Présence de Trojan ou non ?

herbjane Messages postés 33 Statut Membre -  
herbjane Messages postés 33 Statut Membre -
Bonjour à toutes et à tous,

Apparemment je ne suis pas infecté mais curieusement, lorsque je me connecte avec FireFox, mon antivirus (BitDefender) me bloque l'arrivée de "Trojan.Clicker.html.IFrame.AB". Jusque là c'est normal.
Par contre, lorsque je me connecte avec IE, aucun message d'alerte ne me parviens.
J'ai lancé Ad-Aware, Spybot, CWShredder, rien de suspect n'a été révélé.
Je me demande néanmoins si un Trojan n'ouvre pas une porte lorsque je me connecte avec FireFox.
Toutes suggestions me tranquiliseraient.
Merci beaucoup
Configuration: Système(s) d'Exploitation :	Windows XP
<br>Autres Logiciels :		Office XP - Nero 5 - Sonar - Harmony Assistant - OMeR -
<br>Logiciels Retouche Photo :	Photoshop Elements 2, Paint Shop Pro
<br>Appareil Photo Numérique :	Olympus 3,2 Mpixels - zoom 10x
<br>Marque Processeur :	AMD Athlon Thunderbird
<br>Fréquence Processeur :	1,2 Mhz
<br>Overclocké ? :		non
<br>Type Refroisissement :	Air
<br>Nb Mémoire vive (RAM) :	1x512 - 1x128
<br>Carte mère :		inconnu
<br>Carte graphique :		NVIDIA Geforce 2
<br>Carte son :		Créative SB Live
<br>Carte réseau :		WAN (PPP/SLIP)
<br>Disque dur n°1 (Marque + Capacité) :	QUANTUM FIREBALL - 60 Go
<br>Disque dur n°2(Marque + Capacité) :	IOMEGA externe USB - 120 Go
<br>Nombre de partition :	1
<br>Lecteur CD / DVD :		PIONNER 16x/40
<br>Graveur CD / DVD :		SONY 8x/4x/32x
<br>Ecran :			ViewSonic VE 700
<br>Modem :			USB ADSL WAN
<br>Imprimante :		HP Deskjet 990 Cxi
<br>Scanner :			EPSON 640U
<br>Autres Périphériques Externes :	Haut-parleur LABTEC
<br>Navigateur Internet (+version) :		Mozilla FireFox
<br>Type Connexion :		ADSL
<br>FAI (Fournisseur Accès Internet) :	Wanadoo
<br>Vitesse de connexion :	1024

1 réponse

  1. boulepate
     
    Salut,

    A mon avis tu as un trojan dans les fichiers temporaires ;-)

    télécharge hijackthis:
    http://www.hijackthis.de/downloads/hijackthis_199.zip

    Installe le dans son propre dossier:
    Par exemple C:\hijackthis
    Lance le, clique sur "do a system scan and save logfile"
    Puis copie et colle le rapport ici.
    0
    1. herbjane Messages postés 33 Statut Membre
       
      merci et surtout pour la rapidité. Ci-dessous le log :

      Logfile of HijackThis v1.99.1
      Scan saved at 16:22:54, on 27/02/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
      C:\PROGRA~1\Iomega\System32\AppServices.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
      C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
      C:\WINDOWS\system32\devldr32.exe
      C:\PROGRA~1\WANADOO\CnxMon.exe
      C:\PROGRA~1\WANADOO\TaskbarIcon.exe
      C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
      C:\Program Files\Softwin\BitDefender8\bdoesrv.exe
      C:\progra~1\softwin\bitdef~1\bdnagent.exe
      C:\Program Files\Softwin\BitDefender8\bdswitch.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
      C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\shellexpi.exe
      C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\Program Files\Palm\AlarmApp.exe
      C:\Program Files\Windows Media Components\encoder\Wmencagt.exe
      C:\Program Files\Logitech\SetPoint\KEM.exe
      C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
      C:\Program Files\Palm\HOTSYNC.EXE
      C:\Program Files\Microsoft Office\Office\1036\OLFSNT40.EXE
      C:\PROGRA~1\TRIBAL~1.NET\tribalweb.exe
      C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
      C:\Program Files\United Devices\UD.EXE
      C:\Program Files\United Devices\ud_7657531.exe
      C:\Program Files\United Devices\ud_7657531_0.dir\WCGrid_Rosetta.exe
      C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      C:\Program Files\Softwin\BitDefender8\vsserv.exe
      c:\progra~1\softwin\bitdef~1\bdmcon.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\Program Files\RamBoost XP\rambxpfr.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\PROGRA~1\INCRED~1\bin\IncMail.exe
      C:\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = +s
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = +s
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} -

