F7-­EB32-4A08-B204-948962A6E3DB}

Hotbar: [SBI $B48DB19E] Dossier Programme (Répertoire, nothing done)
C:\Documents and Settings\Aline JACOB\Application Data\HbTools_Icons\

Hotbar: [SBI $314EE6DF] Donnée (Fichier, nothing done)
C:\Documents and Settings\Aline JACOB\Application Data\HbTools_Icons\Registryrepair.ico
Properties.size=3262
Properties.md5=269BAFBB91807504D92ECC044193C243
Properties.filedate=1136884564
Properties.filedatetext=2006-01-10 11:16:04

Hotbar: [SBI $FE8E3B57] Donnée (Fichier, nothing done)
C:\Documents and Settings\Aline JACOB\Application Data\HbTools_Icons\wallpapere1.ico
Properties.size=25358
Properties.md5=635CD00EA6E9CCDB358D8FD1B8B11C6A
Properties.filedate=1117530754
Properties.filedatetext=2005-05-31 11:12:34

Hotbar: [SBI $F386B6B6] Réglages (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-4279405565-1052714929-4260115243-1006\So­ftware\Microsoft\Installer\Features\10B0642B36134F8F914EA8E1­1EE5B503

Hotbar: [SBI $98D0ED08] Réglages (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-4279405565-1052714929-4260115243-1006\So­ftware\Microsoft\Installer\Products\D493500BD4A54EA6BC805FC9­CDA952C5

Hotbar: [SBI $9162E822] Réglages (Valeur du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Internet Settings\5.0\User Agent\Post Platform\HbTools 4.8.2

Hotbar: [SBI $39B66619] Réglages (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-4279405565-1052714929-4260115243-1006\So­ftware\Microsoft\Internet Explorer\Explorer Bars\{66B90ADB-0BE3-40AE-8680-84A6F0577CA0}

Hotbar: [SBI $D620A2E4] Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\­HbtHostOL.HbtMailAnim

Hotbar: [SBI $DAEF713B] Barre d'outils IE (Valeur du registre, nothing done)
HKEY_USERS\S-1-5-21-4279405565-1052714929-4260115243-1006\So­ftware\Microsoft\Internet Explorer\Toolbar\WebBrowser\{74CC49F7-EB32-4A08-B204-948962A­6E3DB}

MyWay.MyWebSearch: [SBI $205CC8F2] Réglages (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-4279405565-1052714929-4260115243-1006\So­ftware\FunWebProducts


--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2009-05-22 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2009-05-19 Includes\Adware.sbi (*)
2009-05-19 Includes\AdwareC.sbi (*)
2009-01-22 Includes\Cookies.sbi (*)
2009-05-19 Includes\Dialer.sbi (*)
2009-05-12 Includes\DialerC.sbi (*)
2009-01-22 Includes\HeavyDuty.sbi (*)
2009-04-21 Includes\Hijackers.sbi (*)
2009-05-12 Includes\HijackersC.sbi (*)
2009-05-06 Includes\Keyloggers.sbi (*)
2009-05-19 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2009-05-12 Includes\Malware.sbi (*)
2009-05-19 Includes\MalwareC.sbi (*)
2009-03-25 Includes\PUPS.sbi (*)
2009-05-12 Includes\PUPSC.sbi (*)
2009-01-22 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2009-05-12 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2009-04-07 Includes\Spyware.sbi (*)
2009-05-12 Includes\SpywareC.sbi (*)
2009-04-07 Includes\Tracks.uti
2009-05-12 Includes\Trojans.sbi (*)
2009-05-19 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll



--- System information ---
Windows XP (Build: 2600) Service Pack 3 (5.1.2600)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB928366)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
/ MSXML4SP2: FIX: ASP stops responding when calling Response.Redirect to another server using msxml4 sp2
/ MSXML4SP2: Security update for MSXML4 SP2 (KB936181)
/ MSXML4SP2: Security update for MSXML4 SP2 (KB954430)
/ Step By Step Interactive Training / SP2: Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)
/ Step By Step Interactive Training / SP2: Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)
/ Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
/ Windows / SP1: Microsoft National Language Support Downlevel APIs
/ Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
/ Windows Media Player: Mise à jour de sécurité pour Lecteur Windows Media (KB952069)
/ Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)
/ Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)
/ Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
/ Windows Media Player 11: Correctif pour Lecteur Windows Media 11 (KB939683)
/ Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)
/ Windows Media Player 11: Mise à jour critique pour Lecteur Windows Media 11 (KB959772)
/ Windows Media Player 6.4: Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)
/ Windows XP: Mise à jour de sécurité pour Windows XP (KB923689)
/ Windows XP: Mise à jour de sécurité pour Windows XP (KB941569)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)
/ Windows XP / SP0: Correctif pour Windows Internet Explorer 7 (KB947864)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)
/ Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)
/ Windows XP / SP0: Mise à jour pour Windows Internet Explorer 8 (KB969497)
/ Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
/ Windows XP / SP3: Windows XP Service Pack 3
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB923561)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB938464)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB938464-v2)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB946648)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950760)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950762)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950974)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951066)
/ Windows XP / SP4: Mise à jour pour Windows XP (KB951072-v2)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951376)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951376-v2)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951698)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951748)
/ Windows XP / SP4: Mise à jour pour Windows XP (KB951978)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB952004)
/ Windows XP / SP4: Correctif pour Windows XP (KB952287)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB952954)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953155)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953839)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954211)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954459)
/ Windows XP / SP4: Hotfix for Windows XP (KB954550-v5)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954600)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB955069)
/ Windows XP / SP4: Mise à jour pour Windows XP (KB955839)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956391)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956572)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956802)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956803)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956841)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957095)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957097)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958644)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958687)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958690)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB959426)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB960225)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB960715)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB960803)
/ Windows XP / SP4: Correctif pour Windows XP (KB961118)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB961373)
/ Windows XP / SP4: Mise à jour pour Windows XP (KB961503)
/ Windows XP / SP4: Mise à jour pour Windows XP (KB967715)


