[Virus] Infecté par Spy Sheriff

Question

Bonjour,

Je fais part de mon problème car je ne sais comment en venir à bout. En effet je ne suis pas très bon en info. et du coup, je me permet de demander un petit coup de main.
Voilà, mon ordinateur a été infecté par Spy Sheriff et j'aimerai savoir si quelqu'un peut m'expliquer les étapes à suivre pour le supprimer.
En attendant une réponse, je vous remercie.

Ketmo.

Configuration: - ASUSTek Computer INC. P4B533 - Intel Pentium 4 CPU 2.42GHz - Maxtor 9.5GB(int.), SAMSUNG 29GB(int.), Maxtor 250GB(ext.) - 512MB DDR-SDRAM - NVIDIA GeForce4 MX 440SE AGP8X - Win. XP Pro SP2

aranjuez31 · Answer

bjrméthodehttp://www.commentcamarche.net/faq/sujet-2500-%5BSpywares%5D-M%E9thodes-de-d%E9sinfection

Ketmo · Answer

Merci Aranjuez pour ta réponse si rapide.J'essaie tout de suite la méthode proposé.

aranjuez31 · Answer

re
tu as ddé méthode.......
pour le détail, tu reviens
--------
charge ceci , scan et COLLE rapport de
ewido (dowload)
http://www.ewido.net/fr/download/
-----------
suis ceci
Télécharge ceci: (merci a S!RI pour ce petit programme).
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1, il va générer un rapport
Copie/colle le sur le poste stp.

Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).

Relance le programme Smitfraud,
Cette fois choisit l’option 2, répond oui a tous ;
Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé sur le forum
------------
avons besoin de ceci pour lire tes entrailles

http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
http://pageperso.aol.fr/balltrap34/demohijack.htm

Ketmo · Answer

Voilà le 1er rapport:

SmitFraudFix v2.15

Rapport fait à 14:02:53,21 le 24/01/2006
Executé à partir de J:\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

C:\WINDOWS\drsmartload.dat PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\VICTOR\Application Data

C:\Documents and Settings\VICTOR\Application Data\Install.dat PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pr‚-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="D‚mon de cache des cat‚gories de composant"

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport

Ketmo · Answer

Et voici le 2e rapport:

SmitFraudFix v2.15

Rapport fait à 14:14:59,06 le 24/01/2006
Executé à partir de J:\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\WINDOWS\drsmartload.dat supprimé
C:\Documents and Settings\VICTOR\Application Data\Install.dat supprimé

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage Fichiers Temporaires

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport

aranjuez31 · Answer

ok une bonne chose de faitemaintenant rapport ewido stp

Ketmo · Answer

Petites questions: je peux supprimer les fichiers infectiers qu'ewido trouve? Ca ne va rien changer au rapport?

aranjuez31 · Answer

re tu enregistres le rapportpuis tu détruis les quarantainesce qui m'intéresse c'est de lire le rapport

Ketmo · Answer

Ok.Il y en a encore pour un petit moment mais je copie le rapport sur dans la discussion dès que c'est terminé.

aranjuez31 · Answer

oklà je m'absenteretour dans "the night"

Ketmo · Answer

Rapport ewido:--------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		15:59:50, 24/01/2006 + Somme de contrôle:	4D5700D8 + Résultats du scan:	HKLM\SOFTWARE\Classes\CLSID\{5AA06644-BC46-4220-A460-47A6EB47C96D} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{D80C4E21-C346-4E21-8E64-20746AA20AEB} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Interface\{4D6CED50-D6AE-40DA-B87F-235593FC1F28} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{209B1CEA-8B2E-4596-9B35-A4A7DB611EB2} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer -> Spyware.P2PNetworking : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer\CLSID -> Spyware.P2PNetworking : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer\CurVer -> Spyware.P2PNetworking : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer.1 -> Spyware.P2PNetworking : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} -> Spyware.WinFavorites : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E0CE16CB-741C-4B24-8D04-A817856E07F4} -> Spyware.Roimoi : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Spyware.WebRebates : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5AA06644-BC46-4220-A460-47A6EB47C96D} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D80C4E21-C346-4E21-8E64-20746AA20AEB} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NavExcel Search Toolbar -> Spyware.NavExcel : Nettoyer et sauvegarder	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\Igor V. Gunko -> Spyware.HyperBar : Nettoyer et sauvegarder	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\Microsoft\Internet Explorer\MenuExt\Web Rebates -> Spyware.WebRebates : Nettoyer et sauvegarder	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5AA06644-BC46-4220-A460-47A6EB47C96D} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D80C4E21-C346-4E21-8E64-20746AA20AEB} -> Spyware.NavExcel : Nettoyer et sauvegarder	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\NavExcel Ltd -> Spyware.NavExcel : Nettoyer et sauvegarder	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\NavExcel Ltd\NavExcel Search Toolbar -> Spyware.NavExcel : Nettoyer et sauvegarder	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\NavExcel Ltd\NavExcel Search Toolbar\History -> Spyware.NavExcel : Nettoyer et sauvegarder	[5248] C:\DOCUME~1\VICTOR\APPLIC~1\CITYTI~1\axis five.exe -> Downloader.Swizzor.bo : Nettoyer et sauvegarder	[5948] C:\DOCUME~1\VICTOR\APPLIC~1\CITYTI~1\axis five.exe -> Downloader.Swizzor.bo : Erreur durant le nettoyage	:mozilla.12:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.13:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.21:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexlist : Nettoyer et sauvegarder	:mozilla.29:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Com : Nettoyer et sauvegarder	:mozilla.30:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Com : Nettoyer et sauvegarder	:mozilla.52:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexlist : Nettoyer et sauvegarder	:mozilla.53:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder	:mozilla.54:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder	:mozilla.61:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.62:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.63:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Paycounter : Nettoyer et sauvegarder	:mozilla.64:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexlist : Nettoyer et sauvegarder	:mozilla.74:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Targetnet : Nettoyer et sauvegarder	:mozilla.75:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Targetnet : Nettoyer et sauvegarder	:mozilla.76:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder	:mozilla.78:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder	:mozilla.79:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder	:mozilla.80:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder	:mozilla.84:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder	:mozilla.85:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder	:mozilla.86:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder	:mozilla.87:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder	:mozilla.88:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder	:mozilla.89:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Revenue : Nettoyer et sauvegarder	:mozilla.90:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder	:mozilla.100:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder	:mozilla.101:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder	:mozilla.108:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder	:mozilla.115:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder	:mozilla.121:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Onestat : Nettoyer et sauvegarder	:mozilla.122:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Onestat : Nettoyer et sauvegarder	:mozilla.131:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Nettoyer et sauvegarder	:mozilla.133:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.134:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.144:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.145:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.146:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.147:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.149:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder	:mozilla.150:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder	:mozilla.152:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexlist : Nettoyer et sauvegarder	:mozilla.154:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder	:mozilla.155:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder	:mozilla.156:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder	:mozilla.159:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Euroclick : Nettoyer et sauvegarder	:mozilla.160:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Euroclick : Nettoyer et sauvegarder	:mozilla.161:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Euroclick : Nettoyer et sauvegarder	:mozilla.162:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Googleadservices : Nettoyer et sauvegarder	:mozilla.163:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder	:mozilla.164:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder	:mozilla.174:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.175:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.176:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.177:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.178:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.179:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.180:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Masterstats : Nettoyer et sauvegarder	:mozilla.185:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder	:mozilla.192:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder	:mozilla.193:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder	:mozilla.194:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder	:mozilla.210:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder	:mozilla.215:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.216:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.217:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexlist : Nettoyer et sauvegarder	:mozilla.224:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	:mozilla.225:C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder	C:\Program Files\AimOne_AlltoMP3\AlltoMP3.exe -> Backdoor.Rbot.fg : Nettoyer et sauvegarder	C:\Program Files\bit2.exe -> Adware.Ezula : Nettoyer et sauvegarder	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\Program Files\WildTangent\Components\SystemConfig0100.dll -> Spyware.WinAD : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\cd_htm.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\bdedata2.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\bdefdi.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\chktrust.exe -> Spyware.BargainBuddy : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\bdeload.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\BDESac10.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\BDESac24.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\bdeinsta25.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\BDE\Cache\bdedetect1.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\BDE\bdeviewer.exe -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\BDE\b3dsetup.exe -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\BDE\bdedetect1.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\NDNuninstall4_50.exe -> Spyware.NewDotNet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.2.0.007
pwthost.dll -> Spyware.WildTangent : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.2.0.007\wtvh.dll -> Spyware.WildTangent : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\wt\wtvh.dll -> Spyware.WildTangent : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\altnet\download manager\altnetuninstall.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\altnet\download manager\asmend.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\altnet\Points Manager\sysdetect.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\Common Files\updater\delupdat.exe -> Downloader.Keenal : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\WINDOWS\system32\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\Program Files\altnet\download manager\altnetuninstall.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\Program Files\altnet\download manager\asmend.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\Program Files\altnet\Points Manager\sysdetect.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\WINDOWS\system32\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\Program Files\altnet\download manager\altnetuninstall.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\Program Files\altnet\download manager\asmend.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\Program Files\altnet\Points Manager\sysdetect.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\WINDOWS\system32\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1076100897.ssb/C:\Documents and Settings\VICTOR\Local Settings\Temp\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1076100897.ssb/C:\Documents and Settings\VICTOR\Local Settings\Temp\__unin__.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1076100897.ssb/C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1076100897.ssb/C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1107007840.ssb/C:\Program Files\Bargain Buddy\bbchk.exe -> Spyware.BargainBuddy : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1137417543.ssb/C:\Program Files\Bargain Buddy\bbchk.exe -> Spyware.BargainBuddy : Erreur durant le nettoyage	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/p2p networking/p2p networking.exe -> Spyware.P2PNetworking : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/p2p networking/MARSHAL2.DLL -> Spyware.P2PNetworking : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/netut80ex.vxd/C:/WINDOWS/system32/exdl.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/netut80ex.vxd/C:/WINDOWS/system32/mqexdlm.srg -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/netut80ex.vxd/C:/WINDOWS/system32/exul.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/netut80ex.vxd/C:/WINDOWS/system32/javexulm.vxd -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/netut80ex.vxd/C:/WINDOWS/system32/bbchk.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/netut80ex.vxd/C:/WINDOWS/system32/msexreg.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050216131913.zip/WINDOWS/system32/netut80ex.vxd/C:/WINDOWS/system32/instsrv.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050319111311.zip/Program Files/bargain buddy/bbchk.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050319111311.zip/Program Files/bargain buddy/bin/cb.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050319111311.zip/Program Files/ezula/chcon.dll -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/myway/myBar/1.bin/MYBAR.DLL -> Spyware.MyWay : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/navexcel/NavHelper/v2.0.4d/navapp.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/navexcel/NavHelper/v2.0.4d/NHelper.dll -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/navexcel/NavHelper/v2.0.4d/NHUninstaller.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/navexcel/NavHelper/v2.0.4d/NHUpdater.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/navexcel/NavHelper/v2.0.4d/v2.0.4d.cab/NHelper.dll -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/navexcel/NavHelper/v2.0.4d/v2.0.4d.cab/NHUninstaller.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/navexcel/NavHelper/v2.0.4d/v2.0.4d.cab/NHUpdater.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/Program Files/navexcel/NavHelper/v2.0.4d/v2.0.4d.cab/navapp.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050523223904.zip/WINDOWS/downloaded program files/webp2pinstaller.dll -> Downloader.WebP2PInstaller : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/bargain buddy/bin2/cb.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/bargain buddy/bin/cb.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/bargain buddy/bbchk.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/web offer/eapbh.dll -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/web offer/wo.exe -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/web offer/chpon.dll -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/web offer/apev.exe -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/web offer/chpon.to_be_deleted -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/ezula/chcon.dll -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/ezula/eabh.dll -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/ezula/seng.dll -> Adware.eZula : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/navhelper/v2.0.4c/nhelper.dll -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4c/nhelper.to_be_deleted -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/navapp.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/NHelper.dll -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/NHelper.to_be_deleted -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/NHUninstaller.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/NHUpdater.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/v2.0.4d.cab/NHelper.dll -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/v2.0.4d.cab/NHUninstaller.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/v2.0.4d.cab/NHUpdater.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\Program Files\PestPatrol\Quarantine\20050909224749.zip/Program Files/navexcel/NavHelper/v2.0.4d/v2.0.4d.cab/navapp.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\WINDOWS\Downloaded Program Files\miniclipGameLoader.dll -> Downloader.Small : Nettoyer et sauvegarder	C:\WINDOWS\hl2crack.CAB/hl2crack.exe -> Heuristic.Win32.Backdoor.IrcBot : Nettoyer et sauvegarder	C:\WINDOWS
xstinst.exe -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\WINDOWSemover.dll -> Spyware.NavExcel : Nettoyer et sauvegarder	C:\WINDOWS\system32\mac80ex.idf/C:/WINDOWS/system32/msbe.dll -> Spyware.BargainBuddy : Erreur durant le nettoyage	C:\WINDOWS\system32\mac80ex.idf/C:/Program Files/BullsEye Network/bin/bargains.exe -> Spyware.BargainBuddy : Erreur durant le nettoyage	C:\WINDOWS\system32\mac80ex.idf/C:/Program Files/BullsEye Network/bin/adv.exe -> Spyware.BargainBuddy : Erreur durant le nettoyage	C:\WINDOWS\system32\mac80ex.idf/C:/Program Files/BullsEye Network/bin/adx.exe -> Spyware.BargainBuddy : Erreur durant le nettoyage	F:\Program Files\Messenger Plus! 2\Setup.dat/70000010.exe -> Downloader.Swizzor.g : Nettoyer et sauvegarder	F:\WINDOWS\Downloaded Program Files\freeMP3downloader.exe -> Dialer.Generic : Nettoyer et sauvegarder	F:\WINDOWS\Downloaded Program Files\CONFLICT.1\freeMP3downloader.exe -> Dialer.Generic : Nettoyer et sauvegarder	F:\WINDOWS\Downloaded Program Files\CONFLICT.2\freeMP3downloader.exe -> Dialer.Generic : Nettoyer et sauvegarder	F:\WINDOWS\Downloaded Program Files\CONFLICT.3\freeMP3downloader.exe -> Dialer.Generic : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@estat[1].txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@bnpparibas.weborama[1].txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@statse.webtrendslive[1].txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@weborama[2].txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@realmedia[1].txt -> Spyware.Cookie.Realmedia : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@mediaplex[2].txt -> Spyware.Cookie.Mediaplex : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@bluestreak[1].txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@advertising[2].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@adserv.internetfuel[2].txt -> Spyware.Cookie.Internetfuel : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@as1.falkag[2].txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@hitbox[2].txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@ehg-nokiafin.hitbox[1].txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@www.smartadserver[2].txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder	F:\Documents and Settings\Standard\Cookies\standard@servedby.advertising[1].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@centrport[1].txt -> Spyware.Cookie.Centrport : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@estat[1].txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@www.popuptraffic[2].txt -> Spyware.Cookie.Popuptraffic : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@fastclick[1].txt -> Spyware.Cookie.Fastclick : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@adserv.internetfuel[1].txt -> Spyware.Cookie.Internetfuel : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@cz6.clickzs[1].txt -> Spyware.Cookie.Clickzs : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@sexlist[1].txt -> Spyware.Cookie.Sexlist : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@counter1.sextracker[1].txt -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@sextracker[1].txt -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@paycounter[1].txt -> Spyware.Cookie.Paycounter : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@xxxcounter[1].txt -> Spyware.Cookie.Xxxcounter : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@questionmarket[1].txt -> Spyware.Cookie.Questionmarket : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@z1.adserver[1].txt -> Spyware.Cookie.Adserver : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@gator[2].txt -> Spyware.Cookie.Gator : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@as1.falkag[1].txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@bfast[1].txt -> Spyware.Cookie.Bfast : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@atdmt[2].txt -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@realmedia[1].txt -> Spyware.Cookie.Realmedia : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@adtech[2].txt -> Spyware.Cookie.Adtech : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@ads.valuead[1].txt -> Spyware.Cookie.Valuead : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@adviva[2].txt -> Spyware.Cookie.Adviva : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@www.smartadserver[1].txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@servedby.advertising[1].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@servedfor.valuead[1].txt -> Spyware.Cookie.Valuead : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@targetnet[1].txt -> Spyware.Cookie.Targetnet : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@trafficmp[2].txt -> Spyware.Cookie.Trafficmp : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@www.qksrv[1].txt -> Spyware.Cookie.Qksrv : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@valueclick[2].txt -> Spyware.Cookie.Valueclick : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@weborama[1].txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@advertising[2].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@fl01.ct2.comclick[1].txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder	F:\Documents and Settings\Theo\Cookies	heo@mediaplex[2].txt -> Spyware.Cookie.Mediaplex : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@valueclick[1].txt -> Spyware.Cookie.Valueclick : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@servedby.advertising[1].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@advertising[1].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@bluestreak[3].txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@estat[1].txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@weborama[2].txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@fastclick[2].txt -> Spyware.Cookie.Fastclick : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@advertising[3].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@www.qksrv[1].txt -> Spyware.Cookie.Qksrv : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@banserv.internetfuel[2].txt -> Spyware.Cookie.Internetfuel : Nettoyer et sauvegarder	F:\Documents and Settings\Aurelie\Cookies\aurelie@servedby.advertising[3].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Marine\Cookies\marine@bluestreak[1].txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder	F:\Documents and Settings\Marine\Cookies\marine@as1.falkag[1].txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder	F:\Documents and Settings\Marine\Cookies\marine@www.smartadserver[1].txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder	F:\Documents and Settings\Marine\Cookies\marine@servedby.advertising[1].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Marine\Cookies\marine@advertising[1].txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder	F:\Documents and Settings\Marine\Cookies\marine@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder	F:\Documents and Settings\Marine\Cookies\marine@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Nettoyer et sauvegarder	G:\Programmes\MsgPlus-210a.exe/70000010.exe -> Downloader.Swizzor.g : Nettoyer et sauvegarder	G:\Programmes\goldwave5.06.zip/start.exe -> Downloader.IstBar : Nettoyer et sauvegarder	J:\eMule\Incoming\Documents et textes\eBook Fr.-.Apprendre.Le.HTML.De.A.à.Z.Pour.Les.Zéros.-.Français.-.French----Mis.En.Page.Et.Shared.By.KoraS.RAR/[PC GAME] Casino games 500 $ for free - Giochi da casino 500 dollari gratis.exe -> Spyware.Casino : Nettoyer et sauvegarder::Fin du rapport

aranjuez31 · Answer

ouf
que ça !.....
ben dis donc ! T crade
bcp sont fixéx
mais va falloir partir au combat pour nettoyer le reste

peux-tu remettre un rapport ewido(aprés new scan) ce sera plus court & plus facile à lire
---------
on va encore nettoyer avec scan online
http://www.bitdefender.fr/bd/site/search.php#
&
http://assiste.free.fr/p/antivirus_gratuits_en_ligne/antivirus_en_ligne.php

tu me colleras les 2 rapports de bit et panda

Ketmo · Answer

Je ne vais pas pouvoir le faire maintenant, je dois m'absenter pour la soirée...mais je m'occuperai de tout ça en rentrant.

Ketmo · Answer

Etant de retour, je m'occupe des scans.

Ketmo · Answer

Voilà le nouveau scan d'ewido:--------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		00:18:46, 25/01/2006 + Somme de contrôle:	7C9A5AFD + Résultats du scan:	HKU\S-1-5-21-839522115-1229272821-2146812355-1003\Software\SNO2 -> Adware.SpySheriff : Nettoyer et sauvegarder	[5948] C:\DOCUME~1\VICTOR\APPLIC~1\CITYTI~1\axis five.exe -> Downloader.Swizzor.bo : Erreur durant le nettoyage	C:\Documents and Settings\VICTOR\Cookies\victor@ad.yieldmanager[2].txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\Program Files\WildTangent\Components\SystemConfig0100.dll -> Spyware.WinAD : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\cd_htm.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\bdedata2.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\bdefdi.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\chktrust.exe -> Spyware.BargainBuddy : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\bdeload.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\BDESac10.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\BDESac24.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\system32\bdeinsta25.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\BDE\Cache\bdedetect1.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\BDE\bdeviewer.exe -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\BDE\b3dsetup.exe -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\BDE\bdedetect1.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\NDNuninstall4_50.exe -> Spyware.NewDotNet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.2.0.007
pwthost.dll -> Spyware.WildTangent : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.2.0.007\wtvh.dll -> Spyware.WildTangent : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072310199.ssb/F:\WINDOWS\wt\wtvh.dll -> Spyware.WildTangent : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\altnet\download manager\altnetuninstall.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\altnet\download manager\asmend.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\altnet\Points Manager\sysdetect.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\Common Files\updater\delupdat.exe -> Downloader.Keenal : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\WINDOWS\system32\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072370734.ssb/C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\Program Files\altnet\download manager\altnetuninstall.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\Program Files\altnet\download manager\asmend.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\Program Files\altnet\Points Manager\sysdetect.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\WINDOWS\system32\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072641069.ssb/C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\Program Files\altnet\download manager\altnetuninstall.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\Program Files\altnet\download manager\asmend.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\Program Files\altnet\Points Manager\sysdetect.dll -> Adware.BrilliantDigital : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\WINDOWS\system32\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1072972924.ssb/C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1076100897.ssb/C:\Documents and Settings\VICTOR\Local Settings\Temp\cd_clint.dll -> Spyware.Cydoor : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1076100897.ssb/C:\Documents and Settings\VICTOR\Local Settings\Temp\__unin__.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1076100897.ssb/C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1076100897.ssb/C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1107007840.ssb/C:\Program Files\Bargain Buddy\bbchk.exe -> Spyware.BargainBuddy : Erreur durant le nettoyage	C:\Program Files\interMute\SpySubtract\Backup\Clean Session  - 1137417543.ssb/C:\Program Files\Bargain Buddy\bbchk.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\WINDOWS\system32\mac80ex.idf/C:/WINDOWS/system32/msbe.dll -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\WINDOWS\system32\mac80ex.idf/C:/Program Files/BullsEye Network/bin/bargains.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\WINDOWS\system32\mac80ex.idf/C:/Program Files/BullsEye Network/bin/adv.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\WINDOWS\system32\mac80ex.idf/C:/Program Files/BullsEye Network/bin/adx.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\WINDOWS\system32\__delete_on_reboot__kbdycc32.dll -> Trojan.BHO.b : Nettoyer et sauvegarder	F:\System Volume Information\_restore{31948922-777A-4D20-B7FA-73337D948F07}\RP972\A0161456.exe -> Dialer.Generic : Nettoyer et sauvegarder	F:\System Volume Information\_restore{31948922-777A-4D20-B7FA-73337D948F07}\RP972\A0161457.exe -> Dialer.Generic : Nettoyer et sauvegarder	F:\System Volume Information\_restore{31948922-777A-4D20-B7FA-73337D948F07}\RP972\A0161458.exe -> Dialer.Generic : Nettoyer et sauvegarder	F:\System Volume Information\_restore{31948922-777A-4D20-B7FA-73337D948F07}\RP972\A0161459.exe -> Dialer.Generic : Nettoyer et sauvegarder	G:\System Volume Information\_restore{31948922-777A-4D20-B7FA-73337D948F07}\RP972\A0161460.exe/70000010.exe -> Downloader.Swizzor.g : Erreur durant le nettoyage::Fin du rapport

aranjuez31 · Answer

ben ya du boulot encore

colle moi un hijackthis
http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
tutos pour bien faire
http://pageperso.aol.fr/balltrap34/Hijenr.gif
http://pageperso.aol.fr/balltrap34/demohijack.htm

Ketmo · Answer

Les scans online sont vraisemblablement nécessaires...néanmoins, en une heure, BitDefender n'a analysé que 1/5 de mon ordi.
Du coup, comme il y a un 2ème scan qui suivra, je crains que j'en ai pour un bon bout de temps...Donc est-il possible que je passe outre ces scans online...?
Sinon, tant pis, je suis prêt à passer autant de temps qu'il faudra pour soigner mon ordi.

Ketmo · Answer

Ok. Je me lance dans un scan HijackThis!

Ketmo · Answer

Rapport du scan HijackThis:Logfile of HijackThis v1.99.1Scan saved at 01:57:56, on 25/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\system32\CTSvcCDA.EXEC:\WINDOWS\system32
vsvc32.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeC:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exeC:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exeC:\WINDOWS\system32\MsPMSPSv.exeC:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exeC:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXEC:\WINDOWS\system32\devldr32.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\PROGRA~1\PESTPA~1\PPControl.exeC:\PROGRA~1\PESTPA~1\PPMemCheck.exeC:\PROGRA~1\PESTPA~1\CookiePatrol.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\WINDOWS\system32undll32.exec:\progra~1\intern~1\iexplore.exeC:\Program Files\interMute\SpySubtract\SpySub.exeC:\Program Files\Internet Explorer\iexplore.exeC:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXEC:\WINDOWS\explorer.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXER1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.snqthxdhfroidtgmjnxx.net/1Y4eM9pqxgilQsamEUQhitAvLYdVYrgwxgvFvUpGjGfNVzARLeS9R2dOX8hQVMEr.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = about:blankR0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = about:blankR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - Default URLSearchHook is missingN3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.purevolume.com/thump"); (C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\prefs.js)N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src"); (C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\prefs.js)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: (no name) - {A6D7CD41-9FE9-3BC7-1616-DA6F7A4D6670} - C:\DOCUME~1\VICTOR\APPLIC~1\CITYTI~1\axis five.exe (file missing)O2 - BHO: (no name) - {B252FF51-61F8-4F93-9ED6-CCE44A5126E4} - C:\WINDOWS\system32\kbdycc32.dll (file missing)O2 - BHO: (no name) - {FD1438E7-0237-3F9F-402F-C189BE98FEBC} - C:\DOCUME~1\VICTOR\APPLIC~1\CITYTI~1\axis five.exe (file missing)O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXEO4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exeO4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"O4 - HKLM\..\Run: [Tau Monitor] C:\PROGRA~1\Agnitum\TAUSCA~1.7	aumon.exeO4 - HKLM\..\Run: [SpywareStopper] C:\Program Files\SpyBlocker Software\SpywareStopper\spywarestopper.exeO4 - HKLM\..\Run: [SpyBlocker] C:\Program Files\SpyBlocker Software\spyblocker.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exeO4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exeO4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEO4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d
avapp.exeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [Style plan tick name] C:\Documents and Settings\All Users\Application Data\StoreReadmeStylePlan\Tool store.exeO4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exeO4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /autoO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXEO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytrayO4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXEO4 - HKCU\..\Run: [Spyware-Cop] "C:\PROGRA~1\SPYWAR~2\Spyware-Cop.exe" /sO4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [Sixth 1] C:\DOCUME~1\VICTOR\APPLIC~1\TRAYMA~1\Flawrect.exeO4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInitO4 - Startup: MSNP13 Downgrader.lnk = ?O4 - Global Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS
pqtplugin3.dllO16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cabO16 - DPF: Yahoo! Euchre - http://download.games.yahoo.com/games/clients/y/et1_x.cabO16 - DPF: Yahoo! MahJong Solitaire - http://download.games.yahoo.com/games/clients/y/mjst4_x.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cabO16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cabO16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20030523/qtinstall.info.apple.com/drakken/fr/win/QuickTimeInstaller.exeO16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} - http://promo.dollarrevenue.com/webmasterexe/drsmartload185a.exeO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cabO16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab30149.cabO16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} (Environnement d'exécution Java 1.4.0_03) - O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: ,O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: License Management Service ESD - element5 - C:\Program Files\Fichiers communs\element5 Shared\Service\Licence Manager ESD.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exeO23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeO23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exeO23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exeO23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeO23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exeO23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exeO23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

aranjuez31 · Answer

1ére lecture rapide
fixe ttes les 016 ( chose que tu peux faire sans spécialiste)
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: Yahoo! Euchre - http://download.games.yahoo.com/games/clients/y/et1_x.cab
O16 - DPF: Yahoo! MahJong Solitaire - http://download.games.yahoo.com/games/clients/y/mjst4_x.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20030523/qtinstall.info.apple.com/drakken/fr/win/QuickTimeInstaller.exe
O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} - http://promo.dollarrevenue.com/webmasterexe/drsmartload185a.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab30149.cab
O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} (Environnement d'exécution Java 1.4.0_03) -

+

R3 - Default URLSearchHook is missing

+

O2 - BHO: (no name) - {A6D7CD41-9FE9-3BC7-1616-DA6F7A4D6670} - C:\DOCUME~1\VICTOR\APPLIC~1\CITYTI~1\axis five.exe (file missing)
O2 - BHO: (no name) - {B252FF51-61F8-4F93-9ED6-CCE44A5126E4} - C:\WINDOWS\system32\kbdycc32.dll (file missing)
O2 - BHO: (no name) - {FD1438E7-0237-3F9F-402F-C189BE98FEBC} - C:\DOCUME~1\VICTOR\APPLIC~1\CITYTI~1\axis five.exe (file missing)
--------
le reste , patience , c'est long les vérif

Ketmo · Answer

Les fichiers à rechercher sont introuvables, et en ce qui concerne les dossiers, je n'ai troué que Spyware-Cop.Sinon, voilà un nouveau rapport HijackThis:Logfile of HijackThis v1.99.1Scan saved at 02:53:20, on 25/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\system32\CTSvcCDA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\WINDOWS\system32
vsvc32.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeC:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exeC:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exeC:\WINDOWS\system32\MsPMSPSv.exeC:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXEC:\Program Files\Trend Micro\Internet Security 12\pccguide.exeC:\WINDOWS\system32\devldr32.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\PROGRA~1\PESTPA~1\PPControl.exeC:\PROGRA~1\PESTPA~1\PPMemCheck.exeC:\PROGRA~1\PESTPA~1\CookiePatrol.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\system32undll32.exeC:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXEC:\Program Files\MSN Messenger\msnmsgr.exec:\progra~1\intern~1\iexplore.exeC:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\interMute\SpySubtract\SpySub.exeC:\Program Files\MSN Messenger\MSNP13Downgrader.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Windows Media Player\wmplayer.exeC:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXER1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.snqthxdhfroidtgmjnxx.net/1Y4eM9pqxgilQsamEUQhitAvLYdVYrgwxgvFvUpGjGfNVzARLeS9R2dOX8hQVMEr.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.frR1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = about:blankR0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/su/*http://www.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensN3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.purevolume.com/thump"); (C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\prefs.js)N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src"); (C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\prefs.js)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: (no name) - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - (no file)O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file)O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXEO4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exeO4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"O4 - HKLM\..\Run: [Tau Monitor] C:\PROGRA~1\Agnitum\TAUSCA~1.7	aumon.exeO4 - HKLM\..\Run: [SpywareStopper] C:\Program Files\SpyBlocker Software\SpywareStopper\spywarestopper.exeO4 - HKLM\..\Run: [SpyBlocker] C:\Program Files\SpyBlocker Software\spyblocker.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exeO4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exeO4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exeO4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /autoO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXEO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytrayO4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXEO4 - HKLM\..\Run: [Style plan tick name] C:\Documents and Settings\All Users\Application Data\StoreReadmeStylePlan\Tool store.exeO4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d
avapp.exeO4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [Sixth 1] C:\DOCUME~1\VICTOR\APPLIC~1\TRAYMA~1\Flawrect.exeO4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInitO4 - Startup: MSNP13 Downgrader.lnk = ?O4 - Global Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS
pqtplugin3.dllO16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} - O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: ,O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: License Management Service ESD - element5 - C:\Program Files\Fichiers communs\element5 Shared\Service\Licence Manager ESD.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exeO23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeO23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exeO23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exeO23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeO23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exeO23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exeO23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

Ketmo · Answer

Rapport l2mfix: L2MFIX find log 010406 These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\ 6c,00,00,00 "Logoff"="ChainWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Logoff"="CryptnetWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] "DLLName"="cscdll.dll" "Logon"="WinlogonLogonEvent" "Logoff"="WinlogonLogoffEvent" "ScreenSaver"="WinlogonScreenSaverEvent" "Startup"="WinlogonStartupEvent" "Shutdown"="WinlogonShutdownEvent" "StartShell"="WinlogonStartShellEvent" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] "DLLName"="wlnotify.dll" "Logon"="SCardStartCertProp" "Logoff"="SCardStopCertProp" "Lock"="SCardSuspendCertProp" "Unlock"="SCardResumeCertProp" "Enabled"=dword:00000001 "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "StartShell"="SchedStartShell" "Logoff"="SchedEventLogOff" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] "Logoff"="WLEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] "DLLName"="WlNotify.dll" "Lock"="SensLockEvent" "Logon"="SensLogonEvent" "Logoff"="SensLogoffEvent" "Safe"=dword:00000001 "MaxWait"=dword:00000258 "StartScreenSaver"="SensStartScreenSaverEvent" "StopScreenSaver"="SensStopScreenSaverEvent" "Startup"="SensStartupEvent" "Shutdown"="SensShutdownEvent" "StartShell"="SensStartShellEvent" "PostShell"="SensPostShellEvent" "Disconnect"="SensDisconnectEvent" "Reconnect"="SensReconnectEvent" "Unlock"="SensUnlockEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify ermsrv] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "Logoff"="TSEventLogoff" "Logon"="TSEventLogon" "PostShell"="TSEventPostShell" "Shutdown"="TSEventShutdown" "StartShell"="TSEventStartShell" "Startup"="TSEventStartup" "MaxWait"=dword:00000258 "Reconnect"="TSEventReconnect" "Disconnect"="TSEventDisconnect" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] "DLLName"="wlnotify.dll" "Logon"="RegisterTicketExpiredNotificationEvent" "Logoff"="UnregisterTicketExpiredNotificationEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 ********************************************************************************** useragent: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "SV1"="" ********************************************************************************** Shell Extension key: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia" "{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM" "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS" "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile" "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage" "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension" "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration" "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration" "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration" "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS" "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚" "{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement" "{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette" "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows" "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM" "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM" "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers" "{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web" "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI" "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage" "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents" "{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal" "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts" "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC" "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes" "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage" "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension" "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO" "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign" "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau" "{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau" "{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo" "{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo" "{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo" "{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo" "{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo" "{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension" "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows" "{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft" "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler" "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension" "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es" "{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer" "{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher" "{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support" "{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support" "{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..." "{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet" "{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique" "{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices" "{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration" "{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler" "{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler" "{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler" "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler" "{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler" "{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor" "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft" "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement" "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu" "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚" "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy" "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft" "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche" "{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band" "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche" "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web" "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre" "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse" "{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse" "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft" "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor" "{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU" "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU" "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible" "{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante" "{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Analyseur de la barre d'adresses" "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft" "{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft" "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft" "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes" "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp" "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau" "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite" "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur" "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global" "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band" "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service" "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer" "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture" "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut" "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service" "{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique" "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook" "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4" "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook" "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC" "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC" "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet" "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space" "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band" "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache" "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck" "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr" "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription" "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler" "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent" "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent" "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent" "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent" "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent" "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler" "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement" "{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es" "{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin" "{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs" "{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory" "{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI" "{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)" "{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML" "{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler" "{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web" "{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web" "{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell" "{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport" "{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs" "{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler" "{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target" "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne" "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne" "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object" "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu" "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties" "{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview" "{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext" "{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control" "{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control" "{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control" "{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control" "{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control" "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI" "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object" "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find" "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find" "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI" "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs" "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook" "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target" "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties" "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu" "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options" "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion" "{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler" "{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell" "{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%" "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler" "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer" "{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..." "{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler" "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler" "{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler" "{1CDB2949-8F65-4355-8456-263E7C208A5D}"="Desktop Explorer" "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}"="Desktop Explorer Menu" "{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}"="Shell Extensions for RealOne Player" "{F802F260-519B-11D1-BB5D-0060974C6013}"="ICQ Shell Extension" "{1AED2A52-81A3-404D-AEF9-7DE981C316D1}"="R-Wipe&Clean" "{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension" "{1E2CDF40-419B-11D2-A5A1-002018648BA7}"="AVG Shell Extension" "{48F45200-91E6-11CE-8A4F-0080C81A28D4}"="TMD Shell Extension" "{771A9DA0-731A-11CE-993C-00AA004ADB6C}"="VBPropSheet" "{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"="Set Program Access and Defaults" "{596AB062-B4D2-4215-9F74-E9109B0A8153}"="Previous Versions Property Page" "{9DB7A13C-F208-4981-8353-73CC61AE2783}"="Previous Versions" "{692F0339-CBAA-47e6-B5B5-3B84DB604E87}"="Extensions Manager Folder" "{B6122A50-EAB5-11D3-9E7F-EBF4F0595714}"="Tauscan Menu" "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}"="AVG7 Shell Extension" "{9F97547E-460A-42C5-AE0C-81C61FFAEBC3}"="AVG7 Find Extension" "{40950107-FEA6-4d53-A65F-B2DCBA57DD58}"="Nokia Phone Browser" "{FBFE7864-D495-41f0-B7DC-4BB601CC295E}"="Contact View" "{C0C4375A-5B72-4efe-929D-3B848C3A1E91}"="Message View" "{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices" "{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu" "{330417E8-EF62-4047-82BE-D8305CEFF572}"="AMEncShlExt extension" "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}"="OpenOffice.org Column Handler" "{087B3AE3-E237-4467-B8DB-5A38AB959AC9}"="OpenOffice.org Infotip Handler" "{63542C48-9552-494A-84F7-73AA6A7C99C1}"="OpenOffice.org Property Sheet Handler" "{3B092F0C-7696-40E3-A80F-68D74DA84210}"="OpenOffice.org Thumbnail Viewer" "{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}"="Autoplay for SlideShow" "{32020A01-506E-484D-A2A8-BE3CF17601C3}"="AlcoholShellEx" "{A5110426-177D-4e08-AB3F-785F10B4439C}"="Sony Ericsson Gestionnaire de fichiers" "{A70C977A-BF00-412C-90B7-034C51DA2439}"="NvCpl DesktopContext Class" "{FFB699E0-306A-11d3-8BD1-00104B6F7516}"="Play on my TV helper" "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}"="nView Desktop Context Menu" "{21569614-B795-46b1-85F4-E737A8DC09AD}"="Shell Search Band" "{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache" "{79BC0345-1015-11D2-A299-006008312725}"="blue.shell" "{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D}"="Mes dossiers de partage" "{2AA59FC0-31E8-42DA-9D3C-E9A52953853B}"="CopyToCD shell extension" ********************************************************************************** HKEY ROOT CLASSIDS: ********************************************************************************** Files Found are not all bad files: C:\WINDOWS\SYSTEM32\ browseui.dll Thu 24 Nov 2005 1:08:34 A.... 1 022 976 999,00 K danim.dll Sat 5 Nov 2005 4:17:22 A.... 1 056 768 1,01 M gdi32.dll Thu 29 Dec 2005 3:56:04 A.... 280 064 273,50 K mshtml.dll Thu 24 Nov 2005 1:08:36 A.... 3 013 632 2,87 M shdocvw.dll Thu 1 Dec 2005 5:01:16 A.... 1 492 992 1,42 M sirenacm.dll Wed 18 Jan 2006 11:20:34 A.... 121 544 118,70 K urlmon.dll Sat 5 Nov 2005 4:17:26 A.... 606 208 592,00 K xvidcore.dll Thu 24 Nov 2005 6:43:14 A.... 843 776 824,00 K xvidvfw.dll Thu 24 Nov 2005 6:44:10 A.... 151 552 148,00 K 9 items found: 9 files, 0 directories. Total of file sizes: 8 589 512 bytes 8,19 M Locate .tmp files: No matches found. ********************************************************************************** Directory Listing of system files: Le volume dans le lecteur C s'appelle XP Le num‚ro de s‚rie du volume est 5440-745F R‚pertoire de C:\WINDOWS\System32 13/01/2006 02:19 dllcache 23/05/2005 09:30 952 KGyGaAvL.sys 10/03/2005 12:55 56 501481292D.sys 07/02/2005 12:20 12 spwtpaxp.dll 17/10/2004 19:27 14 dpwtpaxp.dll 17/10/2004 19:27 21 dpwtdaxp.dll 03/06/2003 13:03 Microsoft 5 fichier(s) 1ÿ055 octets 2 R‚p(s) 511ÿ299ÿ584 octets libres

Ketmo · Answer

Hop, et voilà le rapport HijackThis:Logfile of HijackThis v1.99.1Scan saved at 03:24:30, on 25/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\system32\CTSvcCDA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\WINDOWS\system32
vsvc32.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeC:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exeC:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exeC:\WINDOWS\system32\MsPMSPSv.exeC:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXEC:\WINDOWS\system32\devldr32.exeC:\Program Files\Trend Micro\Internet Security 12\pccguide.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\PROGRA~1\PESTPA~1\PPControl.exeC:\PROGRA~1\PESTPA~1\PPMemCheck.exeC:\PROGRA~1\PESTPA~1\CookiePatrol.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEC:\WINDOWS\system32undll32.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exeC:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXEC:\Program Files\QuickTime\qttask.exeC:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\Program Files\MSN Messenger\msnmsgr.exec:\progra~1\intern~1\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\interMute\SpySubtract\SpySub.exeC:\Program Files\MSN Messenger\MSNP13Downgrader.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXER1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.snqthxdhfroidtgmjnxx.net/1Y4eM9pqxgilQsamEUQhitAvLYdVYrgwxgvFvUpGjGfNVzARLeS9R2dOX8hQVMEr.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.frR1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = about:blankR0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/su/*http://www.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensN3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.purevolume.com/thump"); (C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\prefs.js)N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src"); (C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\prefs.js)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: (no name) - {A6D7CD41-9FE9-3BC7-1616-DA6F7A4D6670} - (no file)O2 - BHO: (no name) - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - (no file)O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file)O2 - BHO: (no name) - {FD1438E7-0237-3F9F-402F-C189BE98FEBC} - (no file)O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXEO4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exeO4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"O4 - HKLM\..\Run: [Tau Monitor] C:\PROGRA~1\Agnitum\TAUSCA~1.7	aumon.exeO4 - HKLM\..\Run: [SpywareStopper] C:\Program Files\SpyBlocker Software\SpywareStopper\spywarestopper.exeO4 - HKLM\..\Run: [SpyBlocker] C:\Program Files\SpyBlocker Software\spyblocker.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exeO4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exeO4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exeO4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /autoO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXEO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytrayO4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXEO4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d
avapp.exeO4 - HKLM\..\Run: [Style plan tick name] C:\Documents and Settings\All Users\Application Data\StoreReadmeStylePlan\Tool store.exeO4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInitO4 - HKCU\..\Run: [Sixth 1] C:\DOCUME~1\VICTOR\APPLIC~1\TRAYMA~1\Flawrect.exeO4 - Startup: MSNP13 Downgrader.lnk = ?O4 - Global Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS
pqtplugin3.dllO16 - DPF: teleir_cert - O16 - DPF: Yahoo! Euchre - O16 - DPF: Yahoo! MahJong Solitaire - O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} - O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} - O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} - O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} - O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} - O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: ,O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: License Management Service ESD - element5 - C:\Program Files\Fichiers communs\element5 Shared\Service\Licence Manager ESD.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exeO23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeO23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exeO23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exeO23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeO23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exeO23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exeO23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

aranjuez31 · Answer

avant dodo fixe ceciO16 - DPF: teleir_cert - O16 - DPF: Yahoo! Euchre - O16 - DPF: Yahoo! MahJong Solitaire - O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} - O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} - O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} - O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} - O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} - +O2 - BHO: (no name) - {A6D7CD41-9FE9-3BC7-1616-DA6F7A4D6670} - (no file) O2 - BHO: (no name) - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - (no file) O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file) O2 - BHO: (no name) - {FD1438E7-0237-3F9F-402F-C189BE98FEBC} - (no file)

Ketmo · Answer

Ok, je vais fixer ces petits trucs. Et pour ce qui est des rapports, je ferai ça demain. En tout cas, merci beaucoup de m'aider, c'est vraiment sympa. Bonne nuit ;)

Ketmo · Answer

Bonjour, me revoilà d'attaque après une bonne nuit de sommeil.Tout d'abord voici le rapport de l2mfix:L2mfix 010406Creating Account.La commande s'est termin‚e correctement.Adding Administrative privleges. Checking for L2MFix account(0=no 1=yes): 1 Granting SeDebugPrivilege to L2MFIX   ... successful Running From:C:\WINDOWS\SYSTEM32 Killing Processes! Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.orgKilling PID 528 'smss.exe'Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.orgKilling PID 608 'winlogon.exe'Killing PID 608 'winlogon.exe'Killing PID 608 'winlogon.exe'Killing PID 608 'winlogon.exe'Killing PID 608 'winlogon.exe'Killing PID 608 'winlogon.exe'Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.orgKilling PID 2928 'explorer.exe'Killing PID 2928 'explorer.exe'Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.orgKilling PID 2100 'rundll32.exe'Killing PID 3440 'rundll32.exe'Restoring Sedebugprivilege: Granting SeDebugPrivilege to Administrateurs   ... successful Scanning First Pass. Please Wait! First Pass Completed  Second Pass Scanning  Second pass Completed!   Restoring Windows Update Certificates.: The following Is the Current Export of the Winlogon notify key:****************************************************************************Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify][HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]"Asynchronous"=dword:00000000"Impersonate"=dword:00000000"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\  6c,00,00,00"Logoff"="ChainWlxLogoffEvent"[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]"Asynchronous"=dword:00000000"Impersonate"=dword:00000000"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\  6c,00,6c,00,00,00"Logoff"="CryptnetWlxLogoffEvent"[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]"DLLName"="cscdll.dll""Logon"="WinlogonLogonEvent""Logoff"="WinlogonLogoffEvent""ScreenSaver"="WinlogonScreenSaverEvent""Startup"="WinlogonStartupEvent""Shutdown"="WinlogonShutdownEvent""StartShell"="WinlogonStartShellEvent""Impersonate"=dword:00000000"Asynchronous"=dword:00000001[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]"DLLName"="wlnotify.dll""Logon"="SCardStartCertProp""Logoff"="SCardStopCertProp""Lock"="SCardSuspendCertProp""Unlock"="SCardResumeCertProp""Enabled"=dword:00000001"Impersonate"=dword:00000001"Asynchronous"=dword:00000001[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]"Asynchronous"=dword:00000000"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\  6c,00,6c,00,00,00"Impersonate"=dword:00000000"StartShell"="SchedStartShell""Logoff"="SchedEventLogOff"[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]"Logoff"="WLEventLogoff""Impersonate"=dword:00000000"Asynchronous"=dword:00000001"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\  6c,00,6c,00,00,00[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]"DLLName"="WlNotify.dll""Lock"="SensLockEvent""Logon"="SensLogonEvent""Logoff"="SensLogoffEvent""Safe"=dword:00000001"MaxWait"=dword:00000258"StartScreenSaver"="SensStartScreenSaverEvent""StopScreenSaver"="SensStopScreenSaverEvent""Startup"="SensStartupEvent""Shutdown"="SensShutdownEvent""StartShell"="SensStartShellEvent""PostShell"="SensPostShellEvent""Disconnect"="SensDisconnectEvent""Reconnect"="SensReconnectEvent""Unlock"="SensUnlockEvent""Impersonate"=dword:00000001"Asynchronous"=dword:00000001[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify	ermsrv]"Asynchronous"=dword:00000000"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\  6c,00,6c,00,00,00"Impersonate"=dword:00000000"Logoff"="TSEventLogoff""Logon"="TSEventLogon""PostShell"="TSEventPostShell""Shutdown"="TSEventShutdown""StartShell"="TSEventStartShell""Startup"="TSEventStartup""MaxWait"=dword:00000258"Reconnect"="TSEventReconnect""Disconnect"="TSEventDisconnect"[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]"DLLName"="wlnotify.dll""Logon"="RegisterTicketExpiredNotificationEvent""Logoff"="UnregisterTicketExpiredNotificationEvent""Impersonate"=dword:00000001"Asynchronous"=dword:00000001 The following are the files found: **************************************************************************** Registry Entries that were Deleted: Please verify that the listing looks ok.  If there was something deleted wrongly there are backups in the backreg folder. ****************************************************************************REGEDIT4[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]REGEDIT4[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]"SV1"=""****************************************************************************Desktop.ini Contents: ********************************************************************************************************************************************************Checking for L2MFix account(0=no 1=yes): 0Zipping up files for submission:	zip warning: name not matched: dlls\*.*zip error: Nothing to do! (backup.zip)  adding: backregs/notibac.reg (212 bytes security) (deflated 87%)  adding: backregs/shell.reg (212 bytes security) (deflated 73%)

Ketmo · Answer

Et là, le rapport deHijackThis (le rapport a été fait après avoir fixer les derniers éléments):Logfile of HijackThis v1.99.1Scan saved at 04:09:19, on 25/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\system32\CTSvcCDA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\WINDOWS\system32
vsvc32.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeC:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exeC:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exeC:\WINDOWS\system32\MsPMSPSv.exeC:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXEC:\WINDOWS\system32\devldr32.exeC:\Program Files\Trend Micro\Internet Security 12\pccguide.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\PROGRA~1\PESTPA~1\PPControl.exeC:\PROGRA~1\PESTPA~1\PPMemCheck.exeC:\PROGRA~1\PESTPA~1\CookiePatrol.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exeC:\Program Files\QuickTime\qttask.exeC:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXEC:\WINDOWS\system32undll32.exeC:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\Program Files\MSN Messenger\msnmsgr.exec:\progra~1\intern~1\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\interMute\SpySubtract\SpySub.exeC:\Program Files\MSN Messenger\MSNP13Downgrader.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXER1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.snqthxdhfroidtgmjnxx.net/1Y4eM9pqxgilQsamEUQhitAvLYdVYrgwxgvFvUpGjGfNVzARLeS9R2dOX8hQVMEr.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.frR1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = about:blankR0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/su/*http://www.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensN3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.purevolume.com/thump"); (C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\prefs.js)N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src"); (C:\Documents and Settings\VICTOR\Application Data\Mozilla\Profiles\default\mwcwi7tf.slt\prefs.js)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXEO4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exeO4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"O4 - HKLM\..\Run: [Tau Monitor] C:\PROGRA~1\Agnitum\TAUSCA~1.7	aumon.exeO4 - HKLM\..\Run: [SpywareStopper] C:\Program Files\SpyBlocker Software\SpywareStopper\spywarestopper.exeO4 - HKLM\..\Run: [SpyBlocker] C:\Program Files\SpyBlocker Software\spyblocker.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exeO4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exeO4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exeO4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /autoO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXEO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytrayO4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXEO4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d
avapp.exeO4 - HKLM\..\Run: [Style plan tick name] C:\Documents and Settings\All Users\Application Data\StoreReadmeStylePlan\Tool store.exeO4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInitO4 - HKCU\..\Run: [Sixth 1] C:\DOCUME~1\VICTOR\APPLIC~1\TRAYMA~1\Flawrect.exeO4 - Startup: MSNP13 Downgrader.lnk = ?O4 - Global Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS
pqtplugin3.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: ,O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: License Management Service ESD - element5 - C:\Program Files\Fichiers communs\element5 Shared\Service\Licence Manager ESD.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exeO23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeO23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exeO23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exeO23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exeO23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exeO23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exeO23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

[Virus] Infecté par Spy Sheriff

27 réponses

Discussions similaires

Newsletters