Analyse Hiijackthis

List'em by g3n-h@ckm@n 1.1.2.1 

Thx to Chiquitine29..... 

User : Jean-Pierre (Administrateurs) # JEAN-PIERRE
Update on 07/12/2009 by g3n-h@ckm@n ::::: 11:00 
Start at: 12:22:16 | 07/12/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Pentium(R) III Mobile CPU       933MHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.11
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1351 [VPS 091206-1] 4.8.1351 [ (!) Disabled | Updated ]

C:\ -> Disque fixe local | 18,61 Go (2,16 Go free) | FAT32
D:\ -> Disque amovible
E:\ -> Disque CD-ROM
L:\ -> Connexion réseau | 464,62 Go (453,87 Go free) [share] | NTFS

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running 

C:\WINDOWS\System32\smss.exe 532
C:\WINDOWS\system32\csrss.exe 612
C:\WINDOWS\system32\winlogon.exe 636
C:\WINDOWS\system32\services.exe 680
C:\WINDOWS\system32\lsass.exe 692
C:\WINDOWS\system32\svchost.exe 852
C:\WINDOWS\system32\svchost.exe 904
C:\WINDOWS\System32\svchost.exe 992
C:\WINDOWS\System32\svchost.exe 1140
C:\WINDOWS\System32\svchost.exe 1316
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1436
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1484
C:\WINDOWS\system32\spoolsv.exe 1756
C:\WINDOWS\System32\svchost.exe 496
c:\program files\a-squared free\a2service.exe 524
C:\Program Files\Java\jre6\bin\jqs.exe 600
C:\WINDOWS\System32\nvsvc32.exe 884
C:\WINDOWS\system32\HPZipm12.exe 1032
C:\WINDOWS\System32\svchost.exe 1208
C:\WINDOWS\system32\wdfmgr.exe 1296
C:\Program Files\Viewpoint\Common\ViewpointService.exe 1428
c:\wamp\apache2\bin\httpd.exe 1560
C:\WINDOWS\Explorer.EXE 2012
c:\wamp\mysql\bin\mysqld-nt.exe 200
C:\WINDOWS\system32\fxssvc.exe 252
C:\wamp\apache2\bin\httpd.exe 1952
C:\WINDOWS\System32\CePMTray.exe 2168
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb01.exe 2176
C:\Program Files\Logitech\iTouch\iTouch.exe 2204
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe 2220
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 2228
C:\Program Files\QuickTime\qttask.exe 2252
C:\WINDOWS\system32\LVCOMSX.EXE 2260
C:\Program Files\Logitech\Video\LogiTray.exe 2276
C:\Program Files\Java\jre6\bin\jusched.exe 2284
C:\WINDOWS\system32\AEIWLSTA.EXE 2304
C:\WINDOWS\System32\hpha2mon.exe 3496
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 3512
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 3548
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 3536
C:\Program Files\Logitech\MouseWare\system\em_exec.exe 3568
C:\WINDOWS\system32\ctfmon.exe 3628
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe 3976
C:\Program Files\Microsoft ActiveSync\wcescomm.exe 4048
C:\WINDOWS\System32\HPHipm08.exe 916
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 1172
C:\PROGRA~1\MICROS~3\rapimgr.exe 1808
C:\Program Files\TOSHIBA\NetDevSw\NetDevSW.exe 2160
C:\WINDOWS\System32\alg.exe 1880
C:\Program Files\Logitech\Video\FxSvr2.exe 1932
C:\Program Files\Outlook Express\msimn.exe 1204
C:\Documents and Settings\Jean-Pierre\Mes documents\Mes outils\Antispam\K9.exe 568
C:\Program Files\BUFFALO\NASNAVI\NasNavi.exe 1940
C:\Program Files\Internet Explorer\iexplore.exe 2004
C:\WINDOWS\system32\taskmgr.exe 4200
C:\Program Files\Internet Explorer\iexplore.exe 5292
C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe 3880
C:\WINDOWS\system32\wscntfy.exe 3948
L:\Outils\List_Killem\List_Kill'em.exe 4076
C:\WINDOWS\system32\cmd.exe 2332
C:\WINDOWS\system32\wbem\wmiprvse.exe 892
C:\Documents and Settings\Jean-Pierre\Local Settings\Temp\22.tmp\pv.exe 4188