--- Startup entries list ---
Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
size: 35696
MD5: 452FA961163EF4AEE4815796A13AB2CF

Located: HK_LM:Run, AGRSMMSG
command: AGRSMMSG.exe
file: C:\WINDOWS\AGRSMMSG.exe
size: 88358
MD5: B2ED4020EE2A9446649CE6B0A918C91C

Located: HK_LM:Run, avast!
command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 81000
MD5: FC242DBD786557AC641726DC5C13F060

Located: HK_LM:Run, e-TF1
command: C:\Documents and Settings\Aline JACOB\Mes documents\Mes vidéos\TF1Vision\TF1vision.exe
file: C:\Documents and Settings\Aline JACOB\Mes documents\Mes vidéos\TF1Vision\TF1vision.exe
size: 345600
MD5: C5E3147E51EE65001B82E8B3A508D52A

Located: HK_LM:Run, HP Software Update
command: "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
file: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
size: 49152
MD5: E558CDE2913DAA077D4E25732D1AA176

Located: HK_LM:Run, LtMoh
command: C:\Program Files\ltmoh\Ltmoh.exe
file: C:\Program Files\ltmoh\Ltmoh.exe
size: 184320
MD5: EE364D07DB822E73B9ED058C22019AB9

Located: HK_LM:Run, NeroFilterCheck
command: C:\WINDOWS\system32\NeroCheck.exe
file: C:\WINDOWS\system32\NeroCheck.exe
size: 155648
MD5: 3E4C03CEFAD8DE135263236B61A49C90

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\QTTask.exe" -atboottime
file: C:\Program Files\QuickTime\QTTask.exe
size: 413696
MD5: 0AB3C83FCB8EF6F56E4FB22089F0D3B9

Located: HK_LM:Run, RemoteControl
command: "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
file: C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
size: 32768
MD5: 8FB740D758B14B1BC950CC347C21E461

Located: HK_LM:Run, SNPSTD2
command: C:\WINDOWS\vsnpstd2.exe
file: C:\WINDOWS\vsnpstd2.exe
size: 286720
MD5: 1E61596140EC9CCA62E3A7A6AB51159A

Located: HK_LM:Run, SoundMan
command: SOUNDMAN.EXE
file: C:\WINDOWS\SOUNDMAN.EXE
size: 77824
MD5: 63657C6E0DF49BBAABF6F5800BCB5479

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre6\bin\jusched.exe"
file: C:\Program Files\Java\jre6\bin\jusched.exe
size: 148888
MD5: A2D390F1F2408B94EF34BFE3A00C29D3

Located: HK_LM:Run, SynTPEnh
command: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
file: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
size: 688218
MD5: 55582F239914C8EFCCF89BD632639542

Located: HK_LM:Run, SynTPLpr
command: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
file: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
size: 98394
MD5: 3665BA88B993554DB062FF96542D85FF

Located: HK_LM:Run, TkBellExe
command: "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
file: C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
size: 198160
MD5: 5676E75F98FF8E0F81DFF604A09288BB

Located: HK_LM:Run, VTTimer
command: VTTimer.exe
file: C:\WINDOWS\system32\VTTimer.exe
size: 53248
MD5: B8EE32CB45E26534A8CD7DCA7C4BAB23

Located: HK_LM:Run, VTTrayp
command: VTtrayp.exe
file: C:\WINDOWS\system32\VTtrayp.exe
size: 143360
MD5: 3BEA26599B519E9C46C1FD48084DA659

Located: HK_LM:Run, WOOWATCH
command: C:\PROGRA~1\Wanadoo\Watch.exe
file: C:\PROGRA~1\Wanadoo\Watch.exe
size: 20480
MD5: 9A29592CD135F6262C429152F7A8DD4A

Located: HK_LM:Run, zzzHPSETUP
command: F:\Setup.exe \RESET
file: F:\Setup.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:Run, CTFMON.EXE
where: .DEFAULT...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-19...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-20...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-21-4279405565-1052714929-4260115243-1006...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, EPSON Stylus DX8400 Series
where: S-1-5-21-4279405565-1052714929-4260115243-1006...
command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\WINDOWS\TEMP\E_SB1.tmp" /EF "HKCU"
file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE
size: 182272
MD5: 9AD31D8018B72E1013CFD012619E0232

Located: HK_CU:Run, filehippo.com
where: S-1-5-21-4279405565-1052714929-4260115243-1006...
command: "C:\Program Files\filehippo.com\UpdateChecker.exe" /background
file: C:\Program Files\filehippo.com\UpdateChecker.exe
size: 146944
MD5: 807DAA26FC6DD458F9D112A2D1D1BFFE

