Sujet Précédent Sujet Suivant

Security tool

Fermé
son - 28 nov. 2009 à 20:10
 Utilisateur anonyme - 29 nov. 2009 à 00:24
Bonjour,
au secours mon ordi a été vampirisé par ce machin qui se nomme Security Tool et qui apparait à tous bout de champ pour me dire en anglais que mon appareil est infecté et qu'il faut que je leur achète pour 49 $ leur système de nettoyage. Le bureau a disparu et quand je lance Avira pour une analyse il ne peut pas aller jusqu'au bout..
Help!!
A voir également:

2 réponses

Réponse 1 / 2
Utilisateur anonyme
28 nov. 2009 à 20:11
Bonsoir

1- Télécharge et installe le logiciel HijackThis :

https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

-->Clique sur le setup pour lancer l'installation : laisse toi guider et ne modifie pas les paramètres d'installation .
A la fin de l’installation, le programme se lance automatiquement : ferme le en cliquant sur la croix rouge.
Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
"C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

(Ne lance pas ce prg pour l'instant et fais la suite ... )


2- Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer.

Clic droit sous VISTA (exécuter en tant que…)

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...


-> laisse faire le scan et ne touche pas au PC ...


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante ...
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit




0
son
28 nov. 2009 à 23:25
2009-11-28 17:37:14 ----A---- C:\rapport.txt
2009-11-28 16:57:38 ----A---- C:\WINDOWS\ntbtlog.txt
2009-11-28 00:31:11 ----D---- C:\Program Files\Windows Live Safety Center
2009-11-28 00:10:48 ----HDC---- C:\WINDOWS\ie8
2009-11-27 23:02:34 ----D---- C:\Documents and Settings\All Users\Application Data\13382522
2009-11-27 00:09:47 ----D---- C:\Documents and Settings\sonia da silva\Application Data\yoclient
2009-11-27 00:07:03 ----D---- C:\WINDOWS\Sun
2009-11-26 02:13:47 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-11-26 02:11:00 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2009-11-26 02:05:49 ----D---- C:\Program Files\Adobe
2009-11-26 02:04:14 ----SHD---- C:\Config.Msi
2009-11-25 23:47:05 ----D---- C:\Program Files\Microsoft Works
2009-11-25 23:46:42 ----D---- C:\Program Files\Microsoft Visual Studio
2009-11-25 23:46:42 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-11-25 23:41:46 ----D---- C:\WINDOWS\SHELLNEW
2009-11-25 23:41:04 ----D---- C:\Program Files\Microsoft Office
2009-11-25 23:41:03 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-11-25 23:40:32 ----RHD---- C:\MSOCache
2009-11-24 01:11:24 ----D---- C:\Program Files\Seekdns
2009-11-24 01:11:24 ----D---- C:\Documents and Settings\All Users\Application Data\Seekdns
2009-11-24 01:10:38 ----D---- C:\Documents and Settings\sonia da silva\Application Data\ShoppingReport
2009-11-24 01:10:37 ----D---- C:\Program Files\ShoppingReport
2009-11-23 00:53:42 ----D---- C:\Documents and Settings\sonia da silva\Application Data\URSE Games
2009-11-22 18:04:56 ----D---- C:\Documents and Settings\All Users\Application Data\FireGlow
2009-11-22 17:07:53 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-11-19 00:37:18 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Sun
2009-11-19 00:11:45 ----D---- C:\Program Files\Registry Mechanic
2009-11-16 01:33:38 ----SHD---- C:\WINDOWS\ftpcache
2009-11-16 01:33:29 ----D---- C:\Program Files\Vente Flash
2009-11-16 01:25:11 ----D---- C:\Documents and Settings\sonia da silva\Application Data\GOA
2009-11-16 01:25:11 ----D---- C:\Documents and Settings\All Users\Application Data\GOA
2009-11-15 18:03:12 ----D---- C:\Program Files\Microsoft Silverlight
2009-11-15 01:51:46 ----D---- C:\Documents and Settings\All Users\Application Data\GameXzone
2009-11-14 23:41:05 ----A---- C:\WINDOWS\system32\pywintypes25.dll
2009-11-14 23:41:05 ----A---- C:\WINDOWS\system32\pythoncom25.dll
2009-11-14 23:41:05 ----A---- C:\WINDOWS\system32\python25.dll
2009-11-14 23:41:05 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-11-13 11:21:39 ----HDC---- C:\WINDOWS\$NtUninstallKB974455$
