Suppression d'un fichier corrompu ds System32
Résolu
pjlt
Messages postés
284
Statut
Membre
-
pjlt Messages postés 284 Statut Membre -
pjlt Messages postés 284 Statut Membre -
Bonjour,
Mon anti virus me signale que le fichier 24.scr (écran de veille) est infecté par un Trojan.
Ce fichier se trouve dans C:\WINDOWS\Sytem32\
Est-ce un fichier utile, voire important ?
Puis-je le supprimer sans danger pur le fonctionnement de mon système ?
Merci d'avance pour l'iade.
pjlt
Mon anti virus me signale que le fichier 24.scr (écran de veille) est infecté par un Trojan.
Ce fichier se trouve dans C:\WINDOWS\Sytem32\
Est-ce un fichier utile, voire important ?
Puis-je le supprimer sans danger pur le fonctionnement de mon système ?
Merci d'avance pour l'iade.
pjlt
A voir également:
- Suppression d'un fichier corrompu ds System32
- Forcer la suppression d'un fichier - Guide
- Fichier bin - Guide
- Comment ouvrir un fichier epub ? - Guide
- Comment réduire la taille d'un fichier - Guide
- Fichier rar - Guide
75 réponses
Ci-dessous, le deuxième et nouveau rapport de LopSD
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M CPU 440 @ 1.86GHz )
BIOS : Default System BIOS
USER : philippe ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 090823-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:24 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:10 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (Local Disk) - NTFS - Total:3 Go (Free:2 Go)
G:\ (Local Disk) - NTFS - Total:6 Go (Free:0 Go)
H:\ (Local Disk) - NTFS - Total:10 Go (Free:0 Go)
I:\ (CD or DVD)
J:\ (Local Disk) - NTFS - Total:17 Go (Free:11 Go)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 24/08/2009| 8:40 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\philippe\Cookies\philippe@advertising[2].txt
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[21/08/2009|01:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[21/08/2009|02:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\11544064
[22/01/2009|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/06/2009|14:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apowersoft
[04/10/2007|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[04/10/2007|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[03/06/2009|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
[25/04/2008|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
[18/12/2008|16:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
[04/11/2008|22:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[09/08/2008|09:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[29/06/2007|20:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[24/03/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[21/12/2008|11:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[20/07/2009|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/12/2008|14:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[23/03/2009|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[27/07/2009|09:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
[20/03/2008|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PanaVue
[27/07/2009|09:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[10/02/2009|21:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[04/11/2008|22:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SlySoft
[11/07/2008|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[29/06/2007|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[14/08/2008|19:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/10/2008|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[14/09/2008|14:32] C:\DOCUME~1\BENEDI~1\APPLIC~1\Adobe
[19/03/2008|14:22] C:\DOCUME~1\BENEDI~1\APPLIC~1\Google
[01/07/2007|19:06] C:\DOCUME~1\BENEDI~1\APPLIC~1\Identities
[01/07/2007|19:08] C:\DOCUME~1\BENEDI~1\APPLIC~1\Macromedia
[23/03/2008|23:53] C:\DOCUME~1\BENEDI~1\APPLIC~1\Microsoft
[31/10/2007|12:00] C:\DOCUME~1\BENEDI~1\APPLIC~1\Mozilla
[01/07/2007|19:07] C:\DOCUME~1\BENEDI~1\APPLIC~1\MSNInstaller
[16/07/2008|14:30] C:\DOCUME~1\BENEDI~1\APPLIC~1\Real
[04/01/2008|17:30] C:\DOCUME~1\BENEDI~1\APPLIC~1\Sun
[01/07/2007|20:03] C:\DOCUME~1\BENEDI~1\APPLIC~1\VadeRetro
[29/06/2008|17:00] C:\DOCUME~1\BENEDI~1\APPLIC~1\WinRAR
[05/06/2007|20:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[05/06/2007|20:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[07/01/2008|09:57] C:\DOCUME~1\MARIEC~1\APPLIC~1\Adobe
[13/08/2008|20:46] C:\DOCUME~1\MARIEC~1\APPLIC~1\Corel
[27/03/2008|08:22] C:\DOCUME~1\MARIEC~1\APPLIC~1\Google
