Internet explorer plante

[lenzo13]

Bonjour, j' ai mon ordinateur qui a plusieurs soucils, déja inernet explorer n' arrete pas de se fermer ( il me mùarque: érreur dans le module complémentaire ..... ), ensuite j' ai tout le temp des pages qui s' ouvrent alors que je ne fais rien, est ce que ça viendrai d' un virus ou alors c' est autre chose ?

Merci de m' aider

[anthony5151]

Bonjour,


Utilise ce logiciel de diagnostic stp :

. Télécharge Random's System Information Tool (RSIT) de random/random, et enregistre le sur ton Bureau.
. Double clique sur RSIT.exe pour lancer l'outil.
. Clique sur ' continue ' à l'écran Disclaimer.
. Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
. Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages séparés

Tutoriel illustré pour t'aider : http://forum-aide-contre-virus.be/tutoriel_RSIT.html

[lenzo13]

résultat de hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:17:21, on 31/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:Windowssystem32 askeng.exe
C:WindowsExplorer.EXE
C:Program FilesWindows DefenderMSASCui.exe
C:hpsupporthpsysdrv.exe
C:Program FilesHewlett-PackardOn-Screen OSD IndicatorOSD.exe
C:WindowsRtHDVCpl.exe
C:WindowsSystem32jureg.exe
C:Program FilesHPHP Software UpdatehpwuSchd2.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:Windowssystem32schtasks.exe
C:WindowsWindowsMobilewmdc.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
c:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
C:Program FilesEoRezoEoEngine.exe
C:WindowsSamsungPanelMgrSSMMgr.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesHewlett-PackardHP AdvisorHPAdvisor.exe
C:WindowsSystem32p2phost.exe
C:Windowsehomeehtray.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:WindowsSystem32mobsync.exe
C:Program FilesCommon FilesNeroLibNMBgMonitor.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:WindowsSystem32spooldriversw32x863E_FATICLE.EXE
C:Program FilesDAEMON Tools Litedaemon.exe
C:Program FilesHPDigital Imaginginhpqtra08.exe
C:Windowsehomeehmsas.exe
C:Program FilesOpenOffice.org 2.3programsoffice.exe
C:Program FilesOpenOffice.org 2.3programsoffice.BIN
C:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesWindows LiveContactswlcomm.exe
C:hpkbdkbd.exe
C:Program FilesInternet Explorerieuser.exe
C:Program FilesHPSmart Web Printinghpswp_clipbook.exe
C:Program FilesWindows LiveToolbarwltuser.exe
C:Program FilesInternet Exploreriexplore.exe
C:Windowssystem32MacromedFlashFlashUtil10b.exe
C:UserslenzoDesktopouana.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,First Home Page = http://y.lo.st
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:Program FilesHPSmart Web Printinghpswp_framework.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:Program FilesMicrosoftSearch Enhancement PackSearch HelperSEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_03inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:Program FilesEoRezoEoAdvEoRezoBHO.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:Program FilesWindows LiveToolbarwltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar2.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:Program FilesWindows LiveToolbarwltcore.dll
O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 - HKLM..Run: [hpsysdrv] c:hpsupporthpsysdrv.exe
O4 - HKLM..Run: [KBD] C:HPKBDKbdStub.EXE
O4 - HKLM..Run: [OsdMaestro] "C:Program FilesHewlett-PackardOn-Screen OSD IndicatorOSD.exe"
O4 - HKLM..Run: [StartCCC] c:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 - HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM..Run: [CCUTRAYICON] FactoryMode
O4 - HKLM..Run: [HP Health Check Scheduler] c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe
O4 - HKLM..Run: [SunJavaUpdateReg] "C:Windowssystem32jureg.exe"
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesNeroLibNeroCheck.exe
O4 - HKLM..Run: [NBKeyScan] "C:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe"
O4 - HKLM..Run: [Windows Mobile Device Center] %windir%WindowsMobilewmdc.exe
O4 - HKLM..Run: [IAAnotif] "C:Program FilesIntelIntel Matrix Storage ManagerIaanotif.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 8.0ReaderReader_sl.exe"
O4 - HKLM..Run: [FileZilla Server Interface] "C:Program FilesFileZilla ServerFileZilla Server Interface.exe"
O4 - HKLM..Run: [EoEngine] "C:Program FilesEoRezoEoEngine.exe"
O4 - HKLM..Run: [Samsung PanelMgr] C:WindowsSamsungPanelMgrSSMMgr.exe /autorun
O4 - HKLM..RunOnce: [SoftwareHelper] C:UserslenzoAppDataRoamingeoRezoSoftwareUpdateSoftwareUpdateHP.exe -runonce
O4 - HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 - HKCU..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU..Run: [HPAdvisor] C:Program FilesHewlett-PackardHP AdvisorHPAdvisor.exe autoRun
O4 - HKCU..Run: [CollaborationHost] C:Windowssystem32p2phost.exe -s
O4 - HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesWindows LiveMessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesCommon FilesNeroLibNMBgMonitor.exe"
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [EPSON Stylus Photo RX585 Series] C:Windowssystem32spoolDRIVERSW32X863E_FATICLE.EXE /FU "C:WindowsTEMPE_S1D5F.tmp" /EF "HKCU"
O4 - HKCU..Run: [DAEMON Tools Lite] "C:Program FilesDAEMON Tools Litedaemon.exe" -autorun
O4 - HKCU..Run: [ISUSPM] "C:Program FilesCommon FilesInstallShieldUpdateServiceISUSPM.exe" -scheduler
O4 - HKCU..Run: [AlcoholAutomount] "C:Program FilesAlcohol SoftAlcohol 120axcmd.exe" /automount
O4 - HKCU..Run: [RGSC] C:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent
O4 - HKUSS-1-5-18..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background (User 'Default user')
O4 - Startup: OpenOffice.org 2.3.lnk = C:Program FilesOpenOffice.org 2.3programquickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imaginginhpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_03inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_03inssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: @C:WindowsWindowsMobileINetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll
O9 - Extra 'Tools' menuitem: @C:WindowsWindowsMobileINetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:Windowsdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:Windowsdoscandel.exe
O15 - Trusted Zone: http://www.bitdefender.fr
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/stat ... rtdgi1.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... oader5.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://www.celartem.com/en/download/dat ... _en_US.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.systemrequirementslab.com/sr ... ab_srl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resourc ... dfr-fr.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/fr ... oader5.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-U ... E_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/i ... ection.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005 ... scan53.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/ ... 586-jc.cab
O16 - DPF: {BA3BAF69-72B1-4BCE-BE96-A4D304EAFBB4} (PhotoBox uploader) - http://assets.photobox.com/assets/aurig ... 0925093035
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:Program FilesIntelIntelDHCCUAlertService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:Windowssystem32Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 - Service: DQLWinService - Unknown owner - C:Program FilesCommon FilesIntelIntelDHNMSAdpPluginsDQLWinService.exe
O23 - Service: EasyBits Magic Desktop Services for Windows NT (ezntsvc) - EasyBits Software Corp. - C:Windowssystem32ezNTSvc.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:Program FilesFileZilla ServerFileZilla Server.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Intel DH Service (IntelDHSvcConf) - Intel(R) Corporation - C:Program FilesIntelIntelDHIntel Media ServerToolsIntelDHSvcConf.exe
O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:Program FilesIntelIntelDHIntel Media ServerMedia ServerinISSM.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:Program FilesIntelIntelDHIntel Media ServerMedia Serverinmediaserver.exe
O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:Program FilesIntelIntelDHIntel Media ServerShellsMCLServiceATL.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:Program FilesNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesCommon FilesNeroLibNMIndexingService.exe
O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:Program FilesIntelIntelDHIntel Media ServerShellsRemote UI Service.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxMediaDB9.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:Program FilesCommon FilesSureThing Sharedstllssvr.exe

--
End of file - 15074 bytes

[anthony5151]

Ce n'est pas un rapport hijackthis que je t'avais demandé, mais un rapport RSIT (plus complet). Enfin, on va s'en contenter pour l'instant


Tu as installé un logiciel néfaste téléchargé sur le site EoRezo... Ne télécharge plus rien sur ce site ! Plus d'infos ici

● Désactive le contrôle des comptes utilisateurs : Menu démarrer --> panneau de configuration --> comptes utilisateurs --> activer ou désactiver le controle des comptes utilisateur --> décoche la case "utiliser le contrôle....." Puis redémarre ton ordinateur.
● Désactive également ton antivirus, car il risque de faire de fausses alertes sur le programme suivant.

