Virus chez Capdec

Résolu
Capdec -  
 Capdec -
Bonjour,

Voici le rapport de scan de BitDefender. Quelqu'un peut-il m'aider ?

BitDefender Online Scanner - Real Time Virus Report
Generated at: Fri, Jan 30, 2009 - 17:51:14

Scan Info
Scanned Files : 1089533
Infected Files : 3
Virus Detected :
- Trojan.Spy.Goldun.NDK : 2
- Application.VTesttool.A : 1

Merci.
A voir également:

305 réponses

Précédent
Réponse 201 / 305
Capdec
 
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\WINDOWS\tasks\Mantenimiento con 1 clic.job moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\etilqs_FDadehxM7YrOp22uMUIe scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\IadHide4.dll scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\~DF5F10.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\~DFBA09.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\~DFC246.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\JET6934.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_360.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
FireFox cache emptied.
Opera cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03012009_150027

Files moved on Reboot...
File C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\etilqs_FDadehxM7YrOp22uMUIe not found!
DllUnregisterServer procedure not found in C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\IadHide4.dll
C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\IadHide4.dll NOT unregistered.
C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\IadHide4.dll moved successfully.
C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\~DF5F10.tmp moved successfully.
C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\~DFBA09.tmp moved successfully.
C:\DOCUME~1\JEAN-L~1\LOCALS~1\Temp\~DFC246.tmp moved successfully.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
C:\WINDOWS\temp\JET6934.tmp moved successfully.
File C:\WINDOWS\temp\Perflib_Perfdata_360.dat not found!
C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Mozilla\Firefox\Profiles\onxyldj7.default\urlclassifier3.sqlite moved successfully.
0
Réponse 202 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
Bon on refait un dernier Rsit (enfin j'espere que c'est le dernier et qu'on va pas retrouver de nouvelles infections).Donc comme pour les autres,tu supprimes les anciens rapports avant de relancer Rsit puis tu me postes les nouveaux rapports
0
Réponse 203 / 305
Capdec
 
Logfile of random's system information tool 1.05 (written by random/random)
Run by Jean-Louis at 2009-03-01 15:18:28
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 12 GB (30%) free of 40 GB
Total RAM: 1278 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:18:50, on 01/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Fichiers communs\NMSAccessU.exe
D:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxMediaDB.exe
C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatch.exe
D:\Program Files\Seagate\Sync\SeaSyncServices.exe
D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre6\bin\jusched.exe
D:\Program Files\Seagate\SystemTray\StxMenuMgr.exe
C:\Program Files\Fichiers communs\Seagate\Schedule2\schedhlp.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatchTray.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
D:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Documents and Settings\Jean-Louis\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\TuneUp Utilities 2007\MemOptimizer.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\CPSHelpRunner.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Range-Notes\Range-Notes.exe
C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
D:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
D:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Clavier+\Clavier.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
D:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files\iPod\bin\iPodService.exe
D:\Program Files\SpywareGuard\sgmain.exe
D:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Jean-Louis\Bureau\Outils Maintenance\RSIT.exe
C:\Program Files\trend micro\Jean-Louis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://lo.st#first
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = hideupv.univ-montp3.fr:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - D:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [Babylon Client] D:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [StxTrayMenu] "D:\Program Files\Seagate\SystemTray\StxMenuMgr.exe"
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Seagate\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatchTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [00PCTFW] "D:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Jean-Louis\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2007\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Range-Notes] C:\Program Files\Range-Notes\Range-Notes.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SUPERAntiSpyware] D:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Clavier+] D:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Clavier+\Clavier.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: Babylon.exe.lnk = D:\Program Files\Babylon\Babylon-Pro\Babylon.exe
O4 - Startup: SpywareGuard.lnk = D:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Translate with &Babylon - res://D:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Xanadu - {5CC384BB-1326-11D5-F4AE-00C04923F885} - C:\Program Files\Foreignword\Xanadu\XanaduLaunch.exe
O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\Fichiers communs\NMSAccessU.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - D:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxLiveShare.exe
O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxMediaDB.exe
O23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\SharedCom\RoxUpnpRenderer.exe
O23 - Service: RoxUpnpServer - Sonic Solutions - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe
O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatch.exe
O23 - Service: Seagate Sync Service - Seagate Technology LLC - D:\Program Files\Seagate\Sync\SeaSyncServices.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
0
Réponse 204 / 305
Capdec
 
