Virus bloquant Firefox

[b]SDFix: Version 1.240 [/b]
Run by Administrateur on 30/01/2009 at 19:05

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\WINDOWS\privacy_danger\index.htm - Deleted
C:\WINDOWS\privacy_danger\images\capt.gif - Deleted
C:\WINDOWS\privacy_danger\images\danger.jpg - Deleted
C:\WINDOWS\privacy_danger\images\down.gif - Deleted
C:\WINDOWS\privacy_danger\images\spacer.gif - Deleted
C:\WINDOWS\system32\service\service.dll - Deleted



Folder C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\privacy_danger - Removed
Folder C:\WINDOWS\privacy_danger - Removed
Folder C:\WINDOWS\system32\service - Removed


Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-30 19:57:36
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:383fc55c
"s2"=dword:e8d5f773
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:3f,1b,e6,61,f6,c5,29,6f,37,7f,ca,16,68,f9,07,ab,b0,94,b4,d0,bf,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000001
"khjeh"=hex:7b,e5,32,2d,74,1b,6b,7b,70,7a,7b,ee,10,76,d9,f4,17,16,79,70,81,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,0b,d0,30,55,20,00,dd,b2,87,9d,31,99,4d,87,7e,3a,1d,..
"khjeh"=hex:7a,44,99,65,c6,7c,b3,fb,ad,5e,e7,db,a8,52,84,ab,cc,6f,a6,d8,5a,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:1e,12,1a,26,6e,f5,45,1b,3a,d2,fc,25,09,68,d8,c2,27,a2,d2,93,c8,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:3f,1b,e6,61,f6,c5,29,6f,37,7f,ca,16,68,f9,07,ab,b0,94,b4,d0,bf,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000001
"khjeh"=hex:7b,e5,32,2d,74,1b,6b,7b,70,7a,7b,ee,10,76,d9,f4,17,16,79,70,81,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,0b,d0,30,55,20,00,dd,b2,87,9d,31,99,4d,87,7e,3a,1d,..
"khjeh"=hex:7a,44,99,65,c6,7c,b3,fb,ad,5e,e7,db,a8,52,84,ab,cc,6f,a6,d8,5a,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:1e,12,1a,26,6e,f5,45,1b,3a,d2,fc,25,09,68,d8,c2,27,a2,d2,93,c8,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:3f,1b,e6,61,f6,c5,29,6f,37,7f,ca,16,68,f9,07,ab,b0,94,b4,d0,bf,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000001
"khjeh"=hex:7b,e5,32,2d,74,1b,6b,7b,70,7a,7b,ee,10,76,d9,f4,17,16,79,70,81,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,0b,d0,30,55,20,00,dd,b2,87,9d,31,99,4d,87,7e,3a,1d,..
"khjeh"=hex:7a,44,99,65,c6,7c,b3,fb,ad,5e,e7,db,a8,52,84,ab,cc,6f,a6,d8,5a,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:1e,12,1a,26,6e,f5,45,1b,3a,d2,fc,25,09,68,d8,c2,27,a2,d2,93,c8,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Jeux\\Imperial Glory\\internet\\Aphex.exe"="C:\\Program Files\\Jeux\\Imperial Glory\\internet\\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Java\\j2re1.4.2_03\\bin\\javaw.exe"="C:\\Program Files\\Java\\j2re1.4.2_03\\bin\\javaw.exe:*:Enabled:javaw"
"C:\\Program Files\\Jeux\\Dawn of War\\W40k.exe"="C:\\Program Files\\Jeux\\Dawn of War\\W40k.exe:*:Enabled:W40K"
"C:\\Program Files\\Jeux\\BFVCC Server Manager\\BFVCC.exe"="C:\\Program Files\\Jeux\\BFVCC Server Manager\\BFVCC.exe:*:Disabled:BFVCC"
"C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"C:\\Program Files\\Java\\jre1.5.0_04\\bin\\java.exe"="C:\\Program Files\\Java\\jre1.5.0_04\\bin\\java.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\\Program Files\\Java\\jre1.5.0_06\\bin\\java.exe"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\java.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"="C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\\WINDOWS\\system32\\svchost.exe"="C:\\WINDOWS\\system32\\svchost.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\39exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\39exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\11exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\11exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\57exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\57exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\95exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\95exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\Program Files\\DC++\\DCPlusPlus.exe"="C:\\Program Files\\DC++\\DCPlusPlus.exe:*:Disabled:DC++"
"C:\\Program Files\\Kazaa Lite K++\\Kazaa.kpp"="C:\\Program Files\\Kazaa Lite K++\\Kazaa.kpp:*:Disabled:Kazaa"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\54exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\54exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\48exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\48exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\71exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\71exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\12exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\12exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\21exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\21exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\79exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\79exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\0exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\0exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\83exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\83exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\20exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\20exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\17exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\17exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\27exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\27exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\58exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\58exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\18exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\18exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\3exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\3exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\63exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\63exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\5exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\5exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\45exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\45exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\70exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\70exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\34exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\34exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\98exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\98exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\59exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\59exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\50exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\50exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\29exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\29exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\41exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\41exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\93exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\93exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\92exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\92exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\64exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\64exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\6exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\6exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\96exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\96exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\7exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\7exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\61exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\61exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\69exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\69exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\68exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\68exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\51exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\51exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\97exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\97exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\26exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\26exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\66exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\66exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\14exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\14exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\65exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\65exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\90exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\90exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\49exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\49exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\87exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\87exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\75exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\75exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\73exmodul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\73exmodul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\14ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\14ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\8ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\8ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\24ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\24ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\37ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\37ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\52ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\52ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\77ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\77ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\44ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\44ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\23ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\23ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\27ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\27ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\96ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\96ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\30ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\30ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\39ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\39ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\55ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\55ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\57ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\57ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\51ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\51ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\70ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\70ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\56ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\56ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\81ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\81ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\1ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\1ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\3ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\3ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\82ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\82ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\74ex1.