Located: HK_CU:Run, MSMSGS
where: S-1-5-21-4279405565-1052714929-4260115243-1006...
command: "C:\Program Files\Messenger\msmsgs.exe" /background
file: C:\Program Files\Messenger\msmsgs.exe
size: 1695232
MD5: E13EA4860E8F2AA845B53BFD2B6FEC5B

Located: HK_CU:Run, NBJ
where: S-1-5-21-4279405565-1052714929-4260115243-1006...
command: "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
file: C:\Program Files\Ahead\Nero BackItUp\NBJ.exe
size: 1937408
MD5: 4B02664A36EAA7D391698B6DC2F6F0A3

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-4279405565-1052714929-4260115243-1006...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 2260480
MD5: 390679F7A217A5E73D756276C40AE887

Located: HK_CU:Run, swg
where: S-1-5-21-4279405565-1052714929-4260115243-1006...
command: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
file: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
size: 68856
MD5: E616A6A6E91B0A86F2F6217CDE835FFE

Located: HK_CU:Run, WOOKIT
where: S-1-5-21-4279405565-1052714929-4260115243-1006...
command: C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
file: C:\Program Files\Wanadoo\Shell.exe
size: 122880
MD5: 2BD5E1E68614DBC6B320597856ED6EA7

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-21-4279405565-1052714929-4260115243-1007...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, H/PC Connection Agent
where: S-1-5-21-4279405565-1052714929-4260115243-1007...
command: "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
file: C:\Program Files\Microsoft ActiveSync\wcescomm.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:Run, swg
where: S-1-5-21-4279405565-1052714929-4260115243-1007...
command: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
file: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
size: 68856
MD5: E616A6A6E91B0A86F2F6217CDE835FFE

Located: HK_CU:Run, WMPNSCFG
where: S-1-5-21-4279405565-1052714929-4260115243-1007...
command: C:\Program Files\Windows Media Player\WMPNSCFG.exe
file: C:\Program Files\Windows Media Player\WMPNSCFG.exe
size: 204288
MD5: 5011A24AECF4D573473BDC15EE84C178

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-18...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: Démarrage (tous utilisateurs), Adobe Gamma Loader.lnk
where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
file: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
size: 110592
MD5: 5CD0CD0EC4DC5DF459B3AC016764F5AA

Located: Démarrage (tous utilisateurs), Démarrage rapide du logiciel HP Image Zone.lnk
where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
file: C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
size: 53248
MD5: 8C53463A3E28454D74F48BF87A9CF7BA

Located: Démarrage (tous utilisateurs), HP Digital Imaging Monitor.lnk
where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
file: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
size: 258048
MD5: C519CEC624CF9BCBA3059F32266C8FFF

Located: Démarrage (tous utilisateurs), Microsoft Office.lnk
where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\Microsoft Office\Office\OSA9.EXE
file: C:\Program Files\Microsoft Office\Office\OSA9.EXE
size: 65588
MD5: 1992C9BBE0D765A76DD3D856A5B4A83F

Located: Démarrage (utilisateur), OpenOffice.org 2.2.lnk
where: C:\Documents and Settings\Aline JACOB\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
file: C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
size: 393216
MD5: 7636C40413BB9AC278BD2C8AE24E3E0C

Located: Démarrage (utilisateur), Outil de détection de support de Cyber-shot Viewer.lnk
where: C:\Documents and Settings\Laurence BOËLLE\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
file: C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
size: 155648
MD5: 5F2A81D0EDB9D4F6A95CB08FC4A3EF26

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, dimsntfy
command: %SystemRoot%\System32\dimsntfy.dll
file: %SystemRoot%\System32\dimsntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!



--- Browser helper object list ---
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} (AcroIEHelperStub)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: AcroIEHelperStub
CLSID name: Adobe PDF Link Helper
Path: C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\
Long name: AcroIEHelperShim.dll
Short name: ACROIE~2.DLL
Date (created): 27/02/2009 12:07:26
Date (last access): 22/05/2009 17:19:56
Date (last write): 27/02/2009 12:07:26
Filesize: 75128
Attributes: archive
MD5: 5CF6190CD875DA6B35256FEE573E7908
CRC32: 764BA81B
Version: 9.1.0.163

{5C255C8A-E604-49b4-9D64-90988571CECB} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:

{9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
Path: C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\
Long name: WindowsLiveLogin.dll
Short name: WINDOW~1.DLL
Date (created): 22/01/2009 15:41:30
Date (last access): 22/05/2009 17:31:16
Date (last write): 22/01/2009 15:41:30
Filesize: 408448
Attributes: archive
MD5: B7899C3E21B299D7A3C0DA96CAE340BD
CRC32: 288935F8
Version: 5.0.818.5

{AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Google Toolbar Helper
description: Google toolbar
classification: Open for discussion
known filename: googletoolbar.dll<br>googletoolbar*.dll<br>(* = number)<br>googletoolbar_en_*.**-big.dll<br>Googletoolbar_en_*.*.**-deleon.dll
info link: http://toolbar.google.com/
info source: TonyKlein
Path: C:\Program Files\Google\Google Toolbar\
Long name: GoogleToolbar.dll
Short name: GOOGLE~1.DLL
Date (created): 11/03/2009 20:22:44
Date (last access): 22/05/2009 17:24:50
Date (last write): 25/04/2009 17:11:28
Filesize: 259696
Attributes: archive
MD5: 6154D449D3856AE42EB38531CE22DC83
CRC32: A7F1D641
Version: 6.1.1518.856