[06/06/2007|14:38] C:\DOCUME~1\MARIEC~1\APPLIC~1\Identities
[14/08/2007|11:16] C:\DOCUME~1\MARIEC~1\APPLIC~1\Macromedia
[21/08/2009|01:55] C:\DOCUME~1\MARIEC~1\APPLIC~1\Microsoft
[31/01/2009|13:57] C:\DOCUME~1\MARIEC~1\APPLIC~1\Mozilla
[11/02/2009|12:25] C:\DOCUME~1\MARIEC~1\APPLIC~1\NCH Swift Sound
[21/08/2009|01:54] C:\DOCUME~1\MARIEC~1\APPLIC~1\Nokia
[21/08/2009|01:54] C:\DOCUME~1\MARIEC~1\APPLIC~1\PC Suite
[27/03/2008|08:21] C:\DOCUME~1\MARIEC~1\APPLIC~1\Real
[04/12/2007|15:40] C:\DOCUME~1\MARIEC~1\APPLIC~1\VadeRetro
[05/06/2007|20:40] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[16/12/2008|13:11] C:\DOCUME~1\philippe\APPLIC~1\Adobe
[08/07/2009|21:48] C:\DOCUME~1\philippe\APPLIC~1\Apple Computer
[05/04/2009|22:38] C:\DOCUME~1\philippe\APPLIC~1\Autodesk
[30/08/2008|20:38] C:\DOCUME~1\philippe\APPLIC~1\cByo
[04/06/2009|13:49] C:\DOCUME~1\philippe\APPLIC~1\convertisseur
[25/04/2008|19:48] C:\DOCUME~1\philippe\APPLIC~1\Corel
[18/12/2008|16:39] C:\DOCUME~1\philippe\APPLIC~1\DAEMON Tools
[18/12/2008|16:28] C:\DOCUME~1\philippe\APPLIC~1\DAEMON Tools Lite
[18/12/2008|16:39] C:\DOCUME~1\philippe\APPLIC~1\DAEMON Tools Pro
[04/11/2008|10:36] C:\DOCUME~1\philippe\APPLIC~1\DeepBurner
[17/08/2009|14:12] C:\DOCUME~1\philippe\APPLIC~1\dvdcss
[18/08/2009|08:55] C:\DOCUME~1\philippe\APPLIC~1\FileZilla
[30/11/2007|23:13] C:\DOCUME~1\philippe\APPLIC~1\Gajim
[01/05/2008|12:39] C:\DOCUME~1\philippe\APPLIC~1\Google
[08/08/2008|12:41] C:\DOCUME~1\philippe\APPLIC~1\gtk-2.0
[01/12/2007|21:43] C:\DOCUME~1\philippe\APPLIC~1\Help
[09/12/2007|20:30] C:\DOCUME~1\philippe\APPLIC~1\Identities
[27/08/2007|19:22] C:\DOCUME~1\philippe\APPLIC~1\InstallShield
[24/03/2008|10:24] C:\DOCUME~1\philippe\APPLIC~1\Leadertech
[05/06/2007|21:41] C:\DOCUME~1\philippe\APPLIC~1\Macromedia
[21/12/2008|11:48] C:\DOCUME~1\philippe\APPLIC~1\Malwarebytes
[13/06/2009|22:26] C:\DOCUME~1\philippe\APPLIC~1\Microsoft
[01/02/2009|21:32] C:\DOCUME~1\philippe\APPLIC~1\Mozilla
[04/12/2008|14:50] C:\DOCUME~1\philippe\APPLIC~1\NCH Swift Sound
[27/07/2009|09:34] C:\DOCUME~1\philippe\APPLIC~1\Nokia
[30/11/2007|23:12] C:\DOCUME~1\philippe\APPLIC~1\OpenOffice.org2
[27/07/2009|09:32] C:\DOCUME~1\philippe\APPLIC~1\PC Suite
[26/04/2009|15:37] C:\DOCUME~1\philippe\APPLIC~1\Sibelius Software
[02/11/2007|11:19] C:\DOCUME~1\philippe\APPLIC~1\Sun
[16/11/2008|07:23] C:\DOCUME~1\philippe\APPLIC~1\Thunderbird
[29/06/2007|19:41] C:\DOCUME~1\philippe\APPLIC~1\VadeRetro
[19/08/2009|01:09] C:\DOCUME~1\philippe\APPLIC~1\vlc
[23/12/2007|21:57] C:\DOCUME~1\philippe\APPLIC~1\WinRAR
[25/01/2008|23:04] C:\DOCUME~1\VERONI~1\APPLIC~1\Adobe
[18/10/2008|17:11] C:\DOCUME~1\VERONI~1\APPLIC~1\Corel
[14/05/2008|18:51] C:\DOCUME~1\VERONI~1\APPLIC~1\Google
[17/06/2007|20:34] C:\DOCUME~1\VERONI~1\APPLIC~1\Identities
[17/06/2007|20:35] C:\DOCUME~1\VERONI~1\APPLIC~1\Macromedia
[14/04/2008|18:05] C:\DOCUME~1\VERONI~1\APPLIC~1\Microsoft
[26/12/2007|11:33] C:\DOCUME~1\VERONI~1\APPLIC~1\Mozilla
[17/03/2008|09:31] C:\DOCUME~1\VERONI~1\APPLIC~1\Real
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[24/08/2009 08:24][--ah-----] C:\WINDOWS\tasks\SA.DAT
[03/10/2001 01:20][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[09/12/2008|20:02] C:\Program Files\AC3Filter
[22/01/2009|16:14] C:\Program Files\Adobe
[03/06/2009|14:51] C:\Program Files\AIDA32 - Personal System Information
[05/06/2007|21:20] C:\Program Files\Alwil Software
[16/12/2008|13:09] C:\Program Files\Ashampoo
[16/12/2008|13:11] C:\Program Files\Astonsoft
[05/06/2007|20:54] C:\Program Files\ASUS
[09/06/2007|09:02] C:\Program Files\ATI Technologies
[03/06/2009|14:53] C:\Program Files\AutoCAD 2005
[02/11/2008|18:58] C:\Program Files\AviSynth 2.5
[02/01/2008|13:47] C:\Program Files\Axis Communications
[09/12/2008|21:12] C:\Program Files\Axon Data
[05/09/2008|14:46] C:\Program Files\CartoExploreur
[21/06/2009|16:07] C:\Program Files\cByo
[05/06/2007|20:37] C:\Program Files\ComPlus Applications
[09/08/2008|09:16] C:\Program Files\Conduit
[04/06/2009|13:46] C:\Program Files\Convertisseur
[25/04/2008|19:44] C:\Program Files\Corel
[18/12/2008|16:33] C:\Program Files\DAEMON Tools Lite
[10/02/2009|21:54] C:\Program Files\DAEMON Tools Toolbar
[27/07/2009|09:31] C:\Program Files\DIFX
[03/06/2009|14:56] C:\Program Files\DivX
[16/03/2009|22:56] C:\Program Files\Dptech
[04/11/2008|21:54] C:\Program Files\DVD Decrypter
[18/08/2009|15:35] C:\Program Files\eMule
[02/10/2008|12:29] C:\Program Files\EPSON
[22/01/2009|16:08] C:\Program Files\ffdshow
[23/08/2009|23:11] C:\Program Files\Fichiers communs
