Aide, Virus Infection Fermé

Question

Bonjour,
Mon avast s'est bien affolé ce matin, j'ai donc eu l'idée de poster un bon rapport HijackThis !
Merci de bien vouloir e dire si je suis infecté.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:15:38, on 19/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Trojan Remover\Trjscan.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\windows\system32\ctfmon.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\wuauclt.exe
C:	emp\HiJackThis(2).exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ask.com/?o=13928&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.search.yahoo.com/search?fr=mcafee&p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe"  /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation
View
wiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbaresources\en-US\local\search.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: !SASWinLogon - C:\WINDOWS\
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Google Update (gupdate1c9e21285304d56) (gupdate1c9e21285304d56) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

kevin05 · Answer

Salut

Aucune infection dans ton rapport...

Pour voir plus loin ... si tu le veut :


- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau. 

- Double-clique sur RSIT.exe afin de lancer le programme. 

- A l'écran Disclaimer Choisis "1 months" dans le menu déroulant puis clique sur <continue>.  

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence. 

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt 

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

patroto · Answer

Merci de m'aider !
Logfile of random's system information tool 1.06 (written by random/random)
Run by Clément at 2009-08-19 23:22:24
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 417 GB (88%) free of 477 GB
Total RAM: 3263 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:22:29, on 19/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:	emp\RSIT.exe
C:	emp\Clément.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ask.com/?o=13928&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.search.yahoo.com/search?fr=mcafee&p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe"  /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation
View
wiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbaresources\en-US\local\search.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: !SASWinLogon - C:\WINDOWS\
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Google Update (gupdate1c9e21285304d56) (gupdate1c9e21285304d56) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

patroto · Answer

et l'autre rapport info.txt

info.txt logfile of random's system information tool 1.06 2009-08-19 23:22:31

======Uninstall list======

-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec /X{B83FC356-B7C0-441F-8A4D-D71E088E7974}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
adsl TV-->C:\Program Files\adslTV\Uninstal.exe
Advertising Center-->MsiExec.exe /X{b2ec4a38-b545-4a00-8214-13fe0e915e6d}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
AVG Anti-Rootkit Free-->C:\Program Files\GRISOFT\AVG Anti-Rootkit Free\Uninstall.exe
AVS Video Converter 4.3.1.371-->"C:\Program Files\AVSMedia\VideoConverter4\unins000.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Cycling Manager 4-->C:\Program Files\Cyanide\Cycling Manager 4\uninstall.exe
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
EAX4 Unified Redist-->MsiExec.exe /X{89661B04-C646-4412-B6D3-5E19F02F1F37}
FIFA 09-->MsiExec.exe /X{2315B23D-3E21-4920-837D-AE6460934ECB}
filehippo.com Update Checker-->"C:\Program Files\filehippo.com\uninstall.exe"
Free Video to Mp3 Converter version 3.1-->"C:\Program Files\DVDVideoSoft\Free Video to Mp3 Converter\unins000.exe"
FusionSoft DVD Player XP Version 5.0-->"C:\Program Files\FusionSoft DVD Player XP\unins000.exe"
GameCenter-->C:\Program Files\Cyanide\GameCenter\uninstall.exe
Glary Utilities 2.13.0.689-->"C:\Program Files\Glary Utilities\unins000.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\2.0.172.39\Installer\setup.exe" --uninstall --system-level
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}
HijackThis 2.0.2-->"C:	emp\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Java(TM) 6 Update 16-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Kaspersky On-line Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
Ma-Config.com-->MsiExec.exe /X{560BD6E0-0BA6-43AF-B423-E1DF4D2EB3C3}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office 2000 Premium-->MsiExec.exe /I{0000040C-78E1-11D2-B60F-006097C998E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB968220)-->"C:\WINDOWS\ie8updates\KB968220-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 - fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
Mozilla Firefox (3.5.2)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Need for Speed™ Most Wanted-->C:\Program Files\EA GAMES\Need for Speed Most Wanted\EAUninstall.exe
Nero 7 Premium-->MsiExec.exe /X{22FB6750-ADDF-4726-B67F-6901E1991036}
Nero 9 Essentials-->C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\SetupX.exe  REMOVESERIALNUMBER="XM02-508X-MHAT-19WU-9Z3Z-0CH0-3U6E-85W5-MMHH-6647-1Z5L-7M8C-0U45-758P-0000"
Nero ControlCenter-->MsiExec.exe /X{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}
Nero Installer-->MsiExec.exe /X{e8a80433-302b-4ff1-815d-fcc8eac482ff}
Nero Online Upgrade-->MsiExec.exe /X{dba84796-8503-4ff0-af57-1747dd9a166d}
Nero StartSmart OEM-->MsiExec.exe /X{4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}
Nero StartSmart-->MsiExec.exe /X{7748ac8c-18e3-43bb-959b-088faea16fb2}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NVIDIA Drivers-->C:\WINDOWS\system32
vuninst.exe UninstallGUI
NVIDIA nView Desktop Manager-->C:\Program Files\NVIDIA Corporation
View
ViewSetup.exe -uninstall
NVIDIA PhysX-->MsiExec.exe /X{B83FC356-B7C0-441F-8A4D-D71E088E7974}
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Owl550 1.14-->"C:\Program Files\Owl550\unins000.exe"
Photo Frame Studio 2.1-->"C:\Program Files\MOJOSOFT\Photo Frame Studio\unins000.exe"
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Pro Evolution Soccer 2009-->MsiExec.exe /X{A8DB611A-D80E-450D-85F6-3ACDD164BE31}
REALTEK GbE & FE Ethernet PCI-E NIC Driver-->C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\Setup.exe -runfromtemp -l0x040c -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c  -removeonly
Saitek SST Programming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{655EE3B7-0113-4C5E-B147-B82BA325643F}\setup.exe" AddRem
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Search Settings 1.2-->MsiExec.exe /X{D0C73318-7B4A-4D16-A0C4-3B83F075EA88}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
Splinter Cell Pandora Tomorrow-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{084A9731-D05B-4ADA-B4A0-0ADD25FD7152}\Setup.exe" -l0x40c 
Spotify-->"C:\Program Files\Spotify\uninstall.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Sunbelt Personal Firewall-->MsiExec.exe /X{82B1150E-9B37-49FC-83EB-D52197D900D0}
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
Thrustmaster Force Feedback Driver-->C:\Program Files\InstallShield Installation Information\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}\setup.exe -runfromtemp -l0x040c -removeonly
TrackMania Sunrise Extreme 1.5.1-->"C:\Program Files\TrackMania Sunrise\unins000.exe"
Trojan Remover 6.7.9-->"C:\Program Files\Trojan Remover\unins000.exe"
Trust WB-1400T Webcam-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{F6CE1230-A694-4B86-B21C-A11A112689DA} /l1036 
TuneUp Utilities 2008-->MsiExec.exe /I{5888428E-699C-4E71-BF71-94EE06B497DA}
VC 9.0 Runtime-->MsiExec.exe /I{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
VLC media player 1.0.0-->C:\Program Files\adslTV\uninstall.exe
Winamp Toolbar-->"C:\Program Files\Winamp Toolbar\uninstall.exe"
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Desktop Search 3.01-->"C:\WINDOWS\$NtUninstallKB917013$\spuninst\spuninst.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Wise Registry Cleaner 4 Free 4.52-->"C:\Program Files\Wise Registry Cleaner\unins000.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XnView 1.96-->"C:\Program Files\XnView\unins000.exe"
Yahoo! Install Manager-->C:\WINDOWS\system32egsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