● Télécharge Ad-Remover (de C_XX) sur ton Bureau.
● Déconnecte toi et ferme toutes les applications en cours !
● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:Program files )
● Fais un clic-droit sur le raccourci créé et clique sur "Exécuter en temps qu'administrateur"
● Au menu principal choisis l'option "L" (lancer le nettoyage)
● Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:Ad-report.log)

Aide en images : Installation
Aide en images : Nettoyage

[lenzo13]

.
======= RAPPORT D'AD-REMOVER 1.1.4.5 | UNIQUEMENT XP/VISTA =======
.
Mit à jour part C_XX le 31/05/2009 à 18:30
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 19:50:57, 31/05/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:Program FilesAd-remover
Système d'exploitation: Microsoft® ™ Home Premium Service Pack 1 v6.0.6001
Nom du PC: PC-DE-LENZO
.
Administrateur: Administrateur *Desactive*
N'est pas administrateur: Invité *Desactive*
N'est pas administrateur: IUSR_NMPR
Administrateur: lenzo
.
============== ELEMENT(S) NEUTRALISE(S) ==============
.
.
HKCRAppID{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKCRAppIDEoRezoBHO.DLL
HKCRCLSID{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKCREoRezoBHO.EoBho
HKCREoRezoBHO.EoBho.1
HKCRTypelib{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKCUSoftwareEoRezo
HKCUSoftwareGrand Virtual
HKLMSoftwareEoRezo
HKLMSoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLMSoftwareMicrosoftWindowsCurrentVersionUninstalleoEngine_is1
HKLMSoftwareMicrosoftWindowsCurrentVersionUninstallEverest Casino
HKLMSoftwareMicrosoftWindowsCurrentVersionUninstallSoftwareUpdate_is1
HKLMSoftwareMicrosoftWindowsCurrentVersionRun\Eoengine
HKLMSoftwareMicrosoftWindowsCurrentVersionRunOnce\Softwarehelper
HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallAskTBar Uninstall
HKLMSoftwareClassesCLSID{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
HKLMSoftwareClassesCLSID{FE063DBB-4EC0-403e-8DD8-394C54984B2C}
.
C:PROGRA~2MICROS~1WindowsSTARTM~1ProgramsEverest CasinoEverest Casino.lnk
C:PROGRA~2MICROS~1WindowsSTARTM~1ProgramsEverest CasinoUninstall Everest Casino.lnk
C:PROGRA~2MICROS~1WindowsSTARTM~1ProgramsEverest Casino
C:PROGRA~2MICROS~1WindowsSTARTM~1ProgramsEverest PokerEverest Poker.lnk
C:PROGRA~2MICROS~1WindowsSTARTM~1ProgramsEverest PokerUninstall Everest Poker.lnk
C:PROGRA~2MICROS~1WindowsSTARTM~1ProgramsEverest Poker
C:UserslenzoAppDataRoamingEoRezocmhost.cyp
C:UserslenzoAppDataRoamingEoRezoConfMedia.cyp
C:UserslenzoAppDataRoamingEoRezodb
C:UserslenzoAppDataRoamingEoRezoeoDesktop
C:UserslenzoAppDataRoamingEoRezoeoStats
C:UserslenzoAppDataRoamingEoRezohost.cyp
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdate
C:UserslenzoAppDataRoamingEoRezouser.cyp
C:UserslenzoAppDataRoamingEoRezoeoDesktopconfig.xml
C:UserslenzoAppDataRoamingEoRezoeoDesktopeoDesktop.html
C:UserslenzoAppDataRoamingEoRezoeoDesktopuserConfig.xml
C:UserslenzoAppDataRoamingEoRezoeoStatseoStats.txt
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdateDownload
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdatehelp_config.cyp
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdateSoftware
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdateSoftwareUpdate.exe
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdateSoftwareUpdateHP.exe
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdateunins000.dat
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdateunins000.exe
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdateuser_config.cyp
C:UserslenzoAppDataRoamingEoRezoSoftwareUpdateuser_profil.cyp
C:UserslenzoAppDataRoamingEoRezo
C:Program FilesEoRezoConfMedia.cyp
C:Program FilesEoRezoEoAdv
C:Program FilesEoRezoEoEngine.exe
C:Program FilesEoRezoeoEngine.url
C:Program FilesEoRezoEoMultiLanguage.dll
C:Program FilesEoRezoEoRezoComm.dll
C:Program FilesEoRezoEoRezoImg_17.dll
C:Program FilesEoRezoEoRezoImg_19.dll
C:Program FilesEoRezoEoRezoImg_20.dll
C:Program FilesEoRezoEoRezoImg_21.dll
C:Program FilesEoRezoEoRezoImg_22.dll
C:Program FilesEoRezoEoRezoImg_23.dll
C:Program FilesEoRezoEoRezoTools_16.dll
C:Program FilesEoRezoEoRezoTools_17.dll
C:Program FilesEoRezoEoRezoTools_18.dll
C:Program FilesEoRezoEoRezoTools_20.dll
C:Program FilesEoRezoEoRezoTools_21.dll
C:Program FilesEoRezoEoRezoTools_26.dll
C:Program FilesEoRezoEoRezoTools_27.dll
C:Program FilesEoRezoEoRezoTools_28.dll
C:Program FilesEoRezoEoRezoTools_29.dll
C:Program FilesEoRezoEoRezoTools_30.dll
C:Program FilesEoRezoFreeImage.dll
C:Program FilesEoRezoHost.cyp
C:Program FilesEoRezolang
C:Program FilesEoRezoMngInstaller.dll
C:Program FilesEoRezounins000.dat
C:Program FilesEoRezounins000.exe
C:Program FilesEoRezouser.cyp
C:Program FilesEoRezoEoAdvatl90.dll
C:Program FilesEoRezoEoAdvEoAdv.dll
C:Program FilesEoRezoEoAdvEoRezoBHO.dll
C:Program FilesEoRezoEoAdvmfc90.dll
C:Program FilesEoRezoEoAdvMicrosoft.VC90.ATL.manifest
C:Program FilesEoRezoEoAdvMicrosoft.VC90.CRT.manifest
C:Program FilesEoRezoEoAdvMicrosoft.VC90.MFC.manifest
C:Program FilesEoRezoEoAdvmsvcr90.dll
C:Program FilesEoRezolangihm_eoclock.xml
C:Program FilesEoRezolangihm_eoengine.xml
C:Program FilesEoRezolangihm_eonet.xml
C:Program FilesEoRezolangihm_eorezotools.xml
C:Program FilesEoRezolangihm_eosudoku.xml
C:Program FilesEoRezolangihm_eoweather.xml
C:Program FilesEoRezolanglang_en.xml
C:Program FilesEoRezolanglang_es.xml
C:Program FilesEoRezolanglang_fr.xml
C:Program FilesEoRezolanglang_it.xml
C:Program FilesEoRezo
C:Program FilesEverest Casinouild
C:Program FilesEverest Casinocasino.exe
C:Program FilesEverest Casinocommlib.dll
C:Program FilesEverest Casinocstart.exe
C:Program FilesEverest Casinodata
C:Program FilesEverest CasinoEverest Casino.exe
C:Program FilesEverest Casinofloor.dll
C:Program FilesEverest Casinogvbase.dll
C:Program FilesEverest Casinogvcrt.dll
C:Program FilesEverest Casinogvgfx.dll
C:Program FilesEverest Casinogvmain.dll
C:Program FilesEverest Casinogvmain.exe
C:Program FilesEverest Casinogvnetwork.dll
C:Program FilesEverest Casinogvsound.dll
C:Program FilesEverest Casinoinit.ini
C:Program FilesEverest Casinolog.dat
C:Program FilesEverest Casino oulette.dll
C:Program FilesEverest Casinosettings.ini
C:Program FilesEverest Casino oc_fr.ini
C:Program FilesEverest Casinovar
C:Program FilesEverest Casinovslots.dll
C:Program FilesEverest Casinouildupdateserver
C:Program FilesEverest Casinouildupdateserverec
C:Program FilesEverest Casinouildupdateserverfr
C:Program FilesEverest Casinouildupdateservereccstart_back.jpg
C:Program FilesEverest Casinouildupdateserverfrinistrings.txt
C:Program FilesEverest Casinodatacasino
C:Program FilesEverest Casinodatacpanel
C:Program FilesEverest Casinodatafloor
C:Program FilesEverest Casinodata oulette
C:Program FilesEverest Casinodata oulette_am
C:Program FilesEverest Casinodatashared
C:Program FilesEverest Casinodatastartup
C:Program FilesEverest Casinodatavslots
C:Program FilesEverest Casinodatavslots_fairytale15
C:Program FilesEverest Casinodatacasinofr.gvt
C:Program FilesEverest Casinodatacasinoshared.gvt
C:Program FilesEverest Casinodatacpanelfr.gvt
