Mon PC lance plusieurs applications

Question

Bonjour,

Aidez moi  SVP , je ne peux plus toucher mon clavier , dès que j'appuie sur une touche , mon PC  lance plusieurs applications , et fini par se planter . Je suis obligé de travailler avec un clavier exterieur .
J'ai achété Norton mais il ne detecte rien à part du tracking cookie .
J'ai aussi avira qui a detecte trojan .

Je ne peux plus reformater mon PC , j'ai enormement de fichiers importants .

Merci d'avance .

fabul · Answer

Pour copier tes fichiers importants,il te faudrais,si tu n'a plus le choix,un boot cd  WinPe avec un explorateur intégré.

pour pouvoir l'utiliser comme l'explorateur windows afin de copier tes données importantes.

pour ce qui est de la désinfection,je ne suis pas le mieux plaçé pour te guider.

Par contre,si j'était a ta place,j'essaierais avec ceci https://www.greatissoftware.com/regrunplat.zip

en faisant extrèmement attention a ce que je suprime,il peut détecter nimporte quel processus.

les processus importants comme les virus encore inconnus.

alors,fais attention si tu l'utilise.bonne chance.

et petit détail,désinstalle Partizan Rootkit killer comme indiqué dans le bas de cette page avant de désinstaller regrun
https://www.greatis.com/security/Partizan.htm

Si tu ne veux plus avoir cette image au démarrage https://www.greatis.com/security/pics/partizan_starting.gif

DJIBFOUTU · Answer

Merci pour le conseil ; mais il y a t-il un autre moyen pour ne pas formater mon PC ???

Merci d'avance

geoffrey5 · Answer

Bonjour,

&#x25B6; Télécharge hijackthis

&#x25B6; Tout est expliqué sur mon site web pour l'installer et l'utiliser correctement.

&#x25B6; Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.


Comment copier/coller le rapport :


&#x25B6; Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

&#x25B6; ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.

DJIBFOUTU · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:07:05, on 24/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\My Lockbox\flockbox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\CAP3SWK.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files	rend micro\hijackthis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [CAP3ON] C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3ONN.EXE
O4 - HKLM\..\Run: [flockbox] C:\Program Files\My Lockbox\flockbox.exe /a
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Canon LASER SHOT LBP-1120 Status Window.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

geoffrey5 · Answer

Je ne vois rien d'alarmant dans ton rapport hijackthis mis à part que tu as 2 antivirus... Il ne faut jamais installer 2 antivirus sur le même PC, il risque d'y avoir des conflits entres les deux et ton PC serait ralenti...

Lequel utilises-tu ??

Je vois que tu as aussi Spyware Doctor qui est très déconseillé : ce qu'il faut savoir sur Spyware Doctor

&#x25B6; télécharge smitfraudfix et enregistre le sur le bureau 
 
&#x25B6; Ensuite double clique sur smitfraudfix puis exécuter

&#x25B6; Sélectionner 1 pour créer un rapport des fichiers responsables de l'infection.

(attention : N utilises pas l option 2 si je ne te l ai pas demandé !!)

&#x25B6; copier/coller le rapport dans la réponse.


Voici un tutoriel sonore et animé en cas de problème d'utilisation



(Attention : "process.exe", un composant de l'outil, est détecté par certains antivirus comme étant un "RiskTool". 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, 
cet utilitaire pourrait arrêter des logiciels de sécurité.)

DJIBFOUTU · Answer

Je ne comprend pas , j'ai telecharge le logiciel  mais au moment de l'exécuter , j'ai avira qui annonce un virus et j'ai le programme C\windows system 32 qui me dit que le fichier Agent O.M.Z  Fix .exe. est absent .

geoffrey5 · Answer

C'est normal :

(Attention : "process.exe", un composant de l'outil, est détecté par certains antivirus comme étant un "RiskTool".
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains,
cet utilitaire pourrait arrêter des logiciels de sécurité.)