{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Google Toolbar Notifier BHO
Path: C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\
Long name: swg.dll
Short name:
Date (created): 15/04/2009 22:30:58
Date (last access): 22/05/2009 17:31:16
Date (last write): 15/04/2009 22:30:58
Filesize: 668656
Attributes: archive
MD5: D1585B06DED161E13B905DC4FFBF7F12
CRC32: 88D5BAA5
Version: 5.1.1309.3572

{C84D72FE-E17D-4195-BB24-76C02E2E7C4E} (Google Dictionary Compression sdch)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: Google Dictionary Compression sdch
CLSID name: Google Dictionary Compression sdch
Path: C:\Program Files\Google\Google Toolbar\Component\
Long name: fastsearch_A8904FB862BD9564.dll
Short name: FASTSE~2.DLL
Date (created): 25/04/2009 17:11:26
Date (last access): 22/05/2009 17:31:16
Date (last write): 25/04/2009 17:11:26
Filesize: 470512
Attributes: archive
MD5: E35BCCB1D1D96F8E5B09C72AF70EC3F6
CRC32: 73C702FE
Version: 1.0.610.27482

{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Java(tm) Plug-In 2 SSV Helper
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2ssv.dll
Short name:
Date (created): 21/05/2009 13:28:04
Date (last access): 22/05/2009 17:25:00
Date (last write): 21/05/2009 13:28:04
Filesize: 35840
Attributes: archive
MD5: 96A225C7F5346A9E81FC3DFA89A900C0
CRC32: BAD5D2EF
Version: 6.0.130.3

{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (JQSIEStartDetectorImpl)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: JQSIEStartDetectorImpl
CLSID name: JQSIEStartDetectorImpl Class
Path: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\
Long name: jqs_plugin.dll
Short name: JQS_PL~1.DLL
Date (created): 21/05/2009 13:28:06
Date (last access): 22/05/2009 17:19:56
Date (last write): 21/05/2009 13:28:06
Filesize: 73728
Attributes: archive
MD5: 53F8B53918C839F76367B7E612B742B1
CRC32: 735F7F91
Version: 6.0.130.3



--- ActiveX list ---
{5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class)
DPF name:
CLSID name: UnoCtrl Class
Installer: C:\WINDOWS\Downloaded Program Files\GAME_UNO1.INF
Codebase: http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
description:
classification: Legitimate
known filename: unomsnger.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: GAME_UNO1.dll
Short name: GAME_U~1.DLL
Date (created): 23/11/2006 00:22:42
Date (last access): 22/05/2009 16:33:02
Date (last write): 23/11/2006 00:22:42
Filesize: 372736
Attributes: archive
MD5: 491C8F47C0DCFBC1B1329B9B368AA78F
CRC32: 5BFD37C9
Version: 1.0.1123.1

{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control)
DPF name:
CLSID name: BDSCANONLINE Control
Installer: C:\WINDOWS\Downloaded Program Files\oscan8.inf
Codebase: http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
description:
classification: Legitimate
known filename: oscan8.ocx
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\DOWNLO~1\
Long name: oscan8.ocx
Short name:
Date (created): 25/10/2007 16:54:18
Date (last access): 22/05/2009 15:57:12
Date (last write): 25/10/2007 16:54:18
Filesize: 471040
Attributes: archive
MD5: BC4E154A06C9208EF36669B1B9E5FDAD
CRC32: DF08A08D
Version: 1.0.0.1

{6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class)
DPF name:
CLSID name: WUWebControl Class
Installer: C:\WINDOWS\Downloaded Program Files\wuweb.inf
Codebase: http://v5.windowsupdate.microsoft.com/...
description:
classification: Legitimate
known filename: wuweb.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\system32\
Long name: wuweb.dll
Short name:
Date (created): 21/01/2004 09:08:22
Date (last access): 22/05/2009 16:41:48
Date (last write): 16/10/2008 15:13:40
Filesize: 202776
Attributes: archive
MD5: 1865594AFE88C27A127FF4CF492734B0
CRC32: F48FD025
Version: 7.2.6001.788

{87AF076E-D86D-4E87-ADDD-F05804E1F150} ()
DPF name:
CLSID name:
Installer: C:\WINDOWS\Downloaded Program Files\setup.inf
Codebase: http://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab

{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_13
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
description: Sun Java
classification: Legitimate
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Path: C:\Program Files\Java\jre6\bin\
Long name: npjpi160_13.dll
Short name: NPJPI1~1.DLL
Date (created): 21/05/2009 13:28:06
Date (last access): 22/05/2009 16:19:52
Date (last write): 21/05/2009 13:28:06
Filesize: 136600
Attributes: archive
MD5: 20188EB1790C5EB9057DDFE3EA138FC7
CRC32: 2EA1ACCF
Version: 6.0.130.3