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\74ex1.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\58ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\58ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\97ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\97ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\57ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\57ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\87ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\87ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\31ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\31ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\91ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\91ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\84ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\84ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\35ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\35ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\44ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\44ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\56ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\56ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\54ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\54ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\7ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\7ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\83ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\83ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\74ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\74ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\69ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\69ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\16ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\16ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\52ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\52ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\25ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\25ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\6ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\6ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\53ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\53ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\66ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\66ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\30ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\30ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\21ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\21ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\62ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\62ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\13ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\13ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\67ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\67ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\48ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\48ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\99ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\99ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\26ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\26ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\86ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\86ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\9ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\9ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\49ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\49ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\70ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\70ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\24ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\24ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\8ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\8ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\68ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\68ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\15ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\15ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\80ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\80ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\46ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\46ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\82ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\82ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\0ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\0ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\90ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\90ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\45ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\45ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\78ex3.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\78ex3.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\62ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\62ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\60ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\60ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\95ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\95ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\47ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\47ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\24ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\24ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\15ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\15ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\10ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\10ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\81ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\81ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\44ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\44ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\87ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\87ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\71ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\71ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\72ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\72ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\16ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\16ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\7ex4.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\7ex4.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\55ex5.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\55ex5.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\53ex5.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\53ex5.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\47ex5.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\47ex5.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\85ex5.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\85ex5.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\56ex5.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\56ex5.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\73ex5.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\73ex5.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\97ex5.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\97ex5.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\71ex5.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\71ex5.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\12ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\12ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\50ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\50ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\27ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\27ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\78ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\78ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\41ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\41ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\98ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\98ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\86ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\86ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\87ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\87ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\39ex6.modul32.exe"="C:\\DOCUME~1\\PROPRI~1\\LOCALS~1\\Temp\\39ex6.modul32.exe:*:Enabled:Microsoft Update"
"C:\\Program Files\\Mercury\\Mercury.exe"="C:\\Program Files\\Mercury\\Mercury.exe:*:Disabled:LaunchAnywhere GUI"
"C:\\Program Files\\NetMeeting\\conf.exe"="C:\\Program Files\\NetMeeting\\conf.exe:*:Enabled:Windows© NetMeeting©"
"C:\\WINDOWS\\system32\\rtcshare.exe"="C:\\WINDOWS\\system32\\rtcshare.exe:*:Enabled:Partage de l'application RTC"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\WINDOWS\\system32\\ftp.exe"="C:\\WINDOWS\\system32\\ftp.exe:*:Enabled:Logiciel de transfert de fichiers"
"C:\\Program Files\\Jeux\\Breed\\Run\\Breed.exe"="C:\\Program Files\\Jeux\\Breed\\Run\\Breed.exe:*:Enabled:Breed"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\OrangeHSS\\Connectivity\\ConnectivityManager.exe"="C:\\Program Files\\OrangeHSS\\Connectivity\\ConnectivityManager.exe:*:enabled:CSS"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[b]Remaining Files [/b]:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Tue 28 Sep 2004           196 A.SHR --- "C:\BOOT.BAK"
Wed 15 Oct 2008       633,632 A.SH. --- "C:\Program Files\Internet Explorer\iexplore.exe"
Mon 14 Apr 2008     1,695,232 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
Sat  2 Oct 2004             0 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys"
Tue  5 Oct 2004         4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Mon 13 Aug 2007             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Tue  5 Oct 2004         4,348 ...H. --- "C:\Documents and Settings\Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Wed  6 Oct 2004            20 A..H. --- "C:\Documents and Settings\Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Wed  6 Oct 2004           312 A.SH. --- "C:\Documents and Settings\Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"

