Virus facebook Wow video
Résolu
audrey7338
-
audrey7338 -
audrey7338 -
Bonjour,
j'ai un enorme probléme :
J'ai recu un message sur facebook d'une amie ou il y avait écrit: Wow Video ceci suivi d'un lien qui me dirigeait soit disant sur you tube ..et curiosité oblige, j'ai cliqué dessus , du coup ça me demande d'installer une mise à jour pour pouvoir lire la video ..
arf je sais , ça sent le piege , et bien moi je l'ai installé ...:-(
Resultat : un virus , je pense.. vu que je diffuse maintenant le même message à tout mes contacts, et que j'ai des pages internets qui s'ouvre toute seule ...
J'ai un peu cherché sur internet et j'ai l'impression que c'est ce qu'ils appelle "Un Koobface"
MAis je sais pas comment l'éradiquer , si quelqu'un^pouvait me donner un coup de main , ce serait merveilleux...
Merci d'avance:
Voici un rapport HijackThis, si ça peut servir.. (moi j'y comprend rien..)
Logfile of random's system information tool 1.06 (written by random/random)
Run by HP_Propriétaire at 2009-09-01 19:10:37
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 44 GB (30%) free of 146 GB
Total RAM: 446 MB (23% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:10:58, on 01/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\vVX3000.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\windows\mstre21.exe
c:\windows\nl15.exe
c:\windows\pp11.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\O7554VGC\RSIT[1].exe
C:\Program Files\trend micro\HP_Propriétaire.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = SOS Connexion - Le web en toute simplicité
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [sysldtray] c:\windows\ld14.exe
O4 - HKLM\..\Run: [Sysmstray] c:\windows\mstre21.exe
O4 - HKLM\..\Run: [sysnltray2] c:\windows\nl15.exe
O4 - HKLM\..\Run: [sysfbtray] c:\windows\freddy61.exe
O4 - HKLM\..\Run: [pp] c:\windows\pp11.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: PHOTOfunSTUDIO.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk879YYFR
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing)
O9 - Extra 'Tools' menuitem: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} (JordanUploader Class) - http://photoservice.fujicolor.de/ips-opdata/objects/jordan.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://static.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {63DF43C2-469A-41F3-B119-17B1ACE8BB50} (Sony SNC-CS3 Image Viewer) - http://82.127.17.206/home/SonySncCs3View.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader4.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - https://audrey7338.wordpress.com/
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} (IPSUploader4 Control) - https://asp.photoprintit.de/microsite/3462/defaults/activex/ips/IPSUploader4.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
j'ai un enorme probléme :
J'ai recu un message sur facebook d'une amie ou il y avait écrit: Wow Video ceci suivi d'un lien qui me dirigeait soit disant sur you tube ..et curiosité oblige, j'ai cliqué dessus , du coup ça me demande d'installer une mise à jour pour pouvoir lire la video ..
arf je sais , ça sent le piege , et bien moi je l'ai installé ...:-(
Resultat : un virus , je pense.. vu que je diffuse maintenant le même message à tout mes contacts, et que j'ai des pages internets qui s'ouvre toute seule ...
J'ai un peu cherché sur internet et j'ai l'impression que c'est ce qu'ils appelle "Un Koobface"
MAis je sais pas comment l'éradiquer , si quelqu'un^pouvait me donner un coup de main , ce serait merveilleux...
Merci d'avance:
Voici un rapport HijackThis, si ça peut servir.. (moi j'y comprend rien..)
Logfile of random's system information tool 1.06 (written by random/random)
Run by HP_Propriétaire at 2009-09-01 19:10:37
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 44 GB (30%) free of 146 GB
Total RAM: 446 MB (23% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:10:58, on 01/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\vVX3000.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\windows\mstre21.exe
c:\windows\nl15.exe
c:\windows\pp11.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\O7554VGC\RSIT[1].exe
C:\Program Files\trend micro\HP_Propriétaire.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = SOS Connexion - Le web en toute simplicité
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [sysldtray] c:\windows\ld14.exe
O4 - HKLM\..\Run: [Sysmstray] c:\windows\mstre21.exe
O4 - HKLM\..\Run: [sysnltray2] c:\windows\nl15.exe
O4 - HKLM\..\Run: [sysfbtray] c:\windows\freddy61.exe
O4 - HKLM\..\Run: [pp] c:\windows\pp11.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: PHOTOfunSTUDIO.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk879YYFR
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing)
O9 - Extra 'Tools' menuitem: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} (JordanUploader Class) - http://photoservice.fujicolor.de/ips-opdata/objects/jordan.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://static.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {63DF43C2-469A-41F3-B119-17B1ACE8BB50} (Sony SNC-CS3 Image Viewer) - http://82.127.17.206/home/SonySncCs3View.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader4.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - https://audrey7338.wordpress.com/
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} (IPSUploader4 Control) - https://asp.photoprintit.de/microsite/3462/defaults/activex/ips/IPSUploader4.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
A voir également:
- Virus facebook Wow video
- Montage video gratuit windows - Guide
- Telecharger video facebook - Guide
- Comment télécharger une vidéo youtube - Guide
- Story facebook comment ça marche - Guide
- Nommez une application d'appel vidéo ou de visioconférence - Guide
80 réponses
fais un rapport hijackthis
Tu le télécharges ici https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
Tu l’installes le lances et tu fais do a system scan and save a logfile.