[11/11/2008|19:02] C:\Program Files\FileZilla FTP Client
[16/06/2007|21:22] C:\Program Files\Free Mp3 Wma Converter_CD Ripper_Audio Cutter
[30/11/2007|23:13] C:\Program Files\Gajim
[08/06/2009|00:03] C:\Program Files\GlobalMapper9
[07/12/2008|17:24] C:\Program Files\GNU
[09/08/2008|09:16] C:\Program Files\Google
[29/06/2007|19:40] C:\Program Files\Goto Software
[25/06/2007|21:16] C:\Program Files\Graphex3
[10/02/2009|21:55] C:\Program Files\GRETECH
[05/06/2007|21:57] C:\Program Files\Grisoft
[22/01/2009|08:56] C:\Program Files\GSpot
[06/01/2008|00:26] C:\Program Files\IGN Rando
[29/04/2009|09:00] C:\Program Files\InstallShield Installation Information
[09/02/2009|23:23] C:\Program Files\Internet Explorer
[09/02/2009|23:23] C:\Program Files\IZArc
[02/12/2008|08:31] C:\Program Files\Java
[08/03/2008|20:00] C:\Program Files\License
[09/02/2009|23:29] C:\Program Files\LitexMedia
[24/12/2007|06:38] C:\Program Files\Live365
[23/08/2009|20:29] C:\Program Files\Malwarebytes' Anti-Malware
[05/06/2007|20:36] C:\Program Files\Messenger
[08/02/2009|22:44] C:\Program Files\Micro Application
[26/08/2007|21:43] C:\Program Files\Microsoft ActiveSync
[05/06/2007|20:41] C:\Program Files\microsoft frontpage
[06/06/2007|07:17] C:\Program Files\Microsoft Office
[14/09/2009|15:33] C:\Program Files\Microsoft Silverlight
[09/06/2007|09:17] C:\Program Files\Motorola
[05/06/2007|20:38] C:\Program Files\Movie Maker
[09/02/2009|23:29] C:\Program Files\Mozilla Firefox
[10/02/2009|21:56] C:\Program Files\Mozilla Thunderbird
[01/07/2007|19:06] C:\Program Files\MSN
[05/06/2007|20:36] C:\Program Files\MSN Gaming Zone
[09/10/2008|20:06] C:\Program Files\MSN Messenger
[16/07/2008|21:57] C:\Program Files\MSXML 4.0
[27/08/2007|19:23] C:\Program Files\Navman
[09/02/2009|23:21] C:\Program Files\NCH Software
[16/12/2008|13:12] C:\Program Files\NCH Swift Sound
[05/06/2007|20:38] C:\Program Files\NetMeeting
[27/07/2009|09:33] C:\Program Files\Nokia
[13/06/2009|22:25] C:\Program Files\Nyditot
[05/06/2007|20:37] C:\Program Files\Online Services
[25/11/2007|22:52] C:\Program Files\OpenOffice.org 2.3
[05/06/2007|20:38] C:\Program Files\Outlook Express
[28/06/2009|21:18] C:\Program Files\OziExplorer
[10/03/2008|14:26] C:\Program Files\Panasonic
[20/03/2008|13:19] C:\Program Files\PanaVue
[27/07/2009|09:31] C:\Program Files\PC Connectivity Solution
[03/06/2008|16:47] C:\Program Files\PC Wizard 2007
[27/01/2009|23:43] C:\Program Files\PDFCreator
[14/08/2007|19:37] C:\Program Files\PowerQuest
[04/10/2007|22:11] C:\Program Files\QuickTime
[09/02/2009|23:28] C:\Program Files\Realtek
[08/03/2008|20:00] C:\Program Files\Redist
[21/08/2009|00:19] C:\Program Files\RegCleaner
[05/06/2007|20:39] C:\Program Files\Services en ligne
[26/04/2009|15:37] C:\Program Files\Sibelius Software
[16/12/2008|13:08] C:\Program Files\SlySoft
[09/08/2008|09:16] C:\Program Files\torrent_search
[16/08/2008|17:44] C:\Program Files\Trend Micro
[05/04/2009|22:41] C:\Program Files\Uninstall Information
[16/08/2009|17:52] C:\Program Files\VideoLAN
[22/01/2009|16:38] C:\Program Files\VirtualDub
[23/01/2009|18:52] C:\Program Files\WinAVI Video Converter
[23/01/2009|21:43] C:\Program Files\WinAVI VideoConverter
[16/07/2009|16:56] C:\Program Files\Windows Live
[29/04/2009|10:55] C:\Program Files\Windows Media Components
[20/01/2009|22:18] C:\Program Files\Windows Media Connect 2
[20/01/2009|22:18] C:\Program Files\Windows Media Player
[05/06/2007|20:36] C:\Program Files\Windows NT
[05/06/2007|20:39] C:\Program Files\WindowsUpdate
[23/12/2007|21:56] C:\Program Files\WinRAR
[05/06/2007|20:41] C:\Program Files\xerox
[01/06/2009|13:14] C:\Program Files\Xilisoft
[01/12/2008|18:28] C:\Program Files\Xvid
[16/12/2008|13:17] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[22/01/2009|16:15] C:\Program Files\Fichiers communs\Adobe
[25/04/2008|19:45] C:\Program Files\Fichiers communs\Corel
[03/06/2009|14:53] C:\Program Files\Fichiers communs\Designer
[24/03/2008|21:36] C:\Program Files\Fichiers communs\InstallShield
[02/11/2007|11:10] C:\Program Files\Fichiers communs\Java
[29/04/2009|10:56] C:\Program Files\Fichiers communs\Logitech
[16/12/2008|13:15] C:\Program Files\Fichiers communs\Microsoft Shared
[05/06/2007|20:38] C:\Program Files\Fichiers communs\MSSoap
[27/07/2009|09:33] C:\Program Files\Fichiers communs\Nokia
[05/06/2007|22:26] C:\Program Files\Fichiers communs\ODBC
[27/07/2009|09:31] C:\Program Files\Fichiers communs\PCSuite
[01/12/2008|07:34] C:\Program Files\Fichiers communs\Real
[05/06/2007|20:38] C:\Program Files\Fichiers communs\Services