2009-11-11 23:39:58 ----D---- C:\Documents and Settings\All Users\Application Data\SugarGames
2009-11-11 22:25:45 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2009-11-11 21:13:56 ----D---- C:\Documents and Settings\All Users\Application Data\AdventureChronicles1
2009-11-11 16:48:22 ----D---- C:\Documents and Settings\sonia da silva\Application Data\SprillBermudeFr
2009-11-11 14:55:32 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Playrix Entertainment
2009-11-10 20:00:17 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Oberonv1002fr
2009-11-10 17:47:17 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Anabel
2009-11-09 22:27:12 ----D---- C:\Documents and Settings\All Users\Application Data\Astar Games
2009-11-07 21:49:54 ----D---- C:\Documents and Settings\sonia da silva\Application Data\RobinsonCrusoe
2009-11-07 21:03:53 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Merscom
2009-11-07 21:03:53 ----D---- C:\Documents and Settings\All Users\Application Data\Merscom
2009-11-06 23:37:00 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Meridian93
2009-11-05 22:08:23 ----D---- C:\Documents and Settings\All Users\Application Data\Trymedia
2009-11-03 23:30:30 ----D---- C:\Program Files\MyWebSearch
2009-11-03 23:29:38 ----D---- C:\Program Files\FunWebProducts
2009-11-03 23:10:48 ----D---- C:\Documents and Settings\sonia da silva\Application Data\DeepVoyage
2009-11-03 23:10:20 ----D---- C:\Program Files\GameTop.com
2009-11-02 23:03:11 ----D---- C:\Documents and Settings\All Users\Application Data\Princess Isabella
2009-11-02 19:48:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-11-02 19:48:43 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-11-02 19:48:38 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-11-02 19:48:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-11-02 19:48:26 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-11-02 19:48:22 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-11-02 19:48:16 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-11-02 19:48:10 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-11-02 19:48:07 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-11-02 19:48:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-11-02 19:47:51 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
2009-11-02 19:43:50 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-11-02 19:43:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-11-02 19:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-11-02 19:43:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-11-02 19:43:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2009-11-02 19:43:23 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-11-02 19:43:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-11-02 19:43:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-11-02 19:42:58 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-11-02 19:42:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-11-02 19:42:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-11-02 19:42:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-11-02 19:42:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-11-02 19:42:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-11-02 19:42:24 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-11-02 19:42:18 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-11-02 19:42:13 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-11-02 19:42:08 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-11-02 19:42:02 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-11-02 19:41:55 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-11-02 19:41:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2009-11-02 19:41:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-11-02 19:41:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-11-02 19:41:29 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-11-02 19:41:23 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-11-02 19:41:18 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-11-02 19:41:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-11-02 19:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2009-11-02 19:41:02 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-11-02 19:40:52 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-11-02 13:47:46 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-11-02 13:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-11-02 13:47:19 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-11-02 13:47:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-11-02 13:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-11-02 13:46:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-11-02 13:46:48 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-11-02 13:46:37 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-11-02 13:46:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-11-02 13:46:24 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-11-02 13:46:07 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-11-02 13:45:57 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-11-02 13:23:05 ----D---- C:\WINDOWS\system32\PreInstall
2009-11-02 13:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-10-31 22:55:15 ----D---- C:\Documents and Settings\sonia da silva\Application Data\FloodLightGames
2009-10-31 22:55:15 ----D---- C:\Documents and Settings\All Users\Application Data\FloodLightGames
2009-10-31 22:54:59 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Flood Light Games
2009-10-31 22:54:59 ----D---- C:\Documents and Settings\All Users\Application Data\Flood Light Games
2009-10-31 21:35:21 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Oberonv1002
2009-10-30 23:38:04 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Friday's games
2009-10-30 23:37:51 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-10-30 23:37:41 ----D---- C:\Documents and Settings\All Users\Application Data\GamesBar
2009-10-30 23:37:10 ----D---- C:\Program Files\GamesBar
2009-10-30 23:36:57 ----D---- C:\Program Files\Oberon Media
2009-10-30 23:36:56 ----D---- C:\Program Files\orange
2009-10-30 23:36:56 ----D---- C:\Program Files\Fichiers communs\Oberon Media
2009-10-30 21:29:27 ----HD---- C:\$AVG
2009-10-30 21:29:18 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2009-10-30 21:29:02 ----D---- C:\Documents and Settings\All Users\Application Data\avg9
2009-10-30 19:16:00 ----A---- C:\WINDOWS\system32\muweb.dll
2009-10-30 19:16:00 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-10-30 19:16:00 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-10-30 04:24:13 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-10-30 03:56:29 ----D---- C:\Program Files\WIDCOMM
2009-10-30 03:56:18 ----N---- C:\WINDOWS\system32\sonia da silva_KBD.ini
2009-10-30 03:55:17 ----ASH---- C:\Documents and Settings\sonia da silva\Application Data\desktop.ini
2009-10-30 03:55:16 ----SD---- C:\Documents and Settings\sonia da silva\Application Data\Microsoft
2009-10-30 03:55:16 ----D---- C:\Documents and Settings\sonia da silva\Application Data\InstallShield
2009-10-30 03:55:16 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Identities
2009-10-30 03:55:16 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Adobe
2009-10-30 00:53:52 ----D---- C:\Program Files\AVG
2009-10-30 00:53:52 ----D---- C:\Documents and Settings\All Users\Application Data\avg8ls
2009-10-29 23:42:28 ----D---- C:\Program Files\Microsoft
2009-10-29 23:42:08 ----D---- C:\Program Files\Windows Live SkyDrive
2009-10-29 23:41:40 ----D---- C:\Program Files\Windows Live
2009-10-29 23:38:00 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-10-29 23:24:05 ----A---- C:\WINDOWS\system32\jose fernandes_KBD.ini
2009-10-29 22:04:57 ----HD---- C:\WINDOWS\msdownld.tmp
2009-10-29 22:04:19 ----D---- C:\WINDOWS\ie8updates
2009-10-29 22:03:37 ----D---- C:\WINDOWS\WBEM
2009-10-29 22:02:57 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-10-29 21:59:25 ----A---- C:\WINDOWS\system32\MRT.exe
2009-10-29 21:46:30 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Macromedia
2009-10-29 21:39:11 ----D---- C:\Documents and Settings\sonia da silva\Application Data\Google