Désactive ton antivirus le temps de faire SmitfraudFix  ;-)

DJIBFOUTU · Answer

SmitFraudFix v2.391

Rapport fait à 12:42:06,57, 24/01/2009
Executé à partir de C:\Documents and Settings\admin\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\My Lockbox\flockbox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\CAP3SWK.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\admin


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\admin\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\admin\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\admin\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Atheros AR5005GS Wireless Network Adapter - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{9FD2C9A0-E357-4DEF-B0C7-61C31B027C7E}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{9FD2C9A0-E357-4DEF-B0C7-61C31B027C7E}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{9FD2C9A0-E357-4DEF-B0C7-61C31B027C7E}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

geoffrey5 · Answer

&#x25B6; Télécharge malwarebyte's anti-malware 

&#x25B6; Un tutoriel sera à ta disposition pour l'installer et l'utiliser correctement.
 
&#x25B6; Fais la mise à jour du logiciel (elle se fait normalement à l'installation) 

&#x25B6; Lance une analyse complète en cliquant sur "Exécuter un examen complet"

&#x25B6; Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"

&#x25B6; L'analyse peut durer un bon moment.....

&#x25B6; Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"

&#x25B6; Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"

&#x25B6; Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum


* Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Faites le en cliquant sur "oui" à la question posée

DJIBFOUTU · Answer

Apres examen , aucun virus detecté .
Que faire ????

geoffrey5 · Answer

Tu as bien fais une analyse complète ??

&#x25B6; Télécharge Rooter (créé par l'équipe IDN) sur ton bureau.

&#x25B6; /!\ Déconnecte toi d'internet et ferme toutes les applications en cours /!\

&#x25B6; Exécute Rooter et laisse le travailler jusqu'à l'apparition du rapport dans le bloc note

&#x25B6; Ensuite poste le rapport dans ta prochaine réponse

DJIBFOUTU · Answer

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor         1.50GHz )
BIOS : Ver 1.00PARTTBL
USER : admin ( Administrator )
BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
Firewall  : Norton AntiVirus 15.0.0.58 (Activated)

C:\ (Local Disk) - NTFS - Total:68 Go (Free:44 Go)
D:\ (Local Disk) - NTFS - Total:80 Go (Free:80 Go)
E:\ (CD or DVD)

24/01/2009|17:03

----------------------\  Search..

No infections found !


1 - "C:\Rooter$\Rooter_1.txt" - 24/01/2009|17:04

----------------------\  Scan completed at 17:04



Je contaste que je n'ai pas de virus mais alors pourkoi mon clavier me lance toutes ces applications

geoffrey5 · Answer

Tu as bien fais une analyse complète avec Malwarebytes ?? 

Pourrais-tu me dire le nom du virus trouvé par Antivir et son emplacement ??

DJIBFOUTU · Answer

Je viens de lancer Avira et il a trouvé ca :

HIDDENEXT/Crypted

geoffrey5 · Answer

Et son emplacement ??

DJIBFOUTU · Answer

je dois relancer l'antivirus ???

DJIBFOUTU · Answer

C/WINDOWS\SYSTEM32\AGENT.OMZ.FIX.EX

geoffrey5 · Answer

Après l'analyse, tu devais surement avoir un rapport qui s'est ouvert dans le bloc notes..

Ils sont tous enregistrés dans Aperçu => rapports

poste le rapport stp

DJIBFOUTU · Answer

je n'ai pas de bloc notes sur avira mais je peux essayer de tous les copier

geoffrey5 · Answer

Ouvre antivir et vas voir dans Aperçu => rapports 

Les rapports sont enregistrés là

DJIBFOUTU · Answer

Exported events:

24/01/2009 18:18 [Scanner] Scan
      Scan ended [The scan has been canceled!].
      Number of files: 0
      Number of folders: 0
      Number of malware: 0
      Number of errors: 0

24/01/2009 18:10 [Scanner] Scan
      Scan ended [The scan has been canceled!].
      Number of files: 36260
      Number of folders: 1222
      Number of malware: 0
      Number of errors: 1

24/01/2009 17:45 [Scanner] Scan
      Scan ended [The scan has been done completely.].
      Number of files: 145677
      Number of folders: 4518
      Number of malware: 3
      Number of errors: 2

24/01/2009 17:42 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\Agent.OMZ.Fix.exe'
      contained a virus or unwanted program 'HIDDENEXT/Crypted' [heuristic]
      Action(s) taken:
      The file was moved to '49e0292a.qua'!