Tu attends et tu postes le rapport qui s’ouvre.
Tu le télécharges ici https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
Tu l’installes le lances et tu fais do a system scan and save a logfile.
Tu attends et tu postes le rapport qui s’ouvre.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:10:14, on 02/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\windows\nl15.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\trend micro\hijackthis.exe
Scan saved at 18:10:14, on 02/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\windows\nl15.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\trend micro\hijackthis.exe
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [sysnltray2] C:\windows\nl15.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: PHOTOfunSTUDIO.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing)
O9 - Extra 'Tools' menuitem: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [sysnltray2] C:\windows\nl15.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: PHOTOfunSTUDIO.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing)
O9 - Extra 'Tools' menuitem: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUp
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUp
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} (JordanUploader Class) - http://photoservice.fujicolor.de/ips-opdata/objects/jordan.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://static.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://static.slide.com/uploader/SlideImageUploader.cab
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 090901-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:143 Go (Free:43 Go)
D:\ (Local Disk) - FAT32 - Total:5 Go (Free:1 Go)
E:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 02/09/2009|18:25 )
--------------------\\ Listing des dossiers dans APPLIC~1
[10/11/2008|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[26/02/2007|23:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/05/2006|01:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[23/02/2007|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[24/07/2008|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[22/01/2006|17:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[27/01/2009|21:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[03/01/2005|04:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[03/01/2005|04:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[15/12/2005|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[02/01/2007|23:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[12/03/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[14/12/2005|22:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[25/02/2006|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
[08/04/2006|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[03/01/2005|04:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[25/02/2006|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc
[09/08/2006|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[24/05/2006|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[12/02/2006|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[30/07/2006|12:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[07/12/2006|00:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[29/03/2006|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[03/01/2005|04:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[03/01/2005|04:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[03/01/2005|05:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/01/2005|04:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[03/01/2005|05:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[11/06/2007|22:23] C:\DOCUME~1\HP_PRO~3\APPLIC~1\SecondLife
[22/05/2006|19:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\.bittorrent
[10/06/2007|10:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\{B2A6EEBC-1184-4D6D-AC68-F354C811A6F9}
[05/01/2008|21:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ACD Systems
[25/08/2008|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[17/05/2008|11:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[09/04/2006|19:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[18/06/2006|10:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[20/06/2006|22:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DeepBurner Pro
[24/07/2008|17:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\GlarySoft
[22/09/2006|10:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[20/12/2005|22:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[13/12/2005|22:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
[14/12/2005|22:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
[25/11/2004|05:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[23/06/2009|21:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Image Zone Express
[16/08/2009|13:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
[22/05/2006|18:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterTrust
[14/12/2005|14:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
[01/04/2006|22:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Lavasoft
[14/12/2005|22:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[24/06/2006|12:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Lionhead Studios
