Security tool

son -  
 Utilisateur anonyme -
Bonjour,
au secours mon ordi a été vampirisé par ce machin qui se nomme Security Tool et qui apparait à tous bout de champ pour me dire en anglais que mon appareil est infecté et qu'il faut que je leur achète pour 49 $ leur système de nettoyage. Le bureau a disparu et quand je lance Avira pour une analyse il ne peut pas aller jusqu'au bout..
Help!!
Configuration: Windows XP Internet Explorer 8.0

2 réponses

  1. Utilisateur anonyme
     
    Bonsoir

    1- Télécharge et installe le logiciel HijackThis :

    https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
    ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
    ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

    -->Clique sur le setup pour lancer l'installation : laisse toi guider et ne modifie pas les paramètres d'installation .
    A la fin de l’installation, le programme se lance automatiquement : ferme le en cliquant sur la croix rouge.
    Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
    "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

    (Ne lance pas ce prg pour l'instant et fais la suite ... )

    2- Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

    -> http://images.malwareremoval.com/random/RSIT.exe

    ! Déconnecte toi et ferme toutes tes applications en cours !

    Double-clique sur " RSIT.exe " pour le lancer.

    Clic droit sous VISTA (exécuter en tant que…)

    -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

    * Devant l'option "List files/folders created ..." , tu choisis : 2 months

    * clique ensuite sur " Continue " pour lancer l'analyse ...

    -> laisse faire le scan et ne touche pas au PC ...

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

    Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

    Important : poste un rapport, puis l'autre dans la réponse suivante ...
    Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
    ( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

    ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit

    0
    1. son
       
      2009-11-28 17:37:14 ----A---- C:\rapport.txt
      2009-11-28 16:57:38 ----A---- C:\WINDOWS\ntbtlog.txt
      2009-11-28 00:31:11 ----D---- C:\Program Files\Windows Live Safety Center
      2009-11-28 00:10:48 ----HDC---- C:\WINDOWS\ie8
      2009-11-27 23:02:34 ----D---- C:\Documents and Settings\All Users\Application Data\13382522
      2009-11-27 00:09:47 ----D---- C:\Documents and Settings\sonia da silva\Application Data\yoclient
      2009-11-27 00:07:03 ----D---- C:\WINDOWS\Sun
      2009-11-26 02:13:47 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
      2009-11-26 02:11:00 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
      2009-11-26 02:05:49 ----D---- C:\Program Files\Adobe
      2009-11-26 02:04:14 ----SHD---- C:\Config.Msi
      2009-11-25 23:47:05 ----D---- C:\Program Files\Microsoft Works
      2009-11-25 23:46:42 ----D---- C:\Program Files\Microsoft Visual Studio
      2009-11-25 23:46:42 ----D---- C:\Program Files\Fichiers communs\DESIGNER
      2009-11-25 23:41:46 ----D---- C:\WINDOWS\SHELLNEW
      2009-11-25 23:41:04 ----D---- C:\Program Files\Microsoft Office
      2009-11-25 23:41:03 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
      2009-11-25 23:40:32 ----RHD---- C:\MSOCache
      2009-11-24 01:11:24 ----D---- C:\Program Files\Seekdns
      2009-11-24 01:11:24 ----D---- C:\Documents and Settings\All Users\Application Data\Seekdns
      2009-11-24 01:10:38 ----D---- C:\Documents and Settings\sonia da silva\Application Data\ShoppingReport
      2009-11-24 01:10:37 ----D---- C:\Program Files\ShoppingReport
      2009-11-23 00:53:42 ----D---- C:\Documents and Settings\sonia da silva\Application Data\URSE Games
      2009-11-22 18:04:56 ----D---- C:\Documents and Settings\All Users\Application Data\FireGlow
      2009-11-22 17:07:53 ----A---- C:\WINDOWS\system32\deploytk.dll
      2009-11-19 00:37:18 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Sun
      2009-11-19 00:11:45 ----D---- C:\Program Files\Registry Mechanic
      2009-11-16 01:33:38 ----SHD---- C:\WINDOWS\ftpcache
      2009-11-16 01:33:29 ----D---- C:\Program Files\Vente Flash
      2009-11-16 01:25:11 ----D---- C:\Documents and Settings\sonia da silva\Application Data\GOA
      2009-11-16 01:25:11 ----D---- C:\Documents and Settings\All Users\Application Data\GOA
      2009-11-15 18:03:12 ----D---- C:\Program Files\Microsoft Silverlight
      2009-11-15 01:51:46 ----D---- C:\Documents and Settings\All Users\Application Data\GameXzone
      2009-11-14 23:41:05 ----A---- C:\WINDOWS\system32\pywintypes25.dll
      2009-11-14 23:41:05 ----A---- C:\WINDOWS\system32\pythoncom25.dll
      2009-11-14 23:41:05 ----A---- C:\WINDOWS\system32\python25.dll
      2009-11-14 23:41:05 ----A---- C:\WINDOWS\system32\msvcr71.dll
      2009-11-13 11:21:39 ----HDC---- C:\WINDOWS\$NtUninstallKB974455$
      2009-11-11 23:39:58 ----D---- C:\Documents and Settings\All Users\Application Data\SugarGames
      2009-11-11 22:25:45 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
      2009-11-11 21:13:56 ----D---- C:\Documents and Settings\All Users\Application Data\AdventureChronicles1
      2009-11-11 16:48:22 ----D---- C:\Documents and Settings\sonia da silva\Application Data\SprillBermudeFr
      2009-11-11 14:55:32 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Playrix Entertainment
      2009-11-10 20:00:17 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Oberonv1002fr
      2009-11-10 17:47:17 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Anabel
      2009-11-09 22:27:12 ----D---- C:\Documents and Settings\All Users\Application Data\Astar Games
      2009-11-07 21:49:54 ----D---- C:\Documents and Settings\sonia da silva\Application Data\RobinsonCrusoe
      2009-11-07 21:03:53 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Merscom
      2009-11-07 21:03:53 ----D---- C:\Documents and Settings\All Users\Application Data\Merscom
      2009-11-06 23:37:00 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Meridian93
      2009-11-05 22:08:23 ----D---- C:\Documents and Settings\All Users\Application Data\Trymedia
      2009-11-03 23:30:30 ----D---- C:\Program Files\MyWebSearch
      2009-11-03 23:29:38 ----D---- C:\Program Files\FunWebProducts
      2009-11-03 23:10:48 ----D---- C:\Documents and Settings\sonia da silva\Application Data\DeepVoyage
      2009-11-03 23:10:20 ----D---- C:\Program Files\GameTop.com
      2009-11-02 23:03:11 ----D---- C:\Documents and Settings\All Users\Application Data\Princess Isabella
      2009-11-02 19:48:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
      2009-11-02 19:48:43 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
      2009-11-02 19:48:38 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
      2009-11-02 19:48:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
      2009-11-02 19:48:26 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
      2009-11-02 19:48:22 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
      2009-11-02 19:48:16 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
      2009-11-02 19:48:10 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
      2009-11-02 19:48:07 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
      2009-11-02 19:48:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
      2009-11-02 19:47:51 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
      2009-11-02 19:43:50 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
      2009-11-02 19:43:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
      2009-11-02 19:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
      2009-11-02 19:43:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
      2009-11-02 19:43:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
      2009-11-02 19:43:23 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
      2009-11-02 19:43:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