      C:\PROGRA~1\WANADOO\SEARCH~1.DLL
      F2 - REG:system.ini: UserInit=userinit.exe,
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

      Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

      Files\Java\jre1.5.0_06\bin\ssv.dll
      O3 - Toolbar: Copernic Desktop Search - {C5F7A735-70F1-477F-8C36-6FF3C736017B} - C:\Program

      Files\Copernic Desktop Search\CopernicDesktopSearchIntegration910.dll
      O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
      O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L

      ElbyCDFL
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
      O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Program Files\Iomega\Iomega Automatic

      Backup\ibackup.exe
      O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
      O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
      O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
      O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
      O4 - HKLM\..\Run: [BDOESRV] C:\Program Files\Softwin\BitDefender8\\bdoesrv.exe
      O4 - HKLM\..\Run: [BDNewsAgent] "c:\progra~1\softwin\bitdef~1\bdnagent.exe"
      O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender8\\bdswitch.exe
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKCU\..\Run: [Explorer] C:\WINDOWS\System32\shellexpi.exe en
      O4 - HKCU\..\Run: [Copernic Desktop Search] "C:\Program Files\Copernic Desktop

      Search\CopernicDesktopSearch.exe" /tray
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE
      O4 - HKCU\..\Run: [SkwatAutoconnect] C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
      O4 - Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft

      Office\Office\1036\OLFSNT40.EXE
      O4 - Startup: PowerReg Scheduler V3.exe
      O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Startup: TribalWeb.net.lnk = ?
      O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\ADOBE\Calibration\Adobe Gamma

      Loader.exe
      O4 - Startup: UD Agent.lnk = C:\Program Files\United Devices\UD.EXE
      O4 - Global Startup: Alarm Manager.LNK = C:\Program Files\Palm\AlarmApp.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: Adobe Gamma Loader.lnk = ?
      O4 - Global Startup: Palm Desktop.lnk = ?
      O4 - Global Startup: Encoder Agent.lnk = C:\Program Files\Windows Media

      Components\encoder\WMENCAGT.EXE
      O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
      O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\ADOBE\Acrobat

      7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Add animation to IncrediMail Style Box -

      C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: E&xporter vers Microsoft Excel -

      res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
      O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program

      files\google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

      Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

      Files\Messenger\msmsgs.exe
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

      Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

      Files\Java\jre1.5.0_06\bin\ssv.dll
      O12 - Plugin for .mu3: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
      O12 - Plugin for .mus: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
      O12 - Plugin for .mut: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
      O12 - Plugin for .myr: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) -

      http://www.creative.com/su/ocx/15009/CTSUEng.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -

      http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) -

      http://download.zonelabs.com/bin/free/cm/ICSCM.cab
      O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) -

      http://www3.photoweb.fr/telechargement/Photoweb_uploader.cab
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -

      http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
      O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) -

      https://webresponse.one.microsoft.com/oas/ActiveX/FileXfer.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -

      http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -

      http://fdl.msn.com/public/chat/msnchat45.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) -

      http://www.creative.com/su/ocx/15010/CTPID.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{6330025B-F01F-4275-83EF-C575C0F04C1C}: NameServer =

      80.10.246.1 80.10.246.132
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

      "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - AppInit_DLLs: sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll

      sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll

      sockspy.dll
      O20 - Winlogon Notify: ComPlusSetup - C:\WINDOWS\System32\catsrvut.dll
      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems

      Shared\Service\Adobelmsvc.exe
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program

      Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: ADSLAutoconnect - Unknown owner - C:\Program Files\ADSL Autoconnect\ADSL