[29/03/2006|20:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[26/08/2008|16:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[30/08/2006|23:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[29/05/2006|12:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MozillaControl
[01/04/2006|16:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[14/12/2005|22:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
[16/08/2009|13:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Panasonic
[03/01/2005|04:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[01/04/2007|03:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Screenshot Sender
[11/06/2007|22:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SecondLife
[20/12/2005|22:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Serif
[14/12/2005|22:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[20/01/2007|18:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sports Interactive
[28/03/2006|11:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[11/01/2006|22:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[11/08/2006|17:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SystemDoctor 2006 Free
[30/08/2006|23:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
[13/06/2006|22:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TaoUSign
[15/12/2005|23:08] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
[02/07/2009|19:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
[22/01/2006|16:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
[19/08/2006|09:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Vso
[01/02/2007|08:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[09/08/2006|18:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\Roxio
[12/07/2007|02:20] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[02/09/2009 09:27][--a------] C:\WINDOWS\tasks\GlaryInitialize.job
[02/09/2009 11:32][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{2B2D8291-1BF7-485A-A30D-767A89A1106B}.job
[19/08/2007 06:17][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[02/09/2009 17:33][--a------] C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
[02/09/2009 17:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 20:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[24/07/2008|17:16] C:\Program Files\Absolute Uninstaller
[10/11/2008|19:29] C:\Program Files\ACD Systems
[21/03/2008|14:56] C:\Program Files\Ad-Aware
[22/05/2006|18:04] C:\Program Files\Adobe
[25/02/2006|17:14] C:\Program Files\AdorageI-GfxDatas
[25/02/2006|17:12] C:\Program Files\AdorageI-SAL
[02/09/2009|10:00] C:\Program Files\Ad-remover
[25/08/2006|18:57] C:\Program Files\Ahead
[24/05/2006|19:08] C:\Program Files\Alwil Software
[23/02/2007|18:21] C:\Program Files\Apple Software Update
[21/12/2007|17:17] C:\Program Files\Art Plus
[20/06/2006|22:52] C:\Program Files\Astonsoft
[03/01/2005|04:24] C:\Program Files\ATI Technologies
[09/09/2006|22:28] C:\Program Files\AVIcodec
[17/05/2006|22:48] C:\Program Files\AWS
[19/06/2006|21:38] C:\Program Files\BaseDVDivX
[26/04/2006|18:53] C:\Program Files\BoontyGames
[12/02/2006|14:35] C:\Program Files\BoxRun2
[19/06/2006|21:27] C:\Program Files\Catalencoder
[19/05/2008|18:05] C:\Program Files\CCleaner
[12/02/2006|14:19] C:\Program Files\Charlie II
[03/08/2007|11:54] C:\Program Files\COL7429
[26/03/2006|15:34] C:\Program Files\Common Files
[24/11/2004|03:37] C:\Program Files\ComPlus Applications
[01/11/2006|11:40] C:\Program Files\Cyanide
[22/03/2006|00:09] C:\Program Files\directx
[10/09/2006|00:23] C:\Program Files\DivX
[19/06/2006|21:15] C:\Program Files\DivXMachine II
[22/01/2006|16:39] C:\Program Files\DVD Decrypter
[22/01/2006|16:39] C:\Program Files\DVD Shrink
[22/06/2006|17:25] C:\Program Files\Easy Internet signup
[28/04/2006|00:11] C:\Program Files\eChanblard
[01/09/2009|14:25] C:\Program Files\eMule
[16/05/2006|23:18] C:\Program Files\Enlight
[02/09/2009|17:00] C:\Program Files\Fichiers communs
[25/08/2006|19:56] C:\Program Files\Free Audio Pack
[17/05/2006|22:48] C:\Program Files\GameSpy Arcade
[23/11/2008|12:57] C:\Program Files\Geant
[29/05/2007|23:01] C:\Program Files\Ghost Navigator2_8_1
[24/07/2008|17:52] C:\Program Files\Glary Utilities
[08/03/2009|18:44] C:\Program Files\Google
[08/10/2006|18:12] C:\Program Files\Grisoft
[19/02/2008|21:33] C:\Program Files\Hercules
[29/12/2005|18:20] C:\Program Files\Hewlett-Packard
[18/06/2006|13:12] C:\Program Files\honestech
[21/05/2007|10:38] C:\Program Files\HP
[24/07/2008|17:27] C:\Program Files\inKline Global
[16/08/2009|13:47] C:\Program Files\InstallShield Installation Information
[29/07/2009|21:33] C:\Program Files\Internet Explorer
[03/01/2005|04:43] C:\Program Files\InterVideo
[18/08/2006|19:49] C:\Program Files\IZArc
[23/01/2007|17:59] C:\Program Files\Java
[12/02/2006|13:52] C:\Program Files\Jollygood Games
[17/04/2006|13:48] C:\Program Files\JoWood
[17/11/2008|19:35] C:\Program Files\Logitech
[03/01/2005|04:44] C:\Program Files\Macrovision Corp
[16/02/2008|21:48] C:\Program Files\MaxiCompte
[02/01/2006|22:05] C:\Program Files\Maxis
[12/02/2006|13:23] C:\Program Files\Melin Software WinOL
[05/09/2008|18:20] C:\Program Files\Messenger
[23/08/2009|12:29] C:\Program Files\Messenger Plus! Live
[10/11/2008|19:20] C:\Program Files\Micro Application
[03/01/2007|21:44] C:\Program Files\Microsoft ActiveSync