{8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class)
DPF name:
CLSID name: MessengerStatsClient Class
Installer:
Codebase: http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
description:
classification: Legitimate
known filename: messengerstatsclient.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: messengerstatsclient.dll
Short name: MESSEN~1.DLL
Date (created): 29/05/2003 16:00:20
Date (last access): 22/05/2009 16:33:02
Date (last write): 29/05/2003 16:00:20
Filesize: 160864
Attributes: archive
MD5: B069B555A00AA026F657AA4FD13AE154
CRC32: 89BB01E1
Version: 7.1.9502.1

{B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class)
DPF name:
CLSID name: AdSignerLCContrl Class
Installer: C:\WINDOWS\Downloaded Program Files\AdSignerADP.inf
Codebase: https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
Path: C:\WINDOWS\Downloaded Program Files\
Long name: AdSignerADP.dll
Short name: ADSIGN~1.DLL
Date (created): 18/04/2006 16:04:58
Date (last access): 22/05/2009 16:33:00
Date (last write): 18/04/2006 16:04:58
Filesize: 159040
Attributes: archive
MD5: 4570DE56BDD604B1972500446C662EEE
CRC32: A3B9AF8B
Version: 1.2.7.1

{BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player)
DPF name:
CLSID name: Zylom Games Player
Installer: C:\WINDOWS\Downloaded Program Files\ZylomGamesPlayer.inf
Codebase: http://game14.zylom.com/activex/zylomgamesplayer.cab
description:
classification: Legitimate
known filename: zylomgamesplayer.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\
Long name: zylomgamesplayer.dll
Short name: ZYLOMG~1.DLL
Date (created): 16/07/2008 15:19:46
Date (last access): 22/05/2009 16:12:26
Date (last write): 26/09/2006 13:03:14
Filesize: 161976
Attributes: archive
MD5: 7FAF5222EEB546E1DC0F348DCB314B0B
CRC32: B03D23B2
Version: 2.0.0.1

{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
description:
classification: Legitimate
known filename: npjpi160.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Program Files\Java\jre1.6.0\bin\
Long name: npjpi160.dll
Short name:
Date (created): 21/08/2007 13:23:38
Date (last access): 22/05/2009 16:19:38
Date (last write): 21/08/2007 13:23:38
Filesize: 132744
Attributes: archive
MD5: 69AD062A99FF030285DE344BA8BF87C4
CRC32: 0695855F
Version: 6.0.0.105

{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_01
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
description:
classification: Legitimate
known filename: npjpi160_01.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Program Files\Java\jre1.6.0_01\bin\
Long name: npjpi160_01.dll
Short name: NPJPI1~1.DLL
Date (created): 14/03/2007 02:04:46
Date (last access): 22/05/2009 16:19:42
Date (last write): 14/03/2007 03:43:42
Filesize: 132760
Attributes: archive
MD5: F112FB2FD2EF66D439799E3F834DF000
CRC32: D2B09219
Version: 6.0.0.6

{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_05
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
Path: C:\Program Files\Java\jre1.6.0_05\bin\
Long name: npjpi160_05.dll
Short name: NPJPI1~1.DLL
Date (created): 22/02/2008 03:33:32
Date (last access): 22/05/2009 16:19:48
Date (last write): 22/02/2008 05:25:20
Filesize: 132496
Attributes: archive
MD5: 4FDFB86D78994BD71CBB779A7809E9CD
CRC32: 5A0EB880
Version: 6.0.50.13

{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_13
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
Path: C:\Program Files\Java\jre6\bin\
Long name: npjpi160_13.dll
Short name: NPJPI1~1.DLL
Date (created): 21/05/2009 13:28:06
Date (last access): 22/05/2009 17:39:12
Date (last write): 21/05/2009 13:28:06
Filesize: 136600
Attributes: archive
MD5: 20188EB1790C5EB9057DDFE3EA138FC7
CRC32: 2EA1ACCF
Version: 6.0.130.3

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_13
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
description:
classification: Legitimate
known filename: npjpi150_06.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Program Files\Java\jre6\bin\
Long name: npjpi160_13.dll
Short name: NPJPI1~1.DLL
Date (created): 21/05/2009 13:28:06
Date (last access): 22/05/2009 17:39:12
Date (last write): 21/05/2009 13:28:06
Filesize: 136600
Attributes: archive
MD5: 20188EB1790C5EB9057DDFE3EA138FC7
CRC32: 2EA1ACCF
Version: 6.0.130.3

{CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class)
DPF name:
CLSID name: get_atlcom Class
Installer: C:\WINDOWS\Downloaded Program Files\gp.inf
Codebase: http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
Path: C:\WINDOWS\Downloaded Program Files\
Long name: gp.ocx
Short name:
Date (created): 03/03/2009 14:53:40
Date (last access): 22/05/2009 16:33:02
Date (last write): 03/03/2009 14:53:40
Filesize: 125184
Attributes: archive
MD5: 747BC58A42864F242FE3D9B4E8C5AE7B
CRC32: 0F78F6E9
Version: 1.5.2.35

{D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
DPF name:
CLSID name: Shockwave Flash Object
Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf
Codebase: http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
description: Macromedia Shockwave Flash Player
classification: Legitimate
known filename:
info link:
info source: Patrick M. Kolla
Path: C:\WINDOWS\system32\Macromed\Flash\
Long name: Flash10b.ocx
Short name:
Date (created): 03/02/2009 04:07:18
Date (last access): 22/05/2009 16:40:16
Date (last write): 03/02/2009 04:07:18
Filesize: 3866528
Attributes: readonly archive
MD5: 8AFC17155ED5AB60B7C52D7F553D579C
CRC32: 0FBC13F3
Version: 10.0.22.87