=====HijackThis Backups=====

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2009-06-08]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327 [2009-06-08]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2009-06-08]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2009-06-09]
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\clement\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2009-06-09]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2009-06-10]

======Hosts File======

127.0.0.1	
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090819-0]
FW: Sunbelt Personal Firewall

======System event log======

Computer Name: MARTINESE
Event Code: 7036
Message: Le service avast! Web Scanner est entré dans l'état : en cours d'exécution.

Record Number: 23992
Source Name: Service Control Manager
Time Written: 20090701094112.000000+120
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 7036
Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution.

Record Number: 23991
Source Name: Service Control Manager
Time Written: 20090701094112.000000+120
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

Record Number: 23990
Source Name: Service Control Manager
Time Written: 20090701094112.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: MARTINESE
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service avast! Web Scanner.

Record Number: 23989
Source Name: Service Control Manager
Time Written: 20090701094112.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: MARTINESE
Event Code: 7036
Message: Le service avast! Mail Scanner est entré dans l'état : en cours d'exécution.

Record Number: 23988
Source Name: Service Control Manager
Time Written: 20090701094112.000000+120
Event Type: Informations
User: 

=====Application event log=====

Computer Name: MARTINESE
Event Code: 100
Message: msnmsgr (2980) Le moteur de base de données 5.01.2600.5512 est démarré.

Record Number: 6011
Source Name: ESENT
Time Written: 20090501222415.000000+120
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 101
Message: msnmsgr (964) Le moteur de base de données est arrêté.

Record Number: 6010
Source Name: ESENT
Time Written: 20090501222342.000000+120
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 103
Message: msnmsgr (964) \.\C:\Documents and Settings\clement\Local Settings\Application Data\Microsoft\Messenger\martinese.clement@free.fr\SharingMetadata\Working\database_4D4_837D_D483_702A\dfsr.db: Le moteur de base de données a arrêté une instance (0).

Record Number: 6009
Source Name: ESENT
Time Written: 20090501222342.000000+120
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 302
Message: msnmsgr (964) \.\C:\Documents and Settings\clement\Local Settings\Application Data\Microsoft\Messenger\martinese.clement@free.fr\SharingMetadata\Working\database_4D4_837D_D483_702A\dfsr.db: Le moteur de base de données a exécuté la procédure de récupération avec succès.

Record Number: 6008
Source Name: ESENT
Time Written: 20090501215130.000000+120
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 301
Message: msnmsgr (964) \.\C:\Documents and Settings\clement\Local Settings\Application Data\Microsoft\Messenger\martinese.clement@free.fr\SharingMetadata\Working\database_4D4_837D_D483_702A\dfsr.db: Le moteur de base de données commence la relecture du fichier journal \.\C:\Documents and Settings\clement\Local Settings\Application Data\Microsoft\Messenger\martinese.clement@free.fr\SharingMetadata\Working\database_4D4_837D_D483_702A\fsr.log.

Record Number: 6007
Source Name: ESENT
Time Written: 20090501215130.000000+120
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Samsung\Samsung PC Studio 3;C:\Program Files\Fichiers communs\DivX Shared\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=1706
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

kevin05 · Answer

Re,

En effet,2 infections.


Télécharge Lop S&D.exe sur ton Bureau.


* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

patroto · Answer

salut, encore merci de m'aider. =)

   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III Xeon )
   BIOS : Default System BIOS
   USER : Clément ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1335 [VPS 090819-0] 4.8.1335 (Activated)
   Firewall  : Sunbelt Personal Firewall 4.6.1861 T (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:465 Go (Free:407 Go)
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 20/08/2009|12:14 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [25/12/2008|22:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
   [23/05/2009|11:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\GlarySoft
   [25/12/2008|22:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [08/05/2009|10:30] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
   [08/05/2009|10:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [25/12/2008|22:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
   [19/03/2009|19:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\TuneUp Software
   [11/01/2009|16:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Winamp