[b]Finished![/b]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:12:00, on 30/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\K-Lite Codec Pack\Real\Update_OB\realsched.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE
C:\Program Files\Browser Mouse\moffice.exe
C:\Program Files\Browser Mouse\MOUSE32A.EXE
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\PRESAR~1\Presario\XPHWWRS4\plugin\bin\pchbutton.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\DesktopEarth\DesktopEarth.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Propriétaire\Mes documents\Programmes divers\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/offres-numericable.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [EPSON Stylus CX6600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P26 "EPSON Stylus CX6600 Series" /O6 "USB001" /M "Stylus CX6600"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\K-Lite Codec Pack\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [AceGain LiveUpdate] C:\Program Files\Jeux\AceGain\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [EPSON Stylus CX6600 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P36 "EPSON Stylus CX6600 Series (Copie 1)" /O6 "USB002" /M "Stylus CX6600"
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser Mouse\moffice.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [EPSON Stylus CX6600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P26 "EPSON Stylus CX6600 Series" /M "Stylus CX6600" /EF "HKCU"
O4 - HKCU\..\Run: [Windows Registry Repair Pro] C:\Program Files\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\PRESAR~1\Presario\XPHWWRS4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
O4 - Startup: DesktopEarth AutoStart.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gustavlepepere.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://univ-r.u-strasbg.fr/TSWeb/msrdp.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{738B713F-B0DD-4EA4-9710-30375AC43601}: NameServer = 212.95.68.238
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

--
End of file - 13312 bytes

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1711
Windows 5.1.2600 Service Pack 3

31/01/2009 11:48:03
mbam-log-2009-01-31 (11-48-03).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 164034
Temps écoulé: 4 hour(s), 39 minute(s), 22 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{2030077a-371e-4c97-90b2-1dee85686a53} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{1a009abf-9098-4692-9ace-81760596ffc2} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{09f1adac-76d8-4d0f-99a5-5c907dadb988} (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2178f3fb-2560-458f-bdee-631e2fe0dfe4} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\vrmdtneg.bwqb (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\vrmdtneg.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\winantivirus pro 2006 (Rogue.WinAntivirus) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0\source (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\BootStera (Rogue.WinAntivirus) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\WinAntiVirus Pro 2006 (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\WinAntiVirus Pro 2006 (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\WinAntiVirus Pro 2006\Logs (Rogue.WinAntivirus) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:54:48, on 31/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\K-Lite Codec Pack\Real\Update_OB\realsched.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE
C:\Program Files\Browser Mouse\moffice.exe
C:\Program Files\Browser Mouse\MOUSE32A.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\PRESAR~1\Presario\XPHWWRS4\plugin\bin\pchbutton.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\DesktopEarth\DesktopEarth.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Propriétaire\Mes documents\Programmes divers\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/offres-numericable.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [EPSON Stylus CX6600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P26 "EPSON Stylus CX6600 Series" /O6 "USB001" /M "Stylus CX6600"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\K-Lite Codec Pack\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [EPSON Stylus CX6600 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P36 "EPSON Stylus CX6600 Series (Copie 1)" /O6 "USB002" /M "Stylus CX6600"
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser Mouse\moffice.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [EPSON Stylus CX6600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P26 "EPSON Stylus CX6600 Series" /M "Stylus CX6600" /EF "HKCU"
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\PRESAR~1\Presario\XPHWWRS4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
O4 - Startup: DesktopEarth AutoStart.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gustavlepepere.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://univ-r.u-strasbg.fr/TSWeb/msrdp.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{738B713F-B0DD-4EA4-9710-30375AC43601}: NameServer = 212.95.68.238
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O24 - Desktop Component 0: Privacy Protection - (no file)