24/01/2009 17:13 [Scanner] Malware found
      The file 'C:\Documents and Settings\admin\Bureau\SmitfraudFix\Agent.OMZ.Fix.exe'
      contained a virus or unwanted program 'HIDDENEXT/Crypted' [heuristic]
      Action(s) taken:
      The file was moved to '49e02273.qua'!

24/01/2009 17:13 [Scanner] Malware found
      The file 'C:\Documents and Settings\admin\Bureau\SmitfraudFix.exe'
      contained a virus or unwanted program 'HIDDENEXT/Crypted' [heuristic]
      Action(s) taken:
      The file was moved to '49e42262.qua'!

24/01/2009 16:54 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.60
      Version of VDF:	7.1.1.173

24/01/2009 16:54 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

24/01/2009 15:39 [Guard] Service stopped
      Service stopped.

24/01/2009 15:39 [Scheduler] Service stopped
      The service was stopped.

24/01/2009 13:46 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl6.avgate.net
      The update was completed successfully on 24/01/2009 13:46.

24/01/2009 13:46 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.60
      VDF Version:	7.01.01.173

24/01/2009 13:44 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

24/01/2009 12:39 [Guard] AntiVir Guard disabled
      AntiVir Guard was disabled.

24/01/2009 12:39 [Guard] AntiVir Guard enabled
      AntiVir Guard was enabled.

24/01/2009 12:39 [Guard] AntiVir Guard disabled
      AntiVir Guard was disabled.

24/01/2009 12:24 [Guard] Malware found
      Virus or unwanted program 'HIDDENEXT/Crypted [heuristic]'
      detected in file 'C:\Documents and 
      Settings\admin\Bureau\SmitfraudFix\Agent.OMZ.Fix.exe.
      Action performed: Delete file

24/01/2009 12:23 [Guard] Malware found
      Virus or unwanted program 'HIDDENEXT/Crypted [heuristic]'
      detected in file 'C:\Documents and 
      Settings\admin\Bureau\SmitfraudFix\Agent.OMZ.Fix.exe.
      Action performed: Move file to quarantine

24/01/2009 12:23 [Guard] Malware found
      Virus or unwanted program 'HIDDENEXT/Crypted [heuristic]'
      detected in file 'C:\Documents and 
      Settings\admin\Bureau\SmitfraudFix\Agent.OMZ.Fix.exe.
      Action performed: Deny access

24/01/2009 08:27 [Guard] Malware found
      Virus or unwanted program 'TR/Unpacked.Gen [trojan]'
      detected in file 'C:\Program Files\Spyware Doctor\avdb	emp\EA62AB70.vbt.
      Action performed: Move file to quarantine

24/01/2009 08:27 [Guard] Malware found
      Virus or unwanted program 'TR/Unpacked.Gen [trojan]'
      detected in file 'C:\Program Files\Spyware Doctor\avdb	emp\EA62AB70.vbt.
      Action performed: Delete file

24/01/2009 07:57 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.161

24/01/2009 07:57 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

24/01/2009 07:02 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.161

24/01/2009 07:02 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

23/01/2009 17:15 [Guard] Service stopped
      Service stopped.

23/01/2009 17:15 [Scheduler] Service stopped
      The service was stopped.

23/01/2009 17:10 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.161

23/01/2009 17:09 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

23/01/2009 13:49 [Guard] Service stopped
      Service stopped.

23/01/2009 13:49 [Scheduler] Service stopped
      The service was stopped.

23/01/2009 13:45 [Updater] Update failed
      Update accessing http://dl10.freeav.net failed.
       
      No new files have been downloaded.

23/01/2009 13:44 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

23/01/2009 13:42 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.161

23/01/2009 13:42 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

23/01/2009 11:00 [Guard] Service stopped
      Service stopped.

23/01/2009 11:00 [Scheduler] Service stopped
      The service was stopped.