--- Process list ---
PID: 0 ( 0) [System]
PID: 752 ( 4) \SystemRoot\System32\smss.exe
size: 50688
PID: 800 ( 752) \??\C:\WINDOWS\system32\csrss.exe
size: 6144
PID: 824 ( 752) \??\C:\WINDOWS\system32\winlogon.exe
size: 512000
PID: 868 ( 824) C:\WINDOWS\system32\services.exe
size: 111104
MD5: C3FB1D70CB88722267949694BA51759E
PID: 880 ( 824) C:\WINDOWS\system32\lsass.exe
size: 13312
MD5: 91E6024D6D4DCDECDB36C43ECF9BBECB
PID: 1028 ( 868) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1108 ( 868) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1148 ( 868) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1188 ( 868) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1332 ( 868) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1412 ( 868) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1684 ( 868) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
size: 18752
MD5: B4253776EE034F6770FCEE32C28490B0
PID: 1732 ( 868) C:\Program Files\Alwil Software\Avast4\ashServ.exe
size: 138680
MD5: 62889D40A3FB1A9012428E16FE0DC67A
PID: 184 ( 868) C:\WINDOWS\system32\spoolsv.exe
size: 57856
MD5: 460E4CE148BD07218DA0B6A3D31885A9
PID: 268 ( 868) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 316 ( 868) C:\WINDOWS\System32\FTRTSVC.exe
size: 40960
MD5: D1261099E03EEE90976EA19002995B89
PID: 472 ( 868) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 484 ( 868) C:\Program Files\Java\jre6\bin\jqs.exe
size: 152984
MD5: 890369AED0DDE1A98F09F7DC239CA2BD
PID: 560 ( 868) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1512 ( 868) C:\Program Files\Windows Media Player\WMPNetwk.exe
size: 918016
MD5: C9BEA742CE225CC993C9465FDDAE4656
PID: 632 ( 868) C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
size: 254040
MD5: F09461C8ECCACE33C271CC229F11E281
PID: 708 ( 868) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
size: 352920
MD5: 23CA3E54474AE5FFDBC0F97B9E1815DB
PID: 1480 ( 868) C:\WINDOWS\System32\alg.exe
size: 44544
MD5: 5E9A6658A2A69AE7EB195113B7A2E7A9
PID: 2552 ( 868) C:\WINDOWS\system32\wbem\wmiapsrv.exe
size: 126464
MD5: 4E8E8A58F56B25D0795F484E5EB7F898
PID: 1380 ( 180) C:\WINDOWS\Explorer.EXE
size: 1037824
MD5: F2317622D29F9FF0F88AEECD5F60F0DD
PID: 2060 (1380) C:\WINDOWS\system32\VTtrayp.exe
size: 143360
MD5: 3BEA26599B519E9C46C1FD48084DA659
PID: 2068 (1380) C:\WINDOWS\system32\VTTimer.exe
size: 53248
MD5: B8EE32CB45E26534A8CD7DCA7C4BAB23
PID: 2140 (1380) C:\WINDOWS\AGRSMMSG.exe
size: 88358
MD5: B2ED4020EE2A9446649CE6B0A918C91C
PID: 2176 (1380) C:\Program Files\ltmoh\Ltmoh.exe
size: 184320
MD5: EE364D07DB822E73B9ED058C22019AB9
PID: 2184 (1380) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
size: 98394
MD5: 3665BA88B993554DB062FF96542D85FF
PID: 2192 (1380) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
size: 688218
MD5: 55582F239914C8EFCCF89BD632639542
PID: 2220 (1380) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
size: 32768
MD5: 8FB740D758B14B1BC950CC347C21E461
PID: 2232 (1380) C:\Program Files\QuickTime\QTTask.exe
size: 413696
MD5: 0AB3C83FCB8EF6F56E4FB22089F0D3B9
PID: 2252 (1380) C:\WINDOWS\SOUNDMAN.EXE
size: 77824
MD5: 63657C6E0DF49BBAABF6F5800BCB5479
PID: 2264 (1380) C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 81000
MD5: FC242DBD786557AC641726DC5C13F060
PID: 2452 (1380) C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
size: 49152
MD5: E558CDE2913DAA077D4E25732D1AA176
PID: 2488 (1380) C:\WINDOWS\vsnpstd2.exe
size: 286720
MD5: 1E61596140EC9CCA62E3A7A6AB51159A
PID: 2500 (1380) C:\Documents and Settings\Aline JACOB\Mes documents\Mes vidéos\TF1Vision\TF1vision.exe
size: 345600
MD5: C5E3147E51EE65001B82E8B3A508D52A
PID: 2540 (1380) C:\Program Files\Java\jre6\bin\jusched.exe
size: 148888
MD5: A2D390F1F2408B94EF34BFE3A00C29D3
PID: 1948 (1380) C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
size: 198160
MD5: 5676E75F98FF8E0F81DFF604A09288BB
PID: 2700 (1380) C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4
PID: 2740 (1380) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
size: 68856
MD5: E616A6A6E91B0A86F2F6217CDE835FFE
PID: 1248 (1380) C:\Program Files\Messenger\msmsgs.exe
size: 1695232
MD5: E13EA4860E8F2AA845B53BFD2B6FEC5B
PID: 2888 (1380) C:\Program Files\filehippo.com\UpdateChecker.exe
size: 146944
MD5: 807DAA26FC6DD458F9D112A2D1D1BFFE
PID: 3140 ( 124) C:\PROGRA~1\Wanadoo\ComComp.exe
size: 249856
MD5: 5D589D0436C4C2D285B3418E79E78A21
PID: 3200 (1380) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
size: 258048
MD5: C519CEC624CF9BCBA3059F32266C8FFF
PID: 3232 (1380) C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
size: 155648
MD5: 5F2A81D0EDB9D4F6A95CB08FC4A3EF26
PID: 3860 (2608) C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
size: 425984
MD5: 6B2B9B46D7DA5C67397412DEA6CF9A14
PID: 2476 (1828) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 5365592
MD5: 0477C2F9171599CA5BC3307FDFBA8D89
PID: 1740 (3524) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 2260480
MD5: 390679F7A217A5E73D756276C40AE887
PID: 4 ( 0) System