      Autoconnect.exe" -z (file missing)
      O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers

      communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
      O23 - Service: GhostStartService - Symantec Corporation -

      C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers

      communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe (file

      missing)
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -

      C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program

      Files\Softwin\BitDefender8\vsserv.exe" /service (file missing)
      O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers

      communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
      0
      1. boulepate > herbjane Messages postés 33 Statut Membre
         
        Fais ceci:

        ¤Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs

        CCleaner:(à telecharger à côté de la fléche verte en haut à droite)
        http://www.filehippo.com/download_ccleaner/

        ¤Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle est cochée) puis clique sur "lancer le nettoyage"


        Puis ceci:

        Telecharge, installe puis mets à jour ce logiciel, une fois que c'est fait, fais un scan complet de ton systeme et colle le rapport ici avec un nouveau rapport hijackthis (tout coller si possible ;-) )
        Ewido:
        http://www.01net.com/telecharger/windows/Utilitaire/antivirus/fiches/31851.html
        0
      2. herbjane Messages postés 33 Statut Membre > boulepate
         
        voici les résultats :

        ---------------------------------------------------------
        ewido anti-malware - Rapport de scan
        ---------------------------------------------------------

        + Créé le: 19:52:21, 27/02/2006
        + Somme de contrôle: B76E68EB

        + Résultats du scan:


        C:\WINDOWS\SYSTEM32\France-uninstall.exe -> Dialer.Generic : Nettoyer et sauvegarder
        C:\Documents and Settings\Standard\Local Settings\Temporary Internet Files\Content.IE5\KX63OPMV\AppWrap[4].exe -> Dropper.Small.of : Nettoyer et sauvegarder
        C:\Documents and Settings\Standard\Local Settings\Temporary Internet Files\Content.IE5\KX63OPMV\AppWrap[8].exe -> Dropper.Small.of : Nettoyer et sauvegarder
        C:\Documents and Settings\Standard\Local Settings\Temporary Internet Files\Content.IE5\G5UJW56Z\AppWrap[2].exe -> Dropper.Small.of : Nettoyer et sauvegarder
        C:\Documents and Settings\Standard\Cookies\standard@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
        C:\Documents and Settings\Standard\Cookies\standard@estat[1].txt -> TrackingCookie.Estat : Nettoyer et sauvegarder
        C:\Documents and Settings\Standard\Cookies\standard@weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
        C:\Documents and Settings\Standard\Cookies\standard@wreport.weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
        C:\System Volume Information\_restore{41027108-98BC-434E-9C74-734087CCAAEF}\RP357\A0057045.exe -> Adware.Zestyfind : Nettoyer et sauvegarder


