Virus Kill ou Mskill Résolu

Question

Bonjour,

Mon antivirus (bit defender pro 9+) a détecté ce qui me semble être un virus qu'il ne peut ni désinfecter ni déplacer (cf ci-dessous, la fin du rapport d'analyse de bit defender):
"
Sommaire :

C:\Program Files\Microsoft Works\Setup\PSS\wks6w2k.exe=>(CAB Sfx r)=>KILL.EXE Détecté: Application.Mskill.E
C:\Program Files\Microsoft Works\Setup\PSS\wks6w2k.exe=>(CAB Sfx r)=>KILL.EXE Désinfection impossible
C:\Program Files\Microsoft Works\Setup\PSS\wks6w2k.exe=>(CAB Sfx r)=>KILL.EXE Déplacement impossible
C:\Program Files\Microsoft Works\Setup\PSS\Wks8xp.EXE=>(CAB Sfx r)=>KILL.EXE Détecté: Application.Mskill.E
C:\Program Files\Microsoft Works\Setup\PSS\Wks8xp.EXE=>(CAB Sfx r)=>KILL.EXE Désinfection impossible
C:\Program Files\Microsoft Works\Setup\PSS\Wks8xp.EXE=>(CAB Sfx r)=>KILL.EXE Déplacement impossible
C:\Program Files\Microsoft Works\Setup\PSS\wksw2k.exe=>(CAB Sfx r)=>KILL.EXE Détecté: Application.Mskill.E
C:\Program Files\Microsoft Works\Setup\PSS\wksw2k.exe=>(CAB Sfx r)=>KILL.EXE Désinfection impossible
C:\Program Files\Microsoft Works\Setup\PSS\wksw2k.exe=>(CAB Sfx r)=>KILL.EXE Déplacement impossible
"

Quelqu'un connait t'il ce virus et pourrait t'il avoir la gentillesse de me dire:

- S'il est peu ou très dangereux,
- .... et comment s'en débarasser !!

Merci d'avance pour votre aide.

Configuration: Sony VAIO VGC RA304 / Windows XP familial SP2 / Internet explorer 6

green day · Answer

Salut

Telecharge ceci :

http://www.infos-du-net.com/telecharger/HijackThis.html = lien

http://pageperso.aol.fr/balltrap34/demohijack.htm = démo

( Merci à Balltrap )

Choisis l'option "do a scan and a logfile", il va te générer un rapport, copie et colle sur le forum.

@+

marcsaunier · Answer

Voici le rapport !! :Logfile of HijackThis v1.99.1Scan saved at 19:14:02, on 06/06/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\acs.exeC:\WINDOWS\system32\spoolsv.exec:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exeC:\Program Files\Intel\Intel Application Accelerator\iaantmon.exeC:\WINDOWS\system32
vsvc32.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\sony\vaio entertainment\VzTaskScheduler.exeC:\Program Files\sony\VAIO Media Integrated Server\VMISrv.exeC:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exeC:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exeC:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exeC:\Program Files\sony\VAIO Media Integrated Server\Platform\SV_Httpd.exeC:\Program Files\sony\VAIO Media Integrated Server\Platform\UPnPFramework.exeC:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exeC:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exeC:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exeC:\Program Files\Sony\VAIO Media Integrated Server\Platform\VMConsole.exeC:\Program Files\sony\vaio update 2\VAIOUpdt.exeD:\Program Files\Java\jre1.5.0_04\bin\jusched.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\QuickTime\qttask.exeC:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exeC:\WINDOWS\system32\LVCOMSX.EXEC:\WINDOWS\system32\ElkCtrl.exeC:\Program Files\Logitech\Video\CameraAssistant.exeD:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Intel\Intel Application Accelerator\iaanotif.exeD:\Program Files\iPod\bin\iPodService.exeC:\progra~1\softwin\bitdef~1\bdswitch.exeC:\Program Files\Softwin\BitDefender9\bdoesrv.exeC:\progra~1\softwin\bitdef~1\bdnagent.exeC:\WINDOWS\ALCWZRD.EXED:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\PROGRA~1\sony\SONICS~1\SsAAD.exeC:\WINDOWS\system32\RUNDLL32.EXED:\Program Files\Ascentive\PC SpeedScan Pro\PCSpeedScan.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\Program Files\sony\sonicstage mastering studio\audio filter\SSMSFilter.exeC:\Program Files\Siemens\Gigaset PC Card 108\GigasetWLANMonitor.exeD:\Program Files\OLYMPUS\m-trip\Bin\m-tripLauncher.exeC:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exeC:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exeC:\Program Files	vtvforPC	vtvforPC.exeD:\Program Files\WinZip\WZQKPICK.EXEC:\Program Files\sony\vaio entertainment\VzTrayIcon.exeC:\Program Files\sony\VAIO Launcher\Launcher.exeC:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exeC:\WINDOWS\explorer.exeD:\Program Files\WowCartographe\WowCartographe.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exeC:\Program Files\Softwin\BitDefender9\vsserv.exec:\progra~1\softwin\bitdef~1\bdmcon.exeC:\Program Files\Outlook Express\msimn.exeD:\Program Files\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9FR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.accoona.com/search_assistant/accoona_search_assistant.jsp?&utm_id=4000...R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~2\COPERN~1.DLLR3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)R3 - URLSearchHook: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dllO2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} - (no file)O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: Accoona - {364B6276-C6C1-40B6-A6D7-6C48871FD707} - (no file)O3 - Toolbar: Copernic Desktop Search - {C5F7A735-70F1-477F-8C36-6FF3C736017B} - C:\Program Files\Copernic Desktop Search\CopernicDesktopSearchIntegration740.dllO3 - Toolbar: (no name) - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - (no file)O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO4 - HKLM\..\Run: [Whatever] C:\DOCUME~1\Marc\LOCALS~1\Temp	orax.exeO4 - HKLM\..\Run: [VZRemoteCommander] C:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exeO4 - HKLM\..\Run: [VMConsole.exe] C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VMConsole.exe /windowminO4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\sony\vaio update 2\VAIOUpdt.exe" /StationaryO4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_04\bin\jusched.exeO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [PDService.exe] C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspectO4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automationO4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exeO4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exeO4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logonO4 - HKLM\..\Run: [dawn] C:\DOCUME~1\Marc\LOCALS~1\Temp\dawn.exeO4 - HKLM\..\Run: [BDSwitchAgent] "c:\progra~1\softwin\bitdef~1\bdswitch.exe"O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"O4 - HKLM\..\Run: [BDNewsAgent] "c:\progra~1\softwin\bitdef~1\bdnagent.exe"O4 - HKLM\..\Run: [BDMCon] c:\progra~1\softwin\bitdef~1\bdmcon.exeO4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXEO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEO4 - HKLM\..\Run: [RemoteControl] "D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\sony\SONICS~1\SsAAD.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quietO4 - HKCU\..\Run: [Washer] D:\Program Files\eMule\Incoming\washer\washer.exe /0O4 - HKCU\..\Run: [PC SpeedScan Pro] D:\Program Files\Ascentive\PC SpeedScan Pro\PCSpeedScan.exe -mO4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - HKCU\..\Run: [LDM] \Program\O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"O4 - HKCU\..\Run: [Copernic Desktop Search] "C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe" /trayO4 - Startup: VAIO Launcher.lnk = C:\Program Files\sony\VAIO Launcher\Launcher.exeO4 - Global Startup: Adobe Gamma Loader.lnk = ?O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeO4 - Global Startup: Audio Filter.lnk = C:\Program Files\sony\sonicstage mastering studio\audio filter\SSMSFilter.exeO4 - Global Startup: Gigaset WLAN Adapter Monitor.lnk = ?O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: m-trip Launcher.lnk = D:\Program Files\OLYMPUS\m-trip\Bin\m-tripLauncher.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Picture Package Menu.lnk = C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exeO4 - Global Startup: Picture Package VCD Maker.lnk = ?O4 - Global Startup: tvtvforPC.lnk = C:\Program Files	vtvforPC	vtvforPC.exeO4 - Global Startup: WinZip Quick Pick.lnk = D:\Program Files\WinZip\WZQKPICK.EXEO4 - Global Startup: État de l'enregistrement.lnk = C:\Program Files\sony\vaio entertainment\VzTrayIcon.exeO8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm414YYFRO8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.htmlO8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXTO8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~2\COPERN~1.EXEO9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~2\COPERN~1.EXEO9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~2\COPERN~1.EXEO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)O15 - Trusted Zone: *.sony-europe.comO15 - Trusted Zone: *.sonystyle-europe.comO15 - Trusted Zone: *.vaio-link.comO16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by15fd.bay15.hotmail.msn.com/resources/MsnPUpld.cabO16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cabO18 - Protocol: bw+0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dllO23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exeO23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exeO23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPodService - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exeO23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exeO23 - Service: MrobeService - Unknown owner - C:\WINDOWS\system32\MRobeService.exe (file missing)O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exeO23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exeO23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exeO23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exeO23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exeO23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Program Files\sony\vaio entertainment\VzTaskScheduler.exeO23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exeO23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\VMISrv.exeO23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing)O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\Platform\UPnPFramework.exeO23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\sony\VAIO Media Integrated Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exeO23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exeO23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exeO23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)@++

