PC infecté par antivirus software

sofie353 -  
 Utilisateur anonyme -
J'ai essayé tout ce qui est indiqué sur le site en mode en échec et dès que je reviens dans le mode normal, rien à faire... Le virus ne part pas !

17 réponses

  1. sofie353
     
    S'il vous plait... J'ai un concours lundi et je ne peux pas réviser à cause de ce virus...!
    0
  2. Utilisateur anonyme
     
    bonjour,
    on va regarder tout ceci :-)

    * Télécharge ZHPDiag

    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    * Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Héberge le rapport ZHPDiag.txt sur ce site, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.
    http://www.cijoint.fr/
    0
  3. sofie353 Messages postés 51 Statut Membre 1
     
    Rapport de ZHPDiag v1.25.1421 par Nicolas Coolman, Update du 06/05/2010
    Run by Sophie Chantrel at 2010/05/08 14:38:48
    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    Contact : nicolascoolman@yahoo.fr

    ---\\ Web Browser
    MSIE: Internet Explorer v8.0.6001.18702
    MFIE: Mozilla Firefox (3.0.10)

    ---\\ System Information
    Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
    Processor: x86 Family 6 Model 15 Stepping 6, GenuineIntel
    Operating System: 32 Bits
    Boot mode:
    Total RAM: 1014.1 MB (75% free)
    System drive C: has 2 GB (4%) free of 47 GB

    ---\\ Logged in mode
    Computer Name: SOPHIE
    User Name: Sophie Chantrel
    Unselected Option: O1,O45,O61,O65
    Logged in as Administrator

    ---\\ DOS/Devices
    C:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 47 Go)
    D:\ Hard drive, Flash drive, Thumb drive (Free 37 Go of 39 Go)
    F:\ CD-ROM drive (Not Inserted)
    G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
    H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

    ---\\ Security Center & Tools Informations
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

    ---\\ Processus lancés
    [MD5.4B5F60169F872E6033F09A52BCA791EA] - (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe [151552]
    [MD5.53DD7F282907634C269F54810ED0740C] - (.Sony Corporation - Wireless Switch Setting Utility.) -- C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe [176128]
    [MD5.8C57857A286A24E5CE40FB863FBDD172] - (.Roxio - Drag To Disc Application.) -- C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe [1470464]
    [MD5.77F7595C557D70CADA31F595C7746018] - (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll [7561216]
    [MD5.93EEFBC237ADFC406F52EE56D97F784B] - (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe [32768]
    [MD5.54F1F98C4AD8F99BBBE8FBB62B38733F] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [94208]
    [MD5.32FB9368F485A7FE944EB6678B61734B] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [118784]
    [MD5.D9F3DB62D1B361D82CD82A347EA6218D] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [77824]
    [MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe [64512]
    [MD5.08C33341BED2E3EAA2C77A0B68EF9553] - (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [53248]
    [MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [209153]
    [MD5.26187C6CE31B7730521936DE2B6F293D] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint\Apoint.exe [118784]
    [MD5.102B0DC83D1038C7D249FD09C8DD7185] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328]
    [MD5.ED7A6D40B20DC34BE06F4AE196AE7D50] - (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe [421888]
    [MD5.59C0BDCFE273334D3133C7F2B57A2A13] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [142120]
    [MD5.A4434521F85606C7CBC6CE975D5686A7] - (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe [268544]
    [MD5.59DC5BB82E4C8E0B3EADCFDBC44BA6E4] - (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe [15360]
    [MD5.18B4B12358EFCF68D76812058A26181F] - (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe [3883856]
    [MD5.594231994FF61F3F07411C95A43798B5] - (.Pas de propriétaire - Pas de description.) -- C:\DOCUME~1\SOPHIE~1\LOCALS~1\Temp\Mph.exe [171008]
    [MD5.2486C8E3F14496341E90CF2AB8BC82ED] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe [102400]
    [MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [108289]
    [MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [185089]
    [MD5.ACB095E7E1663F1B83A41C22C5D75F90] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [144672]
    [MD5.E4BDF223CD75478BF44567B4D5C2634D] - (.Microsoft Corporation - Generic Host Process for Win32 Services.) -- C:\WINDOWS\System32\svchost.exe [14336]
    [MD5.A065F048E9E23E6C026A7BB548D126A7] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376]
    [MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568]
    [MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424]
    [MD5.C3FB1D70CB88722267949694BA51759E] - (.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\WINDOWS\system32\services.exe [111104]
    [MD5.2B1284C4EC97CC204F8430F5CCC2992F] - (.Intel Corporation - Intel(R) PROSet/Wireless Event Log.) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [434176]
    [MD5.B6E01969246FCB67470E87E6957EE147] - (.GEAR Software - gearsec.) -- C:\WINDOWS\System32\GEARSec.exe [53248]
    [MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [135664]
    [MD5.112325F53AB720CA77825726D427FBDC] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
    [MD5.52404CC76E9D53843BDF97564BB16BED] - (.Microsoft Corporation - MCRD Device Service.) -- C:\WINDOWS\ehome\mcrdsvc.exe [99328]
    [MD5.F2206624CEDCAC5581D6F9F0F95A31FB] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 86.06.) -- C:\WINDOWS\system32\nvsvc32.exe [143428]
    [MD5.91E6024D6D4DCDECDB36C43ECF9BBECB] - (.Microsoft Corporation - LSA Shell (Export Version).) -- C:\WINDOWS\system32\lsass.exe [13312]
    [MD5.C35EC743558ED20FBC99C47616F9415E] - (.Intel Corporation - Intel(R) PROSet/Wireless Registry Service.) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [327680]
    [MD5.D72566C2E6A9EE9BA5B0D1F855AF74CF] - (.Intel Corporation - Wireless Management Service.) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [937984]
    [MD5.460E4CE148BD07218DA0B6A3D31885A9] - (.Microsoft Corporation - Spooler SubSystem App.) -- C:\WINDOWS\system32\spoolsv.exe [57856]
    [MD5.1D5425783D92F34C63075FA0C4E2C3D5] - (.Sony Corporation - VAIO Event Service (Service Module).) -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [176128]
    [MD5.55A47A048E5FD13977CA47DF39CBA5FF] - (.Sony Corporation - VAIO Task Scheduler Service.) -- C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe [398336]
    [MD5.AF9EBC7CF22A18E2369346067F555953] - (.Sony Corporation - VAIO Entertainment Database Service.) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [131072]
    [MD5.37D04941A5B52027EE32D2685F0F72BA] - (.Sony Corporation - VAIO Entertainment File Import Service.) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [118784]
    0
  4. sofie353 Messages postés 51 Statut Membre 1
     