[05/06/2007|22:26] C:\Program Files\Fichiers communs\SpeechEngines
[06/06/2007|07:17] C:\Program Files\Fichiers communs\System
[09/10/2008|20:02] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 41 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-24 08:41:35
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:29][D:2]-> C:\DOCUME~1\philippe\LOCALS~1\Temp
[F:58][D:0]-> C:\DOCUME~1\philippe\Cookies
[F:13][D:4]-> C:\DOCUME~1\philippe\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 23/08/2009|23:35 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/08/2009| 8:42 - Option : [2]
--------------------\\ Fin du rapport a 8:42:30
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M CPU 440 @ 1.86GHz )
BIOS : Default System BIOS
USER : philippe ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 090823-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:24 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:10 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (Local Disk) - NTFS - Total:3 Go (Free:2 Go)
G:\ (Local Disk) - NTFS - Total:6 Go (Free:0 Go)
H:\ (Local Disk) - NTFS - Total:10 Go (Free:0 Go)
I:\ (CD or DVD)
J:\ (Local Disk) - NTFS - Total:17 Go (Free:11 Go)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 24/08/2009| 8:40 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\philippe\Cookies\philippe@advertising[2].txt
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[21/08/2009|01:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[21/08/2009|02:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\11544064
[22/01/2009|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/06/2009|14:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apowersoft
[04/10/2007|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[04/10/2007|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[03/06/2009|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
[25/04/2008|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
[18/12/2008|16:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
[04/11/2008|22:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[09/08/2008|09:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[29/06/2007|20:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[24/03/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[21/12/2008|11:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[20/07/2009|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/12/2008|14:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[23/03/2009|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[27/07/2009|09:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
[20/03/2008|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PanaVue
[27/07/2009|09:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[10/02/2009|21:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[04/11/2008|22:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SlySoft
[11/07/2008|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[29/06/2007|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[14/08/2008|19:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/10/2008|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[14/09/2008|14:32] C:\DOCUME~1\BENEDI~1\APPLIC~1\Adobe
[19/03/2008|14:22] C:\DOCUME~1\BENEDI~1\APPLIC~1\Google
[01/07/2007|19:06] C:\DOCUME~1\BENEDI~1\APPLIC~1\Identities
[01/07/2007|19:08] C:\DOCUME~1\BENEDI~1\APPLIC~1\Macromedia
[23/03/2008|23:53] C:\DOCUME~1\BENEDI~1\APPLIC~1\Microsoft
[31/10/2007|12:00] C:\DOCUME~1\BENEDI~1\APPLIC~1\Mozilla
[01/07/2007|19:07] C:\DOCUME~1\BENEDI~1\APPLIC~1\MSNInstaller
[16/07/2008|14:30] C:\DOCUME~1\BENEDI~1\APPLIC~1\Real
[04/01/2008|17:30] C:\DOCUME~1\BENEDI~1\APPLIC~1\Sun
[01/07/2007|20:03] C:\DOCUME~1\BENEDI~1\APPLIC~1\VadeRetro
[29/06/2008|17:00] C:\DOCUME~1\BENEDI~1\APPLIC~1\WinRAR
[05/06/2007|20:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[05/06/2007|20:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[07/01/2008|09:57] C:\DOCUME~1\MARIEC~1\APPLIC~1\Adobe
[13/08/2008|20:46] C:\DOCUME~1\MARIEC~1\APPLIC~1\Corel
[27/03/2008|08:22] C:\DOCUME~1\MARIEC~1\APPLIC~1\Google
[06/06/2007|14:38] C:\DOCUME~1\MARIEC~1\APPLIC~1\Identities
[14/08/2007|11:16] C:\DOCUME~1\MARIEC~1\APPLIC~1\Macromedia
[21/08/2009|01:55] C:\DOCUME~1\MARIEC~1\APPLIC~1\Microsoft
[31/01/2009|13:57] C:\DOCUME~1\MARIEC~1\APPLIC~1\Mozilla
[11/02/2009|12:25] C:\DOCUME~1\MARIEC~1\APPLIC~1\NCH Swift Sound
[21/08/2009|01:54] C:\DOCUME~1\MARIEC~1\APPLIC~1\Nokia
[21/08/2009|01:54] C:\DOCUME~1\MARIEC~1\APPLIC~1\PC Suite