======================
Keys "Run" 
======================

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    ctfmon.exe	REG_SZ	C:\WINDOWS\system32\ctfmon.exe
    LogitechSoftwareUpdate	REG_SZ	"C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    H/PC Connection Agent	REG_SZ	"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
    swg	REG_SZ	C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    NvCplDaemon	REG_SZ	RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
    Apoint	REG_SZ	C:\Program Files\Apoint2K\Apoint.exe
    CeEPOWER	REG_SZ	C:\WINDOWS\System32\CePMTray.exe
    HPDJ Taskbar Utility	REG_SZ	C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb01.exe
    zBrowser Launcher	REG_SZ	C:\Program Files\Logitech\iTouch\iTouch.exe
    CP888M1	REG_SZ	C:\PROGRA~1\EzButton\CP888M1.EXE
    AdaptecDirectCD	REG_SZ	"C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
    avast!	REG_SZ	C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    Logitech Utility	REG_SZ	Logi_MwX.Exe
    QuickTime Task	REG_SZ	"C:\Program Files\QuickTime\qttask.exe" -atboottime
    LVCOMSX	REG_SZ	C:\WINDOWS\system32\LVCOMSX.EXE
    LogitechVideoRepair	REG_SZ	C:\Program Files\Logitech\Video\ISStart.exe 
    LogitechVideoTray	REG_SZ	C:\Program Files\Logitech\Video\LogiTray.exe
    SunJavaUpdateSched	REG_SZ	"C:\Program Files\Java\jre6\bin\jusched.exe"
    Adobe Reader Speed Launcher	REG_SZ	"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    AEIWLSTA.EXE	REG_SZ	AEIWLSTA.EXE START
    TkBellExe	REG_SZ	"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
    HPHA2MON	REG_SZ	C:\WINDOWS\System32\hpha2mon.exe
    hpfsched	REG_SZ	C:\WINDOWS\hpfsched.exe
    HP Software Update	REG_SZ	C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
=====================
Other Keys
=====================

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
    dontdisplaylastusername	REG_DWORD	0x0
    legalnoticecaption	REG_SZ	
    legalnoticetext	REG_SZ	
    shutdownwithoutlogon	REG_DWORD	0x1
    undockwithoutlogon	REG_DWORD	0x1
=============== 
AppInit_Dlls : NVDESK32.DLL 

===============
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon 
===============
BHO :
====== 
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{029CA12C-89C1-46a7-A3C7-82F2F98635CB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
"NoExplorer"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
"NoExplorer"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
@="JQSIEStartDetectorImpl"
"NoExplorer"=dword:00000001


================
Internet Explorer :
================ 

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main
    Start Page	REG_SZ	http://www.tinit.org/


! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
    Start Page	REG_SZ	https://www.google.fr/?gws_rd=ssl


========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services] 

Ndisuio : 0x3 
EapHost : 0x3 
SharedAccess : 0x2 
wuauserv : 0x2 
=========
 
=========================
Environnement variables :
=========================

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Jean-Pierre\Application Data
choix=1
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=JEAN-PIERRE
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Jean-Pierre
LANG=fr
LOGONSERVER=\\JEAN-PIERRE
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Fichiers communs\Adaptec Shared\System;C:\Program Files\Fichiers communs\GTK\2.0\bin;C:\READIBMW
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 11 Stepping 1, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0b01
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\JEAN-P~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\JEAN-P~1\LOCALS~1\Temp
USERDOMAIN=JEAN-PIERRE
USERNAME=Jean-Pierre
USERPROFILE=C:\Documents and Settings\Jean-Pierre
windir=C:\WINDOWS

