ordinateur infecte par un dialer svp repondre Résolu/Fermé

Question

j'ai sans doute un dialer (appel vers le 0836012015 frequent mais je ne sais pas comment l'eliminer mais j'ai des doures sur un fichier nomme A BOX ou adult boxj'ai fait le test que vous demandez mais je ne sais pas quoi en faire:Logfile of HijackThis v1.99.1Scan saved at 17:05:02, on 17/02/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exec:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exec:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exec:\Program Files\Norton Internet Security\ISSVC.exeC:\WINDOWS\system32\Ati2evxx.exec:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exec:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\WINDOWS\Explorer.EXEc:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exec:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEc:\Program Files\Fichiers communs\LightScribe\LSSrvc.exeC:\WINDOWS\system32\svchost.exec:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\AGRSMMSG.exeC:\WINDOWS\system32\hphmon06.exeC:\HP\KBD\KBD.EXEC:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exeC:\Program Files\InterVideo\Common\Bin\WinRemote.exeC:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\hp\drivers\hplsbwatcher\lsburnwatcher.exeC:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exeC:\WINDOWS\logon.exeC:\WINDOWS\system32\bpk.exeC:\Program Files\Media Access\MediaAccK.exeC:\Program Files\Media Access\MediaAccess.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\WINDOWS\ALCXMNTR.EXEC:\WINDOWS\system32\ctfmon.exeC:\Program Files\HP\Digital Imaging\bin\hpqimzone.exeC:\Program Files\Internet Explorer\iexplore.exeC:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis_199[1].zip\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*http://fr.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cegetel.net/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*http://fr.yahoo.comR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: PK IE Plugin - {1E1B2879-88FF-11D3-8D96-D7ACAC95951A} - C:\WINDOWS\system32\bpkwb.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dllO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exeO4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exeO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startupO4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -startO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exeO4 - HKLM\..\Run: [adiras] adiras.exeO4 - HKLM\..\Run: [AutoTBar] c:\documents and settings\default user\menu démarrer\programmes\démarrage\autotbar.exeO4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"O4 - HKLM\..\Run: [WinLogon] C:\WINDOWS\logon.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [bpk] C:\WINDOWS\system32\bpk.exeO4 - HKLM\..\Run: [Explorer] C:\WINDOWS\system32\expIorer.exeO4 - HKLM\..\Run: [Wuupdate] C:\WINDOWS\system32\smmss.exeO4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\HPQ\XPXWWPP5\plugin\bin\PCHButton.exeO4 - Startup: Eurobarre.lnk = ?O4 - Startup: Eurobarre.lnk.disabledO4 - Startup: OpenOffice.org 2.0.lnk.disabledO4 - Global Startup: DSLMON.lnk.disabledO4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exeO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Microsoft Office.lnk.disabledO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Tout télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_all.htmO8 - Extra context menu item: Télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_link.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLLO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.coupdepoucepc.com/scan8/oscan8.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130266250296O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{F01A4A53-04B5-46E0-AD18-CC9DF3768837}: NameServer = 217.19.192.132 217.19.192.131O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exeO23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXEO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exeO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exeO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exeO23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

Séb08 · Answer

Slt,j'ai fait le test que vous demandez mais je ne sais pas quoi en faire:Commences déja par les formules de politesse...! Ensuite tu scannes et tu reviens...http://www.technicland.com/malpolitus.swfhttp://img63.imageshack.us/img63/8650/rappelpolitesse5av.jpg

nicolasdu28 · Answer

merci mais je vais le faire tout de suite mais j'ai quand meme un probleme :j'ai regarde quelques problemes des autres et j' ai vu sur un scanun fichier du genre progetto1 et vous lui aviez dit de le supprimermais moi aussi j'ai un fichier ABox et quand on l'ouvre il met progetto1 mais il n'apparait pas dans le log HijackThis est ce normalmerci

nicolasdu28 · Answer

j'ai fait avec Ewido un test d'un seul dossier (Window) car j'avait trouve un fichier suspect (abox) le test s'est avere positif car il me l'a trouve ,il m'a dit que le risque etait eleve et que c'estait infecte par (mot pour mot) Not-A-Virus.PornTool.Win32.ABox.aqu'est ce que c'est ??? merci