23/01/2009 10:21 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.161

23/01/2009 10:21 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

22/01/2009 21:12 [Guard] Service stopped
      Service stopped.

22/01/2009 21:12 [Scheduler] Service stopped
      The service was stopped.

22/01/2009 11:32 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl6.avgate.net
      The update was completed successfully on 22/01/2009 11:32.

22/01/2009 11:32 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.57
      VDF Version:	7.01.01.161

22/01/2009 11:31 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

22/01/2009 08:11 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.154

22/01/2009 08:11 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

21/01/2009 20:41 [Guard] Service stopped
      Service stopped.

21/01/2009 20:41 [Scheduler] Service stopped
      The service was stopped.

21/01/2009 20:03 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.154

21/01/2009 20:03 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

21/01/2009 18:50 [Guard] Service stopped
      Service stopped.

21/01/2009 18:50 [Scheduler] Service stopped
      The service was stopped.

21/01/2009 12:34 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.154

21/01/2009 12:33 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

21/01/2009 12:32 [Guard] Service stopped
      Service stopped.

21/01/2009 12:32 [Scheduler] Service stopped
      The service was stopped.

21/01/2009 11:32 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl4.avgate.net
      The update was completed successfully on 21/01/2009 11:32.

21/01/2009 11:32 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.57
      VDF Version:	7.01.01.154

21/01/2009 11:31 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

21/01/2009 08:09 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.143

21/01/2009 08:08 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

20/01/2009 21:41 [Guard] Service stopped
      Service stopped.

20/01/2009 21:41 [Scheduler] Service stopped
      The service was stopped.

20/01/2009 11:33 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl3.avgate.net
      The update was completed successfully on 20/01/2009 11:33.

20/01/2009 11:33 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.57
      VDF Version:	7.01.01.143

20/01/2009 11:31 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

20/01/2009 08:57 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.135

20/01/2009 08:56 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

20/01/2009 00:16 [Guard] Service stopped
      Service stopped.

20/01/2009 00:16 [Scheduler] Service stopped
      The service was stopped.

19/01/2009 23:51 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.135

19/01/2009 23:51 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

19/01/2009 21:40 [Guard] Service stopped
      Service stopped.

19/01/2009 21:40 [Scheduler] Service stopped
      The service was stopped.

19/01/2009 19:24 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.135

19/01/2009 19:24 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

19/01/2009 12:02 [Guard] Service stopped
      Service stopped.

19/01/2009 12:02 [Scheduler] Service stopped
      The service was stopped.

19/01/2009 11:32 [Updater] Update failed
      Update accessing http://dl3.avgate.net failed.
      Update process was cancelled.
      No new files have been downloaded.

19/01/2009 11:31 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

19/01/2009 10:44 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.135

19/01/2009 10:44 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

19/01/2009 08:52 [Guard] Service stopped
      Service stopped.

19/01/2009 08:52 [Scheduler] Service stopped
      The service was stopped.

19/01/2009 08:17 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.135

19/01/2009 08:16 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

18/01/2009 20:14 [Guard] Service stopped
      Service stopped.

18/01/2009 20:14 [Scheduler] Service stopped
      The service was stopped.

18/01/2009 19:42 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.135

18/01/2009 19:41 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

18/01/2009 13:10 [Guard] Service stopped
      Service stopped.

18/01/2009 13:10 [Scheduler] Service stopped
      The service was stopped.

18/01/2009 11:33 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl8.freeav.net
      The update was completed successfully on 18/01/2009 11:33.

18/01/2009 11:33 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.57
      VDF Version:	7.01.01.135

18/01/2009 11:31 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

18/01/2009 10:46 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.134

18/01/2009 10:46 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

18/01/2009 01:58 [Guard] Service stopped
      Service stopped.

18/01/2009 01:57 [Scheduler] Service stopped
      The service was stopped.

17/01/2009 23:42 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.134

17/01/2009 23:41 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

17/01/2009 23:27 [Guard] Service stopped
      Service stopped.

17/01/2009 23:27 [Scheduler] Service stopped
      The service was stopped.

17/01/2009 21:58 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.134

17/01/2009 21:57 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

17/01/2009 20:36 [Guard] Service stopped
      Service stopped.