green day · Answer

Salut

ok,

Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~2\COPERN~1.DLL
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
R3 - URLSearchHook: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)

O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} - (no file)
O3 - Toolbar: (no name) - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - (no file)

O4 - HKLM\..\Run: [Whatever] C:\DOCUME~1\Marc\LOCALS~1\Temp\torax.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [dawn] C:\DOCUME~1\Marc\LOCALS~1\Temp\dawn.exe
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [RemoteControl] "D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LDM] \Program\
O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Gigaset WLAN Adapter Monitor.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm414YYFR
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com

O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by15fd.bay15.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cab

O18 - Protocol: bw+0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {B1597466-CBAD-43A6-9F1E-DE11769AEB42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

recherche et supprime les fichiers en gras :

ALCMTR.EXE

ces deux fichiers dans : C:\program files

Accoona
MyWebSearch

ensuite :

*Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .

*Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
est cochée) puis clique sur "lancer le nettoyage"

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

et enfin fais le 1/ et 2/ de ce lien stp :

bon courage, @+

marcsaunier · Answer

Parfait, semble-t'il, Bit defender ne trouve rien à redire.
Il y a eu 2 ou 3 messages d'erreur pendant l'exécution du "fix checked", mais à l'issue de toutes les manip's, l'antivirus confirme que l'ordinateur est tout propre.

Merci beaucoup pour ton aide et la rapidité de tes réponses.

Santé bonheur et @++

green day · Answer

Salut ça marche ;) pour la suite :  securite proteger un ordinateur contre les malwares d internet@+

Flumich · Answer

Bonjour !

Depuis quelques jours j'ai une application nommé "kill" dans mon gestionnaire des tâches.
Qu'est-ce donc ? dangereux ?

Merci

green day · Answer

Salut

poste un rapport hijackthis ( cf poste 1 )

++

Flumich · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:58:15, on 25/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\DualPointUtility\TEDTray.exe
C:\WINDOWS\system32\TFNF5.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS	snp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\System32
vsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\WINDOWS\svchost.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Flumich\LOCALS~1\Temp\Rar$EX00.975\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [That build] C:\DOCUME~1\Flumich\APPLIC~1\MPEGJU~1\Bias army.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

green day · Answer

ok,

est-ce que tu as des fenêtres de pub ???

++

Flumich · Answer

Ouai de IE et j'arrive pas a les degager ! avant avec Firefox pas de problemes et depuis que j'ai du formater elles reviennent tout le temps sous IE...

green day · Answer

ok,

 Télécharge ceci: (by Moe) :

http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

Double clic sur Lopxpsetup.exe pour lancer l'installation
Au menu, choisir l'option 1
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
Une rapport sera alors crée, à copie/colle en entier sur le forum.


++

flumich · Answer

_____________ Rapport Lopxp fait le 26/08/2007 à  6:35:51

Exécuté dans : C:\Program Files\Lopxp


/!\ Attention /!\

  Les résultats de ce rapport sont sujets à interprétations,
  Et ne démontrent pas systématiquement des dossiers infectés...


___________________________________________________________________________
 
[1] ->  Threads Internet Explorer


/!\ Suspect  iexplore.exe       pid: 620     5B0: C:\DOCUME~1\ALLUSE~1\APPLIC~1\DENTAM~1\ERRORE~1.EXE

___________________________________________________________________________

[2] -> Recherche présence de Messenger Plus!...


Messenger Plus! 2     N'est pas ou plus installé.

MessengerPlus! 3     N'est pas ou plus installé.

# Messenger Plus! Live : Présent !
 /!\ Sponsor accepté lors de l'installation !

Date d'installation/Création du dossier:       14/08/2007 à 17:38
Dernière modification du dossier le:           14/08/2007 à 17:38


Recherche des dossiers crées le:                 14/08/2007

C:\Program Files

14/08/2007 à 17:39 - - StuffPlug3 
14/08/2007 à 17:38 - - mpeg jugs
14/08/2007 à 17:38 - - Adverts 
14/08/2007 à 17:38 - - Windows Live
14/08/2007 à 17:38 - - Messenger Plus! Live
14/08/2007 à 17:35 - - MSN Messenger
14/08/2007 à 16:41 - - .. 
14/08/2007 à 16:41 - - . 
14/08/2007 à 16:41 - - Fichiers communs
14/08/2007 à 16:29 - - Lavasoft 
14/08/2007 à 16:28 - - WinRAR 
14/08/2007 à 16:27 - - Mozilla Firefox
14/08/2007 à 16:24 - - Apoint2K 
14/08/2007 à 16:22 - - TOSHIBA 
14/08/2007 à 16:03 - - Intel 
14/08/2007 à 16:02 - - Analog Devices
14/08/2007 à 16:02 - - InstallShield Installation Information
14/08/2007 à 15:55 - - Uninstall Information
14/08/2007 à 15:51 - - xerox 
14/08/2007 à 15:51 - - microsoft frontpage
14/08/2007 à 15:48 - - Movie Maker
14/08/2007 à 15:48 - - NetMeeting 
14/08/2007 à 15:48 - - Outlook Express
14/08/2007 à 15:48 - - Internet Explorer
14/08/2007 à 15:47 - - ComPlus Applications
14/08/2007 à 15:47 - - WindowsUpdate 
14/08/2007 à 15:47 - - Services en ligne
14/08/2007 à 15:47 - - Windows Media Player
14/08/2007 à 15:47 - - Messenger 
14/08/2007 à 15:46 - - MSN Gaming Zone
14/08/2007 à 15:46 - - Windows NT


C:\Documents and Settings\All Users\Application Data

14/08/2007 à 17:39 - - Messenger Plus!
14/08/2007 à 17:39 - - Curb The Math Dent
14/08/2007 à 17:38 - - dent amok cash book
14/08/2007 à 16:40 - - Microsoft 
14/08/2007 à 16:40 - - . 
14/08/2007 à 16:40 - - .. 


C:\Documents and Settings\Default User\Application Data

14/08/2007 à 16:40 - - .. 
14/08/2007 à 16:40 - - Microsoft 
14/08/2007 à 16:40 - - . 


C:\Documents and Settings\Flumich\Application Data

14/08/2007 à 17:38 - - Macromedia 
14/08/2007 à 17:38 - - mpeg jugs
14/08/2007 à 16:29 - - Lavasoft 
14/08/2007 à 16:28 - - Mozilla 
14/08/2007 à 15:55 - - Identities 
14/08/2007 à 15:55 - - .. 
14/08/2007 à 15:55 - - Microsoft 
14/08/2007 à 15:55 - - . 


C:\Documents and Settings\LocalService\Application Data

14/08/2007 à 15:54 - - .. 
14/08/2007 à 15:54 - - Microsoft 
14/08/2007 à 15:54 - - . 