======List of files/folders modified in the last 2 months======

2009-11-28 22:16:28 ----RD---- C:\Program Files
2009-11-28 22:12:52 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-28 22:12:03 ----D---- C:\WINDOWS\Temp
2009-11-28 19:18:24 ----D---- C:\WINDOWS\Help
2009-11-28 19:09:47 ----D---- C:\WINDOWS\system32
2009-11-28 19:08:49 ----D---- C:\Documents and Settings
2009-11-28 17:21:38 ----D---- C:\WINDOWS\Prefetch
2009-11-28 17:03:05 ----D---- C:\WINDOWS\Network Diagnostic
2009-11-28 16:57:38 ----D---- C:\WINDOWS
2009-11-28 16:46:00 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-28 03:19:47 ----HD---- C:\WINDOWS\inf
2009-11-28 03:19:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-11-28 03:19:46 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-28 03:19:37 ----A---- C:\WINDOWS\imsins.BAK
2009-11-28 00:31:13 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-28 00:21:59 ----SD---- C:\WINDOWS\Tasks
2009-11-28 00:14:31 ----D---- C:\WINDOWS\system32\fr-fr
2009-11-28 00:14:30 ----D---- C:\Program Files\Internet Explorer
2009-11-28 00:12:03 ----D---- C:\WINDOWS\Media
2009-11-27 23:17:45 ----SHD---- C:\WINDOWS\Installer
2009-11-27 23:16:50 ----A---- C:\WINDOWS\win.ini
2009-11-27 23:15:13 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-11-27 23:15:08 ----D---- C:\WINDOWS\WinSxS
2009-11-26 02:10:48 ----HD---- C:\WINDOWS\$hf_mig$
2009-11-26 02:07:37 ----D---- C:\WINDOWS\system32\wbem
2009-11-26 02:07:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-26 02:06:10 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-11-26 02:06:03 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-11-25 23:47:59 ----D---- C:\WINDOWS\system32\config
2009-11-25 23:46:42 ----D---- C:\Program Files\Fichiers communs
2009-11-25 23:45:59 ----RSD---- C:\WINDOWS\Fonts
2009-11-25 23:45:36 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-25 23:42:06 ----D---- C:\Program Files\Fichiers communs\System
2009-11-22 17:07:40 ----A---- C:\WINDOWS\system32\javaws.exe
2009-11-22 17:07:40 ----A---- C:\WINDOWS\system32\javaw.exe
2009-11-22 17:07:40 ----A---- C:\WINDOWS\system32\java.exe
2009-11-22 17:07:38 ----D---- C:\Program Files\Java
2009-11-17 10:47:52 ----D---- C:\WINDOWS\system32\drivers
2009-11-03 00:32:14 ----D---- C:\Program Files\Google
2009-11-02 19:48:39 ----D---- C:\Program Files\Messenger
2009-11-02 19:42:05 ----D---- C:\Program Files\Outlook Express
2009-11-02 13:49:31 ----D---- C:\WINDOWS\AppPatch
2009-10-30 21:03:09 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
2009-10-30 21:02:58 ----D---- C:\Program Files\McAfee
2009-10-30 13:10:58 ----D---- C:\WINDOWS\WinClon
2009-10-30 04:24:23 ----D---- C:\WINDOWS\SoftwareDistribution
2009-10-30 03:59:45 ----D---- C:\WINDOWS\security
2009-10-30 03:58:57 ----AD---- C:\WINDOWS\MSETUP
2009-10-30 03:58:05 ----D---- C:\Program Files\Samsung
2009-10-30 03:54:47 ----A---- C:\WINDOWS\setuplog.txt
2009-10-30 03:54:41 ----SHD---- C:\System Volume Information
2009-10-30 03:54:41 ----D---- C:\WINDOWS\system32\Restore
2009-10-30 03:54:37 ----ASH---- C:\boot.ini
2009-10-30 03:49:36 ----D---- C:\WINDOWS\Registration
2009-10-30 03:43:04 ----D---- C:\WINDOWS\repair
2009-10-29 23:23:52 ----A---- C:\WINDOWS\OEWABLog.txt
2009-10-29 22:12:02 ----SHD---- C:\RECYCLER
2009-10-28 16:07:15 ----A---- C:\WINDOWS\system32\tzchange.exe
2009-10-22 10:17:28 ----A---- C:\WINDOWS\system32\mshtml.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-11-10 360584]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-10-08 1334432]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-08-28 224736]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-11-07 291328]
S1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-10-30 333192]
S1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-10-30 28424]
S1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
S2 DOSMEMIO;MEMIO; \??\C:\WINDOWS\system32\MEMIO.SYS []
S3 btaudio;Périphérique audio Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2008-07-27 539640]
S3 BTDriver;Pilote de communications virtuelles Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-07-27 37424]
S3 BTKRNL;Enumérateur de bus Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2008-07-29 879832]
S3 BTWDNDIS;Serveur d'accès au réseau local Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-29 156816]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-07-27 74688]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
S3 DNSeFilter;DNSeFilter; C:\WINDOWS\system32\drivers\SamsungEDS.sys [2008-01-14 30208]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-08-27 4753920]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SUEPD;SUE NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\SUE_PD.sys [2006-08-01 19840]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 VMC326;Vimicro Camera Service VMC326; C:\WINDOWS\System32\Drivers\VMC326.sys [2008-09-23 238464]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2009-10-30 906520]