C:Program FilesEverest Casinodatacpanelshared.gvt
C:Program FilesEverest Casinodatafloorec.gvt
C:Program FilesEverest Casinodatafloorfr.gvt
C:Program FilesEverest Casinodatafloorshared.gvt
C:Program FilesEverest Casinodata oulettefr.gvt
C:Program FilesEverest Casinodata ouletteshared.gvt
C:Program FilesEverest Casinodata oulette_amfr.gvt
C:Program FilesEverest Casinodata oulette_amshared.gvt
C:Program FilesEverest Casinodatasharedfr
C:Program FilesEverest Casinodatasharedshared
C:Program FilesEverest Casinodatasharedfr
umbers
C:Program FilesEverest Casinodatasharedfrordinal.txt
C:Program FilesEverest Casinodatasharedfrvoices
C:Program FilesEverest Casinodatasharedfr
umbers.ogg
C:Program FilesEverest Casinodatasharedfr
umbers1.ogg
C:Program FilesEverest Casinodatasharedfr
umbers10.ogg
C:Program FilesEverest Casinodatasharedfr
umbers11.ogg
C:Program FilesEverest Casinodatasharedfr
umbers12.ogg
C:Program FilesEverest Casinodatasharedfr
umbers13.ogg
C:Program FilesEverest Casinodatasharedfr
umbers14.ogg
C:Program FilesEverest Casinodatasharedfr
umbers15.ogg
C:Program FilesEverest Casinodatasharedfr
umbers16.ogg
C:Program FilesEverest Casinodatasharedfr
umbers17.ogg
C:Program FilesEverest Casinodatasharedfr
umbers18.ogg
C:Program FilesEverest Casinodatasharedfr
umbers19.ogg
C:Program FilesEverest Casinodatasharedfr
umbers2.ogg
C:Program FilesEverest Casinodatasharedfr
umbers20.ogg
C:Program FilesEverest Casinodatasharedfr
umbers21.ogg
C:Program FilesEverest Casinodatasharedfr
umbers22.ogg
C:Program FilesEverest Casinodatasharedfr
umbers23.ogg
C:Program FilesEverest Casinodatasharedfr
umbers24.ogg
C:Program FilesEverest Casinodatasharedfr
umbers25.ogg
C:Program FilesEverest Casinodatasharedfr
umbers26.ogg
C:Program FilesEverest Casinodatasharedfr
umbers27.ogg
C:Program FilesEverest Casinodatasharedfr
umbers28.ogg
C:Program FilesEverest Casinodatasharedfr
umbers29.ogg
C:Program FilesEverest Casinodatasharedfr
umbers3.ogg
C:Program FilesEverest Casinodatasharedfr
umbers30.ogg
C:Program FilesEverest Casinodatasharedfr
umbers31.ogg
C:Program FilesEverest Casinodatasharedfr
umbers32.ogg
C:Program FilesEverest Casinodatasharedfr
umbers33.ogg
C:Program FilesEverest Casinodatasharedfr
umbers34.ogg
C:Program FilesEverest Casinodatasharedfr
umbers35.ogg
C:Program FilesEverest Casinodatasharedfr
umbers36.ogg
C:Program FilesEverest Casinodatasharedfr
umbers4.ogg
C:Program FilesEverest Casinodatasharedfr
umbers5.ogg
C:Program FilesEverest Casinodatasharedfr
umbers6.ogg
C:Program FilesEverest Casinodatasharedfr
umbers7.ogg
C:Program FilesEverest Casinodatasharedfr
umbers8.ogg
C:Program FilesEverest Casinodatasharedfr
umbers9.ogg
C:Program FilesEverest Casinodatasharedfrvoicesets_1.ogg
C:Program FilesEverest Casinodatasharedfrvoicesets_2.ogg
C:Program FilesEverest Casinodatasharedfrvoicesets_3.ogg
C:Program FilesEverest Casinodatasharedfrvoices
o_bets_1.ogg
C:Program FilesEverest Casinodatasharedfrvoicesplr_wins_1.ogg
C:Program FilesEverest Casinodatasharedfrvoicesplr_wins_2.ogg
C:Program FilesEverest Casinodatasharedfrvoicesplr_wins_3.ogg
C:Program FilesEverest Casinodatasharedshareditmaps
C:Program FilesEverest Casinodatasharedsharedpaths.txt
C:Program FilesEverest Casinodatasharedsharedsounds
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_10.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_100.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_1000.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_10000.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_20.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_25.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_2500.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_50.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_500.art
C:Program FilesEverest Casinodatasharedshareditmapstn_chip_al.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_10.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_100.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_1000.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_10000.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_20.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_25.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_2500.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_50.art
C:Program FilesEverest Casinodatasharedshareditmapstn_fun_chip_500.art
C:Program FilesEverest Casinodatasharedshareditmapscards.art
C:Program FilesEverest Casinodatasharedshareditmapscheck.art
C:Program FilesEverest Casinodatasharedshareditmapschips.art
C:Program FilesEverest Casinodatasharedshareditmapscursor10.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor100.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor1000.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor10000.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor10000_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor1000_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor100_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor10_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor20.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor20_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor25.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor2500.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor2500_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor25_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor50.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor500.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor500_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapscursor50_fun.cur
C:Program FilesEverest Casinodatasharedshareditmapsfun_chips.art
C:Program FilesEverest Casinodatasharedsharedsoundsutton.ogg
C:Program FilesEverest Casinodatasharedsharedsoundscarddeal.ogg
C:Program FilesEverest Casinodatasharedsharedsoundscardflip.ogg
C:Program FilesEverest Casinodatasharedsharedsoundschipclick.ogg
C:Program FilesEverest Casinodatastartupec
C:Program FilesEverest Casinodatastartupen
C:Program FilesEverest Casinodatastartupfr
C:Program FilesEverest Casinodatastartupshared
C:Program FilesEverest Casinodatastartupecfr
C:Program FilesEverest Casinodatastartupecfrsplash.art
C:Program FilesEverest Casinodatastartupenstartup_strings.txt
C:Program FilesEverest Casinodatastartupfrcstart.txt
C:Program FilesEverest Casinodatastartupfrstartup_strings.txt
C:Program FilesEverest Casinodatastartupsharedicons
C:Program FilesEverest Casinodatastartupsharedpaths.txt
C:Program FilesEverest Casinodatastartupsharedsettings_paths.txt
C:Program FilesEverest Casinodatastartupsharedsounds
C:Program FilesEverest Casinodatastartupsharediconsec.ico
C:Program FilesEverest Casinodatastartupsharediconsuninstall.ico
C:Program FilesEverest Casinodatastartupsharedsoundsalert.ogg
C:Program FilesEverest Casinodatavslotsfr.gvt
C:Program FilesEverest Casinodatavslotsshared.gvt
C:Program FilesEverest Casinodatavslots_fairytale15fr.gvt
C:Program FilesEverest Casinodatavslots_fairytale15shared.gvt
C:Program FilesEverest Casinovarec
