Enlever programmes nuisibles

Sithranduil Messages postés 48 Statut Membre -  
 archet9 -
Bonjour, une personne pourrais t'elle m'aider à enlever une partit des virus que j'i car je suis presque sur que j'en est. J'ai fais un rapport HijackThis le voici :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:20:38, on 24/09/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Windows\System32\qttask.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\MarkAny\ContentSafer\MaAgent.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Users\Riwan\Program Files\DNA\btdna.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Riwan\Desktop\Desktop\Anti\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://dufpy.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
R3 - URLSearchHook: (no name) - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - (no file)
R3 - URLSearchHook: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {60270dc7-9ea0-472f-9b77-66652c06246e} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: (no name) - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - (no file)
O3 - Toolbar: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O3 - Toolbar: (no name) - {60270dc7-9ea0-472f-9b77-66652c06246e} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [QuickTime Task] C:\Windows\System32\qttask.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [MAAgent] C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Riwan\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: BluetoothPCDialer.lnk = C:\Program Files\BluetoothPCDialer\BluetoothPCDialer.exe
O4 - Global Startup: OFFICE One Startup v7.lnk = ?
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Télécharger en utilisant Download &Express - C:\Program Files\Download Express\Add_Url.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Translate - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnk
O9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnk
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: lxcg_device - Unknown owner - C:\Windows\system32\lxcgcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe

--
End of file - 12961 bytes

Ps: J'ai mon Firewall qui vient de me stoper se programme Macsmgr.exe .
Je n'ai aucune idée sur se que c'est.

Pss : J'ai comme antivirus AVG , comme Firewall : Sunbelt Personal Firewall ainsi que MBAM et SUPERAntiSpyware .

Merci pour votre futur aide. :)
Configuration: Windows Vista
Firefox 3.0.14

19 réponses

  1. archet9
     
    Bonsoir Sithranduil,

    Commence par ceci stp:

    Impératif sous vista:

    desactives tes comptes d'utilisateur:
    https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html

    ENSUITE:

    [*]Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

    [*] Déconnecte-toi et ferme toutes applications en cours

    [*]Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
    [*]Double-clique sur l'icône [AD-Remover située sur ton Bureau.
    [*]Au menu principal, choisis l'option L.[*]
    Poste le rapport qui apparaît à la fin.

    (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

    (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

    [g][u]Note/g : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure

    a+
    0
  3. Sithranduil Messages postés 48 Statut Membre 1
     
    D'accord quand je le lance il me dit :

    "ERREUR ! un ou plusieurs composants sont manquants !
    Appuyer sur ok pour quitter"

    Ps : il ne s'installe pas.
    0
  4. Sithranduil Messages postés 48 Statut Membre 1
     
    Je vient de tester sa sur un autre ordi sa marche ...
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Sithranduil Messages postés 48 Statut Membre 1
     
    up
    0
  7. archet9
     
    Re,

    ==> clic droit sur l'icône AD-Remover située sur ton Bureau et choisis "exécuter en tant qu'administrateur"

    a+
    0
  8. Utilisateur anonyme
     
    Hello tout le monde,

    Sithranduil, re-télécharge Ad-remover, cela devrais marcher.
    0
  9. Sithranduil Messages postés 48 Statut Membre 1
     
    A tien merci sa marche bon je fais mon nettoyage et je vous tien au courent.

    Merci C_XX ainsi que toi archet9.

    Cordialement Sithranduil.
    0
  10. Sithranduil Messages postés 48 Statut Membre 1
     
    Voici le rapport et bha j'en avais des trucs ^^ :