        ::Fin du rapport

        Logfile of HijackThis v1.99.1
        Scan saved at 19:59:12, on 27/02/2006
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
        C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
        C:\PROGRA~1\Iomega\System32\AppServices.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
        C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
        C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
        C:\WINDOWS\system32\devldr32.exe
        C:\PROGRA~1\WANADOO\CnxMon.exe
        C:\PROGRA~1\WANADOO\TaskbarIcon.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\Program Files\Softwin\BitDefender8\bdoesrv.exe
        C:\progra~1\softwin\bitdef~1\bdnagent.exe
        C:\Program Files\Softwin\BitDefender8\bdswitch.exe
        C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
        C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
        C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\WINDOWS\System32\shellexpi.exe
        C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe
        C:\Program Files\MSN Messenger\msnmsgr.exe
        C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
        C:\Program Files\Skype\Phone\Skype.exe
        C:\Program Files\Palm\AlarmApp.exe
        C:\Program Files\Windows Media Components\encoder\Wmencagt.exe
        C:\Program Files\Logitech\SetPoint\KEM.exe
        C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
        C:\Program Files\Palm\HOTSYNC.EXE
        C:\Program Files\Microsoft Office\Office\1036\OLFSNT40.EXE
        C:\PROGRA~1\TRIBAL~1.NET\tribalweb.exe
        C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
        C:\Program Files\United Devices\UD.EXE
        C:\Program Files\United Devices\ud_7657531.exe
        C:\Program Files\United Devices\ud_7657531_0.dir\WCGrid_Rosetta.exe
        C:\PROGRA~1\INCRED~1\bin\IMApp.exe
        C:\Program Files\RamBoost XP\rambxpfr.exe
        C:\Program Files\ewido anti-malware\ewidoguard.exe
        C:\Program Files\ewido anti-malware\ewidoctrl.exe
        C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
        C:\Program Files\Softwin\BitDefender8\vsserv.exe
        c:\progra~1\softwin\bitdef~1\bdmcon.exe
        C:\PROGRA~1\INCRED~1\bin\IncMail.exe
        C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
        C:\Documents and Settings\Standard\Mes documents\1. Informatique\Utilitaires\Antispywares\HijackThis\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = +s
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = +s
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
        F2 - REG:system.ini: UserInit=userinit.exe,
        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
        O3 - Toolbar: Copernic Desktop Search - {C5F7A735-70F1-477F-8C36-6FF3C736017B} - C:\Program Files\Copernic Desktop Search\CopernicDesktopSearchIntegration910.dll
        O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
        O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
        O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
        O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
        O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
        O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
        O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
        O4 - HKLM\..\Run: [BDOESRV] C:\Program Files\Softwin\BitDefender8\\bdoesrv.exe
        O4 - HKLM\..\Run: [BDNewsAgent] "c:\progra~1\softwin\bitdef~1\bdnagent.exe"
        O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender8\\bdswitch.exe
        O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
        O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKCU\..\Run: [Explorer] C:\WINDOWS\System32\shellexpi.exe en
        O4 - HKCU\..\Run: [Copernic Desktop Search] "C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe" /tray
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE
        O4 - HKCU\..\Run: [SkwatAutoconnect] C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
        O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
        O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
        O4 - Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1036\OLFSNT40.EXE
        O4 - Startup: PowerReg Scheduler V3.exe
        O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
        O4 - Startup: TribalWeb.net.lnk = ?
        O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\ADOBE\Calibration\Adobe Gamma Loader.exe
        O4 - Startup: UD Agent.lnk = C:\Program Files\United Devices\UD.EXE
        O4 - Global Startup: Alarm Manager.LNK = C:\Program Files\Palm\AlarmApp.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O4 - Global Startup: Adobe Gamma Loader.lnk = ?
        O4 - Global Startup: Palm Desktop.lnk = ?
        O4 - Global Startup: Encoder Agent.lnk = C:\Program Files\Windows Media Components\encoder\WMENCAGT.EXE
        O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
        O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\ADOBE\Acrobat 7.0\Reader\reader_sl.exe
        O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
        O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
        O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
        O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
        O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
        O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
        O12 - Plugin for .mu3: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
        O12 - Plugin for .mus: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
        O12 - Plugin for .mut: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
        O12 - Plugin for .myr: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
        O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
        O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
        O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
        O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www3.photoweb.fr/telechargement/Photoweb_uploader.cab
        O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
        O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) - https://webresponse.one.microsoft.com/oas/ActiveX/FileXfer.cab
        O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
        O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
        O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab
        O17 - HKLM\System\CCS\Services\Tcpip\..\{6330025B-F01F-4275-83EF-C575C0F04C1C}: NameServer = 80.10.246.1 80.10.246.132
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
        O20 - AppInit_DLLs: sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll
        O20 - Winlogon Notify: ComPlusSetup - C:\WINDOWS\System32\catsrvut.dll
        O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
        O23 - Service: ADSLAutoconnect - Unknown owner - C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe" -z (file missing)
        O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
        O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
        O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
        O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
        O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN\nipsvc.exe (file missing)
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
        O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender8\vsserv.exe" /service (file missing)
        O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
        0

Discussions similaires

Checking media presence… media present
Jeanpierre67 -
SATS_fr -

2 réponses
Statut en ligne WhatsApp
350isa -
Didi64_549 -

7 réponses
Check media fail
PandaGracieux25 -
brucine -

5 réponses
No media present
CallMeAl3x -
bazfile -

13 réponses
Start px over IPv4
Colygoods -
Len -

4 réponses