C:Program FilesEverest CasinovarprecachePromo.bin
C:Program FilesEverest Casinovarscreenshots
C:Program FilesEverest Casinovarec3172183371.bin
C:Program FilesEverest Casinovarec3966282705.bin
C:Program FilesEverest Casinovarec445186126.bin
C:Program FilesEverest Casinovarec831528524.bin
C:Program FilesEverest Casinovarscreenshotsecfr_pvp_jacks.jpg
C:Program FilesEverest Casinovarscreenshotsecfr_roulette_fr300.jpg
C:Program FilesEverest Casinovarscreenshotsecfr_roulette_lv300.jpg
C:Program FilesEverest Casinovarscreenshotsecfr_sl_at.jpg
C:Program FilesEverest Casinovarscreenshotsecfr_sl_bollywood.jpg
C:Program FilesEverest Casinovarscreenshotsecfr_sl_faerietale.jpg
C:Program FilesEverest Casinovarscreenshotsecfr_sl_fashion.jpg
C:Program FilesEverest Casinovarscreenshotsecfr_sl_olympians.jpg
C:Program FilesEverest Casinovarscreenshotsecfr_sol_casino_3.jpg
C:Program FilesEverest Casino
C:Program FilesEverest Pokercasino.exe
C:Program FilesEverest Pokercstart-tmp.exe
C:Program FilesEverest Pokercstart.exe
C:Program FilesEverest Pokerdata
C:Program FilesEverest PokerEverest Poker.exe
C:Program FilesEverest Pokergvbase.dll
C:Program FilesEverest Pokergvcrt.dll
C:Program FilesEverest Pokergvgfx-dib.dll
C:Program FilesEverest Pokergvgfx.dll
C:Program FilesEverest Pokergvmain.dll
C:Program FilesEverest Pokergvmain.exe
C:Program FilesEverest Pokergvnetwork.dll
C:Program FilesEverest Pokergvsound.dll
C:Program FilesEverest Pokerhistory
C:Program FilesEverest Pokerinit.ini
C:Program FilesEverest Pokerlog.dat
C:Program FilesEverest Pokersettings.ini
C:Program FilesEverest Poker oc_fr.ini
C:Program FilesEverest Pokervar
C:Program FilesEverest Pokerdatacpanel
C:Program FilesEverest Pokerdatafonts
C:Program FilesEverest Pokerdatamp-lobby
C:Program FilesEverest Pokerdatamp-poker
C:Program FilesEverest Pokerdatashared
C:Program FilesEverest Pokerdatastartup
C:Program FilesEverest Pokerdatafontskgp-en.ttf
C:Program FilesEverest Pokerdatamp-lobbyfr.gvt
C:Program FilesEverest Pokerdatamp-lobbyshared.gvt
C:Program FilesEverest Pokerdatamp-pokerackground
C:Program FilesEverest Pokerdatamp-pokerfr
C:Program FilesEverest Pokerdatamp-pokershared.gvt
C:Program FilesEverest Pokerdatamp-pokerackgrounddefault.gvt
C:Program FilesEverest Pokerdatamp-pokerackgroundhawaii.gvt
C:Program FilesEverest Pokerdatamp-pokerfritmaps.gvt
C:Program FilesEverest Pokerdatamp-pokerfrmp-poker_strings.txt
C:Program FilesEverest Pokerdatamp-pokerfrmp-poker_tutorial.txt
C:Program FilesEverest Pokerdatasharedfr
C:Program FilesEverest Pokerdatasharedshared
C:Program FilesEverest Pokerdatasharedfrcountry.txt
C:Program FilesEverest Pokerdatasharedfrlanguage.txt
C:Program FilesEverest Pokerdatasharedfrordinal.txt
C:Program FilesEverest Pokerdatasharedshareditmaps
C:Program FilesEverest Pokerdatasharedsharedsounds
C:Program FilesEverest Pokerdatasharedshareditmapstn_scroll.gvt
C:Program FilesEverest Pokerdatasharedshareditmapscheck.art
C:Program FilesEverest Pokerdatasharedshareditmapschips.art
C:Program FilesEverest Pokerdatasharedsharedsoundsutton.ogg
C:Program FilesEverest Pokerdatasharedsharedsoundscarddeal.ogg
C:Program FilesEverest Pokerdatasharedsharedsoundscardflip.ogg
C:Program FilesEverest Pokerdatasharedsharedsoundschipclick.ogg
C:Program FilesEverest Pokerdatastartupen
C:Program FilesEverest Pokerdatastartupfr
C:Program FilesEverest Pokerdatastartupshared
C:Program FilesEverest Pokerdatastartupenstartup_strings.txt
C:Program FilesEverest Pokerdatastartupfrcstart.txt
C:Program FilesEverest Pokerdatastartupfrstartup_strings.txt
C:Program FilesEverest Pokerdatastartupshareditmaps
C:Program FilesEverest Pokerdatastartupsharedicons
C:Program FilesEverest Pokerdatastartupsharedsounds
C:Program FilesEverest Pokerdatastartupshareditmapssplash_poker.art
C:Program FilesEverest Pokerdatastartupsharediconsep.ico
C:Program FilesEverest Pokerdatastartupsharedsoundsalert.ogg
C:Program FilesEverest Pokerhistory1.txt
C:Program FilesEverest Pokerhistory10.txt
C:Program FilesEverest Pokerhistory11.txt
C:Program FilesEverest Pokerhistory12.txt
C:Program FilesEverest Pokerhistory13.txt
C:Program FilesEverest Pokerhistory14.txt
C:Program FilesEverest Pokerhistory15.txt
C:Program FilesEverest Pokerhistory16.txt
C:Program FilesEverest Pokerhistory17.txt
C:Program FilesEverest Pokerhistory18.txt
C:Program FilesEverest Pokerhistory19.txt
C:Program FilesEverest Pokerhistory20.txt
C:Program FilesEverest Pokerhistory21.txt
C:Program FilesEverest Pokerhistory22.txt
C:Program FilesEverest Pokerhistory23.txt
C:Program FilesEverest Pokerhistory24.txt
C:Program FilesEverest Pokerhistory25.txt
C:Program FilesEverest Pokerhistory26.txt
C:Program FilesEverest Pokerhistory27.txt
C:Program FilesEverest Pokerhistory28.txt
C:Program FilesEverest Pokerhistory29.txt
C:Program FilesEverest Pokerhistory3.txt
C:Program FilesEverest Pokerhistory30.txt
C:Program FilesEverest Pokerhistory31.txt
C:Program FilesEverest Pokerhistory32.txt
C:Program FilesEverest Pokerhistory33.txt
C:Program FilesEverest Pokerhistory34.txt
C:Program FilesEverest Pokerhistory35.txt
C:Program FilesEverest Pokerhistory36.txt
C:Program FilesEverest Pokerhistory37.txt
C:Program FilesEverest Pokerhistory38.txt
C:Program FilesEverest Pokerhistory4.txt
C:Program FilesEverest Pokerhistory40.txt
C:Program FilesEverest Pokerhistory41.txt
C:Program FilesEverest Pokerhistory42.txt
C:Program FilesEverest Pokerhistory43.txt
C:Program FilesEverest Pokerhistory44.txt
C:Program FilesEverest Pokerhistory45.txt
C:Program FilesEverest Pokerhistory47.txt
C:Program FilesEverest Pokerhistory48.txt
C:Program FilesEverest Pokerhistory49.txt
C:Program FilesEverest Pokerhistory5.txt
C:Program FilesEverest Pokerhistory52.txt
C:Program FilesEverest Pokerhistory54.txt
C:Program FilesEverest Pokerhistory55.txt
C:Program FilesEverest Pokerhistory6.txt
C:Program FilesEverest Pokerhistory60.txt
C:Program FilesEverest Pokerhistory61.txt
C:Program FilesEverest Pokerhistory62.txt
C:Program FilesEverest Pokerhistory63.txt
C:Program FilesEverest Pokerhistory64.txt
C:Program FilesEverest Pokerhistory65.txt
C:Program FilesEverest Pokerhistory66.txt
C:Program FilesEverest Pokerhistory67.txt
C:Program FilesEverest Pokerhistory69.txt
C:Program FilesEverest Pokerhistory7.txt
C:Program FilesEverest Pokerhistory70.txt
C:Program FilesEverest Pokerhistory71.txt
C:Program FilesEverest Pokerhistory72.txt
C:Program FilesEverest Pokerhistory76.txt
C:Program FilesEverest Pokerhistory8.txt
C:Program FilesEverest Pokerhistory9.txt
C:Program FilesEverest Pokervarcontent-fr.dat
C:Program FilesEverest PokervarEverest Casino.exe
C:Program FilesEverest Poker
C:UserslenzoAppDataLocalTempis-JMPHQ.tmpEoRezo
C:WindowsPrefetchSOFTWAREUPDATEHP.EXE-74061834.pf
C:UserslenzoAppDataRoamingMICROS~1WindowsCookieslenzo@ads.eorezo[2].txt
C:UserslenzoAppDataRoamingMICROS~1WindowsCookiesLowlenzo@ads.eorezo[2].txt
C:UserslenzoAppDataRoamingMICROS~1WindowsCookieslenzo@dl.eorezo[1].txt
C:UserslenzoAppDataRoamingMICROS~1WindowsCookieslenzo@eorezo[1].txt
C:UserslenzoAppDataRoamingMICROS~1WindowsCookiesLowlenzo@eorezo[1].txt