--
End of file - 13117 bytes

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:03:34, on 31/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\PROGRA~1\PRESAR~1\Presario\XPHWWRS4\plugin\bin\pchbutton.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\DesktopEarth\DesktopEarth.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Propriétaire\Mes documents\Programmes divers\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.evc.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [EPSON Stylus CX6600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P26 "EPSON Stylus CX6600 Series" /O6 "USB001" /M "Stylus CX6600"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [EPSON Stylus CX6600 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P36 "EPSON Stylus CX6600 Series (Copie 1)" /O6 "USB002" /M "Stylus CX6600"
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser Mouse\moffice.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKCU\..\Run: [EPSON Stylus CX6600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P26 "EPSON Stylus CX6600 Series" /M "Stylus CX6600" /EF "HKCU"
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\PRESAR~1\Presario\XPHWWRS4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Symantec NetDriver Warning] C:\PROGRA~1\SYMNET~1\SNDWarn.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gustavlepepere.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://univ-r.u-strasbg.fr/TSWeb/msrdp.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{738B713F-B0DD-4EA4-9710-30375AC43601}: NameServer = 212.95.68.238
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O24 - Desktop Component 0: Privacy Protection - (no file)

--
End of file - 11611 bytes

Avira AntiVir Personal
Date de création du fichier de rapport : samedi 31 janvier 2009  21:08

La recherche porte sur 1302306 souches de virus.

Détenteur de la licence :Avira AntiVir PersonalEdition Classic
Numéro de série : 0000149996-ADJIE-0001
Plateforme :      Windows XP
Version de Windows :(Service Pack 3)  [5.1.2600]
Mode Boot :       Démarré normalement
Identifiant :     SYSTEM
Nom de l'ordinateur :TIM

Informations de version :
BUILD.DAT     : 8.2.0.52       16931 Bytes  02/12/2008 14:55:00
AVSCAN.EXE    : 8.1.4.10      315649 Bytes  31/01/2009 20:01:50
AVSCAN.DLL    : 8.1.4.1        49921 Bytes  21/07/2008 13:44:27
LUKE.DLL      : 8.1.4.5       164097 Bytes  12/06/2008 12:44:16
LUKERES.DLL   : 8.1.4.0        13057 Bytes  04/07/2008 07:30:27
ANTIVIR0.VDF  : 7.1.0.0     15603712 Bytes  27/10/2008 20:01:50
ANTIVIR1.VDF  : 7.1.1.113    2817536 Bytes  14/01/2009 20:01:51
ANTIVIR2.VDF  : 7.1.1.207    1359360 Bytes  30/01/2009 20:01:51
ANTIVIR3.VDF  : 7.1.1.208       2048 Bytes  30/01/2009 20:01:51
Version du moteur: 8.2.0.70  
AEVDF.DLL     : 8.1.1.0       106868 Bytes  31/01/2009 20:01:52
AESCRIPT.DLL  : 8.1.1.39      344443 Bytes  31/01/2009 20:01:52
AESCN.DLL     : 8.1.1.6       127348 Bytes  31/01/2009 20:01:52
AERDL.DLL     : 8.1.1.3       438645 Bytes  31/01/2009 20:01:52
AEPACK.DLL    : 8.1.3.5       393588 Bytes  31/01/2009 20:01:52
AEOFFICE.DLL  : 8.1.0.33      196987 Bytes  31/01/2009 20:01:52
AEHEUR.DLL    : 8.1.0.89     1569143 Bytes  31/01/2009 20:01:52
AEHELP.DLL    : 8.1.2.0       119159 Bytes  31/01/2009 20:01:51
AEGEN.DLL     : 8.1.1.12      328053 Bytes  31/01/2009 20:01:51
AEEMU.DLL     : 8.1.0.9       393588 Bytes  14/10/2008 10:05:56
AECORE.DLL    : 8.1.6.3       176501 Bytes  31/01/2009 20:01:51
AEBB.DLL      : 8.1.0.3        53618 Bytes  14/10/2008 10:05:56
AVWINLL.DLL   : 1.0.0.12       15105 Bytes  09/07/2008 08:40:02
AVPREF.DLL    : 8.0.2.0        38657 Bytes  16/05/2008 09:27:58
AVREP.DLL     : 8.0.0.2        98344 Bytes  31/01/2009 20:01:51
AVREG.DLL     : 8.0.0.1        33537 Bytes  09/05/2008 11:26:37
AVARKT.DLL    : 1.0.0.23      307457 Bytes  12/02/2008 08:29:19
AVEVTLOG.DLL  : 8.0.0.16      119041 Bytes  12/06/2008 12:27:46
SQLITE3.DLL   : 3.3.17.1      339968 Bytes  22/01/2008 17:28:02
SMTPLIB.DLL   : 1.2.0.23       28929 Bytes  12/06/2008 12:49:36
NETNT.DLL     : 8.0.0.1         7937 Bytes  25/01/2008 12:05:07
RCIMAGE.DLL   : 8.0.0.51     2371841 Bytes  04/07/2008 07:23:16
RCTEXT.DLL    : 8.0.52.1       86273 Bytes  17/07/2008 10:08:43