==========
Programs
==========


¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\install.exe  
C:\WINDOWS\aucfg.ini  
C:\WINDOWS\patch.exe  
C:\WINDOWS\Readme.txt  
C:\WINDOWS\System32\ACTSKN43.ocx  
C:\WINDOWS\System32\drivers\etc\hosts.msn  
 
¤¤¤¤¤¤¤¤¤¤ Keys : 

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"  
HKCU\SOFTWARE\fcn  

=========
Rootkits
=========

catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-07 12:32:01
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

 
¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch : 

NTOSBOOT-B00DFAAD.pf
VERCLSID.EXE-3667BD89.pf
HPZINW12.EXE-0F63664A.pf
DEFRAG.EXE-273F131E.pf
NOTEPAD.EXE-336351A9.pf
HPZIPM12.EXE-145E7369.pf
DFRGFAT.EXE-03D95883.pf
HPI_PRINT.EXE-1146334E.pf
PHOTOFILTRE.EXE-22B29194.pf
WUAUCLT.EXE-399A8E72.pf
REALSCHED.EXE-04BEC5CC.pf
FTPXPERT.EXE-33AA8B7F.pf
REGSVR32.EXE-25EEFE2F.pf
AVAST.SETUP-032170A8.pf
TASKMGR.EXE-20256C55.pf
HPBOID.EXE-2482D394.pf
HPBPRO.EXE-1071DE90.pf
HPNRA.EXE-08D0A9E6.pf
HPQUSGL.EXE-1A66A7E1.pf
MSPAINT.EXE-11CBB631.pf
HPZSTC01.EXE-349A1E1B.pf
WMIPRVSE.EXE-28F301A9.pf
HPZENG01.EXE-11FDCEDB.pf
SHUTDOWN.EXE-12DAD820.pf
RUNDLL32.EXE-383267D7.pf
HPFSCHED.EXE-28B7CB06.pf
JUSCHED.EXE-25206883.pf
READER_SL.EXE-1A438403.pf
LOGONUI.EXE-0AF22957.pf
HPHA2MON.EXE-36FF6A72.pf
EM_EXEC.EXE-21B4F4A4.pf
HPWUSCHD2.EXE-02F6D2DD.pf
AEIWLSTA.EXE-2EF02DB3.pf
CTFMON.EXE-0E17969B.pf
VIEWMGR.EXE-1E800BBC.pf
EXPLORER.EXE-082F38A9.pf
WMIADAP.EXE-2DF425B2.pf
MANIFESTENGINE.EXE-36F394D0.pf
WCESCOMM.EXE-062FDF7F.pf
WSCNTFY.EXE-1B24F5EB.pf
IMAPIROX.EXE-118350FC.pf
ASHMAISV.EXE-12E27032.pf
ASHWEBSV.EXE-0548EF0A.pf
NETDEVSW.EXE-04CED8A9.pf
RAPIMGR.EXE-04A8BC13.pf
ALG.EXE-0F138680.pf
HPQTRA08.EXE-17E37E7E.pf
HPHIPM08.EXE-390DA723.pf
RUNDLL32.EXE-451FC2C0.pf
FXSVR2.EXE-14513BBA.pf
CLEARPROG.EXE-37476B49.pf
K9.EXE-236F9C10.pf
WEXPERT6.EXE-12DBA410.pf
NASNAVI.EXE-1795125D.pf
HPQNRS08.EXE-199A45CA.pf
WMIAPSRV.EXE-1E2270A5.pf
HPQSTE08.EXE-18A7280B.pf
HPQUSGM.EXE-1F64E65F.pf
DLLHOST.EXE-30852C07.pf
RUNDLL32.EXE-38C565ED.pf
MSIMN.EXE-38BA891D.pf
MSIEXEC.EXE-2F8A8CAE.pf
DUMPREP.EXE-1B46F901.pf
CONTROL.EXE-013DBFB5.pf
RUNDLL32.EXE-1831A4F3.pf
RUNDLL32.EXE-13DA0E71.pf
MSNMSGR.EXE-030AB647.pf
WLCOMM.EXE-04AE9009.pf
APOINT.EXE-1B53748D.pf
IEXPLORE.EXE-27122324.pf
SOLSUITE.EXE-0E576D02.pf
MSFEEDSSYNC.EXE-25E13438.pf
ACRORD32INFO.EXE-24548733.pf
ACRORD32.EXE-356875A2.pf
ALBUMDB2.EXE-0EEB0F05.pf
CEPMTRAY.EXE-08C17912.pf
HPZTSB01.EXE-0178F9AF.pf
ITOUCH.EXE-0DDF2B56.pf
CP888M1.EXE-339702D7.pf
DIRECTCD.EXE-29C72432.pf
ASHDISP.EXE-24136137.pf
LOGI_MWX.EXE-1B741F45.pf
QTTASK.EXE-342507FB.pf
LVCOMSX.EXE-0AC1D558.pf
LOGITRAY.EXE-33843C37.pf
RUNDLL32.EXE-241E44D6.pf
HPWUCLI.EXE-2587F620.pf
HPRBUPDATE.EXE-342FA7BD.pf
DWWIN.EXE-30875ADC.pf
PHP.EXE-35323454.pf
RUNDLL32.EXE-120AB86F.pf
RUNDLL32.EXE-268BFF96.pf
NOTEPAD_NOTEPAD_5.51_FRANCAIS-2A270F58.pf
XMLUPDATER.EXE-123A9E39.pf
NS43.TMP-2BB7DE62.pf
NS44.TMP-2346FF50.pf
NS45.TMP-16848EF0.pf
WINWORD.EXE-10D55173.pf
NS46.TMP-387A4EC2.pf
NS47.TMP-01513F7E.pf
NS48.TMP-3B1CCDBE.pf
GUP.EXE-19CD57B1.pf
NOTEPAD++.EXE-14917D45.pf
LOGON.SCR-151EFAEA.pf
RUNDLL32.EXE-250529E1.pf
RUNDLL32.EXE-1DE008AD.pf
RUNDLL32.EXE-18B83C73.pf
RUNDLL32.EXE-44244D7B.pf
Layout.ini
EXCEL.EXE-1C75F8D6.pf
RUNDLL32.EXE-2F349ACE.pf
RUNDLL32.EXE-2E5A8931.pf
RUNDLL32.EXE-1DE36DAB.pf
RUNDLL32.EXE-11FA8FF5.pf
RUNDLL32.EXE-2AFB798B.pf
RUNDLL32.EXE-3A4366E7.pf
RUNDLL32.EXE-15C82A19.pf
RUNDLL32.EXE-11A858AD.pf
RUNDLL32.EXE-2BCAA9BE.pf
RUNDLL32.EXE-1A967E9B.pf
RUNDLL32.EXE-4649469D.pf
NPPIEXPLORERSHELL.EXE-03E4BC2C.pf
WIAACMGR.EXE-212ED878.pf
RUNDLL32.EXE-22C1B30F.pf
RUNDLL32.EXE-376F23E3.pf
RUNDLL32.EXE-45F0E43B.pf
RUNDLL32.EXE-443DCCCB.pf
RUNDLL32.EXE-2D821D29.pf
RUNDLL32.EXE-396BC51D.pf
RUNDLL32.EXE-397D1300.pf
 