[10/05/2007|11:13] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[25/11/2004|05:27] C:\Program Files\microsoft frontpage
[16/11/2008|13:50] C:\Program Files\Microsoft LifeCam
[06/01/2007|15:32] C:\Program Files\Microsoft Office
[03/01/2007|21:42] C:\Program Files\Microsoft Visual Studio
[03/01/2007|21:42] C:\Program Files\Microsoft Works
[03/01/2007|21:41] C:\Program Files\Microsoft.NET
[17/05/2006|22:25] C:\Program Files\Monte Cristo
[05/09/2008|18:16] C:\Program Files\Movie Maker
[29/05/2006|12:02] C:\Program Files\Mozilla ActiveX Control v1.7.12
[01/09/2009|20:10] C:\Program Files\Mozilla Firefox
[04/03/2009|03:25] C:\Program Files\MSBuild
[03/08/2007|11:38] C:\Program Files\MSECACHE
[01/04/2006|16:33] C:\Program Files\MSN
[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
[02/09/2009|09:58] C:\Program Files\MSN Messenger
[18/11/2006|04:02] C:\Program Files\MSXML 4.0
[22/05/2006|18:06] C:\Program Files\Musicalis
[03/01/2005|04:50] C:\Program Files\muvee Technologies
[25/08/2006|19:58] C:\Program Files\Nero
[05/09/2008|18:13] C:\Program Files\NetMeeting
[21/12/2007|16:55] C:\Program Files\N-Gine Innovation
[29/05/2006|11:57] C:\Program Files\NuxBox
[25/11/2004|05:27] C:\Program Files\Online Services
[15/08/2009|22:18] C:\Program Files\Outlook Express
[24/05/2006|21:53] C:\Program Files\Oxilog
[16/08/2009|13:47] C:\Program Files\Panasonic
[25/10/2006|19:15] C:\Program Files\Photo Story 3 for Windows
[31/01/2008|10:33] C:\Program Files\PhotoMix
[25/02/2006|18:30] C:\Program Files\Pinnacle
[22/11/2008|15:48] C:\Program Files\Pixiphot
[12/01/2009|20:48] C:\Program Files\Pochette Express 2
[04/03/2009|03:36] C:\Program Files\Poker Grapher
[06/08/2009|14:15] C:\Program Files\PokerStars
[06/08/2009|11:33] C:\Program Files\PokerStars.NET
[10/05/2009|20:02] C:\Program Files\PokerStrategy
[24/07/2008|18:51] C:\Program Files\proDAD
[23/02/2007|18:27] C:\Program Files\QuickTime
[12/02/2006|13:59] C:\Program Files\Quotix Software
[04/03/2009|03:21] C:\Program Files\Reference Assemblies
[12/02/2006|12:40] C:\Program Files\ReflexiveArcade
[19/05/2008|18:01] C:\Program Files\RegCleaner
[12/02/2006|12:58] C:\Program Files\Robby
[20/01/2007|15:34] C:\Program Files\Roxio
[03/01/2005|04:59] C:\Program Files\Services en ligne
[02/03/2009|01:45] C:\Program Files\SharkScope
[25/02/2006|16:34] C:\Program Files\SmartSound Software
[26/10/2006|17:54] C:\Program Files\SoftChris
[19/02/2008|20:28] C:\Program Files\Sonic
[12/02/2006|14:32] C:\Program Files\STG
[25/07/2008|18:08] C:\Program Files\Symantec
[12/02/2006|12:52] C:\Program Files\TikGames
[02/09/2009|18:09] C:\Program Files\trend micro
[21/12/2007|16:45] C:\Program Files\Uninstall Information
[10/06/2007|10:23] C:\Program Files\VIRTUELSOFT
[22/01/2006|16:10] C:\Program Files\VLC
[30/12/2006|16:01] C:\Program Files\WiFiConnector
[25/08/2006|19:34] C:\Program Files\Winamp
[03/08/2007|11:38] C:\Program Files\Windows Installer Clean Up
[20/06/2007|00:15] C:\Program Files\Windows Live
[30/11/2007|11:31] C:\Program Files\Windows Live Favorites
[27/08/2009|10:40] C:\Program Files\Windows Live Safety Center
[07/12/2008|12:14] C:\Program Files\Windows Live SkyDrive
[30/11/2007|11:31] C:\Program Files\Windows Live Toolbar
[28/12/2006|18:43] C:\Program Files\Windows Media Connect 2
[05/09/2008|18:13] C:\Program Files\Windows Media Player
[05/09/2008|18:13] C:\Program Files\Windows NT
[24/11/2004|03:37] C:\Program Files\WindowsUpdate
[31/05/2006|14:57] C:\Program Files\Wingen
[08/01/2006|15:55] C:\Program Files\WinZip
[25/11/2004|05:28] C:\Program Files\xerox
[29/03/2006|20:51] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[05/01/2008|21:01] C:\Program Files\Fichiers communs\ACD Systems
[22/05/2006|18:04] C:\Program Files\Fichiers communs\Adobe
[25/08/2006|19:58] C:\Program Files\Fichiers communs\Ahead
[03/01/2007|21:42] C:\Program Files\Fichiers communs\DESIGNER
[03/01/2005|04:36] C:\Program Files\Fichiers communs\Hewlett-Packard
[21/05/2007|10:38] C:\Program Files\Fichiers communs\HP
[14/11/2006|00:15] C:\Program Files\Fichiers communs\InstallShield
[03/01/2005|04:43] C:\Program Files\Fichiers communs\InterVideo
[03/01/2005|04:17] C:\Program Files\Fichiers communs\Java
[03/01/2007|21:44] C:\Program Files\Fichiers communs\L&H
[08/04/2006|16:29] C:\Program Files\Fichiers communs\Logitech
[11/10/2007|21:28] C:\Program Files\Fichiers communs\Micro Application Shared
[16/08/2009|13:47] C:\Program Files\Fichiers communs\Microsoft Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
[03/01/2005|04:50] C:\Program Files\Fichiers communs\muvee Technologies
[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
[20/01/2007|15:34] C:\Program Files\Fichiers communs\Roxio Shared
[01/02/2005|09:55] C:\Program Files\Fichiers communs\Services
[30/08/2006|22:15] C:\Program Files\Fichiers communs\Sonic Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
[05/09/2008|18:13] C:\Program Files\Fichiers communs\System
[26/06/2006|18:36] C:\Program Files\Fichiers communs\Wise Installation Wizard
--------------------\\ Process
( 40 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertising[2].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-02 18:26:50
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 3069
--------------------\\ Recherche d'autres infections
--------------------\\ ROGUES ..