    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.5_W | UNIQUEMENT XP/VISTA/7 =======
    .
    Mit à jour par C_XX le 25/09/2009 à 8:40 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 12:19:10, 26/09/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-Remover\
    Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 2 v6.0.6002
    Nom du PC: PC-DE-JEAN-LUC | Utilisateur actuel: Riwan
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    .
    HKCU\Software\EoRezo
    HKCU\Software\ItsLabel
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
    HKLM\Software\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
    HKLM\Software\Classes\EoRezoBHO.EoBho
    HKLM\Software\Classes\EoRezoBHO.EoBho.1
    HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
    HKLM\Software\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
    HKLM\Software\EoRezo
    HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
    HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
    .
    C:\Program Files\AskSBar
    C:\Program Files\AskSBar\SrchAstt
    C:\Program Files\AskSBar\SrchAstt\1.bin
    C:\Program Files\EoRezo
    C:\Program Files\EoRezo\ConfMedia.cyp
    C:\Program Files\EoRezo\EoAdv
    C:\Program Files\EoRezo\EoAdv\EoAdv.dll
    C:\Program Files\EoRezo\EoAdv\eoAdv.url
    C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
    C:\Program Files\EoRezo\EoEngine.exe
    C:\Program Files\EoRezo\eoEngine.url
    C:\Program Files\EoRezo\EoMultiLanguage.dll
    C:\Program Files\EoRezo\EoRezoComm.dll
    C:\Program Files\EoRezo\EoRezoImg_17.dll
    C:\Program Files\EoRezo\EoRezoImg_19.dll
    C:\Program Files\EoRezo\EoRezoImg_20.dll
    C:\Program Files\EoRezo\EoRezoImg_21.dll
    C:\Program Files\EoRezo\EoRezoImg_22.dll
    C:\Program Files\EoRezo\EoRezoImg_23.dll
    C:\Program Files\EoRezo\EoRezoTools_16.dll
    C:\Program Files\EoRezo\EoRezoTools_17.dll
    C:\Program Files\EoRezo\EoRezoTools_18.dll
    C:\Program Files\EoRezo\EoRezoTools_20.dll
    C:\Program Files\EoRezo\EoRezoTools_21.dll
    C:\Program Files\EoRezo\EoRezoTools_26.dll
    C:\Program Files\EoRezo\EoRezoTools_27.dll
    C:\Program Files\EoRezo\FreeImage.dll
    C:\Program Files\EoRezo\Host.cyp
    C:\Program Files\EoRezo\lang
    C:\Program Files\EoRezo\lang\ihm_eoclock.xml
    C:\Program Files\EoRezo\lang\ihm_eoengine.xml
    C:\Program Files\EoRezo\lang\ihm_eonet.xml
    C:\Program Files\EoRezo\lang\ihm_eorezotools.xml
    C:\Program Files\EoRezo\lang\ihm_eosudoku.xml
    C:\Program Files\EoRezo\lang\ihm_eoweather.xml
    C:\Program Files\EoRezo\lang\lang_en.xml
    C:\Program Files\EoRezo\lang\lang_es.xml
    C:\Program Files\EoRezo\lang\lang_fr.xml
    C:\Program Files\EoRezo\lang\lang_it.xml
    C:\Program Files\EoRezo\MngInstaller.dll
    C:\Program Files\EoRezo\unins000.dat
    C:\Program Files\EoRezo\unins000.exe
    C:\Program Files\EoRezo\user.cyp
    C:\Program Files\Mozilla FireFox\plugins\NPAskSBr.dll
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EoRezo
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EoRezo\EoEngine.lnk
    C:\Users\Riwan\AppData\Roaming\EoRezo
    C:\Users\Riwan\AppData\Roaming\EoRezo\cmhost.cyp
    C:\Users\Riwan\AppData\Roaming\EoRezo\ConfMedia.cyp
    C:\Users\Riwan\AppData\Roaming\EoRezo\db
    C:\Users\Riwan\AppData\Roaming\EoRezo\db\cat.cyp
    C:\Users\Riwan\AppData\Roaming\EoRezo\eoDesktop
    C:\Users\Riwan\AppData\Roaming\EoRezo\eoDesktop\config.xml
    C:\Users\Riwan\AppData\Roaming\EoRezo\eoDesktop\eoDesktop.html
    C:\Users\Riwan\AppData\Roaming\EoRezo\eoDesktop\userConfig.xml
    C:\Users\Riwan\AppData\Roaming\EoRezo\eoStats
    C:\Users\Riwan\AppData\Roaming\EoRezo\eoStats\eoStats.txt
    C:\Users\Riwan\AppData\Roaming\EoRezo\host.cyp
    C:\Users\Riwan\AppData\Roaming\EoRezo\user.cyp
    C:\Users\Riwan\AppData\Roaming\ItsLabel
    C:\Users\Riwan\AppData\Roaming\ItsLabel\ItsTV
    C:\Users\Riwan\AppData\Roaming\ItsLabel\ItsTV\itsTV.xml

    (!) -- Fichiers temporaires supprimés.