C:\Documents and Settings\NetworkService\Application Data

14/08/2007 à 15:54 - - .. 
14/08/2007 à 15:54 - - Microsoft 
14/08/2007 à 15:54 - - . 


___________________________________________________________________________

[3] -> Tâches planifiées


ADF5067B91CEBA5F.job: c:\docume~1\flumich\applic~1\mpegju~1\Freenametrust.exe 
AppleSoftwareUpdate.job: C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task

/!\ Suspecte: -> C:\WINDOWS	asks\ADF5067B91CEBA5F.job

___________________________________________________________________________

[4] -> Sponsor P2P


___________________________________________________________________________

[5] -> Listing des dossiers Application Data


C:\Documents and Settings\All Users\Application Data

24/08/2007 à 14:50 - - Apple  
23/08/2007 à 16:47 - - Downloaded Installations 
23/08/2007 à 15:30 - - Installations  
18/08/2007 à 16:38 - - FaxCtr  
18/08/2007 à 15:41 - - Microsoft Help 
18/08/2007 à 15:14 - - Adobe  
15/08/2007 à 16:45 - - Windows Genuine Advantage 
14/08/2007 à 17:39 - - Messenger Plus! 
14/08/2007 à 17:39 - - Curb The Math Dent 
14/08/2007 à 17:38 - - dent amok cash book 
14/08/2007 à 16:40 - - Microsoft  


C:\Documents and Settings\Flumich\Application Data

23/08/2007 à 15:33 - - PC Suite 
20/08/2007 à 21:20 - - Talkback  
18/08/2007 à 16:42 - - FaxCtr  
18/08/2007 à 16:28 - - Adobe  
15/08/2007 à 15:35 - - vlc  
15/08/2007 à 15:02 - - WinRAR  
14/08/2007 à 17:38 - - Macromedia  
14/08/2007 à 17:38 - - mpeg jugs 
14/08/2007 à 16:29 - - Lavasoft  
14/08/2007 à 16:28 - - Mozilla  
14/08/2007 à 15:55 - - Identities  
14/08/2007 à 15:55 - - Microsoft  


C:\Documents and Settings\Flumich\Local Settings\Application Data

24/08/2007 à 14:50 - - Apple  
24/08/2007 à 14:49 - - Apple Computer 
18/08/2007 à 15:42 - - Microsoft Help 
18/08/2007 à 15:15 - - Adobe  
14/08/2007 à 16:28 - - Mozilla  
14/08/2007 à 15:55 - - Microsoft  



___________________________________________________________________________

[6] -> Listing du dossier Program Files


C:\Program Files

26/08/2007 à 06:34 - - Lopxp 
24/08/2007 à 14:50 - - Apple Software Update
23/08/2007 à 16:45 - - SuperCopier2 
23/08/2007 à 15:33 - - DIFX 
23/08/2007 à 15:32 - - PC Connectivity Solution
18/08/2007 à 17:10 - - eMule 
18/08/2007 à 16:38 - - Lexmark Fax Solutions
18/08/2007 à 15:50 - - Microsoft Works
18/08/2007 à 15:50 - - MSBuild 
18/08/2007 à 15:49 - - Microsoft Visual Studio
18/08/2007 à 15:41 - - Microsoft Office
18/08/2007 à 15:14 - - Adobe 
18/08/2007 à 14:46 - - Windows Media Connect 2
15/08/2007 à 15:32 - - VideoLAN 
15/08/2007 à 15:03 - - VirtualDJ 
14/08/2007 à 17:39 - - StuffPlug3 
14/08/2007 à 17:38 - - mpeg jugs
14/08/2007 à 17:38 - - Adverts 
14/08/2007 à 17:38 - - Windows Live
14/08/2007 à 17:38 - - Messenger Plus! Live
14/08/2007 à 17:35 - - MSN Messenger
14/08/2007 à 16:41 - - Fichiers communs
14/08/2007 à 16:29 - - Lavasoft 
14/08/2007 à 16:28 - - WinRAR 
14/08/2007 à 16:27 - - Mozilla Firefox
14/08/2007 à 16:24 - - Apoint2K 
14/08/2007 à 16:22 - - TOSHIBA 
14/08/2007 à 16:03 - - Intel 
14/08/2007 à 16:02 - - Analog Devices
14/08/2007 à 16:02 - - InstallShield Installation Information
14/08/2007 à 15:55 - - Uninstall Information
14/08/2007 à 15:51 - - xerox 
14/08/2007 à 15:51 - - microsoft frontpage
14/08/2007 à 15:48 - - Movie Maker
14/08/2007 à 15:48 - - NetMeeting 
14/08/2007 à 15:48 - - Outlook Express
14/08/2007 à 15:48 - - Internet Explorer
14/08/2007 à 15:47 - - ComPlus Applications
14/08/2007 à 15:47 - - WindowsUpdate 
14/08/2007 à 15:47 - - Services en ligne
14/08/2007 à 15:47 - - Windows Media Player
14/08/2007 à 15:47 - - Messenger 
14/08/2007 à 15:46 - - MSN Gaming Zone
14/08/2007 à 15:46 - - Windows NT

___________________________________________________________________________

[7] -> Clés registre de démarrage


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    That build	REG_SZ	C:\DOCUME~1\Flumich\APPLIC~1\MPEGJU~1\Bias army.exe


___________________________________________________________________________

[8] -> Popups autorisés


# Internet Explorer

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow


# Mozilla Firefox (1 autorisé  2 interdit)

host	popup	1	www.agencesdes4fontaines.com

# Suite Mozilla / SeaMonkey (1 autorisé  2 interdit)


___________________________________________________________________________

[9] -> Suggestion nettoyage registre 

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"That build"=-


----------------------------------------------------------> Fin du rapport

Flumich · Answer

J'ai aussi ce message d'erreur a chaque fin d'installation de logiciel :

Impossible d'ouvrir la clé
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
Vérifiez que vous disposez des droits suffisants pour cette clé ou contactez votre service de support technique.

green day · Answer

Salut

Lancer HijackThis et cliquer sur [Do a system scan only]
cocher la case au début des lignes suivantes :

O4 - HKCU\..\Run: [That build] C:\DOCUME~1\Flumich\APPLIC~1\MPEGJU~1\Bias army.exe 


Valider en cliquant sur le bouton [Fix Checked] 
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

Ensuite, fais Démarrer > Exécuter. Tape cmd puis valide avec OK.
Dans la fenêtre qui va s'ouvrir, copie et colle ceci :

del /a C:\WINDOWS	asks\ADF5067B91CEBA5F.job

Ici, la suppression de la tâche planifiée. Il suffit de remplacer la série en gras par celle trouvée dans LopXP (il se peut qu il y en ait +1)

et valide en appuyant sur Entrée

et enfin, fais ce qui est indiqué ici stp :

virus methode preliminaire de desinfection version fr

@+

Flumich · Answer

J'ai préféré poster mes rapports ici ;)
Parce qu'ailleur je me fait trimballer comme quoi je poste sans raisons


---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	10:34:34 30/08/2007

 + Résultat de l'analyse:	



D:\RECYCLER\S-1-5-21-1177238915-1708537768-854245398-1003\Dd57.rar/Passe.exe -> Backdoor.Optix.Pro.i : Aucune action entreprise.
C:\Documents and Settings\Flumich\Local Settings\Application Data\Mozilla\Firefox\Profiles\m087ic7v.default\Cache\BC62D28Cd01 -> Not-A-Virus.Downloader.Win32.WinFixer.q : Aucune action entreprise.
C:\Documents and Settings\Flumich\Cookies\flumich@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\Flumich\Cookies\flumich@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\Flumich\Cookies\flumich@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Flumich\Cookies\flumich@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
C:\Program Files\Adverts\uninst.exe -> Trojan.Obfuscated.en : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP143\A0005839.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP144\A0005875.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP145\A0005899.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP146\A0005906.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP147\A0005913.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0005920.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0006514.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0006515.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0006516.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006517.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006531.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006565.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006613.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\WINDOWS\Session.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\WINDOWS\system32\FileKan.exe -> Trojan.VB.atg : Aucune action entreprise.
C:\WINDOWS\system32\SocksA.exe -> Trojan.VB.atg : Aucune action entreprise.
C:	el.xls.exe -> Trojan.VB.atg : Aucune action entreprise.
D:	el.xls.exe -> Trojan.VB.atg : Aucune action entreprise.