info.txt logfile of random's system information tool 1.05 2009-03-01 15:18:54

======Uninstall list======

-->"C:\Program Files\Gran Diccionario de la Lengua Española\pop.exe" -q C:\WINDOWS\ISUN040A.EXE -f"C:\Program Files\Gran Diccionario de la Lengua Española\Uninst.isu"
-->C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\system32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {637099FB-45FD-4BC7-9651-6FB540DBB749}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec.exe /I{0D330013-4A99-46D6-83C6-2C959C68DBFF}
-->MsiExec.exe /I{26792CA7-D87A-4DBE-896B-C2F66B344511}
-->MsiExec.exe /I{637099FB-45FD-4BC7-9651-6FB540DBB749}
-->MsiExec.exe /I{6D4F02C4-F6AF-4659-A933-7FC06235A8D5}
-->MsiExec.exe /I{8C60949A-46F9-4DD7-BA9F-78C00D9D4C8D}
-->MsiExec.exe /I{EB748B9B-F872-4E95-98E8-5CA7E5425DAF}
-->MsiExec.exe /I{F0EACC27-A729-406C-9BF6-C8F10CEC36F8}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D43F13A1-1E39-4BD4-9682-DF889FE75421}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D43F13A1-1E39-4BD4-9682-DF889FE75421}\setup.exe" -l0x40c /remove
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
123 Free Solitaire-->D:\PROGRA~1\123FRE~1\UNWISE.EXE D:\PROGRA~1\123FRE~1\INSTALL.LOG
7-Zip 4.59 beta-->"C:\Program Files\7-Zip\Uninstall.exe"
ActivIcons version 3.20-->"C:\Program Files\ActivIcons\unins000.exe"
ActivIcons version 3.37-->"D:\Program Files\ActivIcons\unins000.exe"
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
AFPL Ghostscript 8.54-->D:\Program Files\gs\uninstgs.exe "D:\Program Files\gs\gs8.54\uninstal.txt"
AFPL Ghostscript Fonts-->D:\Program Files\gs\uninstgs.exe "D:\Program Files\gs\fonts\uninstal.txt"
Agfa ScanWise 1.60-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Agfa\ScanWise 1_60\uninst.isu" -c"C:\Program Files\Agfa\ScanWise 1_60\UNINSTALL.DLL"
AM-DeadLink 3.2-->"D:\Program Files\AM-DeadLink\unins000.exe"
Amic Email Backup v2.0-->"D:\Program Files\Amic Tools\Amic Email Backup\unins000.exe"
Analyseur et SDK MSXML 4.0 SP2-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Apple Mobile Device Support-->MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
Archiveur WinRAR-->D:\Program Files\WinRAR\uninstall.exe
Arovax Shield 2.1.95-->C:\Program Files\Arovax Shield\uninst.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
Atelier historique-->C:\WINDOWS\unin040c.exe -fc:\atelier\DeIsL1.isu -cc:\atelier\_ISREG32.DLL
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
Avant Browser (remove only)-->"D:\Program Files\Avant Browser\uninst.exe"
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
Babelbox-->C:\Program Files\beon Widgets\Babelbox\uninst.exe
Babylon-->D:\Program Files\Babylon\Babylon-Pro\Utils\uninstbb.exe
Belarc Advisor 7.2-->C:\PROGRA~1\Belarc\Advisor\Uninstall.exe C:\PROGRA~1\Belarc\Advisor\INSTALL.LOG
Broadcom 802.11 Driver-->C:\WINDOWS\system32\BCMWLU00.exe verbose /rootkey=Software\Broadcom\802.11\UninstallInfo
Bullzip PDF Printer 4.0.0.545-->"D:\Program Files\Bullzip\PDF Printer\unins000.exe"
Calendar v.4.0-->"D:\Program Files\Serge_LAGIER\Calendar\unins000.exe"
Cardiris-->C:\WINDOWS\IsUn040c.exe -fC:\Cardiris\Uninst.isu
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"D:\Program Files\CDBurnerXP\unins000.exe"
CDex 1.40 Fr [Extraction Audio]-->"C:\Program Files\CDex\uninstall.exe"
Cimaware OfficeFIX 6-->D:\Program Files\Cimaware\OfficeFix6\uninst.exe
Clavier+ 10.6.1-->"D:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Clavier+\unins000.exe"
Coloriage-->C:\WINDOWS\GPInstall.exe "/UNINST=C:\Program Files\denouvel\Coloriage\UnInst.log" "/APPNAME=Coloriage"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Conexant AC-97 Audio-->CIAunwdm.exe
Conexant Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_3082103C\HXFSETUP.EXE -U -Ihpm30825.inf
Creative WebCam NX Driver (1.02.01.0827)-->C:\WINDOWS\CtDrvIns.exe -uninstall -script P1110.uns -unsext NT -plugin p1110pin.dll -pluginres p1110pin.crl
Dam 2.2-->"C:\Program Files\Dam22\unins000.exe"
DAZ|Studio 1.5.1.0-->C:\WINDOWS\unvise32.exe D:\Program Files\DAZ\Studio\DAZ Studio Uninstall.log
DeepBurner v1.8.0.224-->"C:\Program Files\Astonsoft\DeepBurner\Uninstall.exe" "C:\Program Files\Astonsoft\DeepBurner\install.log"
Désinstaller Le Petit Robert de la langue française-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Le Robert\Le Petit Robert\Uninst.isu"