(!) -- Fichiers temporaires supprimés.

.
============== Scan additionnel ==============
.
.
.

* Internet Explorer Version 7.0.6001.18000 *

[HKEY_CURRENT_USER..Internet ExplorerMain]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome

[HKEY_LOCAL_MACHINE..Internet ExplorerMain]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE..Internet ExplorerABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

============== Suspect (Cracks, Serials ... ) ==============

.

+---------------------------------------------------------------------------+

25123 Octet(s) - C:Ad-Report-CLEAN.log

18 Fichier(s) - C:Program FilesAd-removerBACKUP
167 Fichier(s) - C:Program FilesAd-removerQUARANTINE

Fin à: 20:02:55 | 31/05/2009
.
============== E.O.F ==============
.

[anthony5151]

Parfait, EoRezo a été supprimé


Maintenant, fais ce scan généraliste stp :

. Télécharge et installe Malwarebytes' Anti-Malware
. A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
. Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
. Puis va dans l'onglet "Recherche", coche "Exécuter un examen rapide" puis "Rechercher"
. Clique sur "Lancer l'examen"
. A la fin du scan, clique sur Afficher les résultats
. Coche tous les éléments détectés puis clique sur Supprimer la sélection
. Enregistre le rapport
. S'il t'est demandé de redémarrer, clique sur Yes
. Poste dans ta prochaine réponse le rapport apparaissant après la suppression stp



Enfin, fais redémarrer ton ordinateur et poste un rapport RSIT en suivant les indications que je t'ai données dans mon premier message stp

[lenzo13]

voila le résultat de malwarebite :

Malwarebytes' Anti-Malware 1.37
Version de la base de données: 2204
Windows 6.0.6001 Service Pack 1

01/06/2009 10:38:14
mbam-log-2009-06-01 (10-38-14).txt

Type de recherche: Examen rapide
Eléments examinés: 86038
Temps écoulé: 3 minute(s), 36 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOTCLSID{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoft dfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftcontim (Trojan.Vundo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

[lenzo13]

voila j' ai redémaré mon ordi et j' ai fait le scan que tu m' a dit :


Logfile of random's system information tool 1.06 (written by random/random)
Run by lenzo at 2009-06-01 10:45:29
Microsoft® Windows Vista™ Edition Familiale Premium Service Pack 1
System drive C: has 119 GB (35%) free of 336 GB
Total RAM: 3070 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:45:47, on 01/06/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:Windowssystem32 askeng.exe
C:WindowsExplorer.EXE
C:Program FilesWindows DefenderMSASCui.exe
C:hpsupporthpsysdrv.exe
C:Program FilesHewlett-PackardOn-Screen OSD IndicatorOSD.exe
C:WindowsRtHDVCpl.exe
C:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe
C:WindowsSystem32jureg.exe
C:Windowssystem32schtasks.exe
C:Program FilesHPHP Software UpdatehpwuSchd2.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:WindowsWindowsMobilewmdc.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
c:Program FilesATI TechnologiesATI.ACECore-StaticMOM.EXE
C:WindowsSystem32mobsync.exe
C:Program FilesAdobeReader 8.0Reader eader_sl.exe
C:WindowsSamsungPanelMgrSSMMgr.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesHewlett-PackardHP AdvisorHPAdvisor.exe
C:WindowsSystem32p2phost.exe
C:Windowsehomeehtray.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesCommon FilesNeroLibNMBgMonitor.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesDAEMON Tools Litedaemon.exe
C:Program FilesHPDigital Imaginginhpqtra08.exe
C:Program FilesOpenOffice.org 2.3programsoffice.exe
C:Program FilesOpenOffice.org 2.3programsoffice.BIN
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe
C:Windowsehomeehmsas.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesWindows LiveContactswlcomm.exe
C:Program FilesInternet Explorerieuser.exe
C:Program FilesWindows LiveToolbarwltuser.exe
C:Program FilesHPSmart Web Printinghpswp_clipbook.exe
C:Windowssystem32SearchFilterHost.exe
C:Windowssystem32MacromedFlashFlashUtil10b.exe
C:Program FilesInternet Exploreriexplore.exe
C:hpkbdkbd.exe
C:UserslenzoAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5M6C3GFHFRSIT[1].exe
C:Program Files rend microlenzo.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://fr.msn.com/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:Program FilesHPSmart Web Printinghpswp_framework.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:Program FilesMicrosoftSearch Enhancement PackSearch HelperSEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_03inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:Program FilesWindows LiveToolbarwltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar2.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:Program FilesWindows LiveToolbarwltcore.dll
O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 - HKLM..Run: [hpsysdrv] c:hpsupporthpsysdrv.exe
O4 - HKLM..Run: [KBD] C:HPKBDKbdStub.EXE
O4 - HKLM..Run: [OsdMaestro] "C:Program FilesHewlett-PackardOn-Screen OSD IndicatorOSD.exe"
O4 - HKLM..Run: [StartCCC] c:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe
O4 - HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM..Run: [CCUTRAYICON] FactoryMode
O4 - HKLM..Run: [HP Health Check Scheduler] c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe
O4 - HKLM..Run: [SunJavaUpdateReg] "C:Windowssystem32jureg.exe"
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesNeroLibNeroCheck.exe
O4 - HKLM..Run: [NBKeyScan] "C:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe"
O4 - HKLM..Run: [Windows Mobile Device Center] %windir%WindowsMobilewmdc.exe
O4 - HKLM..Run: [IAAnotif] "C:Program FilesIntelIntel Matrix Storage ManagerIaanotif.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 8.0ReaderReader_sl.exe"
O4 - HKLM..Run: [FileZilla Server Interface] "C:Program FilesFileZilla ServerFileZilla Server Interface.exe"
O4 - HKLM..Run: [Samsung PanelMgr] C:WindowsSamsungPanelMgrSSMMgr.exe /autorun
O4 - HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 - HKCU..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU..Run: [HPAdvisor] C:Program FilesHewlett-PackardHP AdvisorHPAdvisor.exe autoRun
O4 - HKCU..Run: [CollaborationHost] C:Windowssystem32p2phost.exe -s
O4 - HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesWindows LiveMessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesCommon FilesNeroLibNMBgMonitor.exe"
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [EPSON Stylus Photo RX585 Series] C:Windowssystem32spoolDRIVERSW32X863E_FATICLE.EXE /FU "C:WindowsTEMPE_S1D5F.tmp" /EF "HKCU"
O4 - HKCU..Run: [DAEMON Tools Lite] "C:Program FilesDAEMON Tools Litedaemon.exe" -autorun
O4 - HKCU..Run: [ISUSPM] "C:Program FilesCommon FilesInstallShieldUpdateServiceISUSPM.exe" -scheduler
O4 - HKCU..Run: [AlcoholAutomount] "C:Program FilesAlcohol SoftAlcohol 120axcmd.exe" /automount
O4 - HKCU..Run: [RGSC] C:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent
O4 - HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'SERVICE RESEAU')
O4 - HKUSS-1-5-18..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background (User 'Default user')
O4 - Startup: OpenOffice.org 2.3.lnk = C:Program FilesOpenOffice.org 2.3programquickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imaginginhpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_03inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_03inssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: @C:WindowsWindowsMobileINetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll
O9 - Extra 'Tools' menuitem: @C:WindowsWindowsMobileINetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:Program FilesHPSmart Web Printinghpswp_extensions.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:Windowsdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:Windowsdoscandel.exe
O15 - Trusted Zone: http://www.bitdefender.fr
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/stat ... rtdgi1.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... oader5.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://www.celartem.com/en/download/dat ... _en_US.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.systemrequirementslab.com/sr ... ab_srl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resourc ... dfr-fr.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/fr ... oader5.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-U ... E_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/i ... ection.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005 ... scan53.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/ ... 586-jc.cab
O16 - DPF: {BA3BAF69-72B1-4BCE-BE96-A4D304EAFBB4} (PhotoBox uploader) - http://assets.photobox.com/assets/aurig ... 0925093035
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:Program FilesIntelIntelDHCCUAlertService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:Windowssystem32Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 - Service: DQLWinService - Unknown owner - C:Program FilesCommon FilesIntelIntelDHNMSAdpPluginsDQLWinService.exe
O23 - Service: EasyBits Magic Desktop Services for Windows NT (ezntsvc) - EasyBits Software Corp. - C:Windowssystem32ezNTSvc.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:Program FilesFileZilla ServerFileZilla Server.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Intel DH Service (IntelDHSvcConf) - Intel(R) Corporation - C:Program FilesIntelIntelDHIntel Media ServerToolsIntelDHSvcConf.exe
O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:Program FilesIntelIntelDHIntel Media ServerMedia ServerinISSM.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:Program FilesIntelIntelDHIntel Media ServerMedia Serverinmediaserver.exe
O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:Program FilesIntelIntelDHIntel Media ServerShellsMCLServiceATL.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:Program FilesNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesCommon FilesNeroLibNMIndexingService.exe
O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:Program FilesIntelIntelDHIntel Media ServerShellsRemote UI Service.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxMediaDB9.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:Program FilesCommon FilesSureThing Sharedstllssvr.exe