[27/03/2008|08:21] C:\DOCUME~1\MARIEC~1\APPLIC~1\Real
[04/12/2007|15:40] C:\DOCUME~1\MARIEC~1\APPLIC~1\VadeRetro
[05/06/2007|20:40] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[16/12/2008|13:11] C:\DOCUME~1\philippe\APPLIC~1\Adobe
[08/07/2009|21:48] C:\DOCUME~1\philippe\APPLIC~1\Apple Computer
[05/04/2009|22:38] C:\DOCUME~1\philippe\APPLIC~1\Autodesk
[30/08/2008|20:38] C:\DOCUME~1\philippe\APPLIC~1\cByo
[04/06/2009|13:49] C:\DOCUME~1\philippe\APPLIC~1\convertisseur
[25/04/2008|19:48] C:\DOCUME~1\philippe\APPLIC~1\Corel
[18/12/2008|16:39] C:\DOCUME~1\philippe\APPLIC~1\DAEMON Tools
[18/12/2008|16:28] C:\DOCUME~1\philippe\APPLIC~1\DAEMON Tools Lite
[18/12/2008|16:39] C:\DOCUME~1\philippe\APPLIC~1\DAEMON Tools Pro
[04/11/2008|10:36] C:\DOCUME~1\philippe\APPLIC~1\DeepBurner
[17/08/2009|14:12] C:\DOCUME~1\philippe\APPLIC~1\dvdcss
[18/08/2009|08:55] C:\DOCUME~1\philippe\APPLIC~1\FileZilla
[30/11/2007|23:13] C:\DOCUME~1\philippe\APPLIC~1\Gajim
[01/05/2008|12:39] C:\DOCUME~1\philippe\APPLIC~1\Google
[08/08/2008|12:41] C:\DOCUME~1\philippe\APPLIC~1\gtk-2.0
[01/12/2007|21:43] C:\DOCUME~1\philippe\APPLIC~1\Help
[09/12/2007|20:30] C:\DOCUME~1\philippe\APPLIC~1\Identities
[27/08/2007|19:22] C:\DOCUME~1\philippe\APPLIC~1\InstallShield
[24/03/2008|10:24] C:\DOCUME~1\philippe\APPLIC~1\Leadertech
[05/06/2007|21:41] C:\DOCUME~1\philippe\APPLIC~1\Macromedia
[21/12/2008|11:48] C:\DOCUME~1\philippe\APPLIC~1\Malwarebytes
[13/06/2009|22:26] C:\DOCUME~1\philippe\APPLIC~1\Microsoft
[01/02/2009|21:32] C:\DOCUME~1\philippe\APPLIC~1\Mozilla
[04/12/2008|14:50] C:\DOCUME~1\philippe\APPLIC~1\NCH Swift Sound
[27/07/2009|09:34] C:\DOCUME~1\philippe\APPLIC~1\Nokia
[30/11/2007|23:12] C:\DOCUME~1\philippe\APPLIC~1\OpenOffice.org2
[27/07/2009|09:32] C:\DOCUME~1\philippe\APPLIC~1\PC Suite
[26/04/2009|15:37] C:\DOCUME~1\philippe\APPLIC~1\Sibelius Software
[02/11/2007|11:19] C:\DOCUME~1\philippe\APPLIC~1\Sun
[16/11/2008|07:23] C:\DOCUME~1\philippe\APPLIC~1\Thunderbird
[29/06/2007|19:41] C:\DOCUME~1\philippe\APPLIC~1\VadeRetro
[19/08/2009|01:09] C:\DOCUME~1\philippe\APPLIC~1\vlc
[23/12/2007|21:57] C:\DOCUME~1\philippe\APPLIC~1\WinRAR
[25/01/2008|23:04] C:\DOCUME~1\VERONI~1\APPLIC~1\Adobe
[18/10/2008|17:11] C:\DOCUME~1\VERONI~1\APPLIC~1\Corel
[14/05/2008|18:51] C:\DOCUME~1\VERONI~1\APPLIC~1\Google
[17/06/2007|20:34] C:\DOCUME~1\VERONI~1\APPLIC~1\Identities
[17/06/2007|20:35] C:\DOCUME~1\VERONI~1\APPLIC~1\Macromedia
[14/04/2008|18:05] C:\DOCUME~1\VERONI~1\APPLIC~1\Microsoft
[26/12/2007|11:33] C:\DOCUME~1\VERONI~1\APPLIC~1\Mozilla
[17/03/2008|09:31] C:\DOCUME~1\VERONI~1\APPLIC~1\Real
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[24/08/2009 08:24][--ah-----] C:\WINDOWS\tasks\SA.DAT
[03/10/2001 01:20][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[09/12/2008|20:02] C:\Program Files\AC3Filter
[22/01/2009|16:14] C:\Program Files\Adobe
[03/06/2009|14:51] C:\Program Files\AIDA32 - Personal System Information
[05/06/2007|21:20] C:\Program Files\Alwil Software
[16/12/2008|13:09] C:\Program Files\Ashampoo
[16/12/2008|13:11] C:\Program Files\Astonsoft
[05/06/2007|20:54] C:\Program Files\ASUS
[09/06/2007|09:02] C:\Program Files\ATI Technologies
[03/06/2009|14:53] C:\Program Files\AutoCAD 2005
[02/11/2008|18:58] C:\Program Files\AviSynth 2.5
[02/01/2008|13:47] C:\Program Files\Axis Communications
[09/12/2008|21:12] C:\Program Files\Axon Data
[05/09/2008|14:46] C:\Program Files\CartoExploreur
[21/06/2009|16:07] C:\Program Files\cByo
[05/06/2007|20:37] C:\Program Files\ComPlus Applications
[09/08/2008|09:16] C:\Program Files\Conduit
[04/06/2009|13:46] C:\Program Files\Convertisseur
[25/04/2008|19:44] C:\Program Files\Corel
[18/12/2008|16:33] C:\Program Files\DAEMON Tools Lite
[10/02/2009|21:54] C:\Program Files\DAEMON Tools Toolbar
[27/07/2009|09:31] C:\Program Files\DIFX
[03/06/2009|14:56] C:\Program Files\DivX
[16/03/2009|22:56] C:\Program Files\Dptech
[04/11/2008|21:54] C:\Program Files\DVD Decrypter
[18/08/2009|15:35] C:\Program Files\eMule
[02/10/2008|12:29] C:\Program Files\EPSON
[22/01/2009|16:08] C:\Program Files\ffdshow
[23/08/2009|23:11] C:\Program Files\Fichiers communs
[11/11/2008|19:02] C:\Program Files\FileZilla FTP Client
[16/06/2007|21:22] C:\Program Files\Free Mp3 Wma Converter_CD Ripper_Audio Cutter
[30/11/2007|23:13] C:\Program Files\Gajim
[08/06/2009|00:03] C:\Program Files\GlobalMapper9
[07/12/2008|17:24] C:\Program Files\GNU
[09/08/2008|09:16] C:\Program Files\Google
[29/06/2007|19:40] C:\Program Files\Goto Software
[25/06/2007|21:16] C:\Program Files\Graphex3
[10/02/2009|21:55] C:\Program Files\GRETECH