   [14/03/2009|13:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [09/11/2008|11:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [14/02/2009|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\aHisoft
   [19/02/2009|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apowersoft
   [16/08/2009|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Arovax
   [24/12/2008|20:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
   [09/05/2009|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [11/04/2009|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
   [12/03/2009|21:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [31/05/2009|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [15/11/2008|13:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [04/12/2008|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KONAMI
   [23/01/2009|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [01/05/2009|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [10/01/2009|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
   [25/12/2008|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [05/01/2009|19:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [02/07/2009|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [16/08/2009|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [16/08/2009|15:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA Corporation
   [29/04/2009|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OrbNetworks
   [09/06/2009|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simply Super Software
   [19/08/2009|13:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [14/06/2009|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [30/10/2008|15:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [25/01/2009|00:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
   [18/07/2009|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Winamp Toolbar
   [31/10/2008|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [15/11/2008|23:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [06/11/2008|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [13/03/2009|23:09] C:\DOCUME~1\clement\APPLIC~1\AccurateRip
   [02/11/2008|20:02] C:\DOCUME~1\clement\APPLIC~1\Adobe
   [09/11/2008|16:21] C:\DOCUME~1\clement\APPLIC~1\Ahead
   [07/05/2009|18:46] C:\DOCUME~1\clement\APPLIC~1\ArcSoft
   [27/12/2008|17:25] C:\DOCUME~1\clement\APPLIC~1\Auslogics
   [20/04/2009|21:25] C:\DOCUME~1\clement\APPLIC~1\AVS Video Converter
   [24/12/2008|20:14] C:\DOCUME~1\clement\APPLIC~1\AVS4YOU
   [28/11/2008|11:18] C:\DOCUME~1\clement\APPLIC~1\ConvertTemp
   [09/05/2009|13:43] C:\DOCUME~1\clement\APPLIC~1\CyberLink
   [14/06/2009|19:39] C:\DOCUME~1\clement\APPLIC~1\DivX
   [18/07/2009|12:19] C:\DOCUME~1\clement\APPLIC~1\dvdcss
   [03/11/2008|16:05] C:\DOCUME~1\clement\APPLIC~1\FastStone
   [01/01/2009|03:53] C:\DOCUME~1\clement\APPLIC~1\GlarySoft
   [31/05/2009|19:10] C:\DOCUME~1\clement\APPLIC~1\Google
   [29/10/2008|14:11] C:\DOCUME~1\clement\APPLIC~1\Identities
   [29/10/2008|14:22] C:\DOCUME~1\clement\APPLIC~1\InstallShield
   [05/04/2009|22:05] C:\DOCUME~1\clement\APPLIC~1\IObit
   [03/04/2009|22:06] C:\DOCUME~1\clement\APPLIC~1\Lavasoft
   [29/10/2008|15:29] C:\DOCUME~1\clement\APPLIC~1\Leadertech
   [20/12/2008|16:46] C:\DOCUME~1\clement\APPLIC~1\LG Electronics
   [29/10/2008|15:03] C:\DOCUME~1\clement\APPLIC~1\Macromedia
   [25/12/2008|19:36] C:\DOCUME~1\clement\APPLIC~1\Malwarebytes
   [29/06/2009|20:05] C:\DOCUME~1\clement\APPLIC~1\Microsoft
   [14/06/2009|17:17] C:\DOCUME~1\clement\APPLIC~1\mojosoft
   [29/10/2008|14:42] C:\DOCUME~1\clement\APPLIC~1\Mozilla
   [15/11/2008|13:46] C:\DOCUME~1\clement\APPLIC~1\RetinaX
   [23/12/2008|22:47] C:\DOCUME~1\clement\APPLIC~1\Samsung
   [30/01/2009|11:22] C:\DOCUME~1\clement\APPLIC~1\SecuROM
   [09/06/2009|21:54] C:\DOCUME~1\clement\APPLIC~1\Simply Super Software
   [23/01/2009|18:36] C:\DOCUME~1\clement\APPLIC~1\skypePM
   [25/07/2009|20:24] C:\DOCUME~1\clement\APPLIC~1\Spotify
   [24/11/2008|21:57] C:\DOCUME~1\clement\APPLIC~1\Sun
   [11/04/2009|15:33] C:\DOCUME~1\clement\APPLIC~1	emp
   [28/11/2008|11:18] C:\DOCUME~1\clement\APPLIC~1\Temporary
   [28/11/2008|11:18] C:\DOCUME~1\clement\APPLIC~1\TransRender
   [30/10/2008|15:58] C:\DOCUME~1\clement\APPLIC~1\TuneUp Software
   [20/02/2009|17:34] C:\DOCUME~1\clement\APPLIC~1\Uniblue
   [19/08/2009|16:04] C:\DOCUME~1\clement\APPLIC~1\uTorrent
   [16/08/2009|21:25] C:\DOCUME~1\clement\APPLIC~1\vlc
   [03/04/2009|22:05] C:\DOCUME~1\clement\APPLIC~1\Webroot
   [18/07/2009|12:23] C:\DOCUME~1\clement\APPLIC~1\Winamp
   [02/07/2009|11:43] C:\DOCUME~1\clement\APPLIC~1\Windows Desktop Search
   [23/12/2008|22:45] C:\DOCUME~1\clement\APPLIC~1\Windows Search
   [30/10/2008|15:57] C:\DOCUME~1\clement\APPLIC~1\WinRAR
   [25/07/2009|21:46] C:\DOCUME~1\clement\APPLIC~1\XnView

   [29/10/2008|14:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [02/05/2009|11:10] C:\DOCUME~1\Famille\APPLIC~1\Identities
   [02/05/2009|11:12] C:\DOCUME~1\Famille\APPLIC~1\Microsoft
   [02/05/2009|11:11] C:\DOCUME~1\Famille\APPLIC~1\OnlineArmor

   [11/06/2009|10:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
   [01/05/2009|21:13] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [11/06/2009|10:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [01/05/2009|22:47] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [11/06/2009|10:09] C:\DOCUME~1\INVIT~1\APPLIC~1\Mozilla
   [12/06/2009|08:35] C:\DOCUME~1\INVIT~1\APPLIC~1\OnlineArmor

   [02/07/2009|11:44] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [08/05/2009|11:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\SACore