--
End of file - 14866 bytes

======Scheduled tasks folder======

C:Windows asksGoogle Software Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:Program FilesHPSmart Web Printinghpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:Program FilesMicrosoftSearch Enhancement PackSearch HelperSEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:Program FilesJavajre1.6.0_03inssv.dll [2007-09-25 501136]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:program filesgooglegoogletoolbar2.dll [2007-12-08 2436160]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll [2009-03-24 668656]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:Program FilesWindows LiveToolbarwltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:program filesgooglegoogletoolbar2.dll [2007-12-08 2436160]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:Program FilesWindows LiveToolbarwltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
"Windows Defender"=C:Program FilesWindows DefenderMSASCui.exe [2008-01-19 1008184]
"hpsysdrv"=c:hpsupporthpsysdrv.exe [2007-04-18 65536]
"KBD"=C:HPKBDKbdStub.EXE [2006-12-08 65536]
"OsdMaestro"=C:Program FilesHewlett-PackardOn-Screen OSD IndicatorOSD.exe [2007-02-15 118784]
"StartCCC"=c:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe [2006-11-10 90112]
"RtHDVCpl"=C:WindowsRtHDVCpl.exe [2008-01-15 4874240]
"CCUTRAYICON"=FactoryMode []
"HP Health Check Scheduler"=c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe [2007-05-24 71176]
"SunJavaUpdateReg"=C:Windowssystem32jureg.exe [2007-09-25 54672]
"HP Software Update"=C:Program FilesHPHP Software UpdateHPWuSchd2.exe [2007-03-11 49152]
""= []
"avast!"=C:PROGRA~1ALWILS~1Avast4ashDisp.exe [2009-02-05 81000]
"NeroFilterCheck"=C:Program FilesCommon FilesNeroLibNeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe [2007-09-20 1836328]
"Windows Mobile Device Center"=C:WindowsWindowsMobilewmdc.exe [2007-05-31 648072]
"IAAnotif"=C:Program FilesIntelIntel Matrix Storage ManagerIaanotif.exe [2008-06-02 178712]
"Adobe Reader Speed Launcher"=C:Program FilesAdobeReader 8.0ReaderReader_sl.exe [2008-10-15 39792]
"FileZilla Server Interface"=C:Program FilesFileZilla ServerFileZilla Server Interface.exe [2009-01-30 942080]
"Samsung PanelMgr"=C:WindowsSamsungPanelMgrSSMMgr.exe [2008-08-08 524288]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
"Sidebar"=C:Program FilesWindows Sidebarsidebar.exe [2008-01-19 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"HPAdvisor"=C:Program FilesHewlett-PackardHP AdvisorHPAdvisor.exe [2007-06-01 1783400]
"CollaborationHost"=C:Windowssystem32p2phost.exe [2008-01-19 192000]
"ehTray.exe"=C:WindowsehomeehTray.exe [2008-01-19 125952]
"MsnMsgr"=C:Program FilesWindows LiveMessengerMsnMsgr.Exe [2009-02-06 3885408]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:Program FilesCommon FilesNeroLibNMBgMonitor.exe [2007-10-23 202024]
"swg"=C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [2008-01-06 68856]
"EPSON Stylus Photo RX585 Series"=C:Windowssystem32spoolDRIVERSW32X863E_FATICLE.EXE [2007-03-30 182272]
"DAEMON Tools Lite"=C:Program FilesDAEMON Tools Litedaemon.exe [2008-03-14 486856]
"ISUSPM"=C:Program FilesCommon FilesInstallShieldUpdateServiceISUSPM.exe -scheduler []
"AlcoholAutomount"=C:Program FilesAlcohol SoftAlcohol 120axcmd.exe [2008-03-20 217544]
"RGSC"=C:Program FilesRockstar GamesRockstar Games Social ClubRGSCLauncher.exe /silent []

C:ProgramDataMicrosoftWindowsStart MenuProgramsStartup
HP Digital Imaging Monitor.lnk - C:Program FilesHPDigital Imaginginhpqtra08.exe
Microsoft Office.lnk - C:Program FilesMicrosoft OfficeOfficeOSA9.EXE

C:UserslenzoAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
OpenOffice.org 2.3.lnk - C:Program FilesOpenOffice.org 2.3programquickstart.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:Windowssystem32EZUPBH~1.DLL [2007-12-08 49152]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"DisableLockWorkstation"=0
"DisableTaskMgr"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
"NoLogoff"=0
"NoClose"=0

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{d9084e18-5dff-11dd-bb43-001d6064dca2}]
shellAutoRuncommand - F:setupSNK.exe