      2009-11-02 19:43:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
      2009-11-02 19:42:58 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
      2009-11-02 19:42:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
      2009-11-02 19:42:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
      2009-11-02 19:42:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
      2009-11-02 19:42:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
      2009-11-02 19:42:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
      2009-11-02 19:42:24 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
      2009-11-02 19:42:18 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
      2009-11-02 19:42:13 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
      2009-11-02 19:42:08 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
      2009-11-02 19:42:02 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
      2009-11-02 19:41:55 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
      2009-11-02 19:41:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
      2009-11-02 19:41:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
      2009-11-02 19:41:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
      2009-11-02 19:41:29 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
      2009-11-02 19:41:23 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
      2009-11-02 19:41:18 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
      2009-11-02 19:41:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
      2009-11-02 19:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
      2009-11-02 19:41:02 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
      2009-11-02 19:40:52 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
      2009-11-02 13:47:46 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
      2009-11-02 13:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
      2009-11-02 13:47:19 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
      2009-11-02 13:47:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
      2009-11-02 13:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
      2009-11-02 13:46:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
      2009-11-02 13:46:48 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
      2009-11-02 13:46:37 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
      2009-11-02 13:46:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
      2009-11-02 13:46:24 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
      2009-11-02 13:46:07 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
      2009-11-02 13:45:57 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
      2009-11-02 13:23:05 ----D---- C:\WINDOWS\system32\PreInstall
      2009-11-02 13:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
      2009-10-31 22:55:15 ----D---- C:\Documents and Settings\sonia da silva\Application Data\FloodLightGames
      2009-10-31 22:55:15 ----D---- C:\Documents and Settings\All Users\Application Data\FloodLightGames
      2009-10-31 22:54:59 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Flood Light Games
      2009-10-31 22:54:59 ----D---- C:\Documents and Settings\All Users\Application Data\Flood Light Games
      2009-10-31 21:35:21 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Oberonv1002
      2009-10-30 23:38:04 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Friday's games
      2009-10-30 23:37:51 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
      2009-10-30 23:37:41 ----D---- C:\Documents and Settings\All Users\Application Data\GamesBar
      2009-10-30 23:37:10 ----D---- C:\Program Files\GamesBar
      2009-10-30 23:36:57 ----D---- C:\Program Files\Oberon Media
      2009-10-30 23:36:56 ----D---- C:\Program Files\orange
      2009-10-30 23:36:56 ----D---- C:\Program Files\Fichiers communs\Oberon Media
      2009-10-30 21:29:27 ----HD---- C:\$AVG
      2009-10-30 21:29:18 ----A---- C:\WINDOWS\system32\avgrsstx.dll
      2009-10-30 21:29:02 ----D---- C:\Documents and Settings\All Users\Application Data\avg9
      2009-10-30 19:16:00 ----A---- C:\WINDOWS\system32\muweb.dll
      2009-10-30 19:16:00 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
      2009-10-30 19:16:00 ----A---- C:\WINDOWS\system32\mucltui.dll
      2009-10-30 04:24:13 ----D---- C:\WINDOWS\system32\SoftwareDistribution
      2009-10-30 03:56:29 ----D---- C:\Program Files\WIDCOMM
      2009-10-30 03:56:18 ----N---- C:\WINDOWS\system32\sonia da silva_KBD.ini
      2009-10-30 03:55:17 ----ASH---- C:\Documents and Settings\sonia da silva\Application Data\desktop.ini
      2009-10-30 03:55:16 ----SD---- C:\Documents and Settings\sonia da silva\Application Data\Microsoft
      2009-10-30 03:55:16 ----D---- C:\Documents and Settings\sonia da silva\Application Data\InstallShield
      2009-10-30 03:55:16 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Identities
      2009-10-30 03:55:16 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Adobe
      2009-10-30 00:53:52 ----D---- C:\Program Files\AVG
      2009-10-30 00:53:52 ----D---- C:\Documents and Settings\All Users\Application Data\avg8ls
      2009-10-29 23:42:28 ----D---- C:\Program Files\Microsoft
      2009-10-29 23:42:08 ----D---- C:\Program Files\Windows Live SkyDrive
      2009-10-29 23:41:40 ----D---- C:\Program Files\Windows Live
      2009-10-29 23:38:00 ----D---- C:\Program Files\Fichiers communs\Windows Live
      2009-10-29 23:24:05 ----A---- C:\WINDOWS\system32\jose fernandes_KBD.ini
      2009-10-29 22:04:57 ----HD---- C:\WINDOWS\msdownld.tmp
      2009-10-29 22:04:19 ----D---- C:\WINDOWS\ie8updates
      2009-10-29 22:03:37 ----D---- C:\WINDOWS\WBEM
      2009-10-29 22:02:57 ----A---- C:\WINDOWS\system32\spupdsvc.exe
      2009-10-29 21:59:25 ----A---- C:\WINDOWS\system32\MRT.exe
      2009-10-29 21:46:30 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Macromedia
      2009-10-29 21:39:11 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Google