   [01/05/2009|14:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
   [23/12/2008|23:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [08/05/2009|11:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Mozilla
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [20/08/2009 11:24][--a------] C:\WINDOWS	asks\GoogleUpdateTaskMachineUA.job
   [20/08/2009 10:08][--a------] C:\WINDOWS	asks\GoogleUpdateTaskMachineCore.job
   [09/06/2009 21:46][--a------] C:\WINDOWS	asks\Wise Registry Cleaner 4.job
   [20/08/2009 12:10][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{43B7A1A0-09D5-4019-BFFF-7239D357E576}.job
   [20/08/2009 10:12][--a------] C:\WINDOWS	asks\Google Software Updater.job
   [20/08/2009 12:10][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{BD6A9448-826C-4EDD-9579-581CFDAB974C}.job
   [20/08/2009 11:15][--a------] C:\WINDOWS	asks\SCHEDLGU.TXT
   [20/08/2009 10:08][--a------] C:\WINDOWS	asks\GlaryInitialize.job
   [20/08/2009 12:00][--a------] C:\WINDOWS	asks\Maintenance en 1 clic.job
   [20/08/2009 10:07][--ah-----] C:\WINDOWS	asks\SA.DAT
   [14/04/2008 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [14/03/2009|13:55] C:\Program Files\Adobe
   [19/08/2009|20:30] C:\Program Files\adslTV
   [16/08/2009|15:28] C:\Program Files\AGEIA Technologies
   [07/04/2009|17:02] C:\Program Files\Agnitum
   [02/05/2009|11:35] C:\Program Files\Alwil Software
   [13/03/2009|23:00] C:\Program Files\AviSynth 2.5
   [27/12/2008|12:19] C:\Program Files\AVSMedia
   [26/12/2008|21:19] C:\Program Files\CCleaner
   [16/08/2009|13:26] C:\Program Files\Circle Developement
   [30/07/2009|21:43] C:\Program Files\Cyanide
   [10/05/2009|13:06] C:\Program Files\CyberLink
   [10/12/2008|15:14] C:\Program Files\directx
   [19/07/2009|11:46] C:\Program Files\DivX
   [13/03/2009|23:11] C:\Program Files\DVDVideoSoft
   [15/11/2008|18:38] C:\Program Files\EA GAMES
   [02/02/2009|21:03] C:\Program Files\EA Sports
   [08/07/2009|20:14] C:\Program Files\Eidos Interactive
   [08/07/2009|21:16] C:\Program Files\eMule
   [16/08/2009|15:32] C:\Program Files\Fichiers communs
   [10/06/2009|18:54] C:\Program Files\filehippo.com
   [26/12/2008|13:52] C:\Program Files\FreeMultiPosteTV
   [31/05/2009|22:19] C:\Program Files\FusionSoft DVD Player XP
   [05/06/2009|15:17] C:\Program Files\Glary Utilities
   [31/05/2009|19:10] C:\Program Files\Google
   [02/05/2009|13:16] C:\Program Files\GRISOFT
   [02/07/2009|17:26] C:\Program Files\InstallShield Installation Information
   [29/10/2008|14:25] C:\Program Files\Intel
   [29/07/2009|21:59] C:\Program Files\Internet Explorer
   [11/05/2009|21:29] C:\Program Files\IVCsoft
   [16/08/2009|14:10] C:\Program Files\Java
   [04/12/2008|21:51] C:\Program Files\KONAMI
   [06/04/2009|17:58] C:\Program Files\Lavasoft
   [01/05/2009|15:41] C:\Program Files\LG Electronics
   [01/05/2009|15:41] C:\Program Files\LG PC Suite 2
   [01/05/2009|15:40] C:\Program Files\ma-config.com
   [16/08/2009|13:25] C:\Program Files\Malwarebytes' Anti-Malware
   [02/07/2009|17:21] C:\Program Files\Maxis
   [23/12/2008|15:38] C:\Program Files\Messenger
   [10/07/2009|22:08] C:\Program Files\Messenger Plus! Live
   [01/06/2009|19:57] C:\Program Files\Microsoft
   [16/11/2008|23:24] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [18/11/2008|19:48] C:\Program Files\microsoft frontpage
   [18/11/2008|19:48] C:\Program Files\Microsoft Office
   [15/08/2009|12:08] C:\Program Files\Microsoft Silverlight
   [14/06/2009|17:17] C:\Program Files\MOJOSOFT
   [25/12/2008|17:01] C:\Program Files\Movie Maker
   [20/08/2009|12:13] C:\Program Files\Mozilla Firefox
   [23/12/2008|14:48] C:\Program Files\MSBuild
   [29/10/2008|14:03] C:\Program Files\MSN
   [29/10/2008|14:04] C:\Program Files\MSN Gaming Zone
   [11/11/2008|00:44] C:\Program Files\MSXML 4.0
   [01/01/2009|22:50] C:\Program Files\MyFreeTV
   [16/08/2009|15:22] C:\Program Files\Nero
   [29/10/2008|14:06] C:\Program Files\NetMeeting
   [16/08/2009|15:27] C:\Program Files\NVIDIA Corporation
   [15/08/2009|22:46] C:\Program Files\Outlook Express
   [02/07/2009|11:43] C:\Program Files\Owl550
   [01/05/2009|21:19] C:\Program Files\Passware
   [06/07/2009|19:08] C:\Program Files\PhotoFiltre
   [11/05/2009|22:19] C:\Program Files\QuickMediaConverter
   [29/10/2008|14:23] C:\Program Files\Realtek
   [23/12/2008|14:48] C:\Program Files\Reference Assemblies
   [29/10/2008|23:03] C:\Program Files\Saitek
   [29/10/2008|14:06] C:\Program Files\Services en ligne
   [20/06/2009|11:04] C:\Program Files\Spotify
   [16/08/2009|14:05] C:\Program Files\Spybot - Search & Destroy
   [14/06/2009|16:33] C:\Program Files\Sunbelt Software
   [16/08/2009|15:19] C:\Program Files\The KMPlayer
   [18/07/2009|12:19] C:\Program Files\The KMPlayer1431
   [31/10/2008|11:36] C:\Program Files\Thrustmaster
   [07/01/2009|18:37] C:\Program Files\TrackMania Sunrise
   [19/08/2009|12:17] C:\Program Files	rend micro
   [09/06/2009|21:55] C:\Program Files\Trojan Remover
   [27/12/2008|21:49] C:\Program Files\Trust
   [16/08/2009|15:43] C:\Program Files\TuneUp Utilities 2008
   [30/01/2009|11:29] C:\Program Files\Ubisoft
   [29/10/2008|14:11] C:\Program Files\Uninstall Information
   [05/06/2009|21:17] C:\Program Files\Veetle
   [04/11/2008|22:49] C:\Program Files\VideoLAN
   [06/07/2009|16:05] C:\Program Files\VirtualDub
   [19/08/2009|16:05] C:\Program Files\Winamp
   [18/07/2009|11:44] C:\Program Files\Winamp Toolbar
   [02/07/2009|11:43] C:\Program Files\Windows Desktop Search
   [01/06/2009|19:56] C:\Program Files\Windows Live
   [23/07/2009|14:16] C:\Program Files\Windows Live Safety Center
   [01/06/2009|19:56] C:\Program Files\Windows Live SkyDrive
   [11/03/2009|21:41] C:\Program Files\Windows Media Connect 2
   [11/03/2009|21:41] C:\Program Files\Windows Media Player
   [29/10/2008|14:04] C:\Program Files\Windows NT
   [29/10/2008|14:06] C:\Program Files\WindowsUpdate
   [30/10/2008|15:51] C:\Program Files\WinRAR
   [09/06/2009|21:49] C:\Program Files\Wise Registry Cleaner
   [29/10/2008|14:08] C:\Program Files\xerox
   [02/05/2009|16:49] C:\Program Files\XnView
   [29/10/2008|17:15] C:\Program Files\Yahoo!
   [23/11/2008|14:42] C:\Program Files\Zero G Registry