[05/06/2007|21:57] C:\Program Files\Grisoft
[22/01/2009|08:56] C:\Program Files\GSpot
[06/01/2008|00:26] C:\Program Files\IGN Rando
[29/04/2009|09:00] C:\Program Files\InstallShield Installation Information
[09/02/2009|23:23] C:\Program Files\Internet Explorer
[09/02/2009|23:23] C:\Program Files\IZArc
[02/12/2008|08:31] C:\Program Files\Java
[08/03/2008|20:00] C:\Program Files\License
[09/02/2009|23:29] C:\Program Files\LitexMedia
[24/12/2007|06:38] C:\Program Files\Live365
[23/08/2009|20:29] C:\Program Files\Malwarebytes' Anti-Malware
[05/06/2007|20:36] C:\Program Files\Messenger
[08/02/2009|22:44] C:\Program Files\Micro Application
[26/08/2007|21:43] C:\Program Files\Microsoft ActiveSync
[05/06/2007|20:41] C:\Program Files\microsoft frontpage
[06/06/2007|07:17] C:\Program Files\Microsoft Office
[14/09/2009|15:33] C:\Program Files\Microsoft Silverlight
[09/06/2007|09:17] C:\Program Files\Motorola
[05/06/2007|20:38] C:\Program Files\Movie Maker
[09/02/2009|23:29] C:\Program Files\Mozilla Firefox
[10/02/2009|21:56] C:\Program Files\Mozilla Thunderbird
[01/07/2007|19:06] C:\Program Files\MSN
[05/06/2007|20:36] C:\Program Files\MSN Gaming Zone
[09/10/2008|20:06] C:\Program Files\MSN Messenger
[16/07/2008|21:57] C:\Program Files\MSXML 4.0
[27/08/2007|19:23] C:\Program Files\Navman
[09/02/2009|23:21] C:\Program Files\NCH Software
[16/12/2008|13:12] C:\Program Files\NCH Swift Sound
[05/06/2007|20:38] C:\Program Files\NetMeeting
[27/07/2009|09:33] C:\Program Files\Nokia
[13/06/2009|22:25] C:\Program Files\Nyditot
[05/06/2007|20:37] C:\Program Files\Online Services
[25/11/2007|22:52] C:\Program Files\OpenOffice.org 2.3
[05/06/2007|20:38] C:\Program Files\Outlook Express
[28/06/2009|21:18] C:\Program Files\OziExplorer
[10/03/2008|14:26] C:\Program Files\Panasonic
[20/03/2008|13:19] C:\Program Files\PanaVue
[27/07/2009|09:31] C:\Program Files\PC Connectivity Solution
[03/06/2008|16:47] C:\Program Files\PC Wizard 2007
[27/01/2009|23:43] C:\Program Files\PDFCreator
[14/08/2007|19:37] C:\Program Files\PowerQuest
[04/10/2007|22:11] C:\Program Files\QuickTime
[09/02/2009|23:28] C:\Program Files\Realtek
[08/03/2008|20:00] C:\Program Files\Redist
[21/08/2009|00:19] C:\Program Files\RegCleaner
[05/06/2007|20:39] C:\Program Files\Services en ligne
[26/04/2009|15:37] C:\Program Files\Sibelius Software
[16/12/2008|13:08] C:\Program Files\SlySoft
[09/08/2008|09:16] C:\Program Files\torrent_search
[16/08/2008|17:44] C:\Program Files\Trend Micro
[05/04/2009|22:41] C:\Program Files\Uninstall Information
[16/08/2009|17:52] C:\Program Files\VideoLAN
[22/01/2009|16:38] C:\Program Files\VirtualDub
[23/01/2009|18:52] C:\Program Files\WinAVI Video Converter
[23/01/2009|21:43] C:\Program Files\WinAVI VideoConverter
[16/07/2009|16:56] C:\Program Files\Windows Live
[29/04/2009|10:55] C:\Program Files\Windows Media Components
[20/01/2009|22:18] C:\Program Files\Windows Media Connect 2
[20/01/2009|22:18] C:\Program Files\Windows Media Player
[05/06/2007|20:36] C:\Program Files\Windows NT
[05/06/2007|20:39] C:\Program Files\WindowsUpdate
[23/12/2007|21:56] C:\Program Files\WinRAR
[05/06/2007|20:41] C:\Program Files\xerox
[01/06/2009|13:14] C:\Program Files\Xilisoft
[01/12/2008|18:28] C:\Program Files\Xvid
[16/12/2008|13:17] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[22/01/2009|16:15] C:\Program Files\Fichiers communs\Adobe
[25/04/2008|19:45] C:\Program Files\Fichiers communs\Corel
[03/06/2009|14:53] C:\Program Files\Fichiers communs\Designer
[24/03/2008|21:36] C:\Program Files\Fichiers communs\InstallShield
[02/11/2007|11:10] C:\Program Files\Fichiers communs\Java
[29/04/2009|10:56] C:\Program Files\Fichiers communs\Logitech
[16/12/2008|13:15] C:\Program Files\Fichiers communs\Microsoft Shared
[05/06/2007|20:38] C:\Program Files\Fichiers communs\MSSoap
[27/07/2009|09:33] C:\Program Files\Fichiers communs\Nokia
[05/06/2007|22:26] C:\Program Files\Fichiers communs\ODBC
[27/07/2009|09:31] C:\Program Files\Fichiers communs\PCSuite
[01/12/2008|07:34] C:\Program Files\Fichiers communs\Real
[05/06/2007|20:38] C:\Program Files\Fichiers communs\Services
[05/06/2007|22:26] C:\Program Files\Fichiers communs\SpeechEngines
[06/06/2007|07:17] C:\Program Files\Fichiers communs\System
[09/10/2008|20:02] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 41 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-24 08:41:35
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:29][D:2]-> C:\DOCUME~1\philippe\LOCALS~1\Temp
[F:58][D:0]-> C:\DOCUME~1\philippe\Cookies