Configuration pour la recherche actuelle :
Nom de la tâche..................: Contrôle intégral du système
Fichier de configuration.........: C:\Program Files\Avira\AntiVir PersonalEdition Classic\sysscan.avp
Documentation....................: bas
Action principale................: interactif
Action secondaire................: ignorer
Recherche sur les secteurs d'amorçage maître: marche
Recherche sur les secteurs d'amorçage: marche
Secteurs d'amorçage..............: C:, D:, 
Recherche dans les programmes actifs: marche
Recherche en cours sur l'enregistrement: marche
Recherche de Rootkits............: marche
Fichier mode de recherche........: Tous les fichiers
Recherche sur les archives.......: marche
Limiter la profondeur de récursivité: 20
Archive Smart Extensions.........: marche
Heuristique de macrovirus........: marche
Heuristique fichier..............: moyen
Catégories de dangers divergentes: +APPL,+GAME,+JOKE,+PCK,+SPR,

Début de la recherche : samedi 31 janvier 2009  21:08

La recherche d'objets cachés commence.
'78802' objets ont été contrôlés, '0' objets cachés ont été trouvés.

La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'usnsvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wmiprvse.exe' - '1' module(s) sont contrôlés
Processus de recherche 'FTCOMModule.exe' - '1' module(s) sont contrôlés
Processus de recherche 'OraConfigRecover.exe' - '1' module(s) sont contrôlés
Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'MsPMSPSv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PAStiSvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'snmp.exe' - '1' module(s) sont contrôlés
Processus de recherche 'tcpsvcs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'nvsvc32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mdm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'gearsec.exe' - '1' module(s) sont contrôlés
Processus de recherche 'FTRTSVC.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CoreCom.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ConnectivityManager.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Deskboard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'SystrayApp.exe' - '1' module(s) sont contrôlés
Processus de recherche 'rapimgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mouse32a.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AlertModule.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Launcher.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wcescomm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PCHButton.exe' - '1' module(s) sont contrôlés
Processus de recherche 'apdproxy.exe' - '1' module(s) sont contrôlés
Processus de recherche 'moffice.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AGRSMMSG.exe' - '1' module(s) sont contrôlés
Processus de recherche 'kbd.exe' - '1' module(s) sont contrôlés
Processus de recherche 'hpsysdrv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'50' processus ont été contrôlés avec '50' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
    [INFO]      Aucun virus trouvé !

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
    [INFO]      Aucun virus trouvé !
Secteur d'amorçage 'D:\'
    [INFO]      Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence.
Le registre a été contrôlé ( '66' fichiers).