Fin du rapport





BitDefender Online Scanner
	

 
	

 

Scan report generated at: Thu, Aug 30, 2007 - 12:14:40

 
	

 
	

 

Scan path: C:\;D:\;E:\;
	

 
	

 

 
	

 
	

 

Statistics

Time
	

01:33:14

Files
	

211566

Folders
	

4407

Boot Sectors
	

3

Archives
	

2069

Packed Files
	

19806
	

 
	

 

Results

Identified Viruses
	

8

Infected Files
	

55

Suspect Files
	

0

Warnings
	

0

Disinfected
	

0

Deleted Files
	

54
	

 
	

 

Engines Info

Virus Definitions
	

750540

Engine build
	

AVCORE v1.0 (build 2411) (i386) (Jul 9 2007 12:10:22)

Scan plugins
	

14

Archive plugins
	

38

Unpack plugins
	

6

E-mail plugins
	

6

System plugins
	

1
	

 
	

 

Scan Settings

First Action
	

Disinfect

Second Action
	

Delete

Heuristics
	

Yes

Enable Warnings
	

Yes

Scanned Extensions
	

*;

Exclude Extensions
	

 

Scan Emails
	

Yes

Scan Archives
	

Yes

Scan Packed
	

Yes

Scan Files
	

Yes

Scan Boot
	

Yes
	

 
	

 
 

Scanned File
	

 Status

C:\Documents and Settings\All Users\Application Data\dent amok cash book\Error Exit.exe
	

Infected with: Trojan.FatObfus.AF

C:\Documents and Settings\All Users\Application Data\dent amok cash book\Error Exit.exe
	

Disinfection failed

C:\Documents and Settings\All Users\Application Data\dent amok cash book\Error Exit.exe
	

Delete failed

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\64movemp3eggs.exe
	

Infected with: Trojan.FatObfus.AG

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\64movemp3eggs.exe
	

Deleted

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\aphlsdfv.exe
	

Infected with: Trojan.FatObfus.AF

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\aphlsdfv.exe
	

Deleted

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\Bias army.exe
	

Infected with: Trojan.FatObfus.2.Gen

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\Bias army.exe
	

Disinfection failed

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\Bias army.exe
	

Deleted

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\Freenametrust.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\Freenametrust.exe
	

Disinfection failed

C:\Documents and Settings\Flumich\Application Data\mpeg jugs\Freenametrust.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP118\A0004339.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP118\A0004339.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP118\A0004340.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP118\A0004340.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP118\A0004340.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP118\A0004723.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP118\A0004723.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP120\A0004817.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP120\A0004817.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP120\A0004820.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP120\A0004820.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP120\A0004820.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP127\A0004922.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP127\A0004922.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP128\A0005116.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP128\A0005116.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP133\A0005213.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP133\A0005213.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP134\A0005229.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP134\A0005229.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP136\A0005260.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP136\A0005260.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP136\A0005260.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP136\A0005441.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP136\A0005441.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP137\A0005450.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP137\A0005450.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP137\A0005451.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP137\A0005451.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP137\A0005451.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005456.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005456.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005465.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005465.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005465.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005475.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005475.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005774.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP138\A0005774.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP139\A0005805.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP139\A0005805.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP139\A0005806.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP139\A0005806.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP139\A0005806.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP140\A0005809.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP140\A0005809.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP140\A0005811.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP140\A0005811.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP140\A0005811.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP140\A0005819.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP140\A0005819.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP141\A0005825.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP141\A0005825.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP144\A0005882.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP144\A0005882.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP144\A0005882.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP144\A0005883.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP144\A0005883.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP145\A0005903.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP145\A0005903.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP145\A0005905.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP145\A0005905.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP145\A0005905.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP146\A0005910.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP146\A0005910.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP146\A0005912.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP146\A0005912.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP146\A0005912.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP147\A0005917.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP147\A0005917.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP147\A0005918.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP147\A0005918.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP147\A0005918.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0005924.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0005924.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0005977.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0005977.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP148\A0005977.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006557.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006557.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006568.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006568.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006614.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006614.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP149\A0006614.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006616.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006616.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006618.exe
	

Infected with: Trojan.FatObfus.Gen

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006618.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006618.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006619.exe
	

Infected with: Trojan.Vb.ATG

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006619.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006619.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006620.exe
	

Infected with: Trojan.Vb.ATG

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006620.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006620.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006621.exe
	

Infected with: Trojan.Vb.ATG

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006621.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006621.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006622.exe
	

Infected with: Trojan.Vb.ATG

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006622.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006622.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006623.exe
	

Infected with: Trojan.FatObfus.AG

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006623.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006624.exe
	

Infected with: Trojan.FatObfus.AF

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006624.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006625.exe
	

Infected with: Trojan.FatObfus.2.Gen

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006625.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006625.exe
	

Deleted

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006626.exe
	

Infected with: Trojan.Obfuscated.GZ

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006626.exe
	

Disinfection failed

C:\System Volume Information\_restore{99B1B2E8-FE67-4AB9-ADC3-D912907C0B61}\RP150\A0006626.exe
	

Deleted

D:\Logiciels\Setup\Keylogger\keygen keylogger.exe
	

Infected with: Trojan.Spy.Agent.Y

D:\Logiciels\Setup\Keylogger\keygen keylogger.exe
	

Disinfection failed

D:\Logiciels\Setup\Keylogger\keygen keylogger.exe
	

Deleted

D:\Logiciels\Setup\Keylogger\Keylogger.exe
	

Infected with: Trojan.Spy.Agent.Y

D:\Logiciels\Setup\Keylogger\Keylogger.exe
	

Disinfection failed

D:\Logiciels\Setup\Keylogger\Keylogger.exe
	

Deleted

D:\Logiciels\Setup\Virtual DJ.rar=>virtualdj.exe
	

Infected with: Backdoor.Pcclient.GV

D:\Logiciels\Setup\Virtual DJ.rar=>virtualdj.exe
	

Disinfection failed

D:\Logiciels\Setup\Virtual DJ.rar=>virtualdj.exe
	

Deleted

D:\Logiciels\Setup\Virtual DJ.rar
	

Update failed

D:\Logiciels\Setup\virtualdj.exe
	

Infected with: Backdoor.Pcclient.GV

D:\Logiciels\Setup\virtualdj.exe
	

Disinfection failed

D:\Logiciels\Setup\virtualdj.exe
	

Deleted
	

Fin du scan bitdefender online

 
Logfile of HijackThis v1.99.1
Scan saved at 16:26:34, on 30/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32
vsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Hijackthis\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [That build] C:\DOCUME~1\Flumich\APPLIC~1\MPEGJU~1\Bias army.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: Sebring - C:\WINDOWS\System32\LgNotify.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: WEP key recovery service (WZCOOK) - Unknown owner - D:\Logiciels\Setup\Windows Wifi Collection (aircrack, airsnort, airopeek) [and keygen]\aircrack_2.1_win32\wzcook.exe" (file missing)

green day · Answer

Salut

 comment évolue la situation ???

++

Flumich · Answer

Bah "kill" a visiblement disparu et j'ai plus de soucis pour instaleer quoi que ce soit ...
mais j'aimerai savoir si mon pc va mieu etre sur que plus rien ne sommeil en lui si tu vois ce que je veux dire ....
 ;)

green day · Answer

fixe cette ligne : O4 - HKCU\..\Run: [That build] C:\DOCUME~1\Flumich\APPLIC~1\MPEGJU~1\Bias army.exe 

sinon, pour ma part tout est ok !