Dia (supprimer uniquement)-->C:\Program Files\Dia\dia-0.96.1-8-uninstall.exe
DICCIONARIO CLAVE-->C:\WINDOWS\DICCIONARIO CLAVE Uninstaller.exe
Diccionario de uso del Español Actual-->"C:\Program Files\sgel\diccionario\unins000.exe"
DRAE-->"C:\Program Files\DRAE\UninstallerData\Uninstall DRAE.exe"
DriveClone-->C:\Program files\Farstone\DClone\Uninstal.exe
DVD Flick 1.3.0.6-->"D:\Program Files\DVD Flick\unins000.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
EasyCleaner-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
EasyPHP 2.0b1-->"C:\Program Files\EasyPHP 2.0b1\unins000.exe"
Encyclopédie Hachette Multimédia (désinstallation)-->"C:\Program Files\Hachette\EHM\uninstall.exe"
Encyclopédie Microsoft Encarta 2006-->MsiExec.exe /I{06180048-3E21-46D6-9A91-D927BA08F41D}
eoEngine 9.0-->"C:\Program Files\EoRezo\unins000.exe"
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
EVEREST Ultimate Edition v5.00-->"D:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
filehippo.com Update Checker-->"D:\Program Files\filehippo.com\uninstall.exe"
FileZilla Client 3.2.2.1-->D:\Program Files\FileZilla FTP Client\uninstall.exe
Folder Marker Pro v 2.0-->"C:\Program Files\Folder Marker\unins000.exe"
FotoSketcher - Version 1.81-->"D:\Program Files\FotoSketcher\unins000.exe"
FotoTagger 2.7.0.1-->D:\Program Files\FotoTagger\uninst.exe
FreeAgent Go Tools-->C:\Program Files\InstallShield Installation Information\{ECD43B7A-CB3B-4AF8-91F6-C460A575E411}\setup.exe -runfromtemp -l0x040c
FreeCommander 2008.06a-->"D:\Program Files\FreeCommander\unins000.exe"
FreeOCR.net-->"C:\WINDOWS\FreeOCR.net Uninstaller.exe"
FreshUI-->"C:\Program Files\FreshDevices\FreshUI\unins000.exe"
Gabbasoft Cube Demo-->MsiExec.exe /X{E6B4523B-A47C-4DBA-918C-D9E220B3F4EC}
GCompris (supprimer uniquement)-->C:\Program Files\Gcompris\gcompris-uninst.exe
GéoKid-->C:\WINDOWS\GPInstall.exe "/UNINST=C:\Program Files\denouvel\GéoKid\UnInst.log" "/APPNAME=GéoKid"
GIMP 2.4.7-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Glary Utilities 2.11.0.638-->"D:\Program Files\Glary Utilities\unins000.exe"
GoodFrame-->"D:\Program Files\FDSoftware\GoodFrame\unins000.exe"
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
GraphCalc v4.0.1-->"D:\Program Files\GraphCalc\unins000.exe"
GTK+ 2.10.6-1 runtime environment-->"C:\Program Files\Fichiers communs\GTK\2.0\setup\unins000.exe"
Harrap's Shorter-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Harrap's Multimédia\Shorter\Uninstharraps.isu" -c"C:\Program Files\Harrap's Multimédia\Shorter\_UnInstall.dll"
HD Tune 2.55-->"D:\Program Files\HD Tune\unins000.exe"
HijackThis 2.0.2-->"D:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Wireless Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}\setup.exe" -l0x40c
HTML Shrinker Light-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\SHRI_LIT.INF, DefaultUninstall.ntx86
Icon Collector Version 1.3-->"C:\WINDOWS\UNISTB32.EXE" /U "D:\Program Files\IconColl\UNINST0.000" "D:\Program Files\IconColl\UNINST1.000"
IE Favoris Export version 1.0-->"C:\Program Files\IEFavorisExport10\unins000.exe"
Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29}
IMG-TXT 5-->"D:\Program Files\IMG-TXT 5\uninstall.exe"
iPuissance 4D-->C:\Program Files\iPuissance 4D\Uninst.exe
Irregular Verbs 2.0-->D:\Program Files\Irregular Verbs\Uninstal.exe
IsoBuster 2.0-->"C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"
i-TimTel-->"C:\WINDOWS\gotouninstall.exe" "C:\Program Files\i-TimTel\GOTOUNINSTALL.INI"
iTunes-->MsiExec.exe /I{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}
JAlbum 7.3-->D:\Program Files\JAlbum7.3\Uninstall.exe
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Kikoo-->D:\Program Files\Kikoo\Uninstal.exe
la version 0.95.00 du 20 Février 2008, configurée pour la maiso-->"D:\Program Files\7x8\unins000.exe"
Larousse Diccionario Francés - Español-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{72E2470C-C387-4C15-91B2-012DDF71A466}\Setup.exe" -l0xa
Le Petit Robert 2007-->MsiExec.exe /I{DEDF46CC-CF38-4790-872B-FA6DC6B8C517}
Le Petit Robert 2009-->"D:\Program Files\Le Robert\Le Petit Robert 2009\Uninstall.exe"
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LedRenommer 1.4.1-->"D:\Program Files\LED\LedRenommer\unins000.exe"
Les départements français-->"C:\Program Files\GEOGRAPHIE\FRANCE\uninstall.exe"