C:\DOCUME~1\HP_PRO~1\APPLIC~1\SystemDoctor 2006 Free
--------------------\\ KoobFace !
C:\WINDOWS\mmsmark2.dat
C:\WINDOWS\nlmark2.dat
[F:10][D:3]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:1833][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:822][D:16]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 02/09/2009|11:08 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 02/09/2009|11:19 - Option : [3]
3 - "C:\Lop SD\LopR_3.txt" - 02/09/2009|18:29 - Option : [1]
--------------------\\ Fin du rapport a 18:29:45
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 090901-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:143 Go (Free:43 Go)
D:\ (Local Disk) - FAT32 - Total:5 Go (Free:1 Go)
E:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 02/09/2009|18:25 )
--------------------\\ Listing des dossiers dans APPLIC~1
[10/11/2008|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[26/02/2007|23:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/05/2006|01:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[23/02/2007|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[24/07/2008|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[22/01/2006|17:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[27/01/2009|21:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[03/01/2005|04:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[03/01/2005|04:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[15/12/2005|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[02/01/2007|23:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[12/03/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[14/12/2005|22:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[25/02/2006|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
[08/04/2006|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[03/01/2005|04:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[25/02/2006|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc
[09/08/2006|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[24/05/2006|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[12/02/2006|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[30/07/2006|12:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[07/12/2006|00:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[29/03/2006|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[03/01/2005|04:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[03/01/2005|04:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[03/01/2005|05:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/01/2005|04:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[03/01/2005|05:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[11/06/2007|22:23] C:\DOCUME~1\HP_PRO~3\APPLIC~1\SecondLife
[22/05/2006|19:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\.bittorrent
[10/06/2007|10:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\{B2A6EEBC-1184-4D6D-AC68-F354C811A6F9}
[05/01/2008|21:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ACD Systems
[25/08/2008|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[17/05/2008|11:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[09/04/2006|19:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[18/06/2006|10:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[20/06/2006|22:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DeepBurner Pro
[24/07/2008|17:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\GlarySoft
[22/09/2006|10:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[20/12/2005|22:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[13/12/2005|22:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
[14/12/2005|22:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
[25/11/2004|05:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[23/06/2009|21:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Image Zone Express
[16/08/2009|13:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
[22/05/2006|18:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterTrust
[14/12/2005|14:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
[01/04/2006|22:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Lavasoft
[14/12/2005|22:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[24/06/2006|12:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Lionhead Studios
[29/03/2006|20:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[26/08/2008|16:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[30/08/2006|23:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[29/05/2006|12:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MozillaControl
[01/04/2006|16:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[14/12/2005|22:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
[16/08/2009|13:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Panasonic
[03/01/2005|04:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[01/04/2007|03:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Screenshot Sender