--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 22/05/2009 17:39:12

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.google.fr/
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://www.google.com/ie
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://www.google.com/search?q=%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://go.microsoft.com/fwlink/?LinkId=54896
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.cooxer.com/
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://go.microsoft.com/fwlink/?LinkId=69157
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://go.microsoft.com/fwlink/?LinkId=54896
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm


--- Winsock Layered Service Provider list ---


--- Uninstall list ---
(AddressBook)

Adobe Flash Player 10 ActiveX 10.0.22.87 (Adobe Flash Player ActiveX)
uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
publisher: Adobe Systems Incorporated
help link: http://www.adobe.com/go/flashplayer_support/

Adobe Photoshop 7.0 7.0 (Adobe Photoshop 7.0)
version (major): 7
install location: C:\Program Files\Adobe\Photoshop 7.0
install source: F:\Photoshop7\Photoshop\
uninstall cmd: C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
publisher: Adobe Systems, Inc.

Agere Systems AC'97 Modem (Agere Systems Soft Modem)
uninstall cmd: agrsmdel

avast! Antivirus 4.8 (avast!)
version (major): 4
version (minor): 8
install location: C:\PROGRA~1\ALWILS~1\Avast4
install source: C:\PROGRA~1\ALWILS~1\Avast4\setup
uninstall cmd: C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
publisher: Alwil Software
help link: http://www.avast.com

(Branding)

CCleaner (remove only) (CCleaner)
uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"
publisher: Piriform

(Connection Manager)

(DirectAnimation)

(DirectDrawEx)

DivX Plus DirectShow Filters (DivX Plus DirectShow Filters)
install location: C:\Program Files\DivX\DivX Plus DirectShow Filters
uninstall cmd: C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
publisher: DivX, Inc.

(DXM_Runtime)

EPSON Logiciel imprimante (EPSON Printer and Utilities)
uninstall cmd: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
publisher: SEIKO EPSON Corporation

EPSON Scan (EPSON Scanner)
uninstall cmd: C:\Program Files\epson\escndv\setup\setup.exe /r

EPSON Stylus CX7300_CX8300_DX7400_DX8400 Manuel (EPSON Stylus CX7300_CX8300_DX7400_DX8400 Guide d'utilisation)
install location: C:\Program Files\EPSON\TPMANUAL\ES_CX_DX\FRA\USE_G
uninstall cmd: C:\Program Files\EPSON\TPMANUAL\ES_CX_DX\FRA\USE_G\DOCUNINS.EXE

filehippo.com Update Checker (filehippo.com)
uninstall cmd: "C:\Program Files\filehippo.com\uninstall.exe"

(Fontcore)

Navigateur Orange (FranceTelecomUninstall_FTBrowser)
install location: C:\PROGRA~1\Wanadoo\WOOBrowser
uninstall cmd: C:\PROGRA~1\Wanadoo\Shell.exe inst\uninst_FTBrowser.shl

Gestionnaire Internet (GestionnaireInternet.exe)
uninstall cmd: C:\PROGRA~1\Wanadoo\uninstall.exe

HijackThis 2.0.2 2.0.2 (HijackThis)
uninstall cmd: "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
publisher: TrendMicro

hitman_ss Screen Saver (hitman_ss)
uninstall cmd: C:\WINDOWS\system32\hitman_ss.scr /u

HP Image Zone 4.5 4.5 (HP Photo & Imaging)
uninstall cmd: C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
publisher: HP
help link: http://www.hp.com/support

(ICW)

Microsoft Internationalized Domain Names Mitigation APIs (IDNMitigationAPIs)
install date: 20061124
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

(IE40)

(IE4Data)

(IE5BAKEX)

Windows Internet Explorer 7 20061107.210142 (ie7)
install date: 20061124
publisher: Microsoft Corporation
help link: http://www.microsoft.com/ie

Windows Internet Explorer 8 20090308.140743 (ie8)
install date: 20090521
uninstall cmd: "C:\WINDOWS\ie8\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://www.microsoft.com/ie

(IEData)

(InstallShield Uninstall Information)