@+

Flumich · Answer

T'assure ! Merci pour tout :D

green day · Answer

Un dernier détail ! :)

 installe un antivirus et un parefeu !!!

voir ici :

securite proteger un ordinateur contre les malwares d internet

@+

;-)

asproduct · Answer

Salut
J'ai également un fichier qui s'appelle tel.xls et qui m'empeche d'afficher les fichiers cachés sur mon ordi.
quand je fais CTRL ALT SUPPR , je vois un fichiers excel qui s'appelle Kill.

Que faire ?

green day · Answer

Salut

télécharge hijackthis et poste un rapport stp ( cf poste 1)

++

Rhym · Answer

Bonjour, 
Volia moi aussi j'ai un soucis avec le fichier killVBS je tenvoie mon rapport comment puije faire pour supprimer ce soucis 

Aide moi
Logfile of HijackThis v1.99.1 
Scan saved at 19:38:15, on 15/11/2007 
Platform: Windows XP SP2 (WinNT 5.01.2600) 
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) 

Running processes: 
C:\WINDOWS\System32\smss.exe 
C:\WINDOWS\system32\csrss.exe 
C:\WINDOWS\system32\winlogon.exe 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe 
C:\WINDOWS\Explorer.EXE 
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe 
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe 
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe 
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe 
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe 
C:\WINDOWS\system32\spoolsv.exe 
C:\WINDOWS\system32\msdtc.exe 
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe 
C:\WINDOWS\eHome\ehRecvr.exe 
C:\WINDOWS\eHome\ehSched.exe 
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe 
C:\Program Files\Autodesk\3ds Max 9\mentalray\satelliteaysat_3dsmax9_32server.exe 
C:\Program Files\Norton AntiVirus
avapsvc.exe 
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe 
C:\WINDOWS\system32
vsvc32.exe 
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe 
C:\Program Files\Spyware Doctor\svcntaux.exe 
C:\Program Files\Spyware Doctor\swdsvc.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\Program Files\Spyware Doctor\SDTrayApp.exe 
C:\WINDOWS\ehome\mcrdsvc.exe 
C:\WINDOWS\system32\mqsvc.exe 
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 
C:\WINDOWS\system32\mqtgsvc.exe 
C:\WINDOWS\system32\dllhost.exe 
C:\WINDOWS\System32\alg.exe 
C:\WINDOWS\ehome\ehtray.exe 
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe 
C:\WINDOWS\system32\RUNDLL32.EXE 
C:\WINDOWS\system32\wbem\wmiprvse.exe 
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
C:\WINDOWS\eHome\ehmsas.exe 
C:\Program Files\HP\QuickPlay\QPService.exe 
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe 
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe 
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe 
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe 
C:\Program Files\iTunes\iTunesHelper.exe 
C:\WINDOWS\system32\ctfmon.exe 
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe 
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 
C:\Program Files\MSN Messenger\MsnMsgr.Exe 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE 
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE 
C:\Program Files\MSN Messenger\usnsvc.exe 
C:\Program Files\iPod\bin\iPodService.exe 
C:\Program Files\Internet Explorer\iexplore.exe 
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe 
C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe 
C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE 
C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe 
C:\Program Files\Fichiers communs\Symantec Shared\NMain.exe 
C:\Program Files\Internet Explorer\iexplore.exe 
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe 
C:\Program Files\Messenger\msmsgs.exe 
C:\Documents and Settings\Rémy Maurcot\Mes documents\HijackThis.exe 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/ 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll 
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\killVBS.vbs 
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll 
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll 
O2 - BHO: (no name) - {31B41952-4E31-4050-856E-E16466B7704C} - C:\WINDOWS\system32\msgtedit.dll (file missing) 
O2 - BHO: (no name) - {5608AC68-5EDC-4610-BFB1-E1A2F96C0BB5} - C:\WINDOWS\system32\pid32.dll (file missing) 
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll 
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll 
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll 
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll 
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll 
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll 
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll 
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll 
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll 
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe 
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe 
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit 
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect 
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll 
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" 
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe 
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start 
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe 
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe 
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE 
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe" 
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup 
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe" 
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime 
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll" 
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" 
O4 - HKLM\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNOTIFY.EXE 
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe 
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background 
O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S16C.tmp" /EF "HKCU" 
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart 
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart17.exe 
O4 - Global Startup: Pack Securite.lnk = C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe 
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll 
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe 
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe 
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL 
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/ 
O18 - Protocol: bw+0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw+0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll 
O18 - Protocol: bwg0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwg0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0s - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL 
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll 
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL 
O18 - Protocol: offline-8876480 - {1A850AAD-5771-4B77-96B0-C0548B4AF5BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL 
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL 
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe 
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe 
O23 - Service: Pack Securite (BackWeb Plug-in - 361343) - BackWeb Technologies Inc. - C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE 
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe 
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe 
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe 
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe 
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe 
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe 
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE 
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing) 
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 9\mentalray\satelliteaysat_3dsmax9_32server.exe 
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exe 
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe 
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE 
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe 
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe 
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe 
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe 
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe 
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe 
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe 
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

green day · Answer

Salut

Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    * Démarrer en mode sans echec
    * Double cliquer combofix.exe.
    * Appuyer sur la touche Y (Yes) pour démarrer le scan
    * Le rapport sera crée dans: C:\Combofix.txt, poste le stp