[11/06/2007|22:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SecondLife
[20/12/2005|22:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Serif
[14/12/2005|22:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[20/01/2007|18:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sports Interactive
[28/03/2006|11:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[11/01/2006|22:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[11/08/2006|17:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SystemDoctor 2006 Free
[30/08/2006|23:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
[13/06/2006|22:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TaoUSign
[15/12/2005|23:08] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
[02/07/2009|19:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
[22/01/2006|16:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
[19/08/2006|09:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Vso
[01/02/2007|08:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[09/08/2006|18:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\Roxio
[12/07/2007|02:20] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[02/09/2009 09:27][--a------] C:\WINDOWS\tasks\GlaryInitialize.job
[02/09/2009 11:32][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{2B2D8291-1BF7-485A-A30D-767A89A1106B}.job
[19/08/2007 06:17][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[02/09/2009 17:33][--a------] C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
[02/09/2009 17:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 20:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[24/07/2008|17:16] C:\Program Files\Absolute Uninstaller
[10/11/2008|19:29] C:\Program Files\ACD Systems
[21/03/2008|14:56] C:\Program Files\Ad-Aware
[22/05/2006|18:04] C:\Program Files\Adobe
[25/02/2006|17:14] C:\Program Files\AdorageI-GfxDatas
[25/02/2006|17:12] C:\Program Files\AdorageI-SAL
[02/09/2009|10:00] C:\Program Files\Ad-remover
[25/08/2006|18:57] C:\Program Files\Ahead
[24/05/2006|19:08] C:\Program Files\Alwil Software
[23/02/2007|18:21] C:\Program Files\Apple Software Update
[21/12/2007|17:17] C:\Program Files\Art Plus
[20/06/2006|22:52] C:\Program Files\Astonsoft
[03/01/2005|04:24] C:\Program Files\ATI Technologies
[09/09/2006|22:28] C:\Program Files\AVIcodec
[17/05/2006|22:48] C:\Program Files\AWS
[19/06/2006|21:38] C:\Program Files\BaseDVDivX
[26/04/2006|18:53] C:\Program Files\BoontyGames
[12/02/2006|14:35] C:\Program Files\BoxRun2
[19/06/2006|21:27] C:\Program Files\Catalencoder
[19/05/2008|18:05] C:\Program Files\CCleaner
[12/02/2006|14:19] C:\Program Files\Charlie II
[03/08/2007|11:54] C:\Program Files\COL7429
[26/03/2006|15:34] C:\Program Files\Common Files
[24/11/2004|03:37] C:\Program Files\ComPlus Applications
[01/11/2006|11:40] C:\Program Files\Cyanide
[22/03/2006|00:09] C:\Program Files\directx
[10/09/2006|00:23] C:\Program Files\DivX
[19/06/2006|21:15] C:\Program Files\DivXMachine II
[22/01/2006|16:39] C:\Program Files\DVD Decrypter
[22/01/2006|16:39] C:\Program Files\DVD Shrink
[22/06/2006|17:25] C:\Program Files\Easy Internet signup
[28/04/2006|00:11] C:\Program Files\eChanblard
[01/09/2009|14:25] C:\Program Files\eMule
[16/05/2006|23:18] C:\Program Files\Enlight
[02/09/2009|17:00] C:\Program Files\Fichiers communs
[25/08/2006|19:56] C:\Program Files\Free Audio Pack
[17/05/2006|22:48] C:\Program Files\GameSpy Arcade
[23/11/2008|12:57] C:\Program Files\Geant
[29/05/2007|23:01] C:\Program Files\Ghost Navigator2_8_1
[24/07/2008|17:52] C:\Program Files\Glary Utilities
[08/03/2009|18:44] C:\Program Files\Google
[08/10/2006|18:12] C:\Program Files\Grisoft
[19/02/2008|21:33] C:\Program Files\Hercules
[29/12/2005|18:20] C:\Program Files\Hewlett-Packard
[18/06/2006|13:12] C:\Program Files\honestech
[21/05/2007|10:38] C:\Program Files\HP
[24/07/2008|17:27] C:\Program Files\inKline Global
[16/08/2009|13:47] C:\Program Files\InstallShield Installation Information
[29/07/2009|21:33] C:\Program Files\Internet Explorer
[03/01/2005|04:43] C:\Program Files\InterVideo
[18/08/2006|19:49] C:\Program Files\IZArc
[23/01/2007|17:59] C:\Program Files\Java
[12/02/2006|13:52] C:\Program Files\Jollygood Games
[17/04/2006|13:48] C:\Program Files\JoWood
[17/11/2008|19:35] C:\Program Files\Logitech
[03/01/2005|04:44] C:\Program Files\Macrovision Corp
[16/02/2008|21:48] C:\Program Files\MaxiCompte
[02/01/2006|22:05] C:\Program Files\Maxis
[12/02/2006|13:23] C:\Program Files\Melin Software WinOL
[05/09/2008|18:20] C:\Program Files\Messenger
[23/08/2009|12:29] C:\Program Files\Messenger Plus! Live
[10/11/2008|19:20] C:\Program Files\Micro Application
[03/01/2007|21:44] C:\Program Files\Microsoft ActiveSync
[10/05/2007|11:13] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[25/11/2004|05:27] C:\Program Files\microsoft frontpage
[16/11/2008|13:50] C:\Program Files\Microsoft LifeCam
[06/01/2007|15:32] C:\Program Files\Microsoft Office
[03/01/2007|21:42] C:\Program Files\Microsoft Visual Studio
[03/01/2007|21:42] C:\Program Files\Microsoft Works