======List of files/folders created in the last 1 months======

2009-05-31 19:50:38 ----D---- C:Program FilesAd-remover
2009-05-31 17:16:40 ----D---- C:Program Files rend micro
2009-05-31 17:16:39 ----D---- C: sit
2009-05-28 08:43:52 ----SHD---- C:Config.Msi
2009-05-26 15:16:35 ----D---- C:Program FilesLizardTech
2009-05-18 09:12:42 ----A---- C:Windowssystem32msxml2a.dll
2009-05-18 09:12:42 ----A---- C:Windowsssndii.exe
2009-05-18 09:12:41 ----A---- C:Windowssystem32ssusbpn.dll
2009-05-18 09:12:41 ----A---- C:Windowssystem32ssdevm.dll
2009-05-18 09:12:41 ----A---- C:Windowssystem32msxml4a.dll
2009-05-18 09:12:39 ----D---- C:WindowsSamsung
2009-05-18 09:10:13 ----A---- C:Windowssystem32cl31cci.exe
2009-05-18 09:10:13 ----A---- C:Windowssystem32cl31cci.dll
2009-05-18 09:10:12 ----A---- C:Windowssystem32cl31cl3.dll
2009-05-18 09:10:03 ----D---- C:Program FilesSamsung

======List of files/folders modified in the last 1 months======

2009-06-01 10:45:35 ----D---- C:WindowsTemp
2009-06-01 10:45:28 ----D---- C:WindowsTasks
2009-06-01 10:45:24 ----D---- C:WindowsPrefetch
2009-06-01 10:43:36 ----D---- C:UserslenzoAppDataRoamingOpenOffice.org2
2009-06-01 10:33:18 ----D---- C:Program FilesMalwarebytes' Anti-Malware
2009-06-01 10:33:16 ----D---- C:Windowssystem32drivers
2009-06-01 08:42:24 ----D---- C:WindowsSystem32
2009-06-01 08:42:24 ----D---- C:Windowsinf
2009-06-01 08:42:24 ----A---- C:Windowssystem32PerfStringBackup.INI
2009-05-31 20:49:12 ----D---- C:ProgramDataGoogle Updater
2009-05-31 20:01:47 ----RD---- C:Program Files
2009-05-31 08:45:38 ----SHD---- C:System Volume Information
2009-05-30 03:00:33 ----D---- C:Windowswinsxs
2009-05-29 19:15:29 ----D---- C:Windowssystem32catroot2
2009-05-29 19:15:29 ----D---- C:Windowssystem32catroot
2009-05-28 08:43:55 ----SHD---- C:WindowsInstaller
2009-05-27 18:34:10 ----D---- C:ProgramDataDVD Shrink
2009-05-26 15:16:36 ----SD---- C:WindowsDownloaded Program Files
2009-05-25 16:43:09 ----D---- C:UserslenzoAppDataRoamingGrabIt
2009-05-24 18:12:23 ----D---- C:UserslenzoAppDataRoamingLimeWire
2009-05-21 22:41:08 ----D---- C:Windowssystem32Tasks
2009-05-19 08:35:31 ----D---- C:Windows
2009-05-14 07:28:18 ----D---- C:Program FilesWindows Mail
2009-05-10 10:30:17 ----D---- C:Program FilesRockstar Games
2009-05-10 10:26:35 ----HD---- C:Program FilesInstallShield Installation Information
2009-05-10 10:24:54 ----HD---- C:ProgramData
2009-05-07 09:16:29 ----A---- C:Windowssystem32mrt.exe
2009-05-06 19:30:39 ----D---- C:Program FileseMule

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:Windowssystem32driversaswRdr.sys [2009-02-05 23152]
R1 aswSP;avast! Self Protection; C:Windowssystem32driversaswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:Windowssystem32driversaswTdi.sys [2009-02-05 51376]
R1 ElbyCDIO;ElbyCDIO Driver; C:WindowsSystem32DriversElbyCDIO.sys [2007-08-07 25160]
R2 aswFsBlk;aswFsBlk; C:Windowssystem32DRIVERSaswFsBlk.sys [2009-02-05 20560]
R2 aswMonFlt;aswMonFlt; C:Windowssystem32DRIVERSaswMonFlt.sys [2009-02-05 51792]
R2 SSPORT;SSPORT; ??C:Windowssystem32DriversSSPORT.sys [2007-08-13 5120]
R3 atikmdag;atikmdag; C:Windowssystem32DRIVERSatikmdag.sys [2007-07-10 2769408]
R3 E100B;Pilote de carte Intel (R) PRO; C:Windowssystem32DRIVERSe100b325.sys [2008-01-19 159744]
R3 ElbyDelay;ElbyDelay; C:WindowsSystem32DriversElbyDelay.sys [2005-04-12 4608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:Windowssystem32driversRTKVHDA.sys [2008-01-15 2047576]
R3 Ps2;PS2; C:Windowssystem32DRIVERSPS2.sys [2005-12-12 19072]
R3 WUDFRd;WUDFRd; C:Windowssystem32DRIVERSWUDFRd.sys [2008-01-19 83328]
S1 hidfltr;HID Filter Driver; C:Windowssystem32driversMWhid.sys [2004-11-03 13332]
S2 DgiVecp;DgiVecp; ??C:Windowssystem32DriversDgiVecp.sys []
S3 61883;Pilote d'unité 61883; C:Windowssystem32DRIVERS61883.sys [2008-01-19 45696]
S3 ahos1l4u;ahos1l4u; C:Windowssystem32driversahos1l4u.sys []
S3 Avc;Périphérique AVC; C:Windowssystem32DRIVERSavc.sys [2008-01-19 40448]
S3 azamyya9;azamyya9; C:Windowssystem32driversazamyya9.sys []
S3 Dot4;Pilote MS IEEE-1284.4; C:Windowssystem32DRIVERSDot4.sys [2006-11-02 131584]
S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:Windowssystem32DRIVERSDot4Prt.sys [2006-11-02 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:Windowssystem32DRIVERSdot4usb.sys [2006-11-02 36864]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:Windowssystem32driversdrmkaud.sys [2008-01-19 5632]
S3 fssfltr;FssFltr; C:Windowssystem32DRIVERSfssfltr.sys [2009-02-06 55280]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:Windowssystem32driversHdAudio.sys [2006-11-02 235520]
S3 MSDV;Microsoft DV Camera and VCR; C:Windowssystem32DRIVERSmsdv.sys [2008-01-19 52608]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:Windowssystem32driversMSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:Windowssystem32driversMSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:Windowssystem32driversMSPQM.sys [2008-01-19 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:Windowssystem32driversMSTEE.sys [2008-01-19 6016]
S3 usbscan;Pilote de scanneur USB; C:Windowssystem32DRIVERSusbscan.sys [2008-01-19 35328]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:Windowssystem32DRIVERSwceusbsh.sys [2003-09-01 104064]
S3 xnacc;Contrôleur XBOX 360 pour le service de pilote Windows; C:Windowssystem32DRIVERSxnacc.sys [2008-01-19 521216]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:Windowssystem32driverswmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe [2009-02-05 18752]
R2 Ati External Event Utility;Ati External Event Utility; C:Windowssystem32Ati2evxx.exe [2007-07-10 606208]
R2 avast! Antivirus;avast! Antivirus; C:Program FilesAlwil SoftwareAvast4ashServ.exe [2009-02-05 138680]
R2 BthServ;@%SystemRoot%System32thserv.dll,-101; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 DQLWinService;DQLWinService; C:Program FilesCommon FilesIntelIntelDHNMSAdpPluginsDQLWinService.exe [2006-09-03 208896]
R2 ezntsvc;EasyBits Magic Desktop Services for Windows NT; C:Windowssystem32ezNTSvc.exe [2007-12-08 33792]
R2 FileZilla Server;FileZilla Server FTP server; C:Program FilesFileZilla ServerFileZilla Server.exe [2009-01-30 588288]
R2 gusvc;Google Software Updater; C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2009-03-24 183280]
R2 HP Health Check Service;HP Health Check Service; c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe [2007-05-24 61440]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe [2008-06-02 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:Program FilesCommon FilesLightScribeLSSrvc.exe [2007-06-28 79136]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:Program FilesNeroNero8Nero BackItUpNBService.exe [2007-09-20 853288]
R2 Net Driver HPZ12;Net Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-19 21504]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:WindowsSystem32svchost.exe [2008-01-19 21504]
R2 RapiMgr;@%windir%WindowsMobile apimgr.dll,-104; C:Windowssystem32svchost.exe [2008-01-19 21504]
R2 SeaPort;SeaPort; C:Program FilesMicrosoftSearch Enhancement PackSeaPortSeaPort.exe [2009-05-19 240512]
R2 StarWindServiceAE;StarWind AE Service; C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindServiceAE.exe [2007-05-28 275968]
R2 WcesComm;@%windir%WindowsMobilewcescomm.dll,-40079; C:Windowssystem32svchost.exe [2008-01-19 21504]
R3 avast! Mail Scanner;avast! Mail Scanner; C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:Program FilesAlwil SoftwareAvast4ashWebSv.exe [2009-02-05 352920]
R3 hpqcxs08;hpqcxs08; C:Windowssystem32svchost.exe [2008-01-19 21504]
R3 NMIndexingService;NMIndexingService; C:Program FilesCommon FilesNeroLibNMIndexingService.exe [2007-10-23 382248]
S2 IntelDHSvcConf;Intel DH Service; C:Program FilesIntelIntelDHIntel Media ServerToolsIntelDHSvcConf.exe [2006-05-10 29696]
S3 AlertService;Intel(R) Alert Service; C:Program FilesIntelIntelDHCCUAlertService.exe [2006-09-11 188416]
S3 fsssvc;Windows Live Contrôle parental; C:Program FilesWindows LiveFamily Safetyfsssvc.exe [2009-02-06 533360]
S3 IDriverT;InstallDriver Table Manager; C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe [2005-04-04 69632]
S3 ISSM;Intel(R) Software Services Manager; C:Program FilesIntelIntelDHIntel Media ServerMedia ServerinISSM.exe [2006-09-11 75264]
S3 M1 Server;Intel(R) Viiv(TM) Media Server; C:Program FilesIntelIntelDHIntel Media ServerMedia Serverinmediaserver.exe [2006-08-31 26624]
S3 MCLServiceATL;Intel(R) Application Tracker; C:Program FilesIntelIntelDHIntel Media ServerShellsMCLServiceATL.exe [2006-09-11 167936]
S3 Remote UI Service;Intel(R) Remoting Service; C:Program FilesIntelIntelDHIntel Media ServerShellsRemote UI Service.exe [2006-09-11 544256]
S3 RoxMediaDB9;RoxMediaDB9; c:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxMediaDB9.exe [2007-05-11 887544]
S3 stllssvr;stllssvr; c:Program FilesCommon FilesSureThing Sharedstllssvr.exe [2007-05-03 74656]