La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\' <PRESARIO>
C:\hiberfil.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
C:\pagefile.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
C:\Documents and Settings\Propriétaire\Mes documents\Call Of Duty 2 keygen.exe
    [RESULTAT]  Contient le cheval de Troie TR/Horse.EG
    [REMARQUE]  Fichier supprimé.
C:\Documents and Settings\Propriétaire\Mes documents\Jeux\EuropaUniversalisII.exe
    [0] Type d'archive: ACE SFX (self extracting)
      --> eur2.ace
        [1] Type d'archive: ACE
        --> Gfx\palette\arrows.ACT
          [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
C:\Documents and Settings\Propriétaire\Mes documents\Mes fichiers reçus\(PC) - Call Of Duty 2 No Cd Crack Key Online Patch.zip
    [0] Type d'archive: ZIP
    --> Call Of Duty 2 keygen.exe
      [RESULTAT]  Contient le cheval de Troie TR/Horse.EG
    [REMARQUE]  Fichier supprimé.
C:\Documents and Settings\Propriétaire\Mes documents\Tim\Musiques\Hip Hop, R'n'B\MC Solaar\MC.Solaar.-.Prose.Combat.(full.album).BlackSound.de.tf.-.192kbps.by.WWW-PFUCREW-DE.par.ace
    [0] Type d'archive: ACE
    --> MC Solaar - Prose Combat\11 - MC Solaar - Dieu ait son  &#65411;me.mp3
      [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
C:\Documents and Settings\Propriétaire\Mes documents\Tim\Musiques\Techno, dance\DJ Ötzi\Dj ötzi Love Peace & Vollgass (FULL ALPUM).ace
    [0] Type d'archive: ACE
    --> Dj &#65433;tzi\02DJ &#65433;tzi - Cheerio (Tiroler Are True) (1).mp3
      [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
C:\hp\bin\KillIt.exe
    [RESULTAT]  Contient le modèle de détection  de l'application APPL/KillApp.A
    [REMARQUE]  Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49f0c90e.qua' !
C:\hp\bin\KillWind.exe
    [RESULTAT]  Contient le modèle de détection  de l'application APPL/KillApplicat.A
    [REMARQUE]  Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49f0c919.qua' !
C:\System Volume Information\_restore{D5798E20-2D90-4B82-81D9-8BCD663C9521}\RP1468\A0120438.exe
    [RESULTAT]  Contient le modèle de détection  de l'application APPL/KillApp.A
    [REMARQUE]  Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49b5f9bd.qua' !
C:\System Volume Information\_restore{D5798E20-2D90-4B82-81D9-8BCD663C9521}\RP1468\A0120439.exe
    [RESULTAT]  Contient le modèle de détection  de l'application APPL/KillApplicat.A
    [REMARQUE]  Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49b5f9c6.qua' !
C:\WINDOWS\system32\drivers\sptd.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
Recherche débutant dans 'D:\' <PRESARIO_RP>


Fin de la recherche : dimanche 1 février 2009  03:03
Temps nécessaire:  5:54:59 Heure(s)

La recherche a été effectuée intégralement

   8080 Les répertoires ont été contrôlés
 569127 Des fichiers ont été contrôlés
      6 Des virus ou programmes indésirables ont été trouvés
      0 Des fichiers ont été classés comme suspects
      2 Des fichiers ont été supprimés
      0 Des virus ou programmes indésirables ont été réparés
      4 Les fichiers ont été déplacés dans la quarantaine
      0 Les fichiers ont été renommés
      3 Impossible de contrôler des fichiers
 569118 Fichiers non infectés
  14190 Les archives ont été contrôlées
      6 Avertissements
      6 Consignes
  78802 Des objets ont été contrôlés lors du Rootkitscan
      0 Des objets cachés ont été trouvés

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:44:53, on 03/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE
C:\Program Files\Browser Mouse\moffice.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\PROGRA~1\PRESAR~1\Presario\XPHWWRS4\plugin\bin\pchbutton.exe
C:\Program Files\Browser Mouse\MOUSE32A.EXE
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Propriétaire\Mes documents\Programmes divers\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/offres-numericable.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [EPSON Stylus CX6600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P26 "EPSON Stylus CX6600 Series" /O6 "USB001" /M "Stylus CX6600"
O4 - HKLM\..\Run: [EPSON Stylus CX6600 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P36 "EPSON Stylus CX6600 Series (Copie 1)" /O6 "USB002" /M "Stylus CX6600"
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser Mouse\moffice.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [EPSON Stylus CX6600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9EE.EXE /P26 "EPSON Stylus CX6600 Series" /M "Stylus CX6600" /EF "HKCU"
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\PRESAR~1\Presario\XPHWWRS4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Symantec NetDriver Warning] C:\PROGRA~1\SYMNET~1\SNDWarn.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gustavlepepere.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://univ-r.u-strasbg.fr/TSWeb/msrdp.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{738B713F-B0DD-4EA4-9710-30375AC43601}: NameServer = 212.95.68.238
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O24 - Desktop Component 0: Privacy Protection - (no file)

--
End of file - 11467 bytes