Lexibase Pro-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{22AE875F-B8B3-46AF-856C-CE858538D912}\setup.exe" -l0x40c
Lines95 3.2e-->"D:\Program Files\Lines95\unins000.exe"
Lingo-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Lingo\ST6UNST.LOG"
Logiciel iTouch de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{036AA4D4-6D32-11D4-9875-00105ACE7734}\setup.exe" -l0x40c UNINSTALL
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\setup.exe" -l0x40c UNINSTALL
Logitech MouseWare 9.79 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\setup.exe" -l0x40c -l040c UNINSTALL
Lupas Rename 2000 v5.0 Release-->"D:\Program Files\Lupas Rename 2000\unins000.exe"
Macromedia Dreamweaver 8-->MsiExec.exe /I{5FD788ED-1A37-4496-9BDD-463F493B27FA}
Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76}
Macromedia Fireworks 8-->MsiExec.exe /I{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}
Macromedia Flash 8 Video Encoder-->MsiExec.exe /X{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}
Macromedia Flash 8-->MsiExec.exe /I{2BD5C305-1B27-4D41-B690-7A61172D2FEB}
Macromedia Flash Player 8-->MsiExec.exe /X{6815FCDD-401D-481E-BA88-31B4754C2B46}
Magentic-->C:\PROGRA~1\Magentic\bin\mgsetup.exe /remove /addon:Magentic
Malwarebytes' Anti-Malware-->"D:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Maxthon2 Browser (remove only)-->D:\Program Files\Maxthon2\MaxthonUINST.exe
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Baseline Security Analyzer 2.0.1-->MsiExec.exe /I{7F231232-C309-4401-964A-2A002B6E1ED9}
Microsoft Bootvis-->MsiExec.exe /I{0F9196C6-58B4-445B-B56E-B1200FECC151}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
mks_vir - online scanner-->C:\WINDOWS\system32\SkanerOnlineUninstall.exe
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mon Encyclopédie des Sciences-->D:\Program Files\DK\Become a Science Explorer\_uninst\uninstaller.exe
Mots Cachés 2.0-->"C:\Program Files\MotsCachés 2.0\unins000.exe"
MozBackup 1.4.7-->"C:\Program Files\MozBackup\unins000.exe"
Mozilla Firefox (3.0.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.19)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Multi Virus Cleaner 2008-->"D:\Program Files\AxBx\Multi Virus Cleaner 2008\unins001.exe"
MySQL Server 5.0-->MsiExec.exe /I{56A36E76-B35F-4453-B899-9B2190A7B500}
Nero 7-->MsiExec.exe /I{43FFE159-3199-4188-A1CD-629166AD1036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
News Interceptor 3-->"C:\Program Files\News Interceptor 3\Uninstall.exe"
nLite 1.4 RC2-->"C:\Program Files\nLite\unins000.exe"
Numedia CD-DVD writing as non-admin user-->MsiExec.exe /X{94056AE8-EF0F-45E4-A1B4-D754115F8A28}
Nvu 1.0-->"C:\Program Files\Nvu\unins000.exe"
o_Solitaire désinstallation-->"C:\Program Files\olibul\unins000.exe"
OLYMPUS Master 2-->MsiExec.exe /X{0815D55A-5EFF-4E1B-8C04-7035E914D90D}
OpenOffice.org 3.0-->MsiExec.exe /I{1572F66F-F9AD-4D45-B0D2-0F45A0D5A0F6}
Opera 9.61-->MsiExec.exe /X{F8CCEF4F-6EEF-4B81-B70D-821E72451D93}
Paint.NET v3.20-->MsiExec.exe /X{C1CAAF9E-2A80-4AD0-8D9A-B4327966249F}
Panneau de contrôle ATI-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
PC SECURITY TEST 2008-->"D:\Program Files\AxBx\PC Security Test 2008\unins000.exe"
PC Tools Firewall Plus 5.0-->D:\Program Files\PC Tools Firewall Plus\unins000.exe /LOG
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
Petit Larousse 2007-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1444B13F-B744-4624-9695-D9E6471817B1}\Setup.exe" -l0x40c
Photo To Sketch 3.51-->"C:\Program Files\Photo To Sketch\unins000.exe"
PhotoFiltre-->"D:\Program Files\PhotoFiltre\Uninst.exe"
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
Pixia 3.3b-->"D:\Program Files\Seagrand\Pixia\unins000.exe"
Pluslong-->C:\Program Files\Le mot le plus long\uninstall.exe
PSPad editor-->"D:\Program Files\PSPad editor\Uninst\unins000.exe"
QI98 - Edition 2006-->C:\WINDOWS\st6unst.exe -n "D:\QI98\ST6UNST.LOG"
Quick Launch Buttons 5.10 A2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CEB326EC-8F40-47B2-BA22-BB092565D66F}\setup.exe" -l0x40c -uninst
QuickTime-->MsiExec.exe /I{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD}
RaimaRadio 1.4-->"D:\Program Files\RaimaRadio\unins000.exe"
Range-Notes 5.1-->"C:\Program Files\Range-Notes\unins000.exe"
Rapide Créateur D'Icône 5.1-->"C:\Program Files\Rapide Créateur D'Icône\uninstall.exe"
RapidTyping-->"C:\Program Files\RapidTyping\Uninstall.exe"