++

KiaraRhym · Answer

Voila mon rapport sur combo fix ComboFix 07-11-19.3 - Rémy Maurcot 2007-11-23 16:45:30.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.1000 [GMT 1:00] Running from: C:\Documents and Settings\Rémy Maurcot\Bureau\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((( Fichiers créés 2007-10-23 to 2007-11-23 )))))))))))))))))))))))))))))))))))) . 2007-11-23 16:04 d-------- C:\Documents and Settings\Rémy Maurcot\Application Data\Talkback 2007-11-23 16:03 0 --a------ C:\WINDOWS sreg.dat 2007-11-23 15:00 d-------- C:\WINDOWS\LastGood 2007-11-23 13:16 128,896 --------- C:\WINDOWS\system32\dllcache\fltmgr.sys 2007-11-23 13:16 23,040 --------- C:\WINDOWS\system32\dllcache\fltmc.exe 2007-11-23 13:16 16,896 --------- C:\WINDOWS\system32\dllcache\fltlib.dll 2007-11-22 19:16 d-------- C:\Documents and Settings\All Users\Application Data\U3 2007-11-21 23:14 d-------- C:\WINDOWS\system32\LogFiles 2007-11-21 21:59 d-------- C:\Documents and Settings\Rémy Maurcot\Application Data\HP 2007-11-21 19:11 2,330,624 --------- C:\WINDOWS\system32\dllcache\wmvcore.dll 2007-11-21 07:36 d---s---- C:\Documents and Settings\LocalService\Temporary Internet Files 2007-11-21 07:36 d---s---- C:\Documents and Settings\LocalService\Historique 2007-11-21 07:34 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2007-11-21 07:33 d-------- C:\Program Files\Spyware Doctor 2007-11-21 07:33 d-------- C:\Documents and Settings\Rémy Maurcot\Application Data\PC Tools 2007-11-21 07:16 d-------- C:\Program Files\Norton Security Scan 2007-11-20 21:53 10,740 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2007-11-20 21:53 805 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF 2007-11-20 21:47 d-------- C:\Documents and Settings\Rémy Maurcot\Application Data\Symantec 2007-11-20 21:40 d-------- C:\Program Files\Norton AntiVirus 2007-11-20 21:40 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2007-11-20 21:40 10,344 --a------ C:\WINDOWS\system32\drivers\symlcbrd.sys 2007-11-20 21:27 d-------- C:\Program Files\FlashMNT31 2008 2007-11-20 21:17 15,104 --a------ C:\WINDOWS\system32\dllcache\usbscan.sys 2007-11-20 21:08 31,616 --a------ C:\WINDOWS\system32\dllcache\usbccgp.sys 2007-11-20 21:08 25,856 --a------ C:\WINDOWS\system32\dllcache\usbprint.sys 2007-11-20 21:05 d-------- C:\Program Files\EPSON 2007-11-20 21:05 d-------- C:\Documents and Settings\All Users\Application Data\EPSON 2007-11-20 21:01 d---s---- C:\Documents and Settings\Rémy Maurcot\UserData 2007-11-20 21:01 d---s---- C:\Documents and Settings\Rémy Maurcot\UserData 2007-11-20 19:49 d-------- C:\Documents and Settings\All Users\Application Data\Google Updater 2007-11-20 19:44 d-------- C:\Documents and Settings\Rémy Maurcot\Contacts 2007-11-20 19:44 d-------- C:\Documents and Settings\Rémy Maurcot\Contacts 2007-11-20 19:43 d-------- C:\Program Files\Windows Live Favorites 2007-11-20 19:43 d-------- C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar 2007-11-20 19:42 43,352 --a------ C:\WINDOWS\system32\wups2.dll 2007-11-20 19:42 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui 2007-11-20 19:42 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui 2007-11-20 19:42 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui 2007-11-20 19:42 21,336 --a------ C:\WINDOWS\system32\wuaueng.dll.mui 2007-11-20 19:41 d----c--- C:\WINDOWS\system32\DRVSTORE 2007-11-20 19:41 d-------- C:\Program Files\Windows Live Toolbar 2007-11-20 19:40 d-------- C:\Program Files\MSN Messenger 2007-11-20 19:33 d-------- C:\Documents and Settings\Rémy Maurcot\Application Data\F-Secure 2007-11-20 19:29 d-------- C:\WINDOWS napxs 2007-11-20 19:29 d-------- C:\Documents and Settings\All Users\Application Data\F-Secure 2007-11-20 19:29 1,716,224 --a------ C:\WINDOWS\system32\winsflte.dll 2007-11-20 19:29 1,183,744 --a------ C:\WINDOWS\system32\winsflt.dll 2007-11-20 19:29 70,224 --a------ C:\WINDOWS\system32\drivers\fsdfw.sys 2007-11-20 19:29 33,840 --a------ C:\WINDOWS\system32\drivers\fsndis5.sys 2007-11-19 21:40 d-------- C:\Documents and Settings\Rémy Maurcot\Application Data\U3 2007-11-19 21:03 d-------- C:\Documents and Settings\Rémy Maurcot\Application Data\Logitech 2007-11-19 20:58 118,784 -r------- C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe 2007-11-19 20:57 d-------- C:\Program Files\eMule 2007-11-19 20:57 1,060,864 --a------ C:\WINDOWS\system32\MFC75d9b.rra 2007-11-19 20:57 143,360 --a------ C:\WINDOWS\system32\kemutb.dll 2007-11-19 20:57 90,112 --a------ C:\WINDOWS\system32\KemUtil.dll 2007-11-19 20:57 86,016 --a------ C:\WINDOWS\system32\KemWnd.dll 2007-11-19 20:57 65,536 --a------ C:\WINDOWS\system32\KemXML.dll 2007-11-19 20:56 d-------- C:\Program Files\Logitech 2007-11-19 20:56 d-------- C:\Program Files\Fichiers communs\Logitech 2007-11-19 20:56 28,160 --a------ C:\WINDOWS\KHALMNPR.Exe 2007-11-19 20:49 d-------- C:\Program Files\backburner 2 2007-11-19 20:41 d-------- C:\Program Files\Fichiers communs\Adobe 2007-11-19 20:34 d-------- C:\Program Files\MSBuild 2007-11-19 20:33 d-------- C:\Program Files\Microsoft.NET 2007-11-19 20:30 d-------- C:\WINDOWS\SHELLNEW 2007-11-19 20:30 d-------- C:\Program Files\Microsoft Visual Studio 8 2007-11-19 20:29 dr-h----- C:\MSOCache 2007-11-19 20:29 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2007-11-19 20:15 d-------- C:\Program Files\AutoCAD 2008 2007-11-19 20:15 d-------- C:\Documents and Settings\Rémy Maurcot\Application Data\Autodesk 2007-11-19 20:15 d-------- C:\Documents and Settings\All Users\Application Data\Autodesk 2007-11-19 20:14 d-------- C:\Program Files\Fichiers communs\Autodesk Shared 2007-11-19 20:14 d-------- C:\Program Files\Autodesk 2007-11-19 20:08 d-------- C:\Program Files\Pack Securite 2007-11-19 20:08 118,842 -r------- C:\WINDOWS\bwUnin-6.3.2.116-361343L.exe 2007-11-19 20:06 37,055 --a------ C:\WINDOWS\BricoPackUninst.cmd 2007-11-19 20:04 2,165 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd 2007-11-19 19:02 d-------- C:\WINDOWS\BricoPacks 2007-11-19 18:49 d-------- C:\Program Files\PowerISO 2007-11-19 18:30 d-------- C:\Program Files\Neuf 2007-11-19 18:28 d---s---- C:\Documents and Settings\Rémy Maurcot\Temporary Internet Files 2007-11-19 18:28 d---s---- C:\Documents and Settings\Rémy Maurcot\Temporary Internet Files 2007-11-19 18:28 d---s---- C:\Documents and Settings\Rémy Maurcot\Historique 2007-11-19 18:28 d---s---- C:\Documents and Settings\Rémy Maurcot\Historique 2007-11-19 18:27 d--h----- C:\Documents and Settings\Rémy Maurcot\Voisinage réseau 2007-11-19 18:27 d--h----- C:\Documents and Settings\Rémy Maurcot\Voisinage réseau 2007-11-19 18:27 d--h----- C:\Documents and Settings\Rémy Maurcot\Voisinage d'impression 2007-11-19 18:27 d--h----- C:\Documents and Settings\Rémy Maurcot\Voisinage d'impression 2007-11-19 18:27 d--h----- C:\Documents and Settings\Rémy Maurcot\Modèles 2007-11-19 18:27 d--h----- C:\Documents and Settings\Rémy Maurcot\Modèles 2007-11-19 18:27 dr------- C:\Documents and Settings\Rémy Maurcot\Mes documents 2007-11-19 18:27 dr------- C:\Documents and Settings\Rémy Maurcot\Mes documents 2007-11-19 18:27 dr------- C:\Documents and Settings\Rémy Maurcot\Menu Démarrer 2007-11-19 18:27 dr------- C:\Documents and Settings\Rémy Maurcot\Menu Démarrer 2007-11-19 18:27 d-------- C:\Documents and Settings\Rémy Maurcot\Favoris 2007-11-19 18:27 d-------- C:\Documents and Settings\Rémy Maurcot\Favoris 2007-11-19 18:27 d-------- C:\Documents and Settings\Rémy Maurcot\Bureau 2007-11-19 18:27 d-------- C:\Documents and Settings\Rémy Maurcot\Bureau . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-25 05:00] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-20 19:49] "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-11-19 20:58] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55] "EPSON Stylus DX5000 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.exe" [2006-09-22 04:01] "eMuleAutoStart"="C:\Program Files\eMule\emule.exe" [2007-05-13 15:57] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 20:34] "hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2006-05-03 21:58] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 20:03] "NvCplDaemon"="RUNDLL32.exe" [2006-03-25 05:00 C:\WINDOWS\system32 undll32.exe] "NvMediaCenter"="RUNDLL32.exe" [2006-03-25 05:00 C:\WINDOWS\system32 undll32.exe] "nwiz"="nwiz.exe" [2006-08-18 09:00 C:\WINDOWS\system32 wiz.exe] "MsmqIntCert"="regsvr32 /s mqrt.dll" [] "High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe" [2006-06-02 01:02 C:\WINDOWS\system32\CHDAudPropShortcut.exe] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-04-01 06:01] "QPService"="C:\Program Files\HP\QuickPlay\QPService.exe" [2006-07-11 20:55] "HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 22:11] "QlbCtrl"="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-06-19 10:33] "Cpqset"="C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe" [2006-05-30 15:02] "RecGuard"="C:\Windows\SMINST\RecGuard.exe" [2005-10-11 09:23] "Autoconfigurateur WiFi Neuf"="C:\Program Files\Neuf\Kit\WiFi\9wifi.exe" [2007-02-14 12:06] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2006-01-20 17:46 C:\WINDOWS\KHALMNPR.Exe] "F-Secure Manager"="C:\Program Files\Pack Securite\Common\FSM32.exe" [2005-05-09 08:05] "F-Secure TNB"="C:\Program Files\Pack Securite\TNB\TNBUtil.exe" [2005-06-02 14:05] "F-Secure Startup Wizard"="C:\Program Files\Pack Securite\FSGUI\FSSW.exe" [2005-09-05 14:00] "Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-11-20 19:50] "ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-02-22 12:08] "Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 10:22] "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-10-02 16:27] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-25 05:00] C:\Documents and Settings\R‚my Maurcot\Menu D‚marrer\Programmes\D‚marrage\ Stardock ObjectDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe [2005-02-21 14:56:00] Y'z ToolBar.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe [2002-09-29 14:41:00] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Pack Securite.lnk - C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe [2007-11-19 20:08:12] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice] @="" R0 FSFW;F-Secure Firewall Driver;C:\WINDOWS\system32\drivers\fsdfw.sys R2 BackWeb Plug-in - 361343;Pack Securite;C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE R2 F-Secure Filter;F-Secure File System Filter;\??\C:\Program Files\Pack Securite\Anti-Virus\Win2K\FSfilter.sys R2 F-Secure Gatekeeper;F-Secure Gatekeeper;\??\C:\Program Files\Pack Securite\Anti-Virus\Win2K\FSgk.sys R2 F-Secure Recognizer;F-Secure File System Recognizer;\??\C:\Program Files\Pack Securite\Anti-Virus\Win2K\FSrec.sys R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique;"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" R3 NBXG7031;NB 802.11g XG703 SP1 Driver;C:\WINDOWS\system32\DRIVERS\WlanUIG.sys R3 nvsmu;nvsmu;C:\WINDOWS\system32\DRIVERS vsmu.sys R3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{410ea17c-96de-11dc-b63b-0016366a4e76}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe killVBS.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c82613c3-96c3-11dc-b638-806d6172696f}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe killVBS.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c82613c4-96c3-11dc-b638-806d6172696f}] \Shell\AutoRun\command - G:\LaunchU3.exe -a [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c82613c5-96c3-11dc-b638-806d6172696f}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe killVBS.vbs *Newly Created Service* - CATCHME . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-20 20:50:14 C:\WINDOWS\Tasks\Norton AntiVirus - Effectuer une analyse complète du système - Rémy Maurcot.job" - C:\PROGRA~1\NORTON~1\Navw32.exe "2007-11-23 12:03:58 C:\WINDOWS\Tasks\Scheduled scanning task.job" - C:\PROGRA~1\PACKSE~1\ANTI-V~1\fsav.exe "2007-11-23 13:26:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job" . ************************************************************************** catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-23 16:53:31 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run Cpqset = C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe????????????