    .
    ============== Scan additionnel ==============
    .
    .
    * Mozilla FireFox Version 3.0.14 *
    .
    Nom du profil: 76n1iw5l.default (Riwan)
    .
    (Prefs.js) user_pref("browser.search.defaultenginename", "Google");
    (Prefs.js) user_pref("browser.search.selectedEngine", "radiodofus Customized Web Search");
    (Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2187070&SearchSource=3&q={searchTerms}");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.14");
    .
    .
    * Internet Explorer Version 7.0.6002.18005 *
    .
    [HKEY_CURRENT_USER\..\Internet Explorer\Main]
    .
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
    .
    Start Page: hxxp://fr.msn.com/
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://search.msn.com/spbasic.htm
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    .
    ============== Suspect (Cracks, Serials ... ) ==============
    .
    C:\Users\Jean-Luc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UE9O8TON\OfficeOne_patch[1].exe
    C:\Users\Riwan\AppData\Roaming\BitTorrent\TrackMania +Serials.torrent
    C:\Users\Riwan\AppData\Roaming\uTorrent\Lego Racers 2 [+crack].torrent
    C:\Users\Riwan\AppData\Roaming\uTorrent\Source-SDK-PST-Patch_05-07-09.exe.torrent
    C:\Users\Riwan\AppData\Roaming\uTorrent\TrackMania +Serials.torrent
    C:\Users\Riwan\Desktop\.housecall6.6\patch.exe
    C:\Users\Riwan\Desktop\Desktop\Torrent\AUTODESK.MAYA.UNLIMITED.V2009-ISO\maya2k9_crack\Crack\awkeygen.exe
    C:\Users\Riwan\Desktop\Desktop\Torrent\The Sims 3 - Razor1911 Final MAXSPEED\Final Version Patch\Sims3_1.0.632.00002_from_1.0.631.00002.exe
    C:\Users\Riwan\Desktop\Desktop\warcraft 3\Mappage warcraft 3\Warcraft III\grimext\PatchGenerator.exe
    C:\Users\Riwan\Desktop\Desktop\Zlash\Zlash Cracker.exe
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Crackme#1.EXE
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\CRACKME.EXE
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Lancez-moi.exe
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Dessacembler\OllyDBG\OllyDBG\OLLYDBG.EXE
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Dessacembler\windasm\Lancez-moi.exe
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Dessacembler\windasm\W32DSM89.EXE
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Editeur hexadecimal\HexaCours3\HexDecCharEditor.exe
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Editeur hexadecimal\HexaCours3\Keygen.exe
    C:\Users\Riwan\Documents\AUTODESK.MAYA.UNLIMITED.V2009-ISO\maya2k9_crack\Crack\awkeygen.exe
    C:\Users\Riwan\Documents\My Completed Downloads\stronghold_crusader_patch_1_1.zip
    C:\Users\Riwan\Documents\My Completed Downloads\StrongholdCrusader-PatchFR.zip
    C:\Users\Riwan\Downloads\[cheatdb.fr] UnDeadPatch v3.33 2008-09-06.rar
    C:\Users\Riwan\Downloads\A.A.2009.Pro.v4.8.Plus.Serial.life_time.rar
    C:\Users\Riwan\Downloads\beyonddivinityfrenchpatch1.47.exe
    C:\Users\Riwan\Downloads\Crackme1(2).zip
    C:\Users\Riwan\Downloads\Crackme1(3).zip
    C:\Users\Riwan\Downloads\Crackme1(4).zip
    C:\Users\Riwan\Downloads\Crackme1.zip
    C:\Users\Riwan\Downloads\Crackme2(2).zip
    C:\Users\Riwan\Downloads\Crackme2.zip
    C:\Users\Riwan\Downloads\crackme3.exe
    C:\Users\Riwan\Downloads\Crackme3.zip
    C:\Users\Riwan\Downloads\crackme4.exe
    C:\Users\Riwan\Downloads\misubot-cracked_+_no-cracked.rar
    C:\Users\Riwan\Downloads\Source-SDK-PST-Patch_05-07-09.exe
    C:\Users\Riwan\Downloads\warcraft_iii_the_frozen_throne_patch_v1.23a_francais_280296.exe
    C:\Users\Riwan\Downloads\WLMUniversalPatcher-POUR-WLM8.5.zip
    .
    ===================================
    .
    8410 Octet(s) - C:\Ad-Report-CLEAN.log
    .
    386 Fichier(s) - C:\Users\Riwan\AppData\Local\Temp
    25 Fichier(s) - C:\Windows\Temp
    .
    20 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
    49 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
    .
    Fin à: 13:18:29 | 26/09/2009
    .
    ============== E.O.F ==============
    .
    0
  11. archet9
     
    Pour y voir un peu plus:

    Télécharge RSIT (de random/random) sur le bureau :

    - Double clique sur RSIT.exe qui est sur le bureau
    - Clique sur Continue dans la fenêtre
    - RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
    - Poste le contenu de log.txt plus info.txt (réduit ds la barre de taches) à la fin de l’analyse .