[F:13][D:4]-> C:\DOCUME~1\philippe\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 23/08/2009|23:35 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/08/2009| 8:42 - Option : [2]
--------------------\\ Fin du rapport a 8:42:30
Ci-dessous, le nouveau rapport Hijackthis.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:01:13, on 24/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HTJ.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:01:13, on 24/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HTJ.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
▶ Télécharge malwarebyte's anti-malware
▶ Un tutoriel sera à ta disposition pour l'installer et l'utiliser correctement.
▶ Fais la mise à jour du logiciel (elle se fait normalement à l'installation)
▶ Lance une analyse complète en cliquant sur "Exécuter un examen complet"
▶ Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"
▶ L'analyse peut durer un bon moment.....
▶ Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"
▶ Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"
▶ Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum
* Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC...
Faites le en cliquant sur "oui" à la question posée
▶ Un tutoriel sera à ta disposition pour l'installer et l'utiliser correctement.
▶ Fais la mise à jour du logiciel (elle se fait normalement à l'installation)
▶ Lance une analyse complète en cliquant sur "Exécuter un examen complet"
▶ Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"
▶ L'analyse peut durer un bon moment.....
▶ Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"
▶ Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"
▶ Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum
* Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC...
Faites le en cliquant sur "oui" à la question posée
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Ci-dessous, le rapport de Malwarebytes
24/08/2009 14:21:24
mbam-log-2009-08-24 (14-21-16).txt
Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|)
Eléments examinés: 192679
Temps écoulé: 51 minute(s), 31 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 4
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\11544064 (Rogue.Multiple) -> No action taken.
Fichier(s) infecté(s):
C:\QooBox\Quarantine\C\WINDOWS\ld12.exe.vir (Worm.Koobface) -> No action taken.
C:\Documents and Settings\All Users\Application Data\11544064\11544064 (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\All Users\Application Data\11544064\pc11544064ins (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\philippe\delself.bat (Malware.Trace) -> No action taken.
A quoi correspondent les éléments du registre infectés:
Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter)
Security Center\FirewallDisableNotify (Disabled.SecurityCenter)
Security Center\UpdatesDisableNotify (Disabled.SecurityCenter)
Merci pour l'aide
pjlt
24/08/2009 14:21:24
mbam-log-2009-08-24 (14-21-16).txt
Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|)
Eléments examinés: 192679
Temps écoulé: 51 minute(s), 31 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 4
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\11544064 (Rogue.Multiple) -> No action taken.
Fichier(s) infecté(s):
C:\QooBox\Quarantine\C\WINDOWS\ld12.exe.vir (Worm.Koobface) -> No action taken.
C:\Documents and Settings\All Users\Application Data\11544064\11544064 (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\All Users\Application Data\11544064\pc11544064ins (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\philippe\delself.bat (Malware.Trace) -> No action taken.
A quoi correspondent les éléments du registre infectés:
Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter)
Security Center\FirewallDisableNotify (Disabled.SecurityCenter)
Security Center\UpdatesDisableNotify (Disabled.SecurityCenter)
Merci pour l'aide
pjlt
Oui, maintenant j'ai supprimé la sélection.
Je viens de m'absenter en faisant tourner à nouveau Malwarebytes' , il ne décéle plus rien.
Je viens de m'absenter en faisant tourner à nouveau Malwarebytes' , il ne décéle plus rien.
Ci-dessous, le nouveau rapport Hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:42:35, on 24/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Trend Micro\HijackThis\HTJ.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:42:35, on 24/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Trend Micro\HijackThis\HTJ.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
Bonjour,
pourrais-tu aller renommer Hijackthis comme expliqué ici stp ??