Readiris-->C:\WINDOWS\ISUN040A.EXE -fC:\Readiris\Uninst.isu -cC:\Readiris\delcache.dll
REALTEK Gigabit and Fast Ethernet NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\Setup.exe" -l0x40c REMOVE
Recuva (remove only)-->"D:\Program Files\Recuva\uninst.exe"
Registry Mechanic 6.0-->"C:\Program Files\Registry Mechanic\unins000.exe"
RepareOE-->D:\Program Files\RepareOE\uninstall.exe
Rep-Listing-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{887EF08A-011E-477C-B6CB-01E540538ADB}\setup.exe" -l0x40c -removeonly
RogueRemover 1.20-->C:\Program Files\RogueRemover\uninst.exe
Roxio Creator 8 Suite Home-->MsiExec.exe /I{7FD9FD10-9F7F-4DDF-B9F0-911209FF0CEA}
Roxio Easy Media Creator 8 Suite-->MsiExec.exe /I{868901EE-7807-4F89-A134-7C705D34F91F}
SaveOE-->D:\Program Files\SaveOE\uninstall.exe
Scribus 1.3.3.9-->D:\Program Files\Scribus 1.3.3.9\uninst.exe
SDL Trados 2006 Freelance-->MsiExec.exe /I{010E52FC-DF6A-4E1A-84F4-9AB41DC9653B}
Sélecteur d'installation de Microsoft Works 2005-->C:\Program Files\Microsoft Works Suite 2005\Setup\Launcher.exe /ARP E:\
Seven Remix XP 1.0.1-->C:\WINDOWS\NiwradSoft Shell Pack\uninst.exe
Simple Sudoku 4.2-->"C:\Program Files\Simple Sudoku\unins000.exe"
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SmartDraw 7-->C:\PROGRA~1\SMARTD~1\UNWISE.EXE C:\PROGRA~1\SMARTD~1\INSTALL.LOG
SnIco Edit 2.2-->"C:\Program Files\SnIco Edit\unins000.exe"
Softi FreeOCR-->MsiExec.exe /I{ABBACAD2-4DAF-490E-932B-E330B33FCF98}
SoftwareUpdate 1.0-->"C:\Documents and Settings\Jean-Louis\Application Data\eoRezo\SoftwareUpdate\unins000.exe"
Solone-->"C:\Program Files\Solone\unins000.exe"
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
SpywareBlaster 4.1-->"D:\Program Files\SpywareBlaster\unins000.exe"
SpywareGuard v2.2-->"D:\Program Files\SpywareGuard\unins000.exe"
S-Tris 2 PC-->"D:\Program Files\Elements Interactive\S-Tris2\unins000.exe"
StudioLine Photo Basic-->D:\Program Files\StudioLine Photo Basic\SLUninst.exe
SUPER © Version 2008.bld.30 (Mar 22, 2008)-->D:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
Super Mastermind-->C:\Program Files\Super Mastermind\Uninstal.exe
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Suppress plus 1.8-->"C:\Program Files\splus\unins000.exe"
Switch-->C:\Program Files\NCH Swift Sound\Switch\uninst.exe
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
SyncBack-->"C:\Program Files\2BrightSparks\SyncBack\unins000.exe"
TchecMeet-->C:\Program Files\TchecMeet\Uninstal.exe
Texas Instruments PCIxx21/x515 drivers.-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{C569D686-A444-4AF0-A437-15CBB2816E34}
TomCat Soft : Le Pendu-->"C:\Program Files\TomCat Soft\Le Pendu\unins000.exe"
TuneUp Utilities 2007-->MsiExec.exe /I{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}
TurboCalc Light v.2.9.60-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\TurboCalc Light v.2.9.60\ST6UNST.LOG"
Tux of Math Command (remove only)-->"D:\Program Files\TuxMath\uninstall.exe"
Tux Paint 0.9.18-->"C:\Program Files\TuxPaint\unins000.exe"
VideoLAN VLC media player 0.8.6f-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VirusTotal Uploader-->"D:\Program Files\VirusTotalUploader\uninstall.exe"
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
VPN Client-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5624C000-B109-11D4-9DB4-00E0290FCAC5}\Setup.exe" -l0x9 VpnUninstall
VSO Image Resizer 1.3.4d-->"C:\Program Files\VSO\Image Resizer\unins000.exe"
Vuze-->D:\Program Files\Azureus\uninstall.exe
Warning Banner Creator-->"C:\Program Files\Warning Banner Creator\Uninstall Warning Banner Creator.exe"
WavePad Uninstall-->C:\Program Files\NCH Swift Sound\WavePad\uninst.exe
Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Resource Kit Tools - SubInAcl.exe-->MsiExec.exe /X{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinHTTrack Website Copier 3.42-3-->"C:\Program Files\WinHTTrack\unins000.exe"
winLAME prerelease3-->MsiExec.exe /I{D54B8695-1F1F-4856-9B1D-1678B242DF27}
Xanadu-->C:\WINDOWS\unvise32.exe C:\Program Files\Foreignword\Xanadu\uninstal.log
Xenu's Link Sleuth-->"D:\Program Files\Xenu\unins000.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XnView 1.91.6-->"D:\Program Files\XnView\unins000.exe"
xplorer² lite-->"C:\Program Files\zabkat\xplorer2_lite\Uninstall.exe"
ZikiTranslator 1.3.4a-->D:\Program Files\ZikiTranslator\uninst.exe