      ======List of files/folders modified in the last 2 months======

      2009-11-28 22:16:28 ----RD---- C:\Program Files
      2009-11-28 22:12:52 ----A---- C:\WINDOWS\SchedLgU.Txt
      2009-11-28 22:12:03 ----D---- C:\WINDOWS\Temp
      2009-11-28 19:18:24 ----D---- C:\WINDOWS\Help
      2009-11-28 19:09:47 ----D---- C:\WINDOWS\system32
      2009-11-28 19:08:49 ----D---- C:\Documents and Settings
      2009-11-28 17:21:38 ----D---- C:\WINDOWS\Prefetch
      2009-11-28 17:03:05 ----D---- C:\WINDOWS\Network Diagnostic
      2009-11-28 16:57:38 ----D---- C:\WINDOWS
      2009-11-28 16:46:00 ----D---- C:\WINDOWS\system32\CatRoot2
      2009-11-28 03:19:47 ----HD---- C:\WINDOWS\inf
      2009-11-28 03:19:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
      2009-11-28 03:19:46 ----D---- C:\WINDOWS\system32\CatRoot
      2009-11-28 03:19:37 ----A---- C:\WINDOWS\imsins.BAK
      2009-11-28 00:31:13 ----SD---- C:\WINDOWS\Downloaded Program Files
      2009-11-28 00:21:59 ----SD---- C:\WINDOWS\Tasks
      2009-11-28 00:14:31 ----D---- C:\WINDOWS\system32\fr-fr
      2009-11-28 00:14:30 ----D---- C:\Program Files\Internet Explorer
      2009-11-28 00:12:03 ----D---- C:\WINDOWS\Media
      2009-11-27 23:17:45 ----SHD---- C:\WINDOWS\Installer
      2009-11-27 23:16:50 ----A---- C:\WINDOWS\win.ini
      2009-11-27 23:15:13 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
      2009-11-27 23:15:08 ----D---- C:\WINDOWS\WinSxS
      2009-11-26 02:10:48 ----HD---- C:\WINDOWS\$hf_mig$
      2009-11-26 02:07:37 ----D---- C:\WINDOWS\system32\wbem
      2009-11-26 02:07:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
      2009-11-26 02:06:10 ----D---- C:\Program Files\Fichiers communs\Adobe
      2009-11-26 02:06:03 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
      2009-11-25 23:47:59 ----D---- C:\WINDOWS\system32\config
      2009-11-25 23:46:42 ----D---- C:\Program Files\Fichiers communs
      2009-11-25 23:45:59 ----RSD---- C:\WINDOWS\Fonts
      2009-11-25 23:45:36 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
      2009-11-25 23:42:06 ----D---- C:\Program Files\Fichiers communs\System
      2009-11-22 17:07:40 ----A---- C:\WINDOWS\system32\javaws.exe
      2009-11-22 17:07:40 ----A---- C:\WINDOWS\system32\javaw.exe
      2009-11-22 17:07:40 ----A---- C:\WINDOWS\system32\java.exe
      2009-11-22 17:07:38 ----D---- C:\Program Files\Java
      2009-11-17 10:47:52 ----D---- C:\WINDOWS\system32\drivers
      2009-11-03 00:32:14 ----D---- C:\Program Files\Google
      2009-11-02 19:48:39 ----D---- C:\Program Files\Messenger
      2009-11-02 19:42:05 ----D---- C:\Program Files\Outlook Express
      2009-11-02 13:49:31 ----D---- C:\WINDOWS\AppPatch
      2009-10-30 21:03:09 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
      2009-10-30 21:02:58 ----D---- C:\Program Files\McAfee
      2009-10-30 13:10:58 ----D---- C:\WINDOWS\WinClon
      2009-10-30 04:24:23 ----D---- C:\WINDOWS\SoftwareDistribution
      2009-10-30 03:59:45 ----D---- C:\WINDOWS\security
      2009-10-30 03:58:57 ----AD---- C:\WINDOWS\MSETUP
      2009-10-30 03:58:05 ----D---- C:\Program Files\Samsung
      2009-10-30 03:54:47 ----A---- C:\WINDOWS\setuplog.txt
      2009-10-30 03:54:41 ----SHD---- C:\System Volume Information
      2009-10-30 03:54:41 ----D---- C:\WINDOWS\system32\Restore
      2009-10-30 03:54:37 ----ASH---- C:\boot.ini
      2009-10-30 03:49:36 ----D---- C:\WINDOWS\Registration
      2009-10-30 03:43:04 ----D---- C:\WINDOWS\repair
      2009-10-29 23:23:52 ----A---- C:\WINDOWS\OEWABLog.txt
      2009-10-29 22:12:02 ----SHD---- C:\RECYCLER
      2009-10-28 16:07:15 ----A---- C:\WINDOWS\system32\tzchange.exe
      2009-10-22 10:17:28 ----A---- C:\WINDOWS\system32\mshtml.dll