S2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2009-10-30 285392]
S2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-09-17 264800]
S2 gupdate;Service Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-03 133104]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-11-22 153376]
S2 MyWebSearchService;My Web Search Service; C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe [2009-11-03 28762]
S2 Samsung Update Plus;Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [2008-05-13 77480]
S2 Seekdns Service;Seekdns Service; C:\Documents and Settings\All Users\Application Data\Seekdns\seekdns123.exe [2009-11-26 58720]
S2 yksvc;Marvell Yukon Service; ykx32mpcoinst,serviceStartProc []
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-29 182768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------
0
son
28 nov. 2009 à 23:29
Logfile of random's system information tool 1.06 (written by random/random)
Run by sonia da silva at 2009-11-28 22:44:06
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 62 GB (86%) free of 73 GB
Total RAM: 1014 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:44:07, on 28/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\sonia da silva\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\sonia da silva.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe
O4 - HKLM\..\Run: [BatteryManager] C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
O4 - HKLM\..\Run: [MagicKeyboard] C:\Program Files\SAMSUNG\MagicKBD\PreMKBD.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [13382522] C:\DOCUME~1\ALLUSE~1\APPLIC~1\13382522\13382522.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\sonia da silva\Local Settings\Temp\IE8-Setup-Full-MSN-XP.exe
O4 - Startup: Vente Flash.lnk = C:\Program Files\Vente Flash\vente_flash.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxpt031YYFR
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/CursorManiaInitialSetup1.0.1.1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: Samsung Update Plus - Unknown owner - C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe
O23 - Service: Seekdns Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\Seekdns\seekdns123.exe
O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)
0
Réponse 2 / 2
son
28 nov. 2009 à 23:22
Logfile of random's system information tool 1.06 (written by random/random)
Run by sonia da silva at 2009-11-28 23:14:41
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 62 GB (86%) free of 73 GB
Total RAM: 1014 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:14:42, on 28/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\sonia da silva\Bureau\HJTInstall.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\sonia da silva\Bureau\RSIT.exe
C:\Program Files\trend micro\sonia da silva.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe
O4 - HKLM\..\Run: [BatteryManager] C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
O4 - HKLM\..\Run: [MagicKeyboard] C:\Program Files\SAMSUNG\MagicKBD\PreMKBD.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [13382522] C:\DOCUME~1\ALLUSE~1\APPLIC~1\13382522\13382522.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\sonia da silva\Local Settings\Temp\IE8-Setup-Full-MSN-XP.exe
O4 - Startup: Vente Flash.lnk = C:\Program Files\Vente Flash\vente_flash.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxpt031YYFR
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/CursorManiaInitialSetup1.0.1.1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: Samsung Update Plus - Unknown owner - C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe
O23 - Service: Seekdns Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\Seekdns\seekdns123.exe
O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)
0
Utilisateur anonyme
28 nov. 2009 à 23:31
Re

Un petit effort stp,pour poster dans l'ordre. ;-)

Pourquoi en mode sans échec?



0
son > Utilisateur anonyme
29 nov. 2009 à 00:04
désolé, mais je ne peux pas envoyer de nouveau qu'il dit a déjà été envoyé
0
son > son
29 nov. 2009 à 00:09
j'ai le 2 bloc-notes que faire ensuite?
0
Utilisateur anonyme > son
29 nov. 2009 à 00:24
Re

L'un après l'autre poste les rapports en utilisant ceci:

Pour me le transmettre clique sur ce lien :

http://www.cijoint.fr/

Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier
Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.
0

Discussions similaires

Code de réinitialisation mdp facebook sans le demander
Colonel_El_Moustachat -
Colonel_El_Moustachat -

4 réponses
Analyse de l'appli "AI SECURITY"
cl06 -
CCMBot -

1 réponse
Security boot fail lors du démarrage
Steu -
NBK -

4 réponses
SecurityHealth est a désactiver ou pas au démarrage de W10 Pro 64 ?
Walti55 -
Walti55 -

2 réponses
Boîte mail piratée ?
mike the llama -
mike the llama -

4 réponses