EPSON Attach To Email 1.01.0000 (InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5})
version: 16842752
version (major): 1
version (minor): 1
estimated size: 1108
install date: 20080830
install location: C:\Program Files\EPSON\Creativity Suite\Attach To Email\
install source: F:\COMMON\CreativitySuite\AttachToEmail\
uninstall cmd: C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
publisher: SEIKO EPSON
comments: Attach To Email - Email support app
help link: http://www.epson.com/

(KB884016)

(KB884267)

(KB885353)

(KB886612)

(KB887078)

(KB887626)

(KB888656)

(KB889858)

(KB891122)

(KB892313)

(KB893240)

(KB893241)

(KB893803)

(KB895181)

(KB895316)

(KB895572)

(KB897586)

Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) 20050502.101010 (KB898458)
install date: 20060401
uninstall cmd: "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/kb/898458

(KB898549)

(KB900399)

(KB902344)

(KB907658)

Mise à jour de sécurité pour Lecteur Windows Media (KB911564) (KB911564)
install date: 20060401
publisher: Microsoft Corporation
help link: http:/

Le rapport HijackThis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:12:37, on 24/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vsnpstd2.exe
C:\Documents and Settings\Aline JACOB\Mes documents\Mes vidéos\TF1Vision\TF1vision.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\filehippo.com\UpdateChecker.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Microsoft Office\Office\EXCEL.EXE
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cooxer.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [zzzHPSETUP] F:\Setup.exe \RESET
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
O4 - HKLM\..\Run: [e-TF1] C:\Documents and Settings\Aline JACOB\Mes documents\Mes vidéos\TF1Vision\TF1vision.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\WINDOWS\TEMP\E_SB1.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [filehippo.com] "C:\Program Files\filehippo.com\UpdateChecker.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/...
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - http://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game14.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
End of file - 11993 bytes

Voici le rapport de la recherche, je fais la suppression et je poste le deuxième rapport.

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1300MHz )
BIOS : Insyde Software MobilePRO BIOS Version 4.20.10
USER : Laurence BOËLLE ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090524-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:19 Go (Free:5 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:2 Go)
E:\ (Local Disk) - FAT32 - Total:7 Go (Free:7 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 24/05/2009|18:36 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.google.fr/"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68929"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68928"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.cooxer.com/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 24/05/2009|18:38 - Option : [1]

-----------\\ Fin du rapport a 18:38:25,21

Le rapport de suppression

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1300MHz )
BIOS : Insyde Software MobilePRO BIOS Version 4.20.10
USER : Laurence BOËLLE ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090524-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:19 Go (Free:5 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:2 Go)
E:\ (Local Disk) - FAT32 - Total:7 Go (Free:7 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 24/05/2009|18:45 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.google.fr/"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68929"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68928"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 24/05/2009|18:38 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 24/05/2009|18:46 - Option : [2]

-----------\\ Fin du rapport a 18:46:21,17

EasyCleaner n'arrive a supprimé 1 élément (il me dit dit que c'est un élément caduque)
Software\Classes\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A­}\InprocServer32

Spybot n'a trouvé aucun mouchard

Donc c'est bon ? Mon ordi est propre ?


Quel antivirus me conseilles-tu ?

Je te poste le rapport de OTmoveIt
========== PROCESSES ==========
Process explorer.exe killed successfully.
Unable to kill process: FTRTSVC.exe
========== SERVICES/DRIVERS ==========
Unable to stop service\driver FTRTSVC.
Service\Driver FTRTSVC deleted successfully.
Service\Driver France Telecom Routing Table Service not found.
Service\Driver France Telecom Routing Table Service not found.
========== FILES ==========
C:\WINDOWS\System32\FTRTSVC.exe moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\LAUREN~1\LOCALS~1\Temp\~DF366A.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\Laurence BOËLLE\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_1a8.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6c0.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05242009_223000

Files moved on Reboot...
File C:\DOCUME~1\LAUREN~1\LOCALS~1\Temp\~DF366A.tmp not found!
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
File C:\WINDOWS\temp\Perflib_Perfdata_1a8.dat not found!
C:\WINDOWS\temp\Perflib_Perfdata_6c0.dat moved successfully.


Je te remercie pour l'aide que tu m'as apporté. Je finis de nettoyer avec ToolsClean et je m'occupe du point de restauration.

Merci pour tous tes conseils.

Voici le rapport de ToolsCleaner

[ Rapport ToolsCleaner version 2.3.5 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\lopR.txt: trouvé !
C:\TB.txt: trouvé !
C:\Lop SD: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Laurence BOËLLE\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Laurence BOËLLE\Bureau\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Laurence BOËLLE\Bureau\OTMoveIt3.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Laurence BOËLLE\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Laurence BOËLLE\Bureau\ToolBarSD.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\lopR.txt: supprimé !
C:\TB.txt: supprimé !
C:\Documents and Settings\Laurence BOËLLE\Bureau\OTMoveIt3.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Lop SD: supprimé !
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Corbeille vidée!
Fichiers temporaires nettoyés !

J'ai lancé CCLean et j'ai purgé la restauration système.
Je m'occuperai de l'antivirus demain.

MERCI encore.

J'ai installé AntiVir, j'ai lancé la mise à jour et j'ai fait un scan. Tout va bien, il ne m'a rien trouvé.

Merci pour tout.