======Security center information======

AV: Avira AntiVir PersonalEdition Classic
FW: PC Tools Firewall Plus

System event log

Computer Name: HP-BARREAU
Event Code: 1001
Message: L'ordinateur a redémarré après une vérification d'erreur. La vérification d'erreur était :
0x000000ea (0x89c35b30, 0x89e1b280, 0xf78cecbc, 0x00000001).
Un vidage a été enregistré dans : C:\WINDOWS\MEMORY.DMP.

Record Number: 5691
Source Name: Save Dump
Time Written: 20090224083858.000000+060
Event Type: Informations
User:

Computer Name: HP-BARREAU
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 5690
Source Name: EventLog
Time Written: 20090224083858.000000+060
Event Type: Informations
User:

Computer Name: HP-BARREAU
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 5689
Source Name: EventLog
Time Written: 20090224083858.000000+060
Event Type: Informations
User:

Computer Name: HP-BARREAU
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.

Record Number: 5688
Source Name: EventLog
Time Written: 20090224010322.000000+060
Event Type: Informations
User:

Computer Name: HP-BARREAU
Event Code: 7036
Message: Le service Ati HotKey Poller est entré dans l'état : arrêté.

Record Number: 5687
Source Name: Service Control Manager
Time Written: 20090224010255.000000+060
Event Type: Informations
User:

Application event log

Computer Name: HP-BARREAU
Event Code: 0
Message:
Record Number: 7206
Source Name: RoxSniffer
Time Written: 20081104084939.000000+060
Event Type: Informations
User:

Computer Name: HP-BARREAU
Event Code: 0
Message:
Record Number: 7205
Source Name: AlbumCore
Time Written: 20081104084937.000000+060
Event Type: Informations
User:

Computer Name: HP-BARREAU
Event Code: 0
Message:
Record Number: 7204
Source Name: RoxLiveShare
Time Written: 20081104084937.000000+060
Event Type: Informations
User:

Computer Name: HP-BARREAU
Event Code: 0
Message:
Record Number: 7203
Source Name: RoxLiveShare
Time Written: 20081104084937.000000+060
Event Type: Informations
User:

Computer Name: HP-BARREAU
Event Code: 1517
Message: Windows a sauvegardé le Registre utilisateur HP-BARREAU\Jean-Louis alors qu'une application ou un service utilisait toujours le Registre pendant la fermeture de la session. La mémoire utilisée par le Registre de l'utilisateur n'a pas été libérée. le Registre sera déchargé lorsqu'il ne sera plus utilisé.


Cela est souvent causé par des services s'exécutant en tant que compte d'utilisateur, essayez de configurer les services pour s'exécuter dans le compte service réseau ou service local.