17/01/2009 20:36 [Scheduler] Service stopped
      The service was stopped.

17/01/2009 18:56 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.57
      Version of VDF:	7.1.1.134

17/01/2009 18:56 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

17/01/2009 11:42 [Guard] Service stopped
      Service stopped.

17/01/2009 11:42 [Scheduler] Service stopped
      The service was stopped.

17/01/2009 11:35 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl1.avgate.net
      The update was completed successfully on 17/01/2009 11:35.

17/01/2009 11:35 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.57
      VDF Version:	7.01.01.134

17/01/2009 11:31 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

17/01/2009 11:30 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.128

17/01/2009 11:29 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

16/01/2009 12:18 [Guard] Service stopped
      Service stopped.

16/01/2009 12:18 [Scheduler] Service stopped
      The service was stopped.

16/01/2009 11:26 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl8.freeav.net
      The update was completed successfully on 16/01/2009 11:26.

16/01/2009 11:26 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.54
      VDF Version:	7.01.01.128

16/01/2009 11:25 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

16/01/2009 10:44 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.119

16/01/2009 10:44 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

15/01/2009 21:40 [Guard] Service stopped
      Service stopped.

15/01/2009 21:40 [Scheduler] Service stopped
      The service was stopped.

15/01/2009 20:00 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.119

15/01/2009 20:00 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

15/01/2009 19:00 [Guard] Service stopped
      Service stopped.

15/01/2009 19:00 [Scheduler] Service stopped
      The service was stopped.

15/01/2009 11:26 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl2.avgate.net
      The update was completed successfully on 15/01/2009 11:26.

15/01/2009 11:26 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.54
      VDF Version:	7.01.01.119

15/01/2009 11:25 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

15/01/2009 07:59 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.115

15/01/2009 07:58 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

14/01/2009 20:55 [Guard] Service stopped
      Service stopped.

14/01/2009 20:55 [Scheduler] Service stopped
      The service was stopped.

14/01/2009 13:02 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.115

14/01/2009 13:02 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

14/01/2009 13:01 [Guard] Service stopped
      Service stopped.

14/01/2009 13:01 [Scheduler] Service stopped
      The service was stopped.

14/01/2009 11:31 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl9.freeav.net
      The update was completed successfully on 14/01/2009 11:31.

14/01/2009 11:31 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.54
      VDF Version:	7.01.01.115

14/01/2009 11:25 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

14/01/2009 08:37 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.105

14/01/2009 08:37 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

13/01/2009 23:13 [Guard] Service stopped
      Service stopped.

13/01/2009 23:13 [Scheduler] Service stopped
      The service was stopped.

13/01/2009 22:40 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.105

13/01/2009 22:39 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

13/01/2009 22:39 [Guard] Service stopped
      Service stopped.

13/01/2009 22:38 [Scheduler] Service stopped
      The service was stopped.

13/01/2009 21:58 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.105

13/01/2009 21:58 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

13/01/2009 19:41 [Guard] Service stopped
      Service stopped.

13/01/2009 19:41 [Scheduler] Service stopped
      The service was stopped.

13/01/2009 11:26 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl8.freeav.net
      The update was completed successfully on 13/01/2009 11:26.

13/01/2009 11:26 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.54
      VDF Version:	7.01.01.105

13/01/2009 11:25 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

12/01/2009 11:26 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl7.avgate.net
      The update was completed successfully on 12/01/2009 11:26.

12/01/2009 11:26 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.54
      VDF Version:	7.01.01.98

12/01/2009 11:25 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

12/01/2009 08:46 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.96

12/01/2009 08:46 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

11/01/2009 20:28 [Guard] Service stopped
      Service stopped.

11/01/2009 20:28 [Scheduler] Service stopped
      The service was stopped.

11/01/2009 17:18 [Scanner] Scan
      Scan ended [The scan has been done completely.].
      Number of files: 58
      Number of folders: 0
      Number of malware: 0
      Number of errors: 0

11/01/2009 13:20 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.96

11/01/2009 13:19 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

11/01/2009 13:06 [Guard] Service stopped
      Service stopped.