    Les rapports sont dans le dossier ici C:\rsit
    a+

    0
  12. Sithranduil Messages postés 48 Statut Membre 1
     
    Log.txt :

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Riwan at 2009-09-26 18:02:06
    Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
    System drive C: has 125 GB (42%) free of 297 GB
    Total RAM: 2046 MB (42% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:02:21, on 26/09/2009
    Platform: Windows Vista SP2 (WinNT 6.00.1906)
    MSIE: Internet Explorer v7.00 (7.00.6002.18005)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
    C:\Windows\System32\qttask.exe
    C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
    C:\Program Files\MarkAny\ContentSafer\MaAgent.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Windows\RtHDVCpl.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
    C:\Program Files\DNA\btdna.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Windows\System32\mobsync.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\explorer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Users\Riwan\Desktop\Desktop\PRIZEEcavalier.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Users\Riwan\Desktop\Desktop\RSIT.exe
    C:\Program Files\Trend Micro\HijackThis\Riwan.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - (no file)
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: (no name) - {60270dc7-9ea0-472f-9b77-66652c06246e} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
    O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
    O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL
    O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
    O3 - Toolbar: (no name) - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - (no file)
    O3 - Toolbar: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
    O3 - Toolbar: (no name) - {60270dc7-9ea0-472f-9b77-66652c06246e} - (no file)
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
    O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
    O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
    O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
    O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
    O4 - HKLM\..\Run: [QuickTime Task] C:\Windows\System32\qttask.exe
    O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
    O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
    O4 - HKLM\..\Run: [MAAgent] C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
    O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
    O4 - Startup: BluetoothPCDialer.lnk = C:\Program Files\BluetoothPCDialer\BluetoothPCDialer.exe
    O4 - Global Startup: OFFICE One Startup v7.lnk = ?
    O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
    O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
    O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
    O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
    O8 - Extra context menu item: Télécharger en utilisant Download &Express - C:\Program Files\Download Express\Add_Url.htm
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
    O9 - Extra button: Translate - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnk
    O9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnk
    O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
    O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: lxcg_device - Unknown owner - C:\Windows\system32\lxcgcoms.exe
    O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
    O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
    O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
    O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
    O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
    O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe
    0
  13. archet9
     
    Re

    Ton scan est incomplet : trop long pour passer sur le forum ...
    Les rapports sont dans le dossier ici C:\rsit

    Utilises ci-joint pour me les transmettre .
    ==> Colles-moi le lien généré....

    ENSUITE:

    Fais un scan avec cet antispyware :
    Telecharges Malwarebytes + tutoriel

    Tu l´installes; mets le à jour...(si cela ne se fait pas automatiquement))
    Click maintenant sur l´onglet recherche et coche la case : "executer un examen rapide".
    Puis click sur "rechercher".
    Laisses le scanner le pc...
    Si des elements on ete trouvés > click sur supprimer la selection.
    si il t´es demandé de redemarrer > click sur "oui".
    A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vue de le poster sur le forum.
    Copies et colles le rapport stp.

    a+

    0
  14. Sithranduil Messages postés 48 Statut Membre 1
     
    Info.txt http://www.cijoint.fr/cjlink.php?file=cj200909/cijYVaMcST.txt
    Log.txt http://www.cijoint.fr/cjlink.php?file=cj200909/cijZL8RFDW.txt

    J'ai déjà Malwarebytes. Je fais se que tu me dis.
    0
  15. Sithranduil Messages postés 48 Statut Membre 1
     
    Malwarebytes : http://www.cijoint.fr/cjlink.php?file=cj200909/cijjz11app.txt
    0
  16. archet9
     
    Très bien....

    Ceci maintenant:

    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
    TOOLbar-s&d

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 2 (suppression).
    Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)
    0
  17. Sithranduil Messages postés 48 Statut Membre 1
     
    Le rapport de TOOLbar-s&d : http://www.cijoint.fr/cjlink.php?file=cj200909/cijLKwHVOw.txt
    0
  18. archet9
     
    Ok ...

    Fais tout de même attention concernant ta politique de "CRACKS"

    ==> Je ne veux pas faire de morale, mais saches que par expérience "perso" si tu continues
    tu auras tôt ou tard de biens plus gros problèmes...