      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-11-10 360584]
      R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-10-08 1334432]
      R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
      R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-08-28 224736]
      R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
      R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
      R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
      R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-11-07 291328]
      S1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-10-30 333192]
      S1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-10-30 28424]
      S1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
      S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
      S2 DOSMEMIO;MEMIO; \??\C:\WINDOWS\system32\MEMIO.SYS []
      S3 btaudio;Périphérique audio Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2008-07-27 539640]
      S3 BTDriver;Pilote de communications virtuelles Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-07-27 37424]
      S3 BTKRNL;Enumérateur de bus Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2008-07-29 879832]
      S3 BTWDNDIS;Serveur d'accès au réseau local Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-29 156816]
      S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-07-27 74688]
      S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
      S3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
      S3 DNSeFilter;DNSeFilter; C:\WINDOWS\system32\drivers\SamsungEDS.sys [2008-01-14 30208]
      S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
      S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
      S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-08-27 4753920]
      S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
      S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
      S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
      S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
      S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
      S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
      S3 SUEPD;SUE NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\SUE_PD.sys [2006-08-01 19840]
      S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
      S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
      S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
      S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
      S3 VMC326;Vimicro Camera Service VMC326; C:\WINDOWS\System32\Drivers\VMC326.sys [2008-09-23 238464]
      S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
      S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      S2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2009-10-30 906520]
      S2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2009-10-30 285392]
      S2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-09-17 264800]
      S2 gupdate;Service Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-03 133104]
      S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-11-22 153376]
      S2 MyWebSearchService;My Web Search Service; C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe [2009-11-03 28762]
      S2 Samsung Update Plus;Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [2008-05-13 77480]
      S2 Seekdns Service;Seekdns Service; C:\Documents and Settings\All Users\Application Data\Seekdns\seekdns123.exe [2009-11-26 58720]
      S2 yksvc;Marvell Yukon Service; ykx32mpcoinst,serviceStartProc []
      S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-29 182768]
      S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
      S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

      -----------------EOF-----------------
      0
    2. son
       
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by sonia da silva at 2009-11-28 22:44:06
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 62 GB (86%) free of 73 GB
      Total RAM: 1014 MB (75% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 22:44:07, on 28/11/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Safe mode with network support