[03/01/2007|21:41] C:\Program Files\Microsoft.NET
[17/05/2006|22:25] C:\Program Files\Monte Cristo
[05/09/2008|18:16] C:\Program Files\Movie Maker
[29/05/2006|12:02] C:\Program Files\Mozilla ActiveX Control v1.7.12
[01/09/2009|20:10] C:\Program Files\Mozilla Firefox
[04/03/2009|03:25] C:\Program Files\MSBuild
[03/08/2007|11:38] C:\Program Files\MSECACHE
[01/04/2006|16:33] C:\Program Files\MSN
[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
[02/09/2009|09:58] C:\Program Files\MSN Messenger
[18/11/2006|04:02] C:\Program Files\MSXML 4.0
[22/05/2006|18:06] C:\Program Files\Musicalis
[03/01/2005|04:50] C:\Program Files\muvee Technologies
[25/08/2006|19:58] C:\Program Files\Nero
[05/09/2008|18:13] C:\Program Files\NetMeeting
[21/12/2007|16:55] C:\Program Files\N-Gine Innovation
[29/05/2006|11:57] C:\Program Files\NuxBox
[25/11/2004|05:27] C:\Program Files\Online Services
[15/08/2009|22:18] C:\Program Files\Outlook Express
[24/05/2006|21:53] C:\Program Files\Oxilog
[16/08/2009|13:47] C:\Program Files\Panasonic
[25/10/2006|19:15] C:\Program Files\Photo Story 3 for Windows
[31/01/2008|10:33] C:\Program Files\PhotoMix
[25/02/2006|18:30] C:\Program Files\Pinnacle
[22/11/2008|15:48] C:\Program Files\Pixiphot
[12/01/2009|20:48] C:\Program Files\Pochette Express 2
[04/03/2009|03:36] C:\Program Files\Poker Grapher
[06/08/2009|14:15] C:\Program Files\PokerStars
[06/08/2009|11:33] C:\Program Files\PokerStars.NET
[10/05/2009|20:02] C:\Program Files\PokerStrategy
[24/07/2008|18:51] C:\Program Files\proDAD
[23/02/2007|18:27] C:\Program Files\QuickTime
[12/02/2006|13:59] C:\Program Files\Quotix Software
[04/03/2009|03:21] C:\Program Files\Reference Assemblies
[12/02/2006|12:40] C:\Program Files\ReflexiveArcade
[19/05/2008|18:01] C:\Program Files\RegCleaner
[12/02/2006|12:58] C:\Program Files\Robby
[20/01/2007|15:34] C:\Program Files\Roxio
[03/01/2005|04:59] C:\Program Files\Services en ligne
[02/03/2009|01:45] C:\Program Files\SharkScope
[25/02/2006|16:34] C:\Program Files\SmartSound Software
[26/10/2006|17:54] C:\Program Files\SoftChris
[19/02/2008|20:28] C:\Program Files\Sonic
[12/02/2006|14:32] C:\Program Files\STG
[25/07/2008|18:08] C:\Program Files\Symantec
[12/02/2006|12:52] C:\Program Files\TikGames
[02/09/2009|18:09] C:\Program Files\trend micro
[21/12/2007|16:45] C:\Program Files\Uninstall Information
[10/06/2007|10:23] C:\Program Files\VIRTUELSOFT
[22/01/2006|16:10] C:\Program Files\VLC
[30/12/2006|16:01] C:\Program Files\WiFiConnector
[25/08/2006|19:34] C:\Program Files\Winamp
[03/08/2007|11:38] C:\Program Files\Windows Installer Clean Up
[20/06/2007|00:15] C:\Program Files\Windows Live
[30/11/2007|11:31] C:\Program Files\Windows Live Favorites
[27/08/2009|10:40] C:\Program Files\Windows Live Safety Center
[07/12/2008|12:14] C:\Program Files\Windows Live SkyDrive
[30/11/2007|11:31] C:\Program Files\Windows Live Toolbar
[28/12/2006|18:43] C:\Program Files\Windows Media Connect 2
[05/09/2008|18:13] C:\Program Files\Windows Media Player
[05/09/2008|18:13] C:\Program Files\Windows NT
[24/11/2004|03:37] C:\Program Files\WindowsUpdate
[31/05/2006|14:57] C:\Program Files\Wingen
[08/01/2006|15:55] C:\Program Files\WinZip
[25/11/2004|05:28] C:\Program Files\xerox
[29/03/2006|20:51] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[05/01/2008|21:01] C:\Program Files\Fichiers communs\ACD Systems
[22/05/2006|18:04] C:\Program Files\Fichiers communs\Adobe
[25/08/2006|19:58] C:\Program Files\Fichiers communs\Ahead
[03/01/2007|21:42] C:\Program Files\Fichiers communs\DESIGNER
[03/01/2005|04:36] C:\Program Files\Fichiers communs\Hewlett-Packard
[21/05/2007|10:38] C:\Program Files\Fichiers communs\HP
[14/11/2006|00:15] C:\Program Files\Fichiers communs\InstallShield
[03/01/2005|04:43] C:\Program Files\Fichiers communs\InterVideo
[03/01/2005|04:17] C:\Program Files\Fichiers communs\Java
[03/01/2007|21:44] C:\Program Files\Fichiers communs\L&H
[08/04/2006|16:29] C:\Program Files\Fichiers communs\Logitech
[11/10/2007|21:28] C:\Program Files\Fichiers communs\Micro Application Shared
[16/08/2009|13:47] C:\Program Files\Fichiers communs\Microsoft Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
[03/01/2005|04:50] C:\Program Files\Fichiers communs\muvee Technologies
[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
[20/01/2007|15:34] C:\Program Files\Fichiers communs\Roxio Shared
[01/02/2005|09:55] C:\Program Files\Fichiers communs\Services
[30/08/2006|22:15] C:\Program Files\Fichiers communs\Sonic Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
[05/09/2008|18:13] C:\Program Files\Fichiers communs\System
[26/06/2006|18:36] C:\Program Files\Fichiers communs\Wise Installation Wizard
--------------------\\ Process
( 40 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertising[2].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-02 18:26:50
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 3069
--------------------\\ Recherche d'autres infections
--------------------\\ ROGUES ..
C:\DOCUME~1\HP_PRO~1\APPLIC~1\SystemDoctor 2006 Free
--------------------\\ KoobFace !