11/01/2009 13:06 [Scheduler] Service stopped
      The service was stopped.

11/01/2009 11:26 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl5.avgate.net
      The update was completed successfully on 11/01/2009 11:26.

11/01/2009 11:26 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.54
      VDF Version:	7.01.01.96

11/01/2009 11:25 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

11/01/2009 06:16 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.54
      Version of VDF:	7.1.1.94

11/01/2009 06:16 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

10/01/2009 21:32 [Guard] Service stopped
      Service stopped.

10/01/2009 21:32 [Scheduler] Service stopped
      The service was stopped.

10/01/2009 11:26 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl5.avgate.net
      The update was completed successfully on 10/01/2009 11:26.

10/01/2009 11:26 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.54
      VDF Version:	7.01.01.94

10/01/2009 11:25 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

10/01/2009 07:01 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.90

10/01/2009 07:00 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

10/01/2009 06:10 [Guard] Service stopped
      Service stopped.

10/01/2009 06:10 [Scheduler] Service stopped
      The service was stopped.

10/01/2009 05:51 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.90

10/01/2009 05:51 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

09/01/2009 18:56 [Guard] Service stopped
      Service stopped.

09/01/2009 18:56 [Scheduler] Service stopped
      The service was stopped.

09/01/2009 18:47 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.90

09/01/2009 18:47 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

09/01/2009 12:01 [Guard] Service stopped
      Service stopped.

09/01/2009 12:00 [Scheduler] Service stopped
      The service was stopped.

09/01/2009 11:28 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl7.avgate.net
      The update was completed successfully on 09/01/2009 11:28.

09/01/2009 11:28 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.45
      VDF Version:	7.01.01.90

09/01/2009 11:25 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

09/01/2009 11:23 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.80

09/01/2009 11:23 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

08/01/2009 20:54 [Guard] Service stopped
      Service stopped.

08/01/2009 20:53 [Scheduler] Service stopped
      The service was stopped.

08/01/2009 15:14 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.80

08/01/2009 15:14 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

08/01/2009 10:19 [Scanner] Scan
      Scan ended [The scan has been done completely.].
      Number of files: 2718
      Number of folders: 66
      Number of malware: 0
      Number of errors: 0

08/01/2009 08:18 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl4.avgate.net
      The update was completed successfully on 08/01/2009 08:18.

08/01/2009 08:18 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.45
      VDF Version:	7.01.01.80

08/01/2009 08:17 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

08/01/2009 07:59 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.74

08/01/2009 07:59 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

07/01/2009 22:45 [Guard] Service stopped
      Service stopped.

07/01/2009 22:45 [Scheduler] Service stopped
      The service was stopped.

07/01/2009 21:47 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.74

07/01/2009 21:47 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

07/01/2009 13:10 [Guard] Service stopped
      Service stopped.

07/01/2009 13:10 [Scheduler] Service stopped
      The service was stopped.

07/01/2009 08:18 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl9.freeav.net
      The update was completed successfully on 07/01/2009 08:18.

07/01/2009 08:18 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.45
      VDF Version:	7.01.01.74

07/01/2009 08:17 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

07/01/2009 08:05 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.73

07/01/2009 08:04 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

06/01/2009 21:04 [Guard] Service stopped
      Service stopped.

06/01/2009 21:04 [Scheduler] Service stopped
      The service was stopped.

06/01/2009 21:01 [Scanner] Scan
      Scan ended [The scan has been done completely.].
      Number of files: 8
      Number of folders: 1
      Number of malware: 0
      Number of errors: 0

06/01/2009 14:54 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.73

06/01/2009 14:54 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

06/01/2009 13:20 [Guard] Service stopped
      Service stopped.

06/01/2009 13:20 [Scheduler] Service stopped
      The service was stopped.

06/01/2009 09:17 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.73

06/01/2009 09:17 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

06/01/2009 09:16 [Guard] Service stopped
      Service stopped.

06/01/2009 09:16 [Scheduler] Service stopped
      The service was stopped.