    Comment se comporte le pc ?

    a+
    0
  19. Sithranduil Messages postés 48 Statut Membre 1
     
    Hum il va un peu mieux, pour les cracks il y en a certains que j'ai car j'ai tous bêtement perdus le cd ^^.
    0
  20. archet9
     
    Re,

    Eh bien !!!!!! tu as perdu un paquet de CD....!!!!!!

    ============== Suspect (Cracks, Serials ... ) ==============
    .
    C:\Users\Jean-Luc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UE9O8TON\OfficeOne_patch[1].exe
    C:\Users\Riwan\AppData\Roaming\BitTorrent\TrackMania +Serials.torrent
    C:\Users\Riwan\AppData\Roaming\uTorrent\Lego Racers 2 [+crack].torrent
    C:\Users\Riwan\AppData\Roaming\uTorrent\Source-SDK-PST-Patch_05-07-09.exe.torrent
    C:\Users\Riwan\AppData\Roaming\uTorrent\TrackMania +Serials.torrent
    C:\Users\Riwan\Desktop\.housecall6.6\patch.exe
    C:\Users\Riwan\Desktop\Desktop\Torrent\AUTODESK.MAYA.UNLIMITED.V2009-ISO\maya2k9_crack\Crack\awkeygen.exe
    C:\Users\Riwan\Desktop\Desktop\Torrent\The Sims 3 - Razor1911 Final MAXSPEED\Final Version Patch\Sims3_1.0.632.00002_from_1.0.631.00002.exe
    C:\Users\Riwan\Desktop\Desktop\warcraft 3\Mappage warcraft 3\Warcraft III\grimext\PatchGenerator.exe
    C:\Users\Riwan\Desktop\Desktop\Zlash\Zlash Cracker.exe
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Crackme#1.EXE
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\CRACKME.EXE
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Lancez-moi.exe
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Dessacembler\OllyDBG\OllyDBG\OLLYDBG.EXE
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Dessacembler\windasm\Lancez-moi.exe
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Dessacembler\windasm\W32DSM89.EXE
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Editeur hexadecimal\HexaCours3\HexDecCharEditor.exe
    C:\Users\Riwan\Desktop\Desktop\ÿ\Cracking\Outil\Editeur hexadecimal\HexaCours3\Keygen.exe
    C:\Users\Riwan\Documents\AUTODESK.MAYA.UNLIMITED.V2009-ISO\maya2k9_crack\Crack\awkeygen.exe
    C:\Users\Riwan\Documents\My Completed Downloads\stronghold_crusader_patch_1_1.zip
    C:\Users\Riwan\Documents\My Completed Downloads\StrongholdCrusader-PatchFR.zip
    C:\Users\Riwan\Downloads\[cheatdb.fr] UnDeadPatch v3.33 2008-09-06.rar
    C:\Users\Riwan\Downloads\A.A.2009.Pro.v4.8.Plus.Serial.life_time.rar
    C:\Users\Riwan\Downloads\beyonddivinityfrenchpatch1.47.exe
    C:\Users\Riwan\Downloads\Crackme1(2).zip
    C:\Users\Riwan\Downloads\Crackme1(3).zip
    C:\Users\Riwan\Downloads\Crackme1(4).zip
    C:\Users\Riwan\Downloads\Crackme1.zip
    C:\Users\Riwan\Downloads\Crackme2(2).zip
    C:\Users\Riwan\Downloads\Crackme2.zip
    C:\Users\Riwan\Downloads\crackme3.exe
    C:\Users\Riwan\Downloads\Crackme3.zip
    C:\Users\Riwan\Downloads\crackme4.exe
    C:\Users\Riwan\Downloads\misubot-cracked_+_no-cracked.rar
    C:\Users\Riwan\Downloads\Source-SDK-PST-Patch_05-07-09.exe
    C:\Users\Riwan\Downloads\warcraft_iii_the_frozen_throne_patch_v1.23a_francais_280296.exe
    C:\Users\Riwan\Downloads\WLMUniversalPatcher-POUR-WLM8.5.zip

    ==>Cela n'empêche pas de poursuivre....

    a+
    0

Discussions similaires

Enlever ou désactiver le mode sécurisé Freebox
Cycy -
bazfile -

18 réponses
Je veux retirer le mode sécurité de ma TV Freebox
beatrice -
baladur13 -

1 réponse
"Mode sécurisé": comment l'enlever ?
skander1615 -
Tito -

2 réponses
Comment supprimer le surlignage sur Word ?
luxbanne -
Maud -

11 réponses