-----------------EOF-----------------

[lenzo13]

Voila j' ai tout fait , internet plante toujour autant, merci pour l' aide quant meme !!!

[anthony5151]

Ce n'est pas terminé...


Voici quelques conseils pour finir le nettoyage et améliorer sensiblement la sécurité de ton ordinateur, ça t'évitera peut-être de devoir revenir ici avec une nouvelle infection dans le futur Mais sache qu'aucun logiciel de sécurité ne te protègera à 100%, ce qui fait la différence, c'est ta vigilance lorsque tu télécharges ou installes quelque chose : pour en savoir plus, je t'invite à bien lire la page indiquée tout en bas de ce message (7).



1) Les barres d'outils

Souvent installées avec d'autres logiciels sans que l'utilisateur y fasse attention, les barres d'outils se multiplient sur les ordinateurs et ont deux résultats : ralentir les ordinateurs et provoquer des bugs des navigateurs.
Je te conseille de désinstaller les tiennes, tu en as 3 ! (barre d'outil Google, Windows Live).
Pour ça, ferme ton navigateur, puis Menu démarrer --> Panneau de configuration --> ajout/suppression de programmes --> désinstalle la Google Toolbar et la Windows Live Toolbar.



2) Sécurise ton ordinateur

. Anti-virus :
Avast était un antivirus convenable il y a quelques années, mais il est dépassé aujourd'hui. Il existe d'autres antivirus gratuits vien plus efficaces (notamment AntiVir)
Désinstalle Avast : Commence par supprimer ce qu'il y a en quarantaine, puis fais clic droit sur l'icone d'Avast près de l'horloge --> désactive la protection résidente. Puis Menu démarrer --> Panneau de configuration --> ajout/suppression de programmes --> désinstalle Avast. Si ça ne fonctionne pas, consulte ce lien : Désinstallation d'Avast

Si tu choisis Antivir pour le remplacer, télécharge le ici.

. Anti-spyware :
* Installe Spybot (décoche le TeaTimer lors de l'installation). Mets le à jour une fois par semaine, et fais les vaccinations à chaque fois.
* En complément, garde MalwareBytes pour son scan de nettoyage performant.

. Pour naviguer sur internet plus en sécurité et à l'abri des publicités, je te conseille vivement d'installer et d'utiliser le navigateur Firefox. Une fois que c'est fait, lance le et installe les deux extensions de sécurité suivantes :
AdBlockPlus pour bloquer les publicités ;
WOT, pour t'avertir des sites web dangereux.

. La version 7 d'Internet Explorer ne sera plus mise à jour pendant très longtemps, car la version 8 est maintenant disponible. Je te conseille donc d'installer tout de suite IE 8 depuis ce lien : IE 8

. Java n'est pas à jour, c'est une faille de sécurité.
Il faut d'abord désinstaller l'ancienne version : Ouvre le menu démarrer --> panneau de configuration --> ajout/suppression de programmes --> sélectionne toutes les versions de java présentes et désinstalle les.
Ensuite, télécharge et installe la nouvelle version depuis le site officiel de java : http://java.com/fr/

. Adobe Reader n'est pas à jour, c'est une faille de sécurité. Désinstalle le en allant dans menu démarrer --> panneau de configuration --> ajout/suppression de programmes. Puis télécharge et installe la nouvelle version.



3) Relance Hijackthis (pour la dernière fois), choisis "scan system only" et coche les lignes suivantes qui sont inutiles (j'ai intégré les barres d'outils dans cette liste) :

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:Program FilesWindows LiveToolbarwltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar2.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:Program FilesWindows LiveToolbarwltcore.dll
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesNeroLibNeroCheck.exe
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 8.0ReaderReader_sl.exe"
O4 - HKCU..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - Startup: OpenOffice.org 2.3.lnk = C:Program FilesOpenOffice.org 2.3programquickstart.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE

Si tu as bien mis à jour Adobe Reader comme je te l'ai recommandé, cette ligne devrait apparaitre, tu peux la cocher : O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"

Coche également toutes les lignes commençant par 016

Ensuite, clique sur "Fix checked"



4) Télécharge ToolsCleaner sur ton Bureau pour nettoyer l'ordi de tous les outils qu'on a utilisé : ToolsCleaner
Fais un clic-droit dessus et choisis « Exécuter en temps qu'administrateur ». Puis clique sur Recherche et patiente, puis clique sur Suppression pour nettoyer.
Tu peux aussi supprimer les fichiers temporaires.
Ensuite, supprime manuellement ToolsCleaner (mets le à la corbeille).
S'il ne supprime pas tout, supprime manuellement ce qui reste.



5) Télécharge et installe Ccleaner, puis lance le.
Clique sur Option → avancé → décoche « effacer uniquement les fichiers plus vieux que 48h »
Puis Nettoyeur → Analyse → Lancer le nettoyage, puis sur OK dans la fenêtre qui s' affiche.
Enfin, Registre → corrige toutes les erreurs, et recommence jusqu'à ce qu'il ne trouve plus d'erreurs.

(Tu peux garder ce logiciel et l'utiliser régulièrement).



6) Pour finir le nettoyage, il faut purger la restauration du système (pour supprimer les points de restauration infectés) : pour ça, suis ce tutoriel stp.



7) Je t'invite enfin à visiter cette page qui t'apportera des informations de prévention et de protection contre les infections (environ 15 minutes de lecture très instructive et utile) : Prévention et sécurité sur internet