green day · Answer

ok,

Télécharger Vundofix.exe (par Atribune) sur votre Bureau : http://www.atribune.org/ccount/click.php?id=4

    * Double-cliquer sur VundoFix.exe afin de le lancer.
    * Cliquer sur le bouton Scan for Vundo.
    * Lorsque le scan est complété, cliquer sur le bouton Remove Vundo.
    * Une invite de commande demandera si l’on souhaite supprimer les fichiers, cliquer sur YES
    * Après avoir cliqué "YES", le Bureau disparaîtra un moment lors de la suppression des fichiers.
    * Une nouvelle invite de commende annoncera que le PC devra s'éteindre ("shutdown"). Cliquer sur OK , puis laisser le redémarrer.
    * Le contenu du rapport est situé dans C:\vundofix.txt, poste le stp

++

KiaraRhym · Answer

Mais je vien de faire combo fix faut combien de rapport au juste

green day · Answer

???

Tu viens bien demander de l'aide non ??

des rapports, il va y en avoir un certains nombres, après c'est toi qui vois, je ne vais pas te retenir !

KiaraRhym · Answer

oui ok alors vundo na trouvé aucun objet son message :done files

green day · Answer

Salut :)

 ok, fais ce qui est indiqué ici stp :

http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr

++

elshan · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:28:47, on 28/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\svchost.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\HostRAID Alert Utility\iomgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HostRAID Alert Utility\AlertUtility.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\elshan\Desktop\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=https=ftp=gopher=socks=
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ASocksrv] SocksA.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {E55FD215-A32E-43FE-A777-A7E8F165F554} (Flatcast Viewer 4.16) - http://www.flatcast.info/objects/NpFv41629.dll
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Adaptec HostRAID Alert Utility (HostRAIDAlertUtility) - Unknown owner - C:\Program Files\HostRAID Alert Utility\AlertUtility.exe
O23 - Service: Adaptec IO Manager Server 1.0 (IOManager) - Unknown owner - C:\Program Files\HostRAID Alert Utility\iomgr.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\system32\NMSSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

elshan · Answer

Rapport Lopxp fait le 28/12/2007 à  8:36:05
Exécuté dans : C:\Program Files\Lopxp


Liste des processus actifs :

PID : 620 C:\WINDOWS\System32\smss.exe
PID : 668 C:\WINDOWS\system32\csrss.exe
PID : 692 C:\WINDOWS\system32\winlogon.exe
PID : 736 C:\WINDOWS\system32\services.exe
PID : 748 C:\WINDOWS\system32\lsass.exe
PID : 912 C:\WINDOWS\system32\svchost.exe
PID : 976 C:\WINDOWS\system32\svchost.exe
PID : 1072 C:\WINDOWS\System32\svchost.exe
PID : 1140 C:\WINDOWS\system32\svchost.exe
PID : 1204 C:\WINDOWS\system32\svchost.exe
PID : 1532 C:\WINDOWS\system32\spoolsv.exe
PID : 2008 C:\WINDOWS\Explorer.EXE
PID : 324 C:\WINDOWS\system32\ctfmon.exe
PID : 368 C:\WINDOWS\svchost.exe
PID : 512 C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
PID : 404 C:\Program Files\HostRAID Alert Utility\iomgr.exe
PID : 1708 C:\WINDOWS\system32\svchost.exe
PID : 1820 C:\Program Files\HostRAID Alert Utility\AlertUtility.exe
PID : 1020 C:\WINDOWS\System32\alg.exe
PID : 1112 C:\WINDOWS\system32\wscntfy.exe
PID : 3900 C:\WINDOWS\system32\wuauclt.exe
PID : 3204 C:\Program Files\Internet Explorer\iexplore.exe
PID : 3980 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
PID : 1312 C:\Documents and Settings\elshan\Desktop\HiJackThis\HijackThis.exe
PID : 2156 C:\WINDOWS\system32\NOTEPAD.EXE
PID : 2336 C:\WINDOWS\system32\cmd.exe
PID : 3740 C:\Program Files\Lopxp	ools\pv.exe



___________________________________________________________________________

[Tâches planifiées]



___________________________________________________________________________

[Listing des dossiers Application Data]


cr: Date Création | mo: Date Modification -=- Nom Long -= Nom Court (8.3)


+- C:\Documents and Settings\AKBAROV\Application Data

cr: 07/12/2007 11:35:29 | mo: 07/12/2007 11:35:29 -=- IDENTI~1 -= Identities
cr: 07/12/2007 11:35:09 | mo: 07/12/2007 11:35:12 -=- MICROS~1 -= Microsoft

+- C:\Documents and Settings\AKBAROV\Local Settings\Application Data

cr: 07/12/2007 11:35:09 | mo: 07/12/2007 19:28:20 -=- MICROS~1 -= Microsoft

+- C:\Documents and Settings\All Users\Application Data

cr: 07/12/2007 02:53:01 | mo: 07/12/2007 11:22:17 -=- MICROS~1 -= Microsoft

+- C:\Documents and Settings\All Users.WINDOWS\Application Data

cr: 18/12/2007 12:54:09 | mo: 18/12/2007 12:55:17 -=- Adobe ----= Adobe
cr: 18/12/2007 12:51:34 | mo: 26/12/2007 15:17:25 -=- Google ---= Google
cr: 08/12/2007 11:29:40 | mo: 18/12/2007 13:26:06 -=- MICROS~1 -= Microsoft
cr: 18/12/2007 05:13:55 | mo: 18/12/2007 05:13:55 -=- WINDOW~1 -= Windows Genuine Advantage
cr: 18/12/2007 13:24:02 | mo: 18/12/2007 13:24:02 -=- WLINST~1 -= WLInstaller
cr: 18/12/2007 19:14:23 | mo: 18/12/2007 19:14:23 -=- Yahoo! ---= Yahoo!