06/01/2009 08:19 [Updater] Update successfully completed
      Update of Avira AntiVir Personal - Free Antivirus performed via server 
      http://dl6.avgate.net
      The update was completed successfully on 06/01/2009 08:19.

06/01/2009 08:19 [Guard] Reload engine.
      The Engine was reloaded.
      Engine Version:	8.02.00.45
      VDF Version:	7.01.01.73

06/01/2009 08:17 [Scheduler] Job started
      The job "Daily Update"
      was started successfully.

06/01/2009 08:15 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.35

06/01/2009 08:15 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

26/12/2008 08:14 [Guard] Service stopped
      Service stopped.

26/12/2008 08:14 [Scheduler] Service stopped
      The service was stopped.

25/12/2008 19:43 [Guard] Service started
      Service started.
      Version of service:	8.0.1.30
      Version of Engine:	8.2.0.45
      Version of VDF:	7.1.1.35

25/12/2008 19:43 [Scheduler] Service started
      The service was started.
       Version of service 8.0.0.17

geoffrey5 · Answer

Tu peux aller supprimer tout ce qu'il y a dans la quarantaine d'Antivir.

Vas faire une analyse en ligne avec Bitdefender à cette adresse stp : (sous internet explorer)

http://www.zebulon.fr/outils/antivirus/antivirus-en-ligne.php

Accepte l'activeX et poste le rapport généré à la fin de l'analyse stp

DJIBFOUTU · Answer

BitDefender Online Scanner - Rapport d'analyse

BitDefender Online Scanner

Rapport d'analyse généré à: Sat, Jan 24, 2009 - 19:45:47

Voie d'analyse: C:\;D:\;E:\;

Statistiques
Temps	00:33:50
Fichiers	56873
Directoires	4845
Secteurs de boot	0
Archives	992
Paquets programmes	3353

Résultats
Virus identifiés	0
Fichiers infectés	0
Fichiers suspects	2
Avertissements	0
Désinfectés	0
Fichiers effacés	2

Info sur les moteurs
Définition virus	2427207
Version des moteurs	AVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008 17:19:14)
Analyse des plugins	15
Archive des plugins	42
Unpack des plugins	7
E-mail plugins	6
Système plugins	0

Paramètres d'analyse
Première action	Désinfecté
Seconde Action	Supprimé
Heuristique	Oui
Acceptez les avertissements	Oui
Extensions analysées	exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;
Excludez les extensions
Analyse d'emails	Oui
Analyse des Archives	Oui
Analyser paquets programmes	Oui
Analyse des fichiers	Oui
Analyse de boot	Oui

Fichier analysé	Statut
C:\System Volume Information\_restore{588619E4-E0C6-4AA0-85FF-DA4831A5165E}\RP61\A0017493.exe	Suspecté de: BehavesLike:Trojan.StartPage
C:\System Volume Information\_restore{588619E4-E0C6-4AA0-85FF-DA4831A5165E}\RP61\A0017493.exe	Echec de la désinfection
C:\System Volume Information\_restore{588619E4-E0C6-4AA0-85FF-DA4831A5165E}\RP61\A0017493.exe	Supprimé
C:\System Volume Information\_restore{588619E4-E0C6-4AA0-85FF-DA4831A5165E}\RP61\A0017498.exe	Suspecté de: BehavesLike:Trojan.StartPage
C:\System Volume Information\_restore{588619E4-E0C6-4AA0-85FF-DA4831A5165E}\RP61\A0017498.exe	Echec de la désinfection
C:\System Volume Information\_restore{588619E4-E0C6-4AA0-85FF-DA4831A5165E}\RP61\A0017498.exe	Supprimé

geoffrey5 · Answer

&#x25B6; Télécharge a-squared free 3.5

&#x25B6; Voici un tutoriel pour bien l utiliser.

&#x25B6; fais la mise à jour et une analyse complète.