Record Number: 7202
Source Name: Userenv
Time Written: 20081103220935.000000+060
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Fichiers communs\GTK\2.0\bin;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Fichiers communs\Roxio Shared\DLLShared;C:\Program Files\ATI Technologies\ATI Control Panel
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
"PROCESSOR_REVISION"=0403
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"LANG"=fr
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"RoxioCentral"=C:\Program Files\Fichiers communs\Roxio Shared\Roxio Central\

-----------------EOF-----------------
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 205 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
Ca continue.Nouvelle apparition eorezo maintenant,alors on continue


Télécharge de AD-Remover de Cyrildu17 / C_XX) sur ton Bureau.

http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

/!\ Déconnecte-toi et ferme toutes applications en cours /!\

- Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Au menu principal, choisis l'option "A".
- Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note :

"Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
0
Réponse 206 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
Ton infection eorezo remonte a aujourd hui

2009-03-01 10:32:28 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\EoRezo
2009-03-01 10:32:24 ----D---- C:\Program Files\EoRezo

Les sites verrolés qui te donnent ce type dinfection sont les suivants

Code:

Bingo Day
Boonty
BoontyGames
Casino DelRio
Casino Lux
Casino Nederland
Casino Tropez
Casino-On-Net
Casino.com
EmpirePoker
EoCalendar
EoClock
EoComputer
EoDesk3d
EoMail
EoMap
EoNet
EoPhoto
EoProgrammeTele
EoRss
EoSudoku
EoTraduction
EoWeather
EoWiki
Europa Casino
Everest Casino
Everest Poker
Flamingo Club Casino
Fun Web Products
Golden Palace Casino
Golden Casino
GV Luxe
It's TV
MySpeedyAlert
MyTotalSearch
MyGlobalSearch
MyQuickSearch
MySearch
MyWay
My Way Speedbar
MyWebSearch
Pacific Poker
PartyPoker
Poker Mile
Poker 770
RoxyPalace
SweetIM
Titan Poker
Vegas Red Casino
888poker
0
Réponse 207 / 305
Capdec
 
------- LOGFILE OF AD-REMOVER 1.1.1.5 | ONLY XP/VISTA -------

Updated by C_XX on 25/02/2009 at 20:30

Start at: 15:33:13 | Dim 01/03/2009 | Boot mode: Normal Boot
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
Computer Name: HP-BARREAU
Current User: Jean-Louis - Administrator
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
- H:\ (File System: FAT)
- I:\ (File System: FAT)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 70

+-----------------| Boonty/Boonty Games Elements Found:

.
.

+-----------------| Eorezo Elements Found:

HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKCR\AppID\EoRezoBHO.DLL
HKCR\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKCU\Software\EoRezo
HKLM\Software\EoRezo
HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\Software\Classes\AppID\EoRezoBHO.DLL
HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Classes\EoRezoBHO.EoBho
HKLM\Software\Classes\EoRezoBHO.EoBho.1
HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
.
C:\Program Files\EoRezo
C:\Documents and Settings\Jean-Louis\Application Data\EoRezo
C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-01D27AE2.pf
C:\Documents and Settings\Jean-Louis\Cookies\jean-louis@eorezo[2].txt

+-----------------| Infected Poker Softwares Elements Found:

.

+-----------------| FunWebProducts/MyWay/MyWebSearch Elements Found:

.
.

+-----------------| It's TV Elements Found:

.

+-----------------| Sweetim Elements Found:

.

+-----------------| Other Adwares Found:

.
.

+-----------------| Added Scan:

---- Mozilla FireFox Version 3.0.6 ----

ProfilePath: onxyldj7.default
.
Prefs.js: Browser.Search.DefaultEngineName: "Ask"
Prefs.js: Browser.Search.DefaultEngineName: "Ask"
Prefs.js: Browser.Search.SelectedEngine: "DAEMON Search"
Prefs.js: Browser.Search.SelectedEngine: "DAEMON Search"
.
(Prefs.js) FOUND: user_pref("browser.startup.homepage", "http://y.lo.st");
.
Invalidprefs.js: Browser.Search.DefaultEngineName: "Ask"
Invalidprefs.js: Browser.Search.SelectedEngine: "DAEMON Search"
.
(Invalidprefs.js) FOUND: user_pref("browser.startup.homepage", "http://y.lo.st");
.
.

---- Internet Explorer Version 7.0.5730.13 ----

+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://www.google.fr/

+-[HKEY_USERS\S-1-5-21-1957994488-1532298954-682003330-1004\..\Internet Explorer\Main]

Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://www.google.fr/

+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start page: hxxp://www.msn.com/

+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://y.lo.st

+---------------------------------------------------------------------------+

[~3650 Bytes] - C:\Ad-Report-Scan-01.03.2009.log

- C:\Program Files\Ad-remover\TOOLS\BACKUP
- C:\Program Files\Ad-remover\TOOLS\QUARANTINE

End at: 15:35:55 | 01/03/2009
.
+-----------------| E.O.F - 87 Lines
.
0
Réponse 208 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
Relances Ad remover puis B,puis A,puis S et postes le rapport

Es tu allé ce matin sur un des sites verrolés cité au dessus?
0
Réponse 209 / 305
Capdec
 
C'est vrai. Je voulais juste installer Seven_Remix_XP_1_01_by_Niwradsoft.exe.

Que dois-je faire si tout est source d'infection ?
0
Réponse 210 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
C'est quoi ca comme programme?

Seven_Remix_XP_1_01_by_Niwradsoft.exe.

Ben si tu veux eviter les infections

Evites de charger des programmes crackés et des keyggens.La gratuité n'existe pas

Evites les sites de casinos et jeux de poker en ligne

Evites les sites xxxxxxxxxxxxxx

Evites de cliquer sur tout ce qui bouge

Sinon on s'en sortira jamais

Fais la procedure demandée
0
Réponse 211 / 305
Capdec
 
Seven_Remix_XP_1_01_by_Niwradsoft.exe : c'est un programme qui transforme le look XP en Windows 7... Un gadget quoi, mais je ne me doutais pas qu'il allait m'ouvrir plusieurs fenêtres dangereuses...


Par ailleurs, Ad remover indique qu'il est en train de faire un scan additionnel... Je le laisse terminer ?
0
Réponse 212 / 305
Capdec
 
Ma barre des tâches a disparu. Je commence à paniquer...
0
Réponse 213 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
Un petit gadget verrolé,faut faire gaffe comme pour les emoticones ,c'est souvent des verroles.T'en ai ou?
0
Réponse 214 / 305
Capdec
 
Ad-Remover indique toujours "Scan addtionnel", le curseur clignote mais rien de plus... ¡Socorro!
0
Réponse 215 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
Bon on attend ,si c'est trop long ,on refera la procedure complete
0
Réponse 216 / 305
Capdec
 
J'arrête Ad-Remover ou pas ? On dirait qu'il vaudrait mieux relancer le système...
0
Réponse 217 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
Ben arrettes Ad remover.Ensuite vires le programme merdouilleux que tu as chargé ce matin et enuite redemarres l'ordinateur.Puis refais la procedure de Ad remover
0
Réponse 218 / 305
Capdec
 
------- LOGFILE OF AD-REMOVER 1.1.1.5 | ONLY XP/VISTA -------

Updated by C_XX on 25/02/2009 at 20:30

Start at: 16:31:39 | Dim 01/03/2009 | Boot mode: Normal Boot
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
Computer Name: HP-BARREAU
Current User: Jean-Louis - Administrator
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
- H:\ (File System: FAT)
- I:\ (File System: FAT)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 75

+-----------------| Boonty/Boonty Games Elements Found:

.
.

+-----------------| Eorezo Elements Found:

.

+-----------------| Infected Poker Softwares Elements Found:

.

+-----------------| FunWebProducts/MyWay/MyWebSearch Elements Found:

.
.

+-----------------| It's TV Elements Found:

.

+-----------------| Sweetim Elements Found:

.

+-----------------| Other Adwares Found:

.
.

+-----------------| Added Scan:

---- Mozilla FireFox Version 3.0.6 ----

ProfilePath: onxyldj7.default
.
Prefs.js: Browser.Search.DefaultEngineName: "Ask"
Prefs.js: Browser.Search.SelectedEngine: "DAEMON Search"
.
.
Invalidprefs.js: Browser.Search.DefaultEngineName: "Ask"
Invalidprefs.js: Browser.Search.SelectedEngine: "DAEMON Search"
.
(Invalidprefs.js) FOUND: user_pref("browser.startup.homepage", "http://y.lo.st");
.
.

---- Internet Explorer Version 7.0.5730.13 ----

+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://www.google.fr/

+-[HKEY_USERS\S-1-5-21-1957994488-1532298954-682003330-1004\..\Internet Explorer\Main]

Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://www.google.fr/

+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start page: hxxp://www.msn.com/

+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

+---------------------------------------------------------------------------+

[~2464 Bytes] - C:\Ad-Report-Clean-01.03.2009.log
[~2444 Bytes] - C:\Ad-Report-Scan-01.03.2009.log

- C:\Program Files\Ad-remover\TOOLS\BACKUP
- C:\Program Files\Ad-remover\TOOLS\QUARANTINE

End at: 16:34:26 | 01/03/2009
.
+-----------------| E.O.F - 62 Lines
.
0
Réponse 219 / 305
Capdec
 
J'ai aussi un Login de FoxMarks qui n'arrête pas de m'em...
0
Réponse 220 / 305
loloetseb Messages postés 5508 Date d'inscription   Statut Membre Dernière intervention   174
 
Capdec,je vais te dire franchement si tu charges tout et n'importe quoi,on s'e sortira jamais,en 2014 on est encore sur CCM.Charger un programme,c 'est comme inviter un inconnu chez soi.Invites tu toute la ville chez toi?
0

Discussions similaires

Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
message de postmaster incessant !
wasap -
wasap -

9 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
Message Apple virus !!
Souclik67 -
MPMP10 -

3 réponses
4 virus en raison d’un porno ????
valou -
Bello040420 -

9 réponses