C:\WINDOWS\mmsmark2.dat
C:\WINDOWS\nlmark2.dat
[F:10][D:3]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:1833][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:822][D:16]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 02/09/2009|11:08 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 02/09/2009|11:19 - Option : [3]
3 - "C:\Lop SD\LopR_3.txt" - 02/09/2009|18:29 - Option : [1]
--------------------\\ Fin du rapport a 18:29:45
Salut Nico,
Il en reste plein sur le rapport combofix !!!
Audrey
Télécharge ATF Cleaner par Atribune sur ton bureau : http://www.atribune.org/ccount/click.php?id=1
- Démarre ATF-Cleaner et coche toutes les cases.
- Clique sur <Empty Selected> et au message "Done Cleaning" sur <Ok>
NB : Si tu utilises Firefox ou Opera :
- Clique sur Firefox ou Opera en haut puis choisis <Select All>.
- Clique sur le bouton <Empty Selected> (NB : Si tu veux conserver tes mots de passe sauvegardés alors clique sur <No> à l'invite).
- Clique sur <Main> pour revenir à menu principal
- Clique sur <Exit>, du menu prinicipal, pour quitter ATFcleaner.
NB : Si le prefetch est nettoyé le redémarrage du PC sera plus lent.
-----------------------------
- Crée un nouveau document texte : clic droit de souris sur le bureau => Nouveau => Document Texte, et copie/colle dedans les lignes en gras suivantes :
- Enregistre ce fichier sous le nom CFScript (Type du fichier : tous les fichiers)
- Ferme tous tes navigateurs web (donc copie ou imprime les instructions suivantes avant si besoin est).
- Désactive ton antivirus et tes autres protections résidentes (ex : Spybot) si tu en as (c'est important).
- Fait un glisser/déposer de ce fichier CFScript sur le programme ComboFix.exe comme sur le lien :
http://img517.imageshack.us/img517/8662/cfscript10uc2.gif
( Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relâche alors le bouton de la souris).
- Combofix va démarrer puis une fenêtre bleue va apparaître.
- Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal !
- Ne touche à rien tant que le scan n'est pas terminé sinon le PC peut planter !
- Une fois le scan achevé, un rapport va s'afficher: poste le stp.
Il en reste plein sur le rapport combofix !!!
Audrey
Télécharge ATF Cleaner par Atribune sur ton bureau : http://www.atribune.org/ccount/click.php?id=1
- Démarre ATF-Cleaner et coche toutes les cases.
- Clique sur <Empty Selected> et au message "Done Cleaning" sur <Ok>
NB : Si tu utilises Firefox ou Opera :
- Clique sur Firefox ou Opera en haut puis choisis <Select All>.
- Clique sur le bouton <Empty Selected> (NB : Si tu veux conserver tes mots de passe sauvegardés alors clique sur <No> à l'invite).
- Clique sur <Main> pour revenir à menu principal
- Clique sur <Exit>, du menu prinicipal, pour quitter ATFcleaner.
NB : Si le prefetch est nettoyé le redémarrage du PC sera plus lent.
-----------------------------
- Crée un nouveau document texte : clic droit de souris sur le bureau => Nouveau => Document Texte, et copie/colle dedans les lignes en gras suivantes :
KILLALL:: Registry:: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "sysnltray2"=- Files:: c:\windows\ex1234.dat c:\windows\ectbbyn.dat c:\windows\ex23567.dat c:\windows\nl15.exe c:\windows\srpira1251809668.eXE c:\windows\nlmark2.dat c:\windows\mmsmark2.dat
- Enregistre ce fichier sous le nom CFScript (Type du fichier : tous les fichiers)
- Ferme tous tes navigateurs web (donc copie ou imprime les instructions suivantes avant si besoin est).
- Désactive ton antivirus et tes autres protections résidentes (ex : Spybot) si tu en as (c'est important).
- Fait un glisser/déposer de ce fichier CFScript sur le programme ComboFix.exe comme sur le lien :
http://img517.imageshack.us/img517/8662/cfscript10uc2.gif
( Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relâche alors le bouton de la souris).
- Combofix va démarrer puis une fenêtre bleue va apparaître.
- Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal !
- Ne touche à rien tant que le scan n'est pas terminé sinon le PC peut planter !
- Une fois le scan achevé, un rapport va s'afficher: poste le stp.
D'accord , non j'ai plus l'impression qu'il y a des problémes ... En tout cas les pages internet qui s'ouvrait toute seule ne le font plus ... En ce qui concerne le lien que je faisait circuler , je ne sais pas....
Bref pour moi ça a l'air bon et d'aprés les rapports que tu as lu tu as l'impression que mon ordinateur va mieux? :-)
Bref pour moi ça a l'air bon et d'aprés les rapports que tu as lu tu as l'impression que mon ordinateur va mieux? :-)
oui mais reste des infections sur ton rapport hijackthis. Je te conseille de poster un nouveau sujet intitulée "analyse hijack" avec un rapport que tu postes. Quelqu'un va t'aider car il y a des infections qui me perturbent.
En tous cas su t'as des problèmes avec koobface renvoie un sujet n'hésite pas.
En tous cas su t'as des problèmes avec koobface renvoie un sujet n'hésite pas.