&#x25B6; poste le rapport stp

DJIBFOUTU · Answer

ersion - a-squared Free 4.0
Dernière mise à jour : 25/01/2009 11:02:52

Paramètres des balayages :

Éléments : Mémoire, Traces, Cookies, C:\WINDOWS\, C:\Program Files
Balaye dans les archives : Marche
Analyse heuristique : Marche
Balaye dans les ADS : Marche

Début du balayage :	25/01/2009 11:06:10

C:\Documents and Settings\admin\Cookies\admin@commentcamarche[2].txt 	Objets détectés : Trace.TrackingCookie.com!A2
C:\Documents and Settings\admin\Cookies\admin@doubleclick[2].txt 	Objets détectés : Trace.TrackingCookie.doubleclick!A2
C:\Documents and Settings\admin\Cookies\admin@smartadserver[2].txt 	Objets détectés : Trace.TrackingCookie.smartadserver!A2
C:\WINDOWS\system32\Process.exe 	Objets détectés : Riskware.RiskTool.Win32.Processor.20!A2

Analysé

Fichiers : 	46400
Traces : 	571712
Cookies : 	16
Processus : 	52

Objets trouvés

Fichiers : 	1
Traces : 	0
Cookies : 	3
Processus : 	0
Clés de Registre : 	0

Fin du balayage :	25/01/2009 11:48:59
Temps du balayage :	0:42:49

geoffrey5 · Answer

Bonjour,

Tu peux aller vider la quarantaine d'a-squared.

Est-ce que tu as la possibilité d'essayer avec un autre clavier ??

DJIBFOUTU · Answer

je travaille avec un clavier avec une cle usb

geoffrey5 · Answer

Et tu n'as pas un autre clavier pour essayer ??

geoffrey5 · Answer

Alors le problème vient de ton clavier...

Refais un nouveau rapport hijackthis stp

geoffrey5 · Answer

relance hijackthis en cliquant sur scan only et coches ces lignes stp :

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime     
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe     

puis tu cliques sur fix checked.

Je vois qu'il reste des traces de Norton dans ton PC... Exécute ceci pour les supprimer stp :

norton removal tools :  http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924


Est-ce que tu as encore des problèmes ??

DJIBFOUTU · Answer

Voila , j'ai fait ce que tu m'a demande , et te renvoie apres un scan .
Je prefere garder norton car c'est ma société qui me paye .




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:28:58, on 25/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\My Lockbox\flockbox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\CAP3SWK.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files	rend micro\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [CAP3ON] C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3ONN.EXE
O4 - HKLM\..\Run: [flockbox] C:\Program Files\My Lockbox\flockbox.exe /a
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Canon LASER SHOT LBP-1120 Status Window.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

geoffrey5 · Answer

Il ne faut jamais installer 2 antivirus sur le même PC car il risque d'y avoir des conflits entres les deux !!

Quel problème as-tu encore ??

banghs · Answer

Slt!
C'est un gros pb car je sais ce que ça fait quand un pc est infecté, on peut facilement être malade aussi!
Essaie donc de télécharger kaspersky juste pour scanner ton pc!

geoffrey5 · Answer

Pourquoi lui proposer un troisième antivirus ??!!

geoffrey5 · Answer

Mais c'est ton clavier qui a un problème puisque l'autre ne fait pas ce problème là...

Tu vas supprimer quel autres ??

geoffrey5 · Answer

Tu peux si tu le désire garder Norton, même si ce n'est un antivirus que je recommande... Mais alors il faut absolument que tu désinstalles Antivir pour ne pas créer de conflits entres les deux et avoir des ralentissements de ton PC...

Est-ce que tu as eu un CD d'installatiion avec ton clavier créant le problème ??

geoffrey5 · Answer

Je ne te demande pas si tu as déjà eu un problème avec le CD, je te demandes si tu as un CD d'installation pour ton clavier...

Si oui, désinstalle-le et réinstalle-le. Ca va peut être règler ton problème.

DJIBFOUTU · Answer

Je vais essayer de faire ce ce que tu me dit . je te tiens au courant . je vais essayer de reinstaller le systeme d'exploitation

geoffrey5 · Answer

Je ne te demande pas de réinstaller le système d'exploitation... Réinstaller ton clavier

geoffrey5 · Answer

Bonjour,

ton portable n'est plus garanti ??

Mon PC lance plusieurs applications

40 réponses

Votre réponse

Newsletters