ben13010 · Answer

salut nico ecoute  on va pas te decrire tous les virus que ewido et consorts vont te trouver quand meme !! le plus important pour toi , c'est de les supprimer , voila tout scanne ton pc avec tous ces log que seb t'a conseillé plus haut ,  supprime tous ce qu'ils trouvent , meme les sauvegardes qu'ils peuvent creer ensuite poste ton nouveau rapport hijack

nicolasdu28 · Answer

Bonjour comment je fais : BitDefender Online Scanner m'a trouve 23 virus comment les eliminer ??????merci de votre aideRésultats Virus identifiés 23 Fichiers infectés 49 Fichiers suspects 1 Avertissements 0 Désinfectés 0 Fichiers effacés 69      Info sur les moteurs Définition virus 261431 Version des moteurs AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29) Analyse des plugins 13 Archive des plugins 39 Unpack des plugins 4 E-mail plugins 6 Système plugins 1      Paramètres d'analyse Première action Désinfecté Seconde Action Supprimé Heuristique Oui Acceptez les avertissements Oui Extensions analysées *; Excludez les extensions   Analyse d'emails Oui Analyse des Archives Oui Analyser paquets programmes Oui Analyse des fichiers Oui Analyse de boot Oui        Fichier analysé  Statut C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\044B7AC0.exe=>(Quarantine-2) Infecté par: Trojan.Downloader.Small.CCA C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\044B7AC0.exe=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\044B7AC0.exe=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A8A284A.eXE=>(Quarantine-2) Infecté par: Trojan.PSW.Delf.AG C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A8A284A.eXE=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A8A284A.eXE=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0BF23158.exe=>(Quarantine-2) Détecté avec: Adware.ToolBar.EliteBar.AU C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0BF23158.exe=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0BF23158.exe=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D177BCD.exe=>(Quarantine-2) Infecté par: Trojan.Keylogger.PerfectKeyLogger.1.4.7 C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D177BCD.exe=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D177BCD.exe=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D1A25C9.dll=>(Quarantine-2) Détecté avec: Application.Keylog.Perfect.A C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D1A25C9.dll=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D1A25C9.dll=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0FCA30D6.exe=>(Quarantine-2) Infecté par: Backdoor.Subseven.22 C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0FCA30D6.exe=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0FCA30D6.exe=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\103F1D6C.com=>(Quarantine-2) Infecté par: EICAR-Test-File (not a virus) C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\103F1D6C.com=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\103F1D6C.com=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10E553E6.exe=>(Quarantine-2) Détecté avec: Adware.ToolBar.EliteBar.AU C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10E553E6.exe=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10E553E6.exe=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3AC76588.exe=>(Quarantine-2) Infecté par: Backdoor.Subseven.22 C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3AC76588.exe=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3AC76588.exe=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D852883.728=>(Quarantine-2) Infecté par: Backdoor.Netbus.2.0.D C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D852883.728=>(Quarantine-2) Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D852883.728=>(Quarantine-2) Supprimé C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\653D5344.par Infecté par: Trojan.Dropper.Agent.J C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\653D5344.par Echec de la désinfection C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\653D5344.par Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP107\A0050691.exe Suspecté de: Generic.Malware.PPk.8B692FFD C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP107\A0050691.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP107\A0050691.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084292.exe Infecté par: Trojan.Peflog.30 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084292.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084292.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084293.dll Infecté par: Trojan.Spy.Agent.Z C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084293.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084293.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084294.dll Infecté par: Trojan.Peflog.1.2 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084294.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP144\A0084294.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086246.exe Infecté par: Win32.Bagle.M@mm C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086246.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086246.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpkhk.dll Détecté avec: Application.Keylog.Perfect.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpkhk.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpkhk.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpkwb.dll Détecté avec: Application.Keylog.Perfect.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpkwb.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpkwb.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 0) Infecté par: Backdoor.Netbus.2.1.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 0) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 0) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 6) Infecté par: Trojan.AOL.PWSteal C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 6) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 6) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 7) Infecté par: Backdoor.Netbus.20.B C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 7) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab=>(IShield Module 7) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>__original.exe=>(CAB Sfx o)=>\data1.cab Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpk.exe Infecté par: Trojan.Perfect.B C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpk.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>bpk.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>rinst.exe Infecté par: Trojan.Keylogger.PerfectKeyLogger.1.4.7 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>rinst.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o)=>rinst.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP145\A0086247.