Ensuite refais un nouveau rapport
pourrais-tu aller renommer Hijackthis comme expliqué ici stp ??
Ensuite refais un nouveau rapport
J'avais renomé Hijackthis HTJ au lieu de HJT J'ai rectifié et ai maintenant un fichier de lancement HJT.exe
Ci-dessous, nouveau rapport avec HJT.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:34:02, on 26/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:34:02, on 26/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
Bonjour,
relance Hijackthis en cliquant sur scan only et coches ces lignes stp :
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
puis tu cliques sur fix checked.
ensuite :
▶ Télécharge CCleaner
▶ Tu auras un tutoriel pour l'installer et l'utiliser correctement.
▶ Fais le nettoyage et recherche les erreurs du registre comme expliqué en bas du tutoriel.
Est-ce que tu as encore des problèmes ??
relance Hijackthis en cliquant sur scan only et coches ces lignes stp :
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
puis tu cliques sur fix checked.
ensuite :
▶ Télécharge CCleaner
▶ Tu auras un tutoriel pour l'installer et l'utiliser correctement.
▶ Fais le nettoyage et recherche les erreurs du registre comme expliqué en bas du tutoriel.
Est-ce que tu as encore des problèmes ??
J’ai lancé Hijackthis, fixé les lignes demandées, nettoyer avec CCleaner, recherché et corrigé toutes les erreurs du registre. Mon poste ne semble pas avoir de problème.
pjlt
pjlt
J’ai installé Update Checker, j’ai fait tourner Toolscleaner et supprimé toutes traces des outils de nettoyage et de détection non permanents.
Etant sous XP et non sous Vista je ne crois pas qu’il existe une notion de contrôle des comptes utilisateurs.
J’ai désactivé la restauration et la réactiverai dans un instant (en créant un point).
Ci-dessous, le rapport de Tools cleaner :
[ Rapport ToolsCleaner version 2.3.10 (par A.Rothstein & dj QUIOU) ]
--> Recherche:
C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\UsbFix.txt: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\UsbFix: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\philippe\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\philippe\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\philippe\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\philippe\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\philippe\Bureau\UsbFix.exe: trouvé !
C:\Documents and Settings\philippe\Bureau\UsbFix.lnk: trouvé !
C:\Documents and Settings\philippe\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\philippe\Menu Démarrer\Programmes\UsbFix: trouvé !
C:\Documents and Settings\philippe\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: trouvé !
C:\Lop SD\catchme.exe: trouvé !
C:\Lop SD\catchme.log: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\QooBox\Quarantine\catchme.log: trouvé !
Point de restauration crée !
Fichiers temporaires nettoyés !
Corbeille vidée!
---------------------------------
--> Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\philippe\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\philippe\Bureau\LopSD.exe: supprimé !
C:\Documents and Settings\philippe\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\philippe\Bureau\HJTInstall.exe: supprimé !
C:\Lop SD\catchme.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\philippe\Bureau\UsbFix.exe: supprimé !
C:\Documents and Settings\philippe\Bureau\UsbFix.lnk: supprimé !
C:\Documents and Settings\philippe\Bureau\Rsit.exe: supprimé !
C:\Documents and Settings\philippe\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: supprimé !
C:\Lop SD\catchme.log: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\QooBox\Quarantine\catchme.log: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\UsbFix: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\philippe\Menu Démarrer\Programmes\UsbFix: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
Merci beaucoup pour l’aide apportée.
Mes deux postes sont maintenant « clean ».
Ja vais passé mon sujet en résolu.
pjlt
Etant sous XP et non sous Vista je ne crois pas qu’il existe une notion de contrôle des comptes utilisateurs.
J’ai désactivé la restauration et la réactiverai dans un instant (en créant un point).
Ci-dessous, le rapport de Tools cleaner :
[ Rapport ToolsCleaner version 2.3.10 (par A.Rothstein & dj QUIOU) ]
--> Recherche:
C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\UsbFix.txt: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\UsbFix: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\philippe\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\philippe\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\philippe\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\philippe\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\philippe\Bureau\UsbFix.exe: trouvé !
C:\Documents and Settings\philippe\Bureau\UsbFix.lnk: trouvé !
C:\Documents and Settings\philippe\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\philippe\Menu Démarrer\Programmes\UsbFix: trouvé !
C:\Documents and Settings\philippe\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: trouvé !
C:\Lop SD\catchme.exe: trouvé !
C:\Lop SD\catchme.log: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\QooBox\Quarantine\catchme.log: trouvé !
Point de restauration crée !
Fichiers temporaires nettoyés !
Corbeille vidée!
---------------------------------
--> Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\philippe\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\philippe\Bureau\LopSD.exe: supprimé !
C:\Documents and Settings\philippe\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\philippe\Bureau\HJTInstall.exe: supprimé !
C:\Lop SD\catchme.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\philippe\Bureau\UsbFix.exe: supprimé !
C:\Documents and Settings\philippe\Bureau\UsbFix.lnk: supprimé !
C:\Documents and Settings\philippe\Bureau\Rsit.exe: supprimé !
C:\Documents and Settings\philippe\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: supprimé !
C:\Lop SD\catchme.log: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\QooBox\Quarantine\catchme.log: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\UsbFix: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\philippe\Menu Démarrer\Programmes\UsbFix: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
Merci beaucoup pour l’aide apportée.
Mes deux postes sont maintenant « clean ».
Ja vais passé mon sujet en résolu.
pjlt