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [14/03/2009|13:55] C:\Program Files\Fichiers communs\Adobe
   [07/04/2009|17:02] C:\Program Files\Fichiers communs\Agnitum Shared
   [09/11/2008|11:34] C:\Program Files\Fichiers communs\Ahead
   [27/12/2008|12:19] C:\Program Files\Fichiers communs\AVSMedia
   [18/11/2008|19:49] C:\Program Files\Fichiers communs\Designer
   [13/06/2009|19:55] C:\Program Files\Fichiers communs\DivX Shared
   [13/03/2009|23:11] C:\Program Files\Fichiers communs\DVDVIDEOSOFT
   [29/10/2008|23:03] C:\Program Files\Fichiers communs\InstallShield
   [05/03/2009|19:53] C:\Program Files\Fichiers communs\Microsoft Shared
   [29/10/2008|14:06] C:\Program Files\Fichiers communs\MSSoap
   [16/08/2009|15:23] C:\Program Files\Fichiers communs\Nero
   [15/02/2009|21:55] C:\Program Files\Fichiers communs\NSV
   [29/10/2008|21:52] C:\Program Files\Fichiers communs\ODBC
   [27/12/2008|21:49] C:\Program Files\Fichiers communs\PCCamera
   [29/10/2008|14:06] C:\Program Files\Fichiers communs\Services
   [29/10/2008|21:52] C:\Program Files\Fichiers communs\SpeechEngines
   [29/10/2008|14:05] C:\Program Files\Fichiers communs\System
   [29/10/2008|15:07] C:\Program Files\Fichiers communs\Windows Live
   [15/11/2008|23:40] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [16/08/2009|15:28] C:\Program Files\Fichiers communs\Wise Installation Wizard

   --------------------\  Process

   ( 42 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\Program Files\Circle Developement
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-08-20 12:18:10
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\clement\Application Data\uTorrent\Project IGI [Crack+Cheats].rar.torrent


   [F:4][D:6]-> C:\DOCUME~1\clement\LOCALS~1\Temp
   [F:13][D:0]-> C:\DOCUME~1\clement\Cookies
   [F:59][D:4]-> C:\DOCUME~1\clement\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 20/08/2009|12:19 - Option : [1]

   --------------------\  Fin du rapport a 12:19:50

kevin05 · Answer

Salut

Mais de rien ;),je suis la pour ça :) 

Ok :

Suppression + Hosts


double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option "Suppression + Hosts"
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

patroto · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III Xeon )
   BIOS : Default System BIOS
   USER : Clément ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1335 [VPS 090819-0] 4.8.1335 (Activated)
   Firewall  : Sunbelt Personal Firewall 4.6.1861 T (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:465 Go (Free:407 Go)
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 20/08/2009|16:07 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\Program Files\Circle Developement
   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [25/12/2008|22:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
   [23/05/2009|11:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\GlarySoft
   [25/12/2008|22:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [08/05/2009|10:30] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
   [08/05/2009|10:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [25/12/2008|22:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
   [19/03/2009|19:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\TuneUp Software
   [11/01/2009|16:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Winamp

   [14/03/2009|13:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [09/11/2008|11:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [14/02/2009|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\aHisoft
   [19/02/2009|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apowersoft
   [16/08/2009|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Arovax
   [24/12/2008|20:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
   [09/05/2009|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [11/04/2009|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
   [12/03/2009|21:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [31/05/2009|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [15/11/2008|13:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [04/12/2008|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KONAMI
   [23/01/2009|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [01/05/2009|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [10/01/2009|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
   [25/12/2008|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [05/01/2009|19:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [02/07/2009|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [16/08/2009|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [16/08/2009|15:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA Corporation
   [29/04/2009|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OrbNetworks
   [09/06/2009|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simply Super Software
   [19/08/2009|13:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [14/06/2009|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [30/10/2008|15:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [25/01/2009|00:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
   [18/07/2009|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Winamp Toolbar
   [31/10/2008|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [15/11/2008|23:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [06/11/2008|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [13/03/2009|23:09] C:\DOCUME~1\clement\APPLIC~1\AccurateRip
   [02/11/2008|20:02] C:\DOCUME~1\clement\APPLIC~1\Adobe
   [09/11/2008|16:21] C:\DOCUME~1\clement\APPLIC~1\Ahead
   [07/05/2009|18:46] C:\DOCUME~1\clement\APPLIC~1\ArcSoft
   [27/12/2008|17:25] C:\DOCUME~1\clement\APPLIC~1\Auslogics
   [20/04/2009|21:25] C:\DOCUME~1\clement\APPLIC~1\AVS Video Converter
   [24/12/2008|20:14] C:\DOCUME~1\clement\APPLIC~1\AVS4YOU
   [28/11/2008|11:18] C:\DOCUME~1\clement\APPLIC~1\ConvertTemp
   [09/05/2009|13:43] C:\DOCUME~1\clement\APPLIC~1\CyberLink
   [14/06/2009|19:39] C:\DOCUME~1\clement\APPLIC~1\DivX
   [18/07/2009|12:19] C:\DOCUME~1\clement\APPLIC~1\dvdcss
   [03/11/2008|16:05] C:\DOCUME~1\clement\APPLIC~1\FastStone
   [01/01/2009|03:53] C:\DOCUME~1\clement\APPLIC~1\GlarySoft
   [31/05/2009|19:10] C:\DOCUME~1\clement\APPLIC~1\Google
   [29/10/2008|14:11] C:\DOCUME~1\clement\APPLIC~1\Identities
   [29/10/2008|14:22] C:\DOCUME~1\clement\APPLIC~1\InstallShield
   [05/04/2009|22:05] C:\DOCUME~1\clement\APPLIC~1\IObit
   [03/04/2009|22:06] C:\DOCUME~1\clement\APPLIC~1\Lavasoft
   [29/10/2008|15:29] C:\DOCUME~1\clement\APPLIC~1\Leadertech
   [20/12/2008|16:46] C:\DOCUME~1\clement\APPLIC~1\LG Electronics
   [29/10/2008|15:03] C:\DOCUME~1\clement\APPLIC~1\Macromedia
   [25/12/2008|19:36] C:\DOCUME~1\clement\APPLIC~1\Malwarebytes
   [29/06/2009|20:05] C:\DOCUME~1\clement\APPLIC~1\Microsoft
   [14/06/2009|17:17] C:\DOCUME~1\clement\APPLIC~1\mojosoft
   [29/10/2008|14:42] C:\DOCUME~1\clement\APPLIC~1\Mozilla
   [15/11/2008|13:46] C:\DOCUME~1\clement\APPLIC~1\RetinaX
   [23/12/2008|22:47] C:\DOCUME~1\clement\APPLIC~1\Samsung
   [30/01/2009|11:22] C:\DOCUME~1\clement\APPLIC~1\SecuROM
   [09/06/2009|21:54] C:\DOCUME~1\clement\APPLIC~1\Simply Super Software
   [23/01/2009|18:36] C:\DOCUME~1\clement\APPLIC~1\skypePM
   [25/07/2009|20:24] C:\DOCUME~1\clement\APPLIC~1\Spotify
   [24/11/2008|21:57] C:\DOCUME~1\clement\APPLIC~1\Sun
   [11/04/2009|15:33] C:\DOCUME~1\clement\APPLIC~1	emp
   [28/11/2008|11:18] C:\DOCUME~1\clement\APPLIC~1\Temporary
   [28/11/2008|11:18] C:\DOCUME~1\clement\APPLIC~1\TransRender
   [30/10/2008|15:58] C:\DOCUME~1\clement\APPLIC~1\TuneUp Software
   [20/02/2009|17:34] C:\DOCUME~1\clement\APPLIC~1\Uniblue
   [19/08/2009|16:04] C:\DOCUME~1\clement\APPLIC~1\uTorrent
   [16/08/2009|21:25] C:\DOCUME~1\clement\APPLIC~1\vlc
   [03/04/2009|22:05] C:\DOCUME~1\clement\APPLIC~1\Webroot
   [18/07/2009|12:23] C:\DOCUME~1\clement\APPLIC~1\Winamp
   [02/07/2009|11:43] C:\DOCUME~1\clement\APPLIC~1\Windows Desktop Search
   [23/12/2008|22:45] C:\DOCUME~1\clement\APPLIC~1\Windows Search
   [30/10/2008|15:57] C:\DOCUME~1\clement\APPLIC~1\WinRAR
   [25/07/2009|21:46] C:\DOCUME~1\clement\APPLIC~1\XnView