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP147\A0086286.exe Infecté par: Trojan.Keylogger.PerfectKeyLogger.1.4.7 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP147\A0086286.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP147\A0086286.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP147\A0086287.dll Détecté avec: Application.Keylog.Perfect.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP147\A0086287.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP147\A0086287.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP160\A0091654.exe Infecté par: Trojan.Perfect.B C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP160\A0091654.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP160\A0091654.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092869.dll Détecté avec: Application.Keylog.Perfect.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092869.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092869.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092875.exe Infecté par: Trojan.Dropper.Exebundle.22 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092875.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092875.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpkhk.dll Détecté avec: Application.Keylog.Perfect.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpkhk.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpkhk.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpkwb.dll Détecté avec: Application.Keylog.Perfect.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpkwb.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpkwb.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpk.exe Infecté par: Trojan.Perfect.B C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpk.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>bpk.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>rinst.exe Infecté par: Trojan.Keylogger.PerfectKeyLogger.1.4.7 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>rinst.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o)=>rinst.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092876.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092878.exe Infecté par: Trojan.Keylogger.PerfectKeyLogger.1.4.7 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092878.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092878.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092879.exe Infecté par: Trojan.Downloader.Inservice.JZ C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092879.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092879.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092880.exe Infecté par: Trojan.Dropper.Pakes.P C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092880.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP163\A0092880.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092885.exe Infecté par: Trojan.Perfect.B C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092885.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092885.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092886.exe Infecté par: Trojan.Winad.AE C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092886.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092886.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092887.dll Infecté par: Trojan.Winad.71680.DLL C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092887.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092887.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092888.exe Infecté par: Trojan.Winad.V C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092888.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092888.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092912.exe=>(RAR Sfx o)=>Keygen.exe Infecté par: Trojan.Dropper.Exebundle.22 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092912.exe=>(RAR Sfx o)=>Keygen.exe Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092912.exe=>(RAR Sfx o)=>Keygen.exe Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092912.exe=>(RAR Sfx o) Echec de la mise à jour C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092949.dll Détecté avec: Application.Keylog.Perfect.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092949.dll Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP164\A0092949.dll Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093246.exe=>(Quarantine-2) Infecté par: Trojan.Downloader.Small.CCA C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093246.exe=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093246.exe=>(Quarantine-2) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093247.eXE=>(Quarantine-2) Infecté par: Trojan.PSW.Delf.AG C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093247.eXE=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093247.eXE=>(Quarantine-2) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093248.exe=>(Quarantine-2) Détecté avec: Adware.ToolBar.EliteBar.AU C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093248.exe=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093248.exe=>(Quarantine-2) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093249.exe=>(Quarantine-2) Infecté par: Trojan.Keylogger.PerfectKeyLogger.1.4.7 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093249.exe=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093249.exe=>(Quarantine-2) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093250.dll=>(Quarantine-2) Détecté avec: Application.Keylog.Perfect.A C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093250.dll=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093250.dll=>(Quarantine-2) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093251.exe=>(Quarantine-2) Infecté par: Backdoor.Subseven.22 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093251.exe=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093251.exe=>(Quarantine-2) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093252.com=>(Quarantine-2) Infecté par: EICAR-Test-File (not a virus) C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093252.com=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093252.com=>(Quarantine-2) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093253.exe=>(Quarantine-2) Détecté avec: Adware.ToolBar.EliteBar.AU C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093253.exe=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093253.exe=>(Quarantine-2) Supprimé C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093254.exe=>(Quarantine-2) Infecté par: Backdoor.Subseven.22 C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093254.exe=>(Quarantine-2) Echec de la désinfection C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP165\A0093254.exe=>(Quarantine-2) Supprimé