 
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Kill'em by g3n-h@ckm@n 1.1.2.1 
 
User : Jean-Pierre (Administrateurs) # JEAN-PIERRE
Update on 07/12/2009 by g3n-h@ckm@n ::::: 11:00 
Start at: 13:55:57 | 07/12/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Pentium(R) III Mobile CPU       933MHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.11
Windows Firewall Status : Disabled
AV : avast! antivirus 4.8.1351 [VPS 091206-1] 4.8.1351 [ Enabled | Updated ]

C:\ -> Disque fixe local | 18,61 Go (2,16 Go free) | FAT32
D:\ -> Disque amovible
E:\ -> Disque CD-ROM
L:\ -> Connexion réseau | 464,62 Go (453,87 Go free) [share] | NTFS
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running
 
C:\WINDOWS\System32\smss.exe 536
C:\WINDOWS\system32\csrss.exe 612
C:\WINDOWS\system32\winlogon.exe 636
C:\WINDOWS\system32\services.exe 680
C:\WINDOWS\system32\lsass.exe 692
C:\WINDOWS\system32\svchost.exe 856
C:\WINDOWS\system32\svchost.exe 904
C:\WINDOWS\System32\svchost.exe 992
C:\WINDOWS\System32\svchost.exe 1124
C:\WINDOWS\System32\svchost.exe 1304
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1420
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1468
C:\WINDOWS\system32\spoolsv.exe 1756
C:\WINDOWS\System32\svchost.exe 496
c:\program files\a-squared free\a2service.exe 412
C:\Program Files\Java\jre6\bin\jqs.exe 588
C:\WINDOWS\System32\nvsvc32.exe 864
C:\WINDOWS\system32\HPZipm12.exe 1028
C:\WINDOWS\System32\svchost.exe 1176
C:\WINDOWS\system32\wdfmgr.exe 1288
C:\Program Files\Viewpoint\Common\ViewpointService.exe 1524
c:\wamp\apache2\bin\httpd.exe 1568
c:\wamp\mysql\bin\mysqld-nt.exe 1904
C:\WINDOWS\system32\fxssvc.exe 1936
C:\wamp\apache2\bin\httpd.exe 244
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 3084
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 3120
C:\WINDOWS\Explorer.EXE 3148
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe 3660
C:\WINDOWS\system32\wscntfy.exe 3668
C:\WINDOWS\System32\alg.exe 3776
C:\WINDOWS\System32\CePMTray.exe 3400
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb01.exe 828
C:\Program Files\Logitech\iTouch\iTouch.exe 3224
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe 3500
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 1952
C:\Program Files\QuickTime\qttask.exe 204
C:\WINDOWS\system32\LVCOMSX.EXE 3740
C:\Program Files\Logitech\Video\LogiTray.exe 3260
C:\Program Files\Java\jre6\bin\jusched.exe 3592
C:\Program Files\Logitech\MouseWare\system\em_exec.exe 180
C:\WINDOWS\system32\AEIWLSTA.EXE 3976
C:\WINDOWS\System32\hpha2mon.exe 1032
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 3884
C:\WINDOWS\system32\ctfmon.exe 3560
C:\WINDOWS\System32\HPHipm08.exe 3548
C:\Program Files\Microsoft ActiveSync\wcescomm.exe 3876
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 3980
C:\Program Files\TOSHIBA\NetDevSw\NetDevSW.exe 3928
C:\PROGRA~1\MICROS~3\rapimgr.exe 3216
C:\Program Files\Logitech\Video\FxSvr2.exe 4052
C:\Program Files\Outlook Express\msimn.exe 4076
C:\Documents and Settings\Jean-Pierre\Mes documents\Mes outils\Antispam\K9.exe 4032
C:\Program Files\BUFFALO\NASNAVI\NasNavi.exe 2988
C:\Program Files\Internet Explorer\IEXPLORE.EXE 568
L:\Outils\List_Killem\List_Kill'em.exe 196
C:\WINDOWS\system32\cmd.exe 3356
C:\WINDOWS\system32\wbem\wmiprvse.exe 232
C:\Documents and Settings\Jean-Pierre\Local Settings\Temp\F.tmp\pv.exe 3392
 
Detections : 
========== 
 

¤¤¤¤¤¤¤¤¤¤ Files/folders : 

 
 
¤¤¤¤¤¤¤¤¤¤ Files/folders deleted : 
  
Quarantine : 


==============
host file OK !
==============

========
Registry
========

============
Disk Cleaned
============
 
¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch
 
NTOSBOOT-B00DFAAD.pf
Layout.ini
 
 
 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
 

C:\Hijackthis\HijackThis.exe: trouvé !
C:\Hijackthis\hijackthis.log: trouvé !