   [29/10/2008|14:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [02/05/2009|11:10] C:\DOCUME~1\Famille\APPLIC~1\Identities
   [02/05/2009|11:12] C:\DOCUME~1\Famille\APPLIC~1\Microsoft
   [02/05/2009|11:11] C:\DOCUME~1\Famille\APPLIC~1\OnlineArmor

   [11/06/2009|10:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
   [01/05/2009|21:13] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [11/06/2009|10:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [01/05/2009|22:47] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [11/06/2009|10:09] C:\DOCUME~1\INVIT~1\APPLIC~1\Mozilla
   [12/06/2009|08:35] C:\DOCUME~1\INVIT~1\APPLIC~1\OnlineArmor

   [02/07/2009|11:44] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [08/05/2009|11:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\SACore

   [01/05/2009|14:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
   [23/12/2008|23:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [08/05/2009|11:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Mozilla
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [20/08/2009 15:24][--a------] C:\WINDOWS	asks\GoogleUpdateTaskMachineUA.job
   [20/08/2009 10:08][--a------] C:\WINDOWS	asks\GoogleUpdateTaskMachineCore.job
   [09/06/2009 21:46][--a------] C:\WINDOWS	asks\Wise Registry Cleaner 4.job
   [20/08/2009 16:05][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{43B7A1A0-09D5-4019-BFFF-7239D357E576}.job
   [20/08/2009 15:06][--a------] C:\WINDOWS	asks\Google Software Updater.job
   [20/08/2009 16:05][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{BD6A9448-826C-4EDD-9579-581CFDAB974C}.job
   [20/08/2009 13:40][--a------] C:\WINDOWS	asks\SCHEDLGU.TXT
   [20/08/2009 10:08][--a------] C:\WINDOWS	asks\GlaryInitialize.job
   [20/08/2009 16:00][--a------] C:\WINDOWS	asks\Maintenance en 1 clic.job
   [20/08/2009 10:07][--ah-----] C:\WINDOWS	asks\SA.DAT
   [14/04/2008 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [14/03/2009|13:55] C:\Program Files\Adobe
   [19/08/2009|20:30] C:\Program Files\adslTV
   [16/08/2009|15:28] C:\Program Files\AGEIA Technologies
   [07/04/2009|17:02] C:\Program Files\Agnitum
   [02/05/2009|11:35] C:\Program Files\Alwil Software
   [13/03/2009|23:00] C:\Program Files\AviSynth 2.5
   [27/12/2008|12:19] C:\Program Files\AVSMedia
   [26/12/2008|21:19] C:\Program Files\CCleaner
   [30/07/2009|21:43] C:\Program Files\Cyanide
   [10/05/2009|13:06] C:\Program Files\CyberLink
   [10/12/2008|15:14] C:\Program Files\directx
   [19/07/2009|11:46] C:\Program Files\DivX
   [13/03/2009|23:11] C:\Program Files\DVDVideoSoft
   [15/11/2008|18:38] C:\Program Files\EA GAMES
   [02/02/2009|21:03] C:\Program Files\EA Sports
   [08/07/2009|20:14] C:\Program Files\Eidos Interactive
   [08/07/2009|21:16] C:\Program Files\eMule
   [16/08/2009|15:32] C:\Program Files\Fichiers communs
   [10/06/2009|18:54] C:\Program Files\filehippo.com
   [26/12/2008|13:52] C:\Program Files\FreeMultiPosteTV
   [31/05/2009|22:19] C:\Program Files\FusionSoft DVD Player XP
   [05/06/2009|15:17] C:\Program Files\Glary Utilities
   [31/05/2009|19:10] C:\Program Files\Google
   [02/05/2009|13:16] C:\Program Files\GRISOFT
   [02/07/2009|17:26] C:\Program Files\InstallShield Installation Information
   [29/10/2008|14:25] C:\Program Files\Intel
   [29/07/2009|21:59] C:\Program Files\Internet Explorer
   [11/05/2009|21:29] C:\Program Files\IVCsoft
   [16/08/2009|14:10] C:\Program Files\Java
   [04/12/2008|21:51] C:\Program Files\KONAMI
   [06/04/2009|17:58] C:\Program Files\Lavasoft
   [01/05/2009|15:41] C:\Program Files\LG Electronics
   [01/05/2009|15:41] C:\Program Files\LG PC Suite 2
   [01/05/2009|15:40] C:\Program Files\ma-config.com
   [16/08/2009|13:25] C:\Program Files\Malwarebytes' Anti-Malware
   [02/07/2009|17:21] C:\Program Files\Maxis
   [23/12/2008|15:38] C:\Program Files\Messenger
   [10/07/2009|22:08] C:\Program Files\Messenger Plus! Live
   [01/06/2009|19:57] C:\Program Files\Microsoft
   [16/11/2008|23:24] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [18/11/2008|19:48] C:\Program Files\microsoft frontpage
   [18/11/2008|19:48] C:\Program Files\Microsoft Office
   [15/08/2009|12:08] C:\Program Files\Microsoft Silverlight
   [14/06/2009|17:17] C:\Program Files\MOJOSOFT
   [25/12/2008|17:01] C:\Program Files\Movie Maker
   [20/08/2009|16:06] C:\Program Files\Mozilla Firefox
   [23/12/2008|14:48] C:\Program Files\MSBuild
   [29/10/2008|14:03] C:\Program Files\MSN
   [29/10/2008|14:04] C:\Program Files\MSN Gaming Zone
   [11/11/2008|00:44] C:\Program Files\MSXML 4.0
   [01/01/2009|22:50] C:\Program Files\MyFreeTV
   [16/08/2009|15:22] C:\Program Files\Nero
   [29/10/2008|14:06] C:\Program Files\NetMeeting
   [16/08/2009|15:27] C:\Program Files\NVIDIA Corporation
   [15/08/2009|22:46] C:\Program Files\Outlook Express
   [02/07/2009|11:43] C:\Program Files\Owl550
   [01/05/2009|21:19] C:\Program Files\Passware
   [06/07/2009|19:08] C:\Program Files\PhotoFiltre
   [11/05/2009|22:19] C:\Program Files\QuickMediaConverter
   [29/10/2008|14:23] C:\Program Files\Realtek
   [23/12/2008|14:48] C:\Program Files\Reference Assemblies
   [29/10/2008|23:03] C:\Program Files\Saitek
   [29/10/2008|14:06] C:\Program Files\Services en ligne
   [20/06/2009|11:04] C:\Program Files\Spotify
   [16/08/2009|14:05] C:\Program Files\Spybot - Search & Destroy
   [14/06/2009|16:33] C:\Program Files\Sunbelt Software
   [16/08/2009|15:19] C:\Program Files\The KMPlayer
   [18/07/2009|12:19] C:\Program Files\The KMPlayer1431
   [31/10/2008|11:36] C:\Program Files\Thrustmaster
   [07/01/2009|18:37] C:\Program Files\TrackMania Sunrise
   [19/08/2009|12:17] C:\Program Files	rend micro
   [09/06/2009|21:55] C:\Program Files\Trojan Remover
   [27/12/2008|21:49] C:\Program Files\Trust
   [16/08/2009|15:43] C:\Program Files\TuneUp Utilities 2008
   [30/01/2009|11:29] C:\Program Files\Ubisoft
   [29/10/2008|14:11] C:\Program Files\Uninstall Information
   [05/06/2009|21:17] C:\Program Files\Veetle
   [04/11/2008|22:49] C:\Program Files\VideoLAN
   [06/07/2009|16:05] C:\Program Files\VirtualDub
   [19/08/2009|16:05] C:\Program Files\Winamp
   [18/07/2009|11:44] C:\Program Files\Winamp Toolbar
   [02/07/2009|11:43] C:\Program Files\Windows Desktop Search
   [01/06/2009|19:56] C:\Program Files\Windows Live
   [23/07/2009|14:16] C:\Program Files\Windows Live Safety Center
   [01/06/2009|19:56] C:\Program Files\Windows Live SkyDrive
   [11/03/2009|21:41] C:\Program Files\Windows Media Connect 2
   [11/03/2009|21:41] C:\Program Files\Windows Media Player
   [29/10/2008|14:04] C:\Program Files\Windows NT
   [29/10/2008|14:06] C:\Program Files\WindowsUpdate
   [30/10/2008|15:51] C:\Program Files\WinRAR
   [09/06/2009|21:49] C:\Program Files\Wise Registry Cleaner
   [29/10/2008|14:08] C:\Program Files\xerox
   [02/05/2009|16:49] C:\Program Files\XnView
   [29/10/2008|17:15] C:\Program Files\Yahoo!
   [23/11/2008|14:42] C:\Program Files\Zero G Registry

