[Virus] Infections par de multiple pubRésolu/Fermé

Question

[PS] : Je suis une buse dans l'informatique profonde (modif ficher et autre)
Bonjour à tous, depuis quelque semaine mon ordi me donne envie de le faire faire un vol planer par la fenêtre, il plante régulièrement des pub intempestive apparaissent fréquemment et il est de plus en plus lents. Bon la faute me reviens aussi peut être dans le fais que je n'avais pas d'antivirus durant quelque mois, et tout m'est tombé dessus d'un coup.

Souvent quand je suis sur le net, j'ai ce message d'erreur qui apparait et quand je met "Ok" ma barre de lancement (barre bleu au bas de l'écran) disparaît en bref quand je ferme toute mes fenêtre je me retrouve avec mon image de fond avec le curseur de la souris et tout ce que je peux faire c'est [CTRL]+[Alt]+[Del] :

http://img163.imageshack.us/img163/9529/erreurre0.png

J'ai notamment des pub en tout qui viennent me pourrir mon surf (Systemdoctor, WinAntiVirusPRO, et une grande page bleu avec comme titre :Error Detected), j'ai lancé Ad-Awards, Spyboot, CCleaner, mais j'ai l'impression que de plus en plus de pub m'envahisse, voici déjà mon rapport brute Hijack This :

Logfile of HijackThis v1.99.1
Scan saved at 19:15:29, on 20.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?pc=mssh&form=msshhp&ocid=onepro&homepage=http%3a%2f%2fwww.microsoft.com%2fisapi%2fredir.dll%3fprd%3d{SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file)
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\quxfwhbc.dll",setvm
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: .protected
O4 - Global Startup: .protected
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O21 - SSODL: incestuously - {03413bf7-e34c-445b-bfc0-a2b127255871} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

Merci de votre aide prochaine et providentielle.

Utilisateur anonyme · Answer

Bonjour

Poste aussi ces rapports.

$ Télécharge SmitfraudFix de S!Ri:
http://siri.urz.free.fr/Fix/SmitfraudFix.php
Tu le dézippes sur le Bureau.
Tu ouvres SmitfraudFix, tu double cliques sur SmitfraudFix.cmd et tu choisis l’option 1 
Postes le rapport.

$ Télécharge Blacklight (de F-Secure) et sauvegarde le sur ton Bureau.
https://www.f-secure.com/en
Clique sur "I ACCEPT" au bas de la page. Sauvegarde le sur ton Bureau.

Double-clique blbeta.exe et accepte la licence; clique Scan puis Next

Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres)

Copie et colle le contenu de ce rapport dans ta prochaine réponse.

legras · Answer

Alors voila le rapport de Smitfraud :

SmitFraudFix v2.131

Rapport fait à 19:20:57.03, 20.12.2006
Executé à partir de C:\Documents and Settings\Wxp\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

C:\WINDOWS\.protected PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\impgsje.dll PRESENT !
C:\WINDOWS\system32\ot.ico PRESENT !
C:\WINDOWS\system32\components\flx?.dll PRESENT !
C:\WINDOWS\system32\components\flx??.dll PRESENT !
C:\WINDOWS\system32\components\flx???.dll PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Wxp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Wxp\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

C:\DOCUME~1\Wxp\MENUDM~1\PROGRA~1\DMARRA~1\.protected PRESENT !
C:\DOCUME~1\ALLUSE~1\MENUDM~1\Online Security Guide.url PRESENT !
C:\DOCUME~1\ALLUSE~1\MENUDM~1\Security Troubleshooting.url PRESENT !
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\DMARRA~1\.protected PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Wxp\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 

C:\Program Files\SpyQuake2.com\ PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="C:\Documents and Settings\Wxp\Mes documents\Mes images\avatar48290_5.gif"
"SubscribedURL"="C:\Documents and Settings\Wxp\Mes documents\Mes images\avatar48290_5.gif"
"FriendlyName"=""
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1]
"Source"="g:\Fond d'‚crant\index.htm"
"SubscribedURL"="g:\Fond d'‚crant\index.htm"
"FriendlyName"="Rumble Roses"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\2]
"Source"="C:\WINDOWS\SideBar\sidebar\index.html"
"SubscribedURL"="C:\WINDOWS\SideBar\sidebar\index.html"
"FriendlyName"="Longhorn SideBar"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"incestuously"="{03413bf7-e34c-445b-bfc0-a2b127255871}"



»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin


Et Blacklist

12/20/06 19:22:16 [Info]: BlackLight Engine 1.0.47 initialized
12/20/06 19:22:16 [Info]: OS: 5.1 build 2600 (Service Pack 2)
12/20/06 19:22:16 [Note]: 7019 4
12/20/06 19:22:16 [Note]: 7005 0
12/20/06 19:22:54 [Note]: 7006 0
12/20/06 19:22:54 [Note]: 7011 3312
12/20/06 19:22:54 [Note]: 7026 0
12/20/06 19:22:54 [Note]: 7026 0
12/20/06 19:23:02 [Note]: FSRAW library version 1.7.1020
12/20/06 19:27:27 [Note]: 4020 29 65536
12/20/06 19:27:27 [Note]: 4018 29 65536
12/20/06 19:27:27 [Note]: 4013 21461
12/20/06 19:27:27 [Note]: 4020 29 65536
12/20/06 19:27:27 [Note]: 4018 29 65536
12/20/06 19:27:27 [Note]: 4020 29 65536
12/20/06 19:27:27 [Note]: 4018 29 65536
12/20/06 19:27:27 [Note]: 4013 21461
12/20/06 19:27:27 [Note]: 4020 29 65536
12/20/06 19:27:27 [Note]: 4018 29 65536
12/20/06 19:28:24 [Note]: 2000 1012
12/20/06 19:54:01 [Note]: 7007 0


Voila, euh je vous laisse lire tous cela car pour moi c'est du chinois :D .

Utilisateur anonyme · Answer

juste tite question pour chercheur bis

O18 c'est bien la ligne ou l'on trouve des Pirates de protocole et de protocoles additionnels?

question serieus aps un de ses test stupide mais juste un trous de memoire

Utilisateur anonyme · Answer

Re

 * Télécharge 
AVG Anti-Spyware
https://www.avg.com/en-ww/free-antivirus-download
Tu l'installes.
Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente

CCleaner.
http://www.filehippo.com/download_ccleaner.html
Installe le dans un répertoire dédié.

 * Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarres l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuyes sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows. 
En utilisant les touches du curseur, sélectionnes le mode sans échec approprié et appuyes sur Entrée.

 * Relances SmitfraudFix et choisis cette fois l’option 2 et réponds oui à tout.

 * Lance le nettoyage avec CCleaner.

 * Lance AVG Anti-Spyware 
Clique sur le bouton Analyse (de la barre d'outils)
Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantine.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas. 
Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

 * Redémarres normalement et communiques le deuxième rapport de SmitfraudFix, celui d'AVG Anti-Spyware avec un nouveau rapport Hijackthis.

legras · Answer

Ok merci Chercheur, je vais voir si j'ai le temps de faire cela demain soir. Mais j'ai déjà essayé de démarer en mode sans échec, mais l'ordi se bloque juste après la sélection, l'écrant est tout noir il y a juste un curseur qui clignote en haut à gauche, je ne pense pas que ce soit normale.

Mais je vous en dis plus vendredi soir maximum.

Utilisateur anonyme · Answer

Re


Si le mode sans échec ne fonctionne pas, fais la manip en mode normal.
Dans ce cas, il y auras peut être un redémarrage après SmitfraudFix.

legras · Answer

Alors voila c'est enfin fais, en effet le mode sans échec met 5min pour se lancer, mais au moment ou il me demande si je veux continuer en sans échec ou revenir en normale il ne m'affiche juste l'écrant avec "mode sans échec" écrit dans les coins et c'est tout. Bon bref je me suis mis en mode normal et fais ce que tu m'asdis alors voila les rapports (a oui je n'ai pas redémarré après le SmitfraudFix) :

Rapport de Smit :

SmitFraudFix v2.131

Rapport fait à 17:34:44.50, 22.12.2006
Executé à partir de C:\Documents and Settings\Wxp\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"incestuously"="{03413bf7-e34c-445b-bfc0-a2b127255871}"


»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\WINDOWS\.protected supprimé
C:\WINDOWS\system32\impgsje.dll supprimé
C:\WINDOWS\system32\ot.ico supprimé
C:\WINDOWS\system32\components\flx?.dll supprimé
C:\DOCUME~1\Wxp\MENUDM~1\PROGRA~1\DMARRA~1\.protected supprimé
C:\DOCUME~1\ALLUSE~1\MENUDM~1\Online Security Guide.url supprimé
C:\DOCUME~1\ALLUSE~1\MENUDM~1\Security Troubleshooting.url supprimé
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\DMARRA~1\.protected supprimé
C:\Program Files\SpyQuake2.com\ supprimé

»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Rapport d'AVG :

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	18:18:27 22.12.2006

 + Résultat de l'analyse:	



HKU\S-1-5-21-823518204-2147279641-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39F25B12-74FF-4079-A51F-1D70F5B08B84} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Fichiers communs\{84B2DB13-0C7E-1036-0924-040307090029}\system.dll -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP702\A0190016.dll -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP702\A0190018.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP710\A0191384.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP722\A0192639.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP710\A0191352.dll -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP710\A0191353.dll -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP710\A0191354.dll -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\fccbyvw.dll -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\hggdccy.dll -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\rqrrrpq.dll -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP703\A0190022.exe -> Downloader.Purit.co : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP688\A0185222.exe -> Downloader.Zlob.aes : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\isnotify.0xe -> Downloader.Zlob.aew : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP684\A0178279.exe -> Dropper.DollarR.b : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D18M3107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D18M3107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UDC6V_0001_D19M0709NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UDC6V_0001_D19M0709NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UDC6V_0001_D19M0709NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\UDC6V_0001_D19M0709NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\CONFLICT.5\UDC6V_0001_D19M0709NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\CONFLICT.6\UDC6V_0001_D19M0709NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\UDC6V_0001_D19M0709NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\drvtoh.dll -> Not-A-Virus.Hoax.Win32.Renos.fw : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP659\A0165512.exe -> Proxy.Horst.jq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP660\A0166152.exe -> Proxy.Horst.jq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP660\A0166501.exe -> Proxy.Horst.jq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP671\A0172893.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP671\A0172907.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP671\A0172931.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP672\A0172936.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP672\A0172963.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP672\A0172987.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP676\A0173191.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP676\A0173216.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP677\A0173220.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP677\A0173235.exe -> Proxy.Horst.kq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\VSAdd-in\VSAdd-in.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP722\A0192640.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP722\A0192652.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP722\A0192684.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP723\A0192715.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP728\A0193250.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP728\A0193276.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP729\A0194276.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP729\A0194376.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP729\A0194484.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP730\A0194490.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP730\A0194513.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP731\A0194567.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP732\A0197484.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP732\A0198484.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP736\A0198746.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP736\A0198907.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP736\A0198931.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP736\A0200566.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP736\A0200605.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP737\A0200704.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP737\A0200729.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP738\A0200821.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP738\A0201729.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0201844.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0201864.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203961.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP651\A0160069.exe -> Trojan.