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\AVG\AVG9\avgchsvx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Windows Live\Contacts\wlcomm.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\sonia da silva\Bureau\RSIT.exe
      C:\Program Files\Trend Micro\HijackThis\sonia da silva.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
      O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
      O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
      O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
      O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
      O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe
      O4 - HKLM\..\Run: [BatteryManager] C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
      O4 - HKLM\..\Run: [MagicKeyboard] C:\Program Files\SAMSUNG\MagicKBD\PreMKBD.exe
      O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
      O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
      O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
      O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [13382522] C:\DOCUME~1\ALLUSE~1\APPLIC~1\13382522\13382522.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\sonia da silva\Local Settings\Temp\IE8-Setup-Full-MSN-XP.exe
      O4 - Startup: Vente Flash.lnk = C:\Program Files\Vente Flash\vente_flash.exe
      O4 - Global Startup: BTTray.lnk = ?
      O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxpt031YYFR
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
      O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
      O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
      O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
      O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
      O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
      O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/CursorManiaInitialSetup1.0.1.1.cab
      O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
      O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
      O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
      O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
      O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
      O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
      O23 - Service: Samsung Update Plus - Unknown owner - C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe
      O23 - Service: Seekdns Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\Seekdns\seekdns123.exe
      O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)
      0
  2. son
     
    Logfile of random's system information tool 1.06 (written by random/random)
    Run by sonia da silva at 2009-11-28 23:14:41
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 62 GB (86%) free of 73 GB
    Total RAM: 1014 MB (77% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 23:14:42, on 28/11/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Safe mode with network support

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\AVG\AVG9\avgchsvx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\sonia da silva\Bureau\HJTInstall.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\sonia da silva\Bureau\RSIT.exe
    C:\Program Files\trend micro\sonia da silva.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
    O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
    O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
    O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
    O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
    O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe
    O4 - HKLM\..\Run: [BatteryManager] C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
    O4 - HKLM\..\Run: [MagicKeyboard] C:\Program Files\SAMSUNG\MagicKBD\PreMKBD.exe
    O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
    O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
    O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [13382522] C:\DOCUME~1\ALLUSE~1\APPLIC~1\13382522\13382522.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\sonia da silva\Local Settings\Temp\IE8-Setup-Full-MSN-XP.exe
    O4 - Startup: Vente Flash.lnk = C:\Program Files\Vente Flash\vente_flash.exe
    O4 - Global Startup: BTTray.lnk = ?
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxpt031YYFR
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
    O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
    O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
    O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/CursorManiaInitialSetup1.0.1.1.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
    O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
    O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
    O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
    O23 - Service: Samsung Update Plus - Unknown owner - C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe
    O23 - Service: Seekdns Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\Seekdns\seekdns123.exe
    O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)
    0
    1. Utilisateur anonyme
       
      Re

      Un petit effort stp,pour poster dans l'ordre. ;-)

      Pourquoi en mode sans échec?



      0
      1. son > Utilisateur anonyme
         
        désolé, mais je ne peux pas envoyer de nouveau qu'il dit a déjà été envoyé
        0
      2. son > son
         
        j'ai le 2 bloc-notes que faire ensuite?
        0
      3. Utilisateur anonyme > son
         
        Re

        L'un après l'autre poste les rapports en utilisant ceci:

        Pour me le transmettre clique sur ce lien :

        http://www.cijoint.fr/

        Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier
        Clique sur Ouvrir.

        Clique sur "Cliquez ici pour déposer le fichier".

        Un lien de cette forme :

        http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

        est ajouté dans la page.

        Copie ce lien dans ta réponse.
        0

Discussions similaires

Security boot fail lors du démarrage
Steu -
Thiecoss -

5 réponses
SecurityHealth est a désactiver ou pas au démarrage de W10 Pro 64 ?
Walti55 -
Walti55 -

2 réponses
Comment retirer le SECURE BOOT ?
Elparigo60 -
ibounwali -

10 réponses
Security Boot Fail Windows 10 Acer
benjamin5800 -
benjamin5800 -

22 réponses
Analyse de l'appli "AI SECURITY"
cl06 -
CCMBot -

1 réponse