+- C:\Documents and Settings\elshan\Application Data

cr: 18/12/2007 12:55:55 | mo: 18/12/2007 19:14:25 -=- Adobe ----= Adobe
cr: 18/12/2007 12:58:16 | mo: 18/12/2007 13:18:07 -=- Google ---= Google
cr: 11/12/2007 06:32:34 | mo: 11/12/2007 06:32:34 -=- Help -----= Help
cr: 25/12/2007 15:29:27 | mo: 25/12/2007 15:29:27 -=- HEWLET~1 -= Hewlett-Packard
cr: 08/12/2007 20:17:31 | mo: 08/12/2007 20:17:31 -=- IDENTI~1 -= Identities
cr: 18/12/2007 03:45:35 | mo: 18/12/2007 03:45:35 -=- MACROM~1 -= Macromedia
cr: 08/12/2007 20:17:12 | mo: 18/12/2007 22:51:40 -=- MICROS~1 -= Microsoft
cr: 09/12/2007 04:59:27 | mo: 09/12/2007 04:59:27 -=- MICROS~2 -= Microsoft Web Folders
cr: 18/12/2007 13:12:52 | mo: 18/12/2007 13:12:52 -=- WinRAR ---= WinRAR

+- C:\Documents and Settings\elshan\Local Settings\Application Data

cr: 18/12/2007 12:55:17 | mo: 18/12/2007 12:56:25 -=- Adobe ----= Adobe
cr: 18/12/2007 12:58:16 | mo: 18/12/2007 13:02:20 -=- Google ---= Google
cr: 11/12/2007 06:32:34 | mo: 11/12/2007 06:32:34 -=- Help -----= Help
cr: 18/12/2007 09:28:46 | mo: 18/12/2007 09:28:46 -=- IDENTI~1 -= Identities
cr: 08/12/2007 20:17:12 | mo: 18/12/2007 17:24:45 -=- MICROS~1 -= Microsoft
cr: 18/12/2007 17:24:56 | mo: 18/12/2007 17:24:56 -=- WMTOOL~1 -= WMTools Downloaded Files

___________________________________________________________________________

[Listing du dossier Program Files]

+- C:\Program Files

cr: 18/12/2007 03:13:28 | mo: 18/12/2007 03:13:28 -=- ACERHO~1.1 -= Acer Homeplug Ethernet Adapter Utilities 1.1
cr: 18/12/2007 12:53:51 | mo: 18/12/2007 12:53:52 -=- Adobe ----= Adobe
cr: 07/12/2007 02:56:46 | mo: 25/12/2007 15:17:58 -=- COMMON~1 -= Common Files
cr: 07/12/2007 11:12:06 | mo: 07/12/2007 11:12:06 -=- COMPLU~1 -= ComPlus Applications
cr: 18/12/2007 12:51:14 | mo: 26/12/2007 15:25:54 -=- Google ---= Google
cr: 25/12/2007 15:14:52 | mo: 25/12/2007 15:14:52 -=- HEWLET~1 -= Hewlett-Packard
cr: 18/12/2007 03:09:44 | mo: 18/12/2007 03:09:50 -=- HOSTRA~1 -= HostRAID Alert Utility
cr: 18/12/2007 03:17:37 | mo: 18/12/2007 03:17:38 -=- intel ----= intel
cr: 07/12/2007 11:14:02 | mo: 24/12/2007 07:47:21 -=- INTERN~1 -= Internet Explorer
cr: 28/12/2007 08:35:14 | mo: 28/12/2007 08:36:08 -=- Lopxp ----= Lopxp
cr: 07/12/2007 11:10:58 | mo: 08/12/2007 19:51:06 -=- MESSEN~1 -= Messenger
cr: 07/12/2007 11:22:17 | mo: 09/12/2007 04:58:58 -=- MICROS~1 -= microsoft frontpage
cr: 09/12/2007 04:59:27 | mo: 09/12/2007 04:59:27 -=- MICROS~2 -= Microsoft Office
cr: 18/12/2007 13:29:58 | mo: 18/12/2007 13:29:58 -=- MICROS~4 -= Microsoft SQL Server Compact Edition
cr: 09/12/2007 05:01:37 | mo: 09/12/2007 05:01:37 -=- MICROS~3 -= Microsoft Visual Studio
cr: 07/12/2007 11:14:32 | mo: 07/12/2007 11:14:36 -=- MOVIEM~1 -= Movie Maker
cr: 07/12/2007 11:10:03 | mo: 09/12/2007 05:32:03 -=- MSN ------= MSN
cr: 07/12/2007 11:10:53 | mo: 07/12/2007 11:10:53 -=- MSNGAM~1 -= MSN Gaming Zone
cr: 24/12/2007 07:46:53 | mo: 24/12/2007 07:46:53 -=- MSXML4~1.0 -= MSXML 4.0
cr: 24/12/2007 07:51:13 | mo: 24/12/2007 07:51:13 -=- MSXML6~1.0 -= MSXML 6.0
cr: 07/12/2007 11:14:17 | mo: 07/12/2007 11:14:54 -=- NETMEE~1 -= NetMeeting
cr: 07/12/2007 11:11:36 | mo: 13/12/2007 10:53:32 -=- ONLINE~1 -= Online Services
cr: 07/12/2007 11:14:13 | mo: 24/12/2007 07:50:46 -=- OUTLOO~1 -= Outlook Express
cr: 18/12/2007 12:45:44 | mo: 18/12/2007 12:45:45 -=- TopDesk --= TopDesk
cr: 07/12/2007 11:35:23 | mo: 07/12/2007 11:35:23 -=- UNINST~1 -= Uninstall Information
cr: 18/12/2007 13:24:17 | mo: 18/12/2007 13:31:29 -=- WI1F86~1 -= Windows Live
cr: 07/12/2007 11:11:02 | mo: 18/12/2007 03:47:30 -=- WINDOW~2 -= Windows Media Connect 2
cr: 07/12/2007 11:11:06 | mo: 18/12/2007 03:47:24 -=- WINDOW~3 -= Windows Media Player
cr: 07/12/2007 11:10:01 | mo: 08/12/2007 19:50:39 -=- WINDOW~1 -= Windows NT
cr: 07/12/2007 11:16:23 | mo: 07/12/2007 11:16:23 -=- WINDOW~4 -= WindowsUpdate
cr: 18/12/2007 13:12:05 | mo: 18/12/2007 13:12:10 -=- WinRaR ---= WinRaR
cr: 07/12/2007 11:22:17 | mo: 07/12/2007 11:22:17 -=- xerox ----= xerox
cr: 18/12/2007 19:11:34 | mo: 26/12/2007 15:16:35 -=- Yahoo! ---= Yahoo!

___________________________________________________________________________

[Recherche programmes connus, liés à CiD]




___________________________________________________________________________

[Clés registre de démarrage]


___________________________________________________________________________

[Popups autorisés]


[-] Internet Explorer :

Aucune adresse détectée dans la liste des sites autorisés à émettre des Popups.

[-] Mozilla Firefox

[-] Suite Mozilla / SeaMonkey


___________________________________________________________________________

[Suggestion nettoyage registre] 

- Aucune suggestion.


- Fin du rapport -

Virus Kill ou Mskill

32 réponses

Discussions similaires

Newsletters