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [14/03/2009|13:55] C:\Program Files\Fichiers communs\Adobe
   [07/04/2009|17:02] C:\Program Files\Fichiers communs\Agnitum Shared
   [09/11/2008|11:34] C:\Program Files\Fichiers communs\Ahead
   [27/12/2008|12:19] C:\Program Files\Fichiers communs\AVSMedia
   [18/11/2008|19:49] C:\Program Files\Fichiers communs\Designer
   [13/06/2009|19:55] C:\Program Files\Fichiers communs\DivX Shared
   [13/03/2009|23:11] C:\Program Files\Fichiers communs\DVDVIDEOSOFT
   [29/10/2008|23:03] C:\Program Files\Fichiers communs\InstallShield
   [05/03/2009|19:53] C:\Program Files\Fichiers communs\Microsoft Shared
   [29/10/2008|14:06] C:\Program Files\Fichiers communs\MSSoap
   [16/08/2009|15:23] C:\Program Files\Fichiers communs\Nero
   [15/02/2009|21:55] C:\Program Files\Fichiers communs\NSV
   [29/10/2008|21:52] C:\Program Files\Fichiers communs\ODBC
   [27/12/2008|21:49] C:\Program Files\Fichiers communs\PCCamera
   [29/10/2008|14:06] C:\Program Files\Fichiers communs\Services
   [29/10/2008|21:52] C:\Program Files\Fichiers communs\SpeechEngines
   [29/10/2008|14:05] C:\Program Files\Fichiers communs\System
   [29/10/2008|15:07] C:\Program Files\Fichiers communs\Windows Live
   [15/11/2008|23:40] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [16/08/2009|15:28] C:\Program Files\Fichiers communs\Wise Installation Wizard

   --------------------\  Process

   ( 43 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-08-20 16:11:36
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\clement\Application Data\uTorrent\Project IGI [Crack+Cheats].rar.torrent


   [F:16][D:6]-> C:\DOCUME~1\clement\LOCALS~1\Temp
   [F:13][D:0]-> C:\DOCUME~1\clement\Cookies
   [F:78][D:4]-> C:\DOCUME~1\clement\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 20/08/2009|12:19 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 20/08/2009|16:13 - Option : [2]

   --------------------\  Fin du rapport a 16:13:12

kevin05 · Answer

&#9654 Télécharge et install UsbFix par Chiquitine29

 (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

&#9654 Double clic sur le raccourci UsbFix présent sur ton bureau .

&#9654 Au menu principal choisis l'option " F " pour français et tape sur [entrée] . 

&#9654 Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée] 

&#9654 Laisse travailler l'outil.

&#9654 Ensuite post le rapport UsbFix.txt qui apparaitra.

Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

 Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

patroto · Answer

############################## | UsbFix V6.019 |

User : Clément (Administrateurs) # MARTINESE
Update on 19/08/09 by Chiquitine29 & C_XX
Start at: 16:44:07 | 20/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

Processeur Intel Pentium III Xeon
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : avast! antivirus 4.8.1335 [VPS 090819-0] 4.8.1335 [ Enabled | Updated ]
FW : Sunbelt Personal Firewall[ Enabled ]4.6.1861 T

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 465,75 Go (407,66 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque fixe local # 465,64 Go (453,88 Go free) [Elements] # FAT32
F:\ -> Disque amovible # 968,48 Mo (715,19 Mo free) # FAT

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\WINDOWS\System32\wudfhost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Fichiers # Dossiers infectieux |

Présent ! E:\autorun.inf  

################## | Suspect ! ... | https://www.virustotal.com/gui/ |


################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{2032148e-5d73-11de-9304-0019667ad3c7}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL NoLimit.exe

################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.019 ! |

kevin05 · Answer

Relance usbfix

Poste l'option 2

Poste le rapport

patroto · Answer

############################## | UsbFix V6.019 |

User : Clément (Administrateurs) # MARTINESE
Update on 19/08/09 by Chiquitine29 & C_XX
Start at: 21:34:48 | 20/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

Processeur Intel Pentium III Xeon
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : avast! antivirus 4.8.1335 [VPS 090819-0] 4.8.1335 [ Enabled | Updated ]
FW : Sunbelt Personal Firewall[ Enabled ]4.6.1861 T

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 465,75 Go (407,7 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque fixe local # 465,64 Go (453,88 Go free) [Elements] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe

################## | Fichiers # Dossiers infectieux |

Supprimé ! E:\autorun.inf 

################## | Autres |


################## | Suspect ! ... | https://www.virustotal.com/gui/ |


################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{2032148e-5d73-11de-9304-0019667ad3c7}\Shell\AutoRun\Command  

################## | Listing des fichiers présent |

[19/08/2009 21:39|--a------|193] -> C:\boot.ini 
[04/08/2004 00:00|--a------|263488] -> C:\cmldr 
[29/10/2008 14:07|--a------|0] -> C:\CONFIG.SYS 
[03/08/2004 15:14|--a------|368640] -> C:\Cymfast.exe 
[03/04/2009 22:05|--a------|164] -> C:\install.dat 
[29/10/2008 14:07|-rahs----|0] -> C:\IO.SYS 
[03/05/2009 13:29|--a------|5911] -> C:\JavaRa.log 
[20/08/2009 16:13|--a------|16025] -> C:\lopR.txt 
[29/10/2008 14:07|-rahs----|0] -> C:\MSDOS.SYS 
[14/04/2008 14:00|-rahs----|47564] -> C:\NTDETECT.COM 
[14/04/2008 14:00|-rahs----|252240] -> C:
tldr 
[?|?|?] -> C:\pagefile.sys 
[16/11/2008 11:40|--ah-----|268] -> C:\sqmdata00.sqm 
[13/03/2009 23:50|--ah-----|232] -> C:\sqmdata01.sqm 
[14/03/2009 16:06|--ah-----|268] -> C:\sqmdata02.sqm 
[15/03/2009 11:25|--ah-----|268] -> C:\sqmdata03.sqm 
[16/11/2008 11:40|--ah-----|244] -> C:\sqmnoopt00.sqm 
[13/03/2009 23:50|--ah-----|244] -> C:\sqmnoopt01.sqm 
[14/03/2009 16:06|--ah-----|244] -> C:\sqmnoopt02.sqm 
[15/03/2009 11:25|--ah-----|244] -> C:\sqmnoopt03.sqm 
[30/07/2009 21:45|--a------|4353] -> C:\ST6UNST.LOG 
[17/07/2009 15:19|--a------|304160] -> C:\StiImg.dat 
[20/08/2009 21:39|--a------|3776] -> C:\UsbFix.txt 
[01/05/2009 15:29|--ahs----|3584] -> E:\Thumbs.db 
[02/07/2009 16:28|--a------|187] -> E:\Raccourci vers Elements (E).lnk 

################## | Cracks / Keygens / Serials |


################## | Upload | 

Veuillez envoyer le fichier : C:\DOCUME~1\clement\Bureau\UsbFix_Upload_Me_MARTINESE.zip : https://www.androidworld.fr/ 
Merci pour votre contribution . 

################## | ! Fin du rapport # UsbFix V6.019 ! |

kevin05 · Answer

Veuillez envoyer le fichier : C:\DOCUME~1\clement\Bureau\UsbFix_Upload_Me_MARTINESE.zip : https://www.androidworld.fr/
Merci.



Télécharge GenProc (de Jean-Chretien1 et Narco4) sur ton bureau (et pas ailleur !) : 


!!Déconnecte toi et ferme tes applications en cours !! 

Dézippe (=extraire tout) le contenu de ce que tu viens de télécharger sur ton bureau . 

Ouvre le dossier Genproc : 
double-clique sur [ http://www.cijoint.fr/cj200906/cijVDLbvVJ.jpg GenProc.bat] et laisse faire ... 

Une fois terminé, poste le contenu du rapport qui s'ouvre ... 

Aide en images ici

IMPORTANT : poste le rapport et ne fais rien d'autre pour l'instant ( souvant il faut ajouter des consignes à la manipe indiquée pour que cela fonctionne parfaitement ) .

patroto · Answer

Rapport GenProc 2.615 [1] - 20/08/2009 à 23:30:52 
@ Windows XP Service Pack 3 - Mode normal
@ Internet Explorer (8.0.6001.18702) [Navigateur par défaut]

~~ CM DISK ERROR ~~ 
 
GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante : 


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :  
C:\Program Files\EsetOnlineScanner\log.txt

 


~~~~ INFORMATION COMPLEMENTAIRE ~~~~
 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:32:06, on 20/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\clement\Bureau\GenProc\outil\Clément_GenProc.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.search.yahoo.com/search?fr=mcafee&p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe"  /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation
View
wiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbaresources\en-US\local\search.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: !SASWinLogon - C:\WINDOWS\
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Google Update (gupdate1c9e21285304d56) (gupdate1c9e21285304d56) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

patroto · Answer

salut,
je fais le teste ESET Online Scanner et je colle le rapport ok ?

patroto · Answer

J'sais plus quoi faire kevin05 ? C'est tout parfait ?

kevin05 · Answer

Salut

Fais un scan en ligne avec Kaspersky  

CLIQUE ICI

tuto

patroto · Answer

salut,
j'arrive pas a cliquer sur POste de Travail, pourtant la mise à jour s'effectue sans problèmes.

kevin05 · Answer

T'arrive pas ?

Je comprend pas . Explique mieux ton probleme

patroto · Answer

je fais la mise a joure t je peux pas cliquer sur poste de travail, c'est pas un lien

Aide, Virus Infection

19 réponses

Discussions similaires