Séb08 · Answer

Ok,Repost un Hijack STP.@+

nicolasdu28 · Answer

voila j'espere que le probleme sera supprimeRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exec:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exec:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exec:\Program Files\Norton Internet Security\ISSVC.exec:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exec:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exec:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exec:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\ewido anti-malware\ewidoguard.exec:\Program Files\Fichiers communs\LightScribe\LSSrvc.exeC:\WINDOWS\system32\HPZipm12.exeC:\WINDOWS\system32\svchost.exec:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\AGRSMMSG.exeC:\WINDOWS\system32\hphmon06.exeC:\HP\KBD\KBD.EXEC:\Program Files\InterVideo\Common\Bin\WinRemote.exeC:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exeC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\hp\drivers\hplsbwatcher\lsburnwatcher.exeC:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exeC:\WINDOWS\ALCXMNTR.EXEC:\WINDOWS\system32\ctfmon.exeC:\Program Files\HP\Digital Imaging\bin\hpqimzone.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\HP_Propriétaire\Bureau
icolas\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*http://fr.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cegetel.net/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*http://fr.yahoo.comR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dllO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exeO4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exeO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startupO4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -startO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exeO4 - HKLM\..\Run: [AutoTBar] c:\documents and settings\default user\menu démarrer\programmes\démarrage\autotbar.exeO4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"O4 - HKLM\..\Run: [Explorer] C:\WINDOWS\system32\expIorer.exeO4 - HKLM\..\Run: [Wuupdate] C:\WINDOWS\system32\smmss.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\HPQ\XPXWWPP5\plugin\bin\PCHButton.exeO4 - Startup: OpenOffice.org 2.0.lnk.disabledO4 - Global Startup: DSLMON.lnk.disabledO4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exeO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Microsoft Office.lnk.disabledO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Tout télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_all.htmO8 - Extra context menu item: Télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_link.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLLO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.coupdepoucepc.com/scan8/oscan8.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130266250296O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{F01A4A53-04B5-46E0-AD18-CC9DF3768837}: NameServer = 217.19.192.132 217.19.192.131O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: MsgPlusLoader.dllO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exeO23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXEO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exeO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exeO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exeO23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

nicolasdu28 · Answer

Merci pour m'avoir reponduclique sur demarrer, rechercher, cherches et supprimes ces fichiers: smmss.exe expiorer.exe <attention c'est un i pas un L Je n'ai pas trouve ces fichiers  HijackThis les a peut etre supprime ???Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exec:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exec:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exec:\Program Files\Norton Internet Security\ISSVC.exec:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exec:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exec:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exec:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\ewido anti-malware\ewidoguard.exec:\Program Files\Fichiers communs\LightScribe\LSSrvc.exeC:\WINDOWS\system32\HPZipm12.exeC:\WINDOWS\system32\svchost.exec:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\AGRSMMSG.exeC:\WINDOWS\system32\hphmon06.exeC:\HP\KBD\KBD.EXEC:\Program Files\InterVideo\Common\Bin\WinRemote.exeC:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exeC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\hp\drivers\hplsbwatcher\lsburnwatcher.exeC:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exeC:\WINDOWS\ALCXMNTR.EXEC:\WINDOWS\system32\ctfmon.exeC:\Program Files\HP\Digital Imaging\bin\hpqimzone.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exeC:\Documents and Settings\HP_Propriétaire\Bureau
icolas\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*http://fr.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cegetel.net/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q105&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*http://fr.yahoo.comR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dllO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exeO4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exeO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startupO4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -startO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exeO4 - HKLM\..\Run: [AutoTBar] c:\documents and settings\default user\menu démarrer\programmes\démarrage\autotbar.exeO4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\HPQ\XPXWWPP5\plugin\bin\PCHButton.exeO4 - Startup: OpenOffice.org 2.0.lnk.disabledO4 - Global Startup: DSLMON.lnk.disabledO4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exeO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Microsoft Office.lnk.disabledO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Tout télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_all.htmO8 - Extra context menu item: Télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_link.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLLO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.coupdepoucepc.com/scan8/oscan8.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130266250296O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{F01A4A53-04B5-46E0-AD18-CC9DF3768837}: NameServer = 217.19.192.132 217.19.192.131O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: MsgPlusLoader.dllO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exeO23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXEO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exeO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exeO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exeO23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

Ordinateur infecte par un dialer svp repondre

8 réponses

Discussions similaires