    ---\\ Pages de recherche d'Internet Explorer (R1)
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555

    ---\\ Internet Explorer URLSearchHook (R3)
    R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)) -- C:\WINDOWS\system32\ieframe.dll

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- c:\program files\real\realplayer\rpbrowserrecordplugin.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\GOOGLE~1\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    ---\\ Internet Explorer Toolbars (O3)
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} . (.Veoh Networks Inc - Veoh Browser Plug-in.) -- C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} . (.Veoh Networks Inc - Veoh Video Finder.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

    ---\\ Applications démarrées automatiquement par le registre (O4)
    O4 - HKLM\..\Run: [VAIO Update 2] . (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
    O4 - HKLM\..\Run: [Switcher.exe] . (.Sony Corporation - Wireless Switch Setting Utility.) -- C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
    O4 - HKLM\..\Run: [RoxioDragToDisc] . (.Roxio - Drag To Disc Application.) -- C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
    O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
    O4 - HKLM\..\Run: [ISBMgr.exe] . (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe
    O4 - HKLM\..\Run: [igfxtray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [igfxpers] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [igfxhkcmd] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [AzMixerSel] . (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
    O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint\Apoint.exe
    O4 - HKLM\..\Run: [Acrobat Assistant 7.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
    O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe
    O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [fqeecvpe] . (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
    O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    O4 - HKCU\..\Run: [M5T8QL3YW3] . (.Pas de propriétaire - Pas de description.) -- C:\DOCUME~1\SOPHIE~1\LOCALS~1\Temp\Mph.exe
    O4 - HKCU\..\Run: [fqeecvpe] . (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
    O4 - Global Startup: EasyAgenda.lnk . (.Neogie Software - http://www.neogie.com.) -- C:\Program Files\EasyAgenda\EasyAgenda.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk . (.Microsoft Corporation - Microsoft Office XP component.) -- C:\Program Files\Microsoft Office\Office10\OSA.EXE

    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
    O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Sony\VAIO Information FLOW\aiesc.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~3\Office10\EXCEL.exe
    O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll
    O8 - Extra context menu item: Transfert par Image Converter 2 Plus . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Sony\Image Converter 2\menu.htm

    ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
    O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~3\OFFICE11\REFBARH.ICO
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)
    O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

    ---\\ Winsock hijacker (Layered Service Provider) (O10)
    O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
    O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
    O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
    O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

    ---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
    O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.club-vaio.com/fr/

    ---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
    O15 - Trusted Zone: [HKCU\...\Domains] *.sony-europe.com
    O15 - Trusted Zone: [HKCU\...\Domains\www] *.sony-europe.com
    O15 - Trusted Zone: [HKCU\...\Domains] *.sonystyle-europe.com
    O15 - Trusted Zone: [HKCU\...\Domains\www] *.sonystyle-europe.com
    O15 - Trusted Zone: [HKCU\...\Domains] *.vaio-link.com
    O15 - Trusted Zone: [HKCU\...\Domains\www] *.vaio-link.com

    ---\\ Objets ActiveX (Downloaded Program Files)(O16)
    O16 - DPF: CabBuilder (CabBuilder) - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab

    ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
    O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
    O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\System32\igfxdev.dll
    O20 - Winlogon Notify: VESWinlogon . (.Sony Corporation - VAIO Event Service (Winlogon Notification M.) -- C:\WINDOWS\System32\VESWinlogon.dll
    O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\System32\WgaLogon.dll

    ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
    O21 - SSODL: 0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} - CLSID or File not found.
    O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
    O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
    O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

    ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
    O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

    ---\\ Liste des services NT non Microsoft et non désactivés (O23)
    O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel Corporation - Intel(R) PROSet/Wireless Event Log.) - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: (GEARSecurity) . (.GEAR Software - gearsec.) - C:\WINDOWS\System32\GEARSec.exe
    O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 86.06.) - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) . (.Intel Corporation - Wireless Management Service.) - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: VAIO Event Service (VAIO Event Service) . (.Sony Corporation - VAIO Event Service (Service Module).) - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    O23 - Service: VAIO Cooporated Initialisation (VCI) . (.Sony Corporation - VAIO Task Scheduler Service.) - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
    O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) . (.Sony Corporation - VAIO Entertainment Database Service.) - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    O23 - Service: VAIO Entertainment File Import Service (VzFw) . (.Sony Corporation - VAIO Entertainment File Import Service.) - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. sofie353 Messages postés 51 Statut Membre 1
     
    ---\\ Tâches planifiées en automatique (O39)
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{138DE675-5BA2-479F-80E0-0A8BD59232B4}.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{1731C1AE-900E-4084-99E7-04D4EC9F499B}.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job

    ---\\ Composants installés (ActiveSetup Installed Components) (O40)
    O40 - ASIC: Personnalisation du navigateur - >{CB58DED6-4AF3-4080-9DF1-DEE72075169F} . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
    O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
    O40 - ASIC: Media Center - {407408d4-94ed-4d86-ab69-a7f649d112ee} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\inf\mcdftreg.inf
    O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf
    O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf
    O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp11.inf
    O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r42.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10d.ocx

    ---\\ Pilotes lancés au démarrage (O41)
    O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
    O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys
    O41 - Driver: Sony DMI Call service (DMICall) . (.Sony Corporation - Windows 2000 DMI Call Kernel Driver.) - C:\Windows\system32\DRIVERS\DMICall.sys
    O41 - Driver: SASDIFSV (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV.SYS.) - C:\Program Files\SUPERAntiSpyware\SASDIFSV.sys
    O41 - Driver: SASKUTIL (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL.SYS.) - C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
    O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys
    O41 - Driver: Bluetooth RFCOMM from TOSHIBA (Tosrfcom) . (.TOSHIBA Corporation - Bluetooth RFCOMM Driver.) - C:\Windows\system32\Drivers\tosrfcom.sys
    O41 - Driver: Symantec Eraser Control driver (eeCtrl) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: Adobe Acrobat 7.0 Elements - Français - (.Adobe Systems.) [HKLM]
    O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM]
    O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM]
    O42 - Logiciel: Adobe Help Center 2.0 - (.Adobe Systems.) [HKLM]
    O42 - Logiciel: Adobe Photoshop Elements 4.0 - (.Adobe Systems, Inc..) [HKLM]
    O42 - Logiciel: Adobe Reader 7.1.0 - Français - (.Adobe Systems Incorporated.) [HKLM]
    O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM]
    O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM]
    O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM]
    O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM]
    O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM]
    O42 - Logiciel: Browser Address Error Redirector - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: CEP - Color Enable Package - (.Numenor, for ModTheSims2.) [HKLM]
    O42 - Logiciel: Calendrier Xtra v11.020 - (.XTRALOG.) [HKLM]
    O42 - Logiciel: Click to DVD 2.0.03 Menu Data - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: Click to DVD 2.5.30 - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: Convertor 1.0 - (.Grégory HARGOUS.) [HKLM]
    O42 - Logiciel: DVgate Plus - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM]
    O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM]
    O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM]
    O42 - Logiciel: DivX Player - (.DivX, Inc..) [HKLM]
    O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM]
    O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM]
    O42 - Logiciel: EasyAgenda - (.Neogie Software.) [HKLM]
    O42 - Logiciel: EssentialPIM - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM]
    O42 - Logiciel: High Definition Audio Driver Package - KB835221 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Image Converter 2 Plus - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: Inscription en ligne VAIO (Français) - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: InterVideo WinDVD for VAIO - (.InterVideo Inc..) [HKLM]
    O42 - Logiciel: J2SE Runtime Environment 5.0 Update 6 - (.Sun Microsystems, Inc..) [HKLM]
    O42 - Logiciel: JA-Tennis 1.11.0.0 - (.EC+JCR.) [HKLM]
    O42 - Logiciel: Java(TM) 6 Update 15 - (.Sun Microsystems, Inc..) [HKLM]
    O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM]
    O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: LAN Setting Utility - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: LAN-Express AS IEEE 802.11 Wireless LAN - (.LAN-Express.) [HKLM]
    O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Les Sims(TM) 2 Double Deluxe - (.Electronic Arts.) [HKLM]
    O42 - Logiciel: Logiciel Intel(R) PROSet/Wireless - (.Intel Corporation.) [HKLM]
    O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM]
    O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM]
    O42 - Logiciel: Memory Stick Formatter - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Messenger Plus! 3 - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM]
    O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB953295) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM]
    O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM]
    O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297) - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Carioca - (.Microsoft.) [HKLM]
    O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Office PowerPoint Viewer 2003 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Office Standard Edition 2003 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Office XP Standard - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Mozilla Firefox (3.0.10) - (.Mozilla.) [HKLM]
    O42 - Logiciel: My Club VAIO MCE (French) 1.0.1 - (.Club VAIO.) [HKLM]
    O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Office 2003 Trial Assistant - (.Microsoft.) [HKLM]
    O42 - Logiciel: OpenMG AAC Add-on Module 1.0.00 - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: OpenMG Limited Patch 4.5-06-05-12-01 - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: OpenMG Secure Module 4.5.01 - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: OpenOffice.org 3.0 - (.OpenOffice.org.) [HKLM]
    O42 - Logiciel: Outil VAIO Media Registration 5.0 - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM]
    O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM]
    O42 - Logiciel: Photo et imagerie HP 2.0 - hp psc 1200 series - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Picasa 2 - (.Google, Inc..) [HKLM]
    O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM]
    O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM]
    O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM]
    O42 - Logiciel: Roxio DigitalMedia Audio - (.Roxio.) [HKLM]
    O42 - Logiciel: Roxio DigitalMedia Copy - (.Roxio.) [HKLM]
    O42 - Logiciel: Roxio DigitalMedia Data - (.Roxio.) [HKLM]
    O42 - Logiciel: Roxio Easy Media Creator 7 - (.Roxio, Inc..) [HKLM]
    O42 - Logiciel: SUPERAntiSpyware Free Edition - (.SUPERAntiSpyware.com.) [HKLM]
    O42 - Logiciel: Safari - (.Apple Inc..) [HKLM]
    O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM]
    O42 - Logiciel: Setting Utility Series - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: SimpleOCR 3.1 - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: SonicStage 4.0 - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: Sony MP4 Shared Library - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: Sony USB Mouse - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Sony Utilities DLL - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Sony Video Shared Library - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM]
    O42 - Logiciel: Text-To-Speech-Runtime - (.Magix Development GmbH.) [HKLM]
    O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: UsbFix - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Control Center - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Entertainment Platform - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: VAIO Event Service - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Hardware Diagnostics - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Information FLOW - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: VAIO Long Battery Life Wallpaper - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Media 5.0 - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: VAIO Media AC3 Decoder 1.0 - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Media Integrated Server 5.0 - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: VAIO Media Redistribution 5.0 - (.Sony Corporation.) [HKLM]
    O42 - Logiciel: VAIO Original Screen Saver - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Original Screen Saver VAIO Cozy Screen SD Wide Contents - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Power Management - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Sea Wallpaper - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Starfish Wallpaper - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VAIO Update 2 - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 - (.DivX, Inc.) [HKLM]
    O42 - Logiciel: Veoh Web Player Beta - (.Veoh Networks, Inc..) [HKLM]
    O42 - Logiciel: VeohTV BETA - (.Veoh Networks, Inc..) [HKLM]
    O42 - Logiciel: VideoLAN VLC media player 0.8.6d - (.VideoLAN Team.) [HKLM]
    O42 - Logiciel: VirginMega.Fr Premium - (.VirginMega.Fr.) [HKLM]
    O42 - Logiciel: Winamp Toolbar for Firefox - (.AOL LLC.) [HKLM]
    O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Live OneCare safety scanner - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM]
    O42 - Logiciel: Windows XP Media Center Edition 2005 KB925766 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM]
    O42 - Logiciel: Winkaa 1.0 1.0 - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Wireless LAN Starter - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: Wireless Switch Setting Utility - (.Pas de propriétaire.) [HKLM]
    O42 - Logiciel: XnView 1.92.1 - (.Gougelet Pierre-e.) [HKLM]
    O42 - Logiciel: hp psc 1200 series - (.Hewlett-Packard Company.) [HKLM]
    O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM]
    O42 - Logiciel: mCore - (.Intel Corporation.) [HKLM]
    O42 - Logiciel: mDriver - (.Intel.) [HKLM]
    O42 - Logiciel: mMHouse - (.Intel Corporation.) [HKLM]
    O42 - Logiciel: mPfMgr - (.Intel Corporation.) [HKLM]
    O42 - Logiciel: mProSafe - (.Intel.) [HKLM]
    O42 - Logiciel: mWlsSafe - (.Intel.) [HKLM]
    O42 - Logiciel: mXML - (.Intel Corporation.) [HKLM]
    0
  7. sofie353 Messages postés 51 Statut Membre 1
     
    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\ALWIL Software]
    [HKCU\Software\AVG]
    [HKCU\Software\AVS4YOU]
    [HKCU\Software\Adobe]
    [HKCU\Software\Alps]
    [HKCU\Software\Apple Computer, Inc.]
    [HKCU\Software\Avira]
    [HKCU\Software\BAE]
    [HKCU\Software\Binary Noise]
    [HKCU\Software\Bugsplat]
    [HKCU\Software\CDDB]
    [HKCU\Software\Classes]
    [HKCU\Software\Clients]
    [HKCU\Software\Debugmode]
    [HKCU\Software\DivXNetworks]
    [HKCU\Software\EA GAMES]
    [HKCU\Software\Folder Manager]
    [HKCU\Software\Genesis Digital Innovations]
    [HKCU\Software\Google]
    [HKCU\Software\Hewlett-Packard]
    [HKCU\Software\Hofmann]
    [HKCU\Software\HookNetwork]
    [HKCU\Software\IGA]
    [HKCU\Software\IM Providers]
    [HKCU\Software\InnoShock]
    [HKCU\Software\Intel]
    [HKCU\Software\InterVideo]
    [HKCU\Software\JavaSoft]
    [HKCU\Software\Lake]
    [HKCU\Software\Leadertech]
    [HKCU\Software\Licenses]
    [HKCU\Software\Local AppWizard-Generated Applications]
    [HKCU\Software\M.Dev Software]
    [HKCU\Software\M5T8QL3YW3]
    [HKCU\Software\MP3 Remix]
    [HKCU\Software\Macromedia]
    [HKCU\Software\Magix Development]
    [HKCU\Software\Magix]
    [HKCU\Software\Malwarebytes' Anti-Malware]
    [HKCU\Software\Media Art]
    [HKCU\Software\Mozilla]
    [HKCU\Software\NVIDIA Corporation]
    [HKCU\Software\NVIDIA nvCpl Container]
    [HKCU\Software\Nadeo]
    [HKCU\Software\Neogie Software]
    [HKCU\Software\Netscape]
    [HKCU\Software\Northcode Inc]
    [HKCU\Software\ODBC]
    [HKCU\Software\Oak Technology]
    [HKCU\Software\OpenOffice.org]
    [HKCU\Software\Opendisc]
    [HKCU\Software\PC SOFT]
    [HKCU\Software\Patchou]
    [HKCU\Software\Pense-bete]
    [HKCU\Software\Piriform]
    [HKCU\Software\Policies]
    [HKCU\Software\QZAIB7KITK]
    [HKCU\Software\RealNetworks]
    [HKCU\Software\Realtek]
    [HKCU\Software\Roxio]
    [HKCU\Software\SADE]
    [HKCU\Software\SUPERAntiSpyware.com]
    [HKCU\Software\Safer Networking Limited]
    [HKCU\Software\Samsung]
    [HKCU\Software\SecuROM]
    [HKCU\Software\Skype]
    [HKCU\Software\Softonic]
    [HKCU\Software\Sonic]
    [HKCU\Software\Sony Corporation]
    [HKCU\Software\Stardock]
    [HKCU\Software\Symantec]
    [HKCU\Software\Trolltech]
    [HKCU\Software\VB and VBA Program Settings]
    [HKCU\Software\Veoh]
    [HKCU\Software\VirginMega]
    [HKCU\Software\WinRAR SFX]
    [HKCU\Software\Windows Live]
    [HKCU\Software\XML]
    [HKCU\Software\Xtralog]
    [HKCU\Software\YahooPartnerToolbar]
    [HKCU\Software\avsoft]
    [HKCU\Software\avsuite]
    [HKLM\Software\54c]
    [HKLM\Software\781]
    [HKLM\Software\ALWIL Software]
    [HKLM\Software\AVS4YOU]
    [HKLM\Software\Adobe]
    [HKLM\Software\Alps]
    [HKLM\Software\America Online]
    [HKLM\Software\Apple Computer, Inc.]
    [HKLM\Software\Apple Inc.]
    [HKLM\Software\Avira]
    [HKLM\Software\BrowserChoice]
    [HKLM\Software\C07ft5Y]
    [HKLM\Software\CDDB]
    [HKLM\Software\CXT]
    [HKLM\Software\Classes]
    [HKLM\Software\Clients]
    [HKLM\Software\DebugMode]
    [HKLM\Software\Debug]
    [HKLM\Software\DivXNetworks]
    [HKLM\Software\EA GAMES]
    [HKLM\Software\Electronic Arts]
    [HKLM\Software\FullCircle]
    [HKLM\Software\GEAR Software]
    [HKLM\Software\Gemplus]
    [HKLM\Software\Google]
    [HKLM\Software\Hewlett-Packard]
    [HKLM\Software\Hofmann]
    [HKLM\Software\InnoShock]
    [HKLM\Software\InstallShield]
    [HKLM\Software\Intel]
    [HKLM\Software\InterVideo]
    [HKLM\Software\JavaSoft]
    [HKLM\Software\JreMetrics]
    [HKLM\Software\LAN-Express]
    [HKLM\Software\Lake]
    [HKLM\Software\M.Dev Software]
    [HKLM\Software\MCCI]
    [HKLM\Software\MDC]
    [HKLM\Software\MP3 Remix]
    [HKLM\Software\Macromedia]
    [HKLM\Software\Magix Development]
    [HKLM\Software\Magix]
    [HKLM\Software\MozillaPlugins]
    [HKLM\Software\Mozilla]
    [HKLM\Software\NVIDIA Corporation]
    [HKLM\Software\Nullsoft]
    [HKLM\Software\ODBC]
    [HKLM\Software\Oak Technology]
    [HKLM\Software\OpenOffice.org]
    [HKLM\Software\Opendisc]
    [HKLM\Software\Orb Networks]
    [HKLM\Software\Patchou]
    [HKLM\Software\Policies]
    [HKLM\Software\Primax]
    [HKLM\Software\Program Groups]
    [HKLM\Software\RealNetworks]
    [HKLM\Software\Realtek Semiconductor Corp.]
    [HKLM\Software\Realtek]
    [HKLM\Software\RegisteredApplications]
    [HKLM\Software\Reminder]
    [HKLM\Software\RichFX]
    [HKLM\Software\Roxio]
    [HKLM\Software\SUPERAntiSpyware.com]
    [HKLM\Software\Safer Networking Limited]
    [HKLM\Software\Sagem]
    [HKLM\Software\Samsung Electronics Co., Ltd.]
    [HKLM\Software\Samsung]
    [HKLM\Software\Schlumberger]
    [HKLM\Software\Secure]
    [HKLM\Software\SkyMessager]
    [HKLM\Software\Sonic]
    [HKLM\Software\Sony Corporation]
    [HKLM\Software\Sony]
    [HKLM\Software\Stardock]
    [HKLM\Software\Sun Microsystems]
    [HKLM\Software\SymNRT]
    [HKLM\Software\Symantec]
    [HKLM\Software\TOSHIBA]
    [HKLM\Software\TrendMicro]
    [HKLM\Software\Vid_0471]
    [HKLM\Software\VideoLAN]
    [HKLM\Software\VirginMega]
    [HKLM\Software\WinKrnl]
    [HKLM\Software\Windows 3.1 Migration Status]
    [HKLM\Software\Windows]
    [HKLM\Software\X-AVCSD]
    [HKLM\Software\Xing Technology Corp.]
    [HKLM\Software\avsoft]
    [HKLM\Software\avsuite]
    [HKLM\Software\knight]
    [HKLM\Software\mozilla.org]
    [HKLM\Software\swearware]

    ---\\ Contenu des dossiers Fichiers Communs (O43)
    O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
    O43 - CFD:Common File Directory ----D- C:\Program Files\adslTV
    O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software
    O43 - CFD:Common File Directory ----D- C:\Program Files\Apoint
    O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
    O43 - CFD:Common File Directory ----D- C:\Program Files\Avira
    O43 - CFD:Common File Directory ----D- C:\Program Files\AVS4YOU
    O43 - CFD:Common File Directory ----D- C:\Program Files\Bonjour
    O43 - CFD:Common File Directory ----D- C:\Program Files\Calendrier
    O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications
    O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT
    O43 - CFD:Common File Directory ----D- C:\Program Files\Convertor
    O43 - CFD:Common File Directory ----D- C:\Program Files\DebugMode
    O43 - CFD:Common File Directory ----D- C:\Program Files\DivX
    O43 - CFD:Common File Directory ----D- C:\Program Files\EA GAMES
    O43 - CFD:Common File Directory ----D- C:\Program Files\EasyAgenda
    O43 - CFD:Common File Directory ----D- C:\Program Files\Emoticons-plus.com
    O43 - CFD:Common File Directory ----D- C:\Program Files\EssentialPIM
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs
    O43 - CFD:Common File Directory ----D- C:\Program Files\Firaxis Games
    O43 - CFD:Common File Directory ----D- C:\Program Files\Free Music Zilla
    O43 - CFD:Common File Directory ----D- C:\Program Files\GDS
    O43 - CFD:Common File Directory ----D- C:\Program Files\Google
    O43 - CFD:Common File Directory ----D- C:\Program Files\Google BAE
    O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard
    O43 - CFD:Common File Directory ----D- C:\Program Files\Hofmann
    O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
    O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
    O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
    O43 - CFD:Common File Directory ----D- C:\Program Files\InterVideo
    O43 - CFD:Common File Directory ----D- C:\Program Files\iPod
    O43 - CFD:Common File Directory ----D- C:\Program Files\ISP
    O43 - CFD:Common File Directory ----D- C:\Program Files\iTunes
    O43 - CFD:Common File Directory ----D- C:\Program Files\JA-Tennis
    O43 - CFD:Common File Directory ----D- C:\Program Files\Java
    O43 - CFD:Common File Directory ----D- C:\Program Files\JRE
    O43 - CFD:Common File Directory ----D- C:\Program Files\LanExpress
    O43 - CFD:Common File Directory ----D- C:\Program Files\Lavasoft
    O43 - CFD:Common File Directory ----D- C:\Program Files\List_Kill'em
    O43 - CFD:Common File Directory ----D- C:\Program Files\LiveCAD
    O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
    O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger
    O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger Plus! Live
    O43 - CFD:Common File Directory ----D- C:\Program Files\MessengerPlus! 3
    O43 - CFD:Common File Directory ----D- C:\Program Files\Micro Application
    O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
    O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
    O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Carioca
    O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage
    O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
    O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
    O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
    O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
    O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
    O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
    O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
    O43 - CFD:Common File Directory ----D- C:\Program Files\MP3 Remix
    O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
    O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache
    O43 - CFD:Common File Directory ----D- C:\Program Files\MSN
    O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone
    O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Messenger
    O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
    O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting
    O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services
    O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3
    O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express
    O43 - CFD:Common File Directory ----D- C:\Program Files\Picasa2
    O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime
    O43 - CFD:Common File Directory ----D- C:\Program Files\Raccourcis de programmes
    O43 - CFD:Common File Directory ----D- C:\Program Files\Rainlendar
    O43 - CFD:Common File Directory ----D- C:\Program Files\Real
    O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
    O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
    O43 - CFD:Common File Directory ----D- C:\Program Files\Roxio
    O43 - CFD:Common File Directory ----D- C:\Program Files\Safari
    O43 - CFD:Common File Directory ----D- C:\Program Files\Samsung
    O43 - CFD:Common File Directory ----D- C:\Program Files\Securitoo
    O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne
    O43 - CFD:Common File Directory ----D- C:\Program Files\SimpleOCR
    O43 - CFD:Common File Directory ----D- C:\Program Files\SM
    O43 - CFD:Common File Directory ----D- C:\Program Files\Sony
    O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy
    O43 - CFD:Common File Directory ----D- C:\Program Files\Stardock
    O43 - CFD:Common File Directory ----D- C:\Program Files\StofWare
    O43 - CFD:Common File Directory ----D- C:\Program Files\SUPERAntiSpyware
    O43 - CFD:Common File Directory ----D- C:\Program Files\TF1Vision
    O43 - CFD:Common File Directory ----D- C:\Program Files\trend micro
    O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
    O43 - CFD:Common File Directory ----D- C:\Program Files\Veoh Networks
    O43 - CFD:Common File Directory ----D- C:\Program Files\VirginMega
    O43 - CFD:Common File Directory ----D- C:\Program Files\VLC
    O43 - CFD:Common File Directory ----D- C:\Program Files\WinAgenda
    O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
    O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Safety Center
    O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
    O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Toolbar
    O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Connect 2
    O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
    O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
    O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Plus
    O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate
    O43 - CFD:Common File Directory ----D- C:\Program Files\xerox
    O43 - CFD:Common File Directory ----D- C:\Program Files\XnView
    O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Apple
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\AVSMedia
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DESIGNER
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DivX Shared
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InterVideo
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MAGIX Shared
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Real
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Roxio Shared
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Sonic Shared
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Sony Shared
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\stardock
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SWF Studio
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Symantec Shared
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live
    O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard
    O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\xing shared
    0
  8. Utilisateur anonyme
     
    ce pc est sous xp, mais sur ta configuration d'u poste initial, tu as indiqué vista !

    est ce que tu arrives à te connecter avec le pc infecté à internet ?
    0
  9. sofie353 Messages postés 51 Statut Membre 1
     
    non je n'y arrive pas.
    0
  10. sofie353 Messages postés 51 Statut Membre 1
     
    http://www.cijoint.fr/cjlink.php?file=cj201005/cijYcsYPMz.txt
    0
  11. Utilisateur anonyme
     
    tu vois, tu y arrives :-)

    * Télécharger Rkill de Grinler sur le bureau,
    fait double clic pour le lancer.
    Une fenêtre (très rapide) indiquera que tout s'est bien déroulé.
    Pour Vista, faire un clic droit sur le fichier rkill téléchargé puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

    tu commence par le premier Rkill EXE,si cela ne fonctionne tu passe au second Rkill COM ,ETC...

    Rkill EXE: Rkill EXE:
    https://download.bleepingcomputer.com/grinler/rkill.exe

    Rkill COM: Rkill COM:
    https://download.bleepingcomputer.com/grinler/rkill.com

    Rkill SCR: Rkill RCS:
    https://download.bleepingcomputer.com/grinler/rkill.scr

    /!\ pas de rapport pour ce tool

    ► Télécharges ComboFix à partir de ce lien et enregistres le sur ton bureau :

    https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm
    ou ici :
    http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    A lire
    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    Avant d'utiliser ComboFix :
    ► Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.
    ► Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
    Une fois fait, sur ton bureau double-clic sur Combofix.exe.

    - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

    /!\INSTALLES LA CONSOLE DE RECUPERATION

    /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

    - En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.
    - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)
    ► Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.
    ► Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
    0
  12. sofie353 Messages postés 51 Statut Membre 1
     
    Je n'arrive pas à ouvrir l'application ComboFix, un message de Security Warning s'affiche "Application cannot be executate."
    0
  13. Utilisateur anonyme
     
    désactive ton antivirus et tes protections, puis lance le
    0
  14. sofie353 Messages postés 51 Statut Membre 1
     
    J'ai tout enlevé et ça ne marche toujours pas.
    Ce même message s'affiche à tout fichier que j'essaie d'ouvrir.
    0
  15. Utilisateur anonyme
     
    redemarre ton pc en mode sans echec avec la prise en charge de réseau, lance combofix et poste son rapport
    0
  16. sofie353 Messages postés 51 Statut Membre 1
     
    ComboFix 10-05-07.07 - Sophie Chantrel 2010/05/08 17:03:19.1.2 - x86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1014.532 [GMT 2:00]
    Lancé depuis: G:\ComboFix.exe
    AV: AntiVir Desktop *On-access scanning enabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg
    c:\documents and settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
    c:\documents and settings\Sophie Chantrel\Local Settings\Temporary Internet Files\Y6MM441b5.jpg
    c:\documents and settings\Sophie Chantrel\Local Settings\Temporary Internet Files\yX514Y154.jpg
    c:\program files\Internet Explorer\SET90E.tmp
    c:\program files\Internet Explorer\SET90F.tmp
    c:\program files\Internet Explorer\SET911.tmp
    c:\program files\Internet Explorer\SET975.tmp
    c:\program files\Internet Explorer\SET976.tmp
    c:\program files\Internet Explorer\SET977.tmp
    c:\windows\Mhizua.exe
    c:\windows\system32\_000006_.tmp.dll
    c:\windows\system32\_000007_.tmp.dll
    c:\windows\system32\_000010_.tmp.dll
    c:\windows\system32\_000011_.tmp.dll
    c:\windows\system32\_000012_.tmp.dll
    c:\windows\system32\dumphive.exe
    c:\windows\system32\Ijl11.dll
    c:\windows\system32\Process.exe
    c:\windows\system32\SrchSTS.exe
    c:\windows\system32\VCCLSID.exe
    c:\windows\system32\WS2Fix.exe

    Une copie infectée de c:\windows\system32\drivers\sfdrv01.sys a été trouvée et désinfectée
    Copie restaurée à partir de - Kitty had a snack :p
    .
    original MBR restored successfully !
    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_NPF
    -------\Legacy_PERFORMANCE_MONITOR
    -------\Legacy_SSHNAS
    -------\Service_NPF

    ((((((((((((((((((((((((((((( Fichiers créés du 2010-04-08 au 2010-05-08 ))))))))))))))))))))))))))))))))))))
    .

    2010-05-08 12:37 . 2010-05-08 12:48 -------- d-----w- c:\program files\ZHPDiag
    2010-05-08 12:14 . 2010-05-08 12:14 -------- d-----w- c:\documents and settings\HelpAssistant\IETldCache
    2010-05-08 12:14 . 2010-05-08 12:14 -------- d-----w- c:\documents and settings\HelpAssistant\IECompatCache
    2010-05-08 12:09 . 2010-05-08 12:13 -------- d-----w- c:\documents and settings\HelpAssistant\Contacts
    2010-05-08 11:47 . 2010-05-08 11:47 -------- d-sh--w- c:\documents and settings\LocalService\PrivacIE
    2010-05-08 10:28 . 2010-05-08 10:28 -------- d-sh--w- c:\documents and settings\Administrateur\IECompatCache
    2010-05-08 08:21 . 2010-05-08 08:21 -------- d-----w- c:\documents and settings\Administrateur\VAIO Information FLOW
    2010-05-08 07:00 . 2010-05-08 15:23 823808 ----a-w- c:\windows\system32\drivers\ouloma.sys
    2010-05-01 07:13 . 2010-05-01 07:13 -------- d-----w- c:\program files\StofWare
    2010-04-23 20:13 . 2010-04-23 20:13 -------- d-----w- c:\program files\iPod
    2010-04-23 20:12 . 2010-04-23 20:15 -------- d-----w- c:\program files\iTunes
    2010-04-23 20:12 . 2010-04-23 20:15 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
    2010-04-23 20:05 . 2010-04-23 20:07 -------- d-----w- c:\program files\QuickTime
    2010-04-16 20:34 . 2010-04-16 20:34 -------- d-----w- c:\program files\Bonjour
    2010-04-16 12:01 . 2010-04-16 12:01 -------- d-----w- c:\program files\Securitoo
    2010-04-10 20:37 . 2010-04-10 20:37 -------- d-----w- c:\documents and settings\Sophie Chantrel\Application Data\EssentialPIM
    2010-04-10 20:37 . 2010-04-11 17:47 -------- d-----w- c:\program files\EssentialPIM

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-04-23 20:12 . 2008-11-23 00:11 -------- d-----w- c:\program files\Fichiers communs\Apple
    2010-04-23 20:01 . 2010-04-23 20:01 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.1.0.79\SetupAdmin.exe
    2010-04-17 07:32 . 2007-02-10 13:26 -------- d-----w- c:\documents and settings\Sophie Chantrel\Application Data\Apple Computer
    2010-04-16 12:11 . 2006-09-04 12:42 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-03-29 09:11 . 2006-09-04 03:52 85842 ----a-w- c:\windows\system32\perfc00C.dat
    2010-03-29 09:11 . 2006-09-04 03:52 513736 ----a-w- c:\windows\system32\perfh00C.dat
    2010-03-10 06:16 . 2006-09-04 03:52 420352 ----a-w- c:\windows\system32\vbscript.dll
    2010-02-25 06:17 . 2006-09-04 03:52 916480 ----a-w- c:\windows\system32\wininet.dll
    2010-02-24 13:11 . 2006-09-04 03:52 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
    2010-02-16 19:06 . 2006-09-04 03:52 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
    2010-02-16 19:06 . 2004-08-04 00:48 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2010-02-15 21:51 . 2010-02-15 21:51 52224 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
    2010-02-15 21:51 . 2010-02-15 21:51 117760 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
    2010-02-15 21:49 . 2010-02-15 21:49 5120 ----a-r- c:\documents and settings\Sophie Chantrel\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF16.exe
    2010-02-15 21:49 . 2010-02-15 21:49 65024 ----a-r- c:\documents and settings\Sophie Chantrel\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe
    2010-02-15 21:49 . 2010-02-15 21:49 18944 ----a-r- c:\documents and settings\Sophie Chantrel\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe
    2010-02-15 18:38 . 2010-02-15 18:38 152576 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
    2010-02-15 18:38 . 2010-02-15 18:38 79488 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
    2010-02-12 10:03 . 2010-02-28 09:47 293376 ------w- c:\windows\system32\browserchoice.exe
    2010-02-12 09:46 . 2010-02-12 09:46 91424 ----a-w- c:\windows\system32\dnssd.dll
    2010-02-12 09:46 . 2010-02-12 09:46 107808 ----a-w- c:\windows\system32\dns-sd.exe
    2010-02-12 04:34 . 2006-09-04 03:51 100864 ----a-w- c:\windows\system32\6to4svc.dll
    2010-02-11 12:02 . 2006-12-29 11:34 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
    2010-02-08 13:26 . 2010-02-08 13:26 184 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\Capturino\ijl17.dll
    2009-05-01 21:02 . 2009-05-01 21:02 1044480 -c--a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
    2009-05-01 21:02 . 2009-05-01 21:02 200704 -c--a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
    .

    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "VAIO Update 2"="c:\program files\Sony\VAIO Update 2\VAIOUpdt.exe" [2005-10-11 151552]
    "Switcher.exe"="c:\program files\Sony\Wireless Switch Setting Utility\Switcher.exe" [2006-02-14 176128]
    "SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
    "RoxioDragToDisc"="c:\program files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe" [2004-04-13 1470464]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-08-31 7561216]
    "Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 45056]
    "ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 32768]
    "igfxtray"="c:\windows\system32\igfxtray.exe" [2006-04-05 94208]
    "igfxpers"="c:\windows\system32\igfxpers.exe" [2006-04-05 118784]
    "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-04-05 77824]
    "ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
    "AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-08-25 53248]
    "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
    "Apoint"="c:\program files\Apoint\Apoint.exe" [2004-11-17 118784]
    "Acrobat Assistant 7.0"="c:\program files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2005-03-03 483328]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-17 421888]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-03-25 142120]

    c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
    EasyAgenda.lnk - c:\program files\EasyAgenda\EasyAgenda.exe [2004-1-11 406965]
    Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
    Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
    2006-06-20 14:11 73728 ----a-w- c:\windows\system32\VESWinlogon.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
    @="Service"

    [HKLM\~\startupfolder\C:^Documents and Settings^Sophie Chantrel^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 3.0.lnk]
    path=c:\documents and settings\Sophie Chantrel\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 3.0.lnk
    backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

    [HKLM\~\startupfolder\C:^Documents and Settings^Sophie Chantrel^Menu Démarrer^Programmes^Démarrage^Pense-Bête 79g.lnk]
    path=c:\documents and settings\Sophie Chantrel\Menu Démarrer\Programmes\Démarrage\Pense-Bête 79g.lnk
    backup=c:\windows\pss\Pense-Bête 79g.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
    2009-01-26 14:31 2144088 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "DisableNotifications"= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Adobe\\Photoshop Elements 4.0\\AdobePhotoshopElementsMediaServer.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\WINDOWS\\system32\\[Emoticons-plus.com] Winkaa 2.0.exe"=
    "c:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
    "c:\\Program Files\\Sony\\Click to DVD 2\\CtoDvd.exe"=
    "c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
    "c:\\Program Files\\Microsoft Office\\Office10\\WINWORD.EXE"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "65533:TCP"= 65533:TCP:Services
    "52344:TCP"= 52344:TCP:Services
    "3532:TCP"= 3532:TCP:Services
    "5564:TCP"= 5564:TCP:Services

    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2010/01/05 08:56 9968]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010/01/05 08:56 74480]
    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2010/01/03 19:26 108289]
    R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2006/09/04 05:53 226304]
    S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010/02/01 10:15 135664]
    S3 camvid20;Philips ToUcam Camera; Video;c:\windows\system32\drivers\camdrv21.sys [2007/02/11 20:01 223232]
    S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2010/01/05 08:56 7408]

    --- Autres Services/Pilotes en mémoire ---

    *Deregistered* - ouloma
    .
    Contenu du dossier 'Tâches planifiées'

    2010-04-23 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

    2010-05-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 08:15]

    2010-05-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 08:15]

    2010-05-08 c:\windows\Tasks\User_Feed_Synchronization-{138DE675-5BA2-479F-80E0-0A8BD59232B4}.job
    - c:\windows\system32\msfeedssync.exe [2006-10-17 03:31]

    2010-05-08 c:\windows\Tasks\User_Feed_Synchronization-{1731C1AE-900E-4084-99E7-04D4EC9F499B}.job
    - c:\windows\system32\msfeedssync.exe [2006-10-17 03:31]
    .
    .
    ------- Examen supplémentaire -------
    .
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    uStart Page = hxxp://www.netvibes.com/#General
    uInternet Connection Wizard,ShellNext = iexplore
    uInternet Settings,ProxyServer = http=127.0.0.1:5555
    uInternet Settings,ProxyOverride = <local>
    uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
    IE: Ajouter un site de support RSS à VAIO Information FLOW - c:\program files\Sony\VAIO Information FLOW\aiesc.html
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
    IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
    IE: Transfert par Image Converter 2 Plus - c:\program files\Sony\Image Converter 2\menu.htm
    Trusted Zone: sony-europe.com
    Trusted Zone: sonystyle-europe.com
    Trusted Zone: vaio-link.com
    DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
    FF - ProfilePath - c:\documents and settings\Sophie Chantrel\Application Data\Mozilla\Firefox\Profiles\8qqazg3g.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=4&q=
    FF - prefs.js: browser.search.selectedEngine - Fast Browser Search
    FF - prefs.js: browser.startup.homepage - hxxp://facebook.fr/
    FF - prefs.js: keyword.URL - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=4&tid={7624A58E-3EA9-2332-5794-89E33BC2BFD3}&q=
    FF - component: c:\documents and settings\Sophie Chantrel\Application Data\Mozilla\Firefox\Profiles\8qqazg3g.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampPlayer.dll
    FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - plugin: c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
    FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
    FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
    .
    .
    ------- Associations de fichier -------
    .
    .reg=Regedit.Document
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
    HKCU-Run-fqeecvpe - c:\documents and settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
    HKLM-Run-WinampAgent - c:\program files\Winamp\winampa.exe
    HKLM-Run-fqeecvpe - c:\documents and settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
    HKU-Default-Run-swg - c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    AddRemove-HijackThis - c:\documents and settings\Sophie Chantrel\Local Settings\Temporary Internet Files\Content.IE5\XSS3PRHX\HijackThis.exe
    AddRemove-UsbFix - c:\program files\UsbFix\Uninstal.exe
    AddRemove-Winamp Toolbar for Firefox - c:\documents and settings\Sophie Chantrel\Application Data\Mozilla\Firefox\Profiles\8qqazg3g.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-05-08 17:21
    Windows 5.1.2600 Service Pack 3 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\ouloma]

    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø*€|ÿÿÿÿ*€|ù*9~*]
    "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
    .
    --------------------- DLLs chargées dans les processus actifs ---------------------

    - - - - - - - > 'winlogon.exe'(1000)
    c:\windows\system32\VESWinlogon.dll

    - - - - - - - > 'explorer.exe'(1904)
    c:\windows\system32\eappprxy.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\program files\Roxio\Easy Media Creator 7\Drag to Disc\Shellex.dll
    c:\program files\Roxio\Easy Media Creator 7\Drag to Disc\Shellex.LOC
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\program files\Intel\Wireless\Bin\EvtEng.exe
    c:\program files\Intel\Wireless\Bin\S24EvMon.exe
    c:\program files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    c:\program files\Avira\AntiVir Desktop\avguard.exe
    c:\program files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\windows\eHome\ehRecvr.exe
    c:\windows\eHome\ehSched.exe
    c:\windows\System32\GEARSec.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Intel\Wireless\Bin\RegSrvc.exe
    c:\program files\Sony\VAIO Event Service\VESMgr.exe
    c:\windows\system32\igfxext.exe
    c:\program files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    c:\windows\system32\igfxsrvc.exe
    c:\windows\ehome\mcrdsvc.exe
    c:\program files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    c:\program files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    c:\windows\system32\dllhost.exe
    c:\windows\system32\wbem\wmiapsrv.exe
    c:\windows\system32\ICO.EXE
    c:\windows\eHome\ehmsas.exe
    c:\program files\Apoint\Apntex.exe
    c:\program files\iPod\bin\iPodService.exe
    c:\program files\Windows Live\Contacts\wlcomm.exe
    .
    **************************************************************************
    .
    Heure de fin: 2010-05-08 17:33:02 - La machine a redémarré
    ComboFix-quarantined-files.txt 2010-05-08 15:32

    Avant-CF: 823,939,072 octets libres
    Après-CF: 1,809,465,344 octets libres

    - - End Of File - - F02D1AEAD6357E3005A3F0872322E3E8
    0
  17. Utilisateur anonyme
     
    redemarre ton pc en mode normal,

    repasse un autre zhp, hébérge le sur cijoint et copie le lien sur ton prochain message
    0