Rapport hijack
Bonjour,
voici le rapport obtenus avec hijack quelqu'un pourrait-il ml'en dire plus merci d'avance :)
Logfile of HijackThis v1.99.1
Scan saved at 13:12:16, on 14/03/2010
Platform: Unknown Windows (WinNT 6.00.1906 SP3)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Running processes:
C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Free Download Manager\fdm.exe
C:\hijackthis_199\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\tbBS_P.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\tbBS_P.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\tbBS_P.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [PSUNMain] "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe" /Traybar
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [sysinfo] C:\Windows\system32\rundll32.exe C:\Users\Murdoc\AppData\Local\Temp\572671554Wsy.dll,Sets
O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files (x86)\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: Service d'état ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: GameConsoleService - Unknown owner - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (file missing)
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Service Google Update (gupdate1ca27bc2a8a8f9) (gupdate1ca27bc2a8a8f9) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc (file missing)
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IS360service - IObit - C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NanoServiceMain - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
voici le rapport obtenus avec hijack quelqu'un pourrait-il ml'en dire plus merci d'avance :)
Logfile of HijackThis v1.99.1
Scan saved at 13:12:16, on 14/03/2010
Platform: Unknown Windows (WinNT 6.00.1906 SP3)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Running processes:
C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Free Download Manager\fdm.exe
C:\hijackthis_199\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\tbBS_P.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\tbBS_P.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\tbBS_P.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [PSUNMain] "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe" /Traybar
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [sysinfo] C:\Windows\system32\rundll32.exe C:\Users\Murdoc\AppData\Local\Temp\572671554Wsy.dll,Sets
O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files (x86)\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: Service d'état ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: GameConsoleService - Unknown owner - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (file missing)
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Service Google Update (gupdate1ca27bc2a8a8f9) (gupdate1ca27bc2a8a8f9) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc (file missing)
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IS360service - IObit - C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NanoServiceMain - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
Configuration: Windows Vista / Firefox 3.5.8
5 réponses
-
ModérateurSalut,
Ta version d'hijackthis est obsolète !
Pourquoi désires-tu que l'on t'aide ?
=> Quels sont tes soucis au juste ? -
Merci de la réponse je cherche a diminuer l'utilisation d'uc que prenne le processus svchost j'en ai 12 ouvert et en farfouillant sur le site j'ai vus qu'il était interessant d'utiliser sa...
Ce rapport sera meilleur je pense:
Logfile of Advanced SystemCare 3 Security Analyzer
Scan saved at 13:24:48, on 14/03/2010
Platform: Windows Vista (WinNT 6.0)
MSIE: Internet Explorer v8.0 (8.0.6001.18882)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
C:\Program Files (x86)\Free Download Manager\fdm.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 3\AWC.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: AOL Toolbar BHO - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AOL Toolbar BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: AOL Toolbar BHO - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: AOL Toolbar BHO - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\tbBS_P.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\tbBS_P.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [sysinfo] C:\Windows\system32\rundll32.exe C:\Users\Murdoc\AppData\Local\Temp\572671554Wsy.dll,Sets
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [PSUNMain] "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe" /Traybar
O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} -
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.6.0_16) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} (Java Plug-in 1.6.0_16) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_16) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
O23 - Service: ASKService - Unknown - C:\Program Files (x86)\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown - C:\Program Files (x86)\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: Service d'état ASP.NET (aspnet_state) - Unknown - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
O23 - Service: (Ati External Event Utility) - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: CanalPlus.VOD - Canal+ Active - C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
O23 - Service: GameConsoleService - Unknown - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: GameConsoleService (gpsvc) - Unknown - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: Service Google Update (gupdate1ca27bc2a8a8f9) (gupdate1ca27bc2a8a8f9) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IS360service - IObit - C:\Program Files (x86)\IObit\IObit Security 360\IS360srv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NanoServiceMain - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown - C:\Windows\system32\PnkBstrA.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown - %ProgramFiles%\Windows Media Player\wmpnetwk.exe -
ModérateurDésactive l'UAC (User Account Control) le temps de la désinfection.
Démarrer > Panneau de configuration > Comptes d'utilisateurs > Désactiver le contrôle des comptes d'utilisateur.
(Manipulation inverse pour le remettre en fin de désinfection).
(Cela va permettre aux outils de désinfection de travailler correctement).
*********
Recherche avec Ad-Remover :
Télécharge Ad-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
= = = =>>> En cliquant ici <<<= = = =
/!\ Déconnectes toi et fermes toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\
* Double clique sur le programme d'installation, et installe le dans son emplacement par défaut. (C:\Program files)
* Double clique sur Ad-remover situé sur ton bureau pour le lancer.
* Réponds `Exécuter` au message d'alerte automatique.
* Au menu principal clique sur le bouton Scanner
* Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
(CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Note :
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
-
.
======= RAPPORT D'AD-REMOVER 2.0.0.0,A | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 14/03/10 à 12:00
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 14:07:34 le 14/03/2010 | Mode normal | Option: SCAN
Exécuté de: C:\Ad-Remover\ADR.exe
Système d'exploitation: Microsoft® Windows Vista™ HomePremium Service Pack 3
Nom du PC: HAL | Utilisateur actuel: Murdoc (Administrateur)
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.
Service: *ASKService*
Service: *ASKUpgrade*
.
C:\Program Files (x86)\AskBarDis
C:\Program Files (x86)\live-player
C:\Program Files (x86)\Mozilla FireFox\Components\AskSearch.js
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\live-player
C:\Users\Murdoc\AppData\Local\wfveoggw.dat
C:\Users\Murdoc\AppData\Local\wfveoggw_nav.dat
C:\Users\Murdoc\AppData\Local\wfveoggw_navps.dat
C:\Users\Murdoc\AppData\Local\xpiyq.bat
C:\Users\Murdoc\AppData\Roaming\live-player
C:\Users\Murdoc\AppData\Roaming\Mozilla\FireFox\Profiles\5ytaojgi.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
C:\Users\Murdoc\AppData\Roaming\Mozilla\FireFox\Profiles\5ytaojgi.default\searchplugins\ask.xml
.
HKCU\Software\AppDataLow\AskBarDis
HKCU\Software\fcn
HKCU\Software\Live-Player
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\xpiyq
HKLM64\Software\Classes\AskIBar.PopSwatterBarButton
HKLM64\Software\Classes\AskIBar.PopSwatterBarButton.1
HKLM64\Software\Classes\AskIBar.PopSwatterSettingsControl
HKLM64\Software\Classes\AskIBar.PopSwatterSettingsControl.1
HKLM64\Software\Classes\AskToolBar.SettingsPlugin
HKLM64\Software\Classes\AskToolBar.SettingsPlugin.1
HKLM64\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
HKLM64\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
HKLM64\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
HKLM64\Software\Classes\Interface\{DB885111-F39F-4D88-9EE5-C88460B6DF7B}
HKLM64\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
HKLM64\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
HKLM64\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{3041D03E-FD4B-44E0-B742-2D9B88305F98}
.
============== SCAN ADDITIONNEL ==============
.
* Mozilla FireFox Version Impossible d'obtenir la version *
.
C:\Users\Murdoc\..\5ytaojgi.default\prefs.js - browser.download.lastDir: C:\\Users\\Murdoc\\Pictures
C:\Users\Murdoc\..\5ytaojgi.default\prefs.js - browser.search.defaultenginename: Chercher Malin
C:\Users\Murdoc\..\5ytaojgi.default\prefs.js - browser.search.defaulturl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2384137&SearchSource=3&q={searchTerms}
C:\Users\Murdoc\..\5ytaojgi.default\prefs.js - browser.search.selectedEngine: Chercher Malin
C:\Users\Murdoc\..\5ytaojgi.default\prefs.js - browser.startup.homepage: hxxp://www.google.fr/
C:\Users\Murdoc\..\5ytaojgi.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.8
C:\Users\Murdoc\..\5ytaojgi.default\prefs.js - keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2384137&SearchSource=2&q=
.
INFECTÉ: C:\Users\Murdoc\AppData\Roaming\mozilla\firefox\profiles\5ytaojgi.default\prefs.js
.
* Internet Explorer Version 8.0.6001.18882 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=93&bd=Pavilion&pf=cndt
Do404Search: 0x01000000
Enable Browser Extensions: yes
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Show_ToolBar: yes
Start Page: hxxp://search.conduit.com?SearchSource=10&ctid=CT1750559
Use Search Asst: no
.
[HKLM64\Software\Microsoft\Internet Explorer\Main]
.
AutoHide: yes
Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=93&bd=Pavilion&pf=cndt
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\System32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=93&bd=Pavilion&pf=cndt
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
.
============== SUSPECT(S) ==============
.
C:\Users\Murdoc\AppData\Roaming\Azureus\torrents\Ahead Nero Burning ROM 9.0.9.4 Multilingual+Serials.rar.torrent
C:\Users\Murdoc\AppData\Roaming\Azureus\torrents\Need_For_Speed_Most_Wanted_No_Cd_Crack_By_mAsLoW.torrent
C:\Users\Murdoc\AppData\Roaming\BSplayer\AC3 Filter\dialog_patch.exe
C:\Users\Murdoc\Desktop\pablo\LucasArts\Star Wars JK II Jedi Outcast\GameData\patch-104.exe
C:\Users\Murdoc\Desktop\pablo\wormsarm\Silkworm_patch.exe
C:\Users\Murdoc\Documents\Azureus Downloads\Batman Arham Asilum PC multi\Batman.Arkham.Updated.Crack\Batman.Arkham.Updated.Crack\BmStartApp.exe
C:\Users\Murdoc\Documents\Azureus Downloads\Batman.Arkham.Asylum.READNFO.MULTi5.Direct2Drive-INTERNAL-iND\Batman.Arkham.Asylum.Updated.CRACKFIX.2-TL\Batman.Fix.2.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Batman.Arkham.Asylum.READNFO.MULTi5.Direct2Drive-INTERNAL-iND\Batman.Arkham.Asylum.Updated.CRACKFIX.2-TL\usage.nfo
C:\Users\Murdoc\Documents\Azureus Downloads\Batman.Arkham.Asylum.READNFO.MULTi5.Direct2Drive-INTERNAL-iND\Batman.Arkham.Updated.Crack\Release.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Batman.Arkham.Asylum.READNFO.MULTi5.Direct2Drive-INTERNAL-iND\Batman_Arkham_Asylum_Crack\Batman_Crack.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout..3.FRENCH-KAO\crack\NS-FO3_SR-poseden.nfo
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part01.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part02.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part03.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part04.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part05.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part06.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part07.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part08.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part09.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part10.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part11.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part12.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part13.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part14.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part15.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part16.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part17.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part18.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part19.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part20.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part21.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part22.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part23.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part24.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part25.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part26.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part27.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part28.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part29.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part30.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part31.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part32.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part33.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part34.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part35.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part36.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part37.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part38.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part39.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part40.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part41.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part42.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part43.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part44.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part45.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part46.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part47.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part48.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part49.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part50.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part51.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part52.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part53.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part54.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part55.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part56.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part57.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part58.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part59.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part60.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack\Fallout.3.PCDVD.Castellano.wWw.ToDoTorrente.CoM\Fallout.3.part61.rar
C:\Users\Murdoc\Documents\Azureus Downloads\Need For Speed Most Wanted No-Cd Crack By mAsLoW.rar
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_100_2101_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2101_2201_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2201_2202_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2202_2300_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2300_2301_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2301_2400_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2400_2500_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2400_2500_Patch.exe.torrent
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2500_2501_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2500_2501_Patch.exe.torrent
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2501_2502_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2501_2502_Patch.exe.torrent
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2502_2600_Patch.exe
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\FR_2502_2600_Patch.exe.torrent
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch\RelicAutoPatcher_1102_French.exe
C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker\again.nfo
C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker\Autorun.exe
C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker\Diskeeper 2010.rar
C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker\Diskeeper2010-ProPremier-30day.exe
C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker\GladragManhunt™ Torrent List.url
C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker\Keygen.exe
C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker\X64\setup.exe
C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker\X86\setup.exe
.
========================================
.
C:\Users\Murdoc\AppData\Local\Temp: 10 Fichier(s), 4 Dossier(s)
C:\Windows\temp: 2 Fichier(s), 3 Dossier(s)
C:\Users\Murdoc\AppData\Roaming\Microsoft\Windows\Cookies: 20 Fichier(s), 2 Dossier(s)
Temporary Internet Files: 11 Fichier(s), 5 Dossier(s)
.
C:\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Ad-Remover\Backup: 0 Fichier(s)
.
C:\Ad-Report-SCAN[1].txt - 16628 Octet(s)
C:\Ad-Report-SCAN[2].txt - 16546 Octet(s)
.
Fin à: 14:11:18, 14/03/2010
.
============== E.O.F - SCAN[2] ============== -
ModérateurSupprime tous tes cracks.
Les cracks sont toujours bourrés d'infections !
. C:\Users\Murdoc\AppData\Roaming\Azureus\torrents\Ahead Nero Burning ROM 9.0.9.4 Multilingual+Serials.rar.torrent C:\Users\Murdoc\AppData\Roaming\Azureus\torrents\Need_For_Speed_Most_Wanted_No_Cd_Crack_By_mAsLoW.torrent C:\Users\Murdoc\AppData\Roaming\BSplayer\AC3 Filter\dialog_patch.exe C:\Users\Murdoc\Desktop\pablo\LucasArts\Star Wars JK II Jedi Outcast\GameData\patch-104.exe C:\Users\Murdoc\Desktop\pablo\wormsarm\Silkworm_patch.exe C:\Users\Murdoc\Documents\Azureus Downloads\Batman Arham Asilum PC multi\Batman.Arkham.Updated.Crack\Batman.Arkham.Updated.Crack\BmStartApp.exe C:\Users\Murdoc\Documents\Azureus Downloads\Batman.Arkham.Asylum.READNFO.MULTi5.Direct2Drive-INTERNAL-iND\Batman.Arkham.Asylum.Updated.CRACKFIX.2-TL\Batman.Fix.2.rar C:\Users\Murdoc\Documents\Azureus Downloads\Batman.Arkham.Asylum.READNFO.MULTi5.Direct2Drive-INTERNAL-iND\Batman.Arkham.Asylum.Updated.CRACKFIX.2-TL\usage.nfo C:\Users\Murdoc\Documents\Azureus Downloads\Batman.Arkham.Asylum.READNFO.MULTi5.Direct2Drive-INTERNAL-iND\Batman.Arkham.Updated.Crack\Release.rar C:\Users\Murdoc\Documents\Azureus Downloads\Batman.Arkham.Asylum.READNFO.MULTi5.Direct2Drive-INTERNAL-iND\Batman_Arkham_Asylum_Crack\Batman_Crack.rar C:\Users\Murdoc\Documents\Azureus Downloads\Fallout..3.FRENCH-KAO\crack\NS-FO3_SR-poseden.nfo C:\Users\Murdoc\Documents\Azureus Downloads\Fallout_3_crack C:\Users\Murdoc\Documents\Azureus Downloads\Need For Speed Most Wanted No-Cd Crack By mAsLoW.rar
Les patch sont également souvent infectés !!!
C:\Users\Murdoc\Documents\My Games\Company of Heroes\Patch C:\Users\Murdoc\Documents\Pablo\Diskeeper 2010 Pro Premier v14.0.900a + Patch And Keymaker
******
Suppression avec AD-R :
/!\ Déconnectes toi et fermes toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\
* Exécute AD-R.
* Au menu principal clique sur le bouton "Nettoyer".
* Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
******
Pour établir un diagnostic plus en profondeur de ton PC :
Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur le Bureau.
= = = = >>> En cliquant ici <<< = = = =
* Clique droit sur RSIT.exe puis sélectionne `Exécuter en tant qu'administrateur` pour le lancer.
* Une première fenêtre s'ouvre, clique alors sur Continue (Disclaimer).
* Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence.
* Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).
* Poste le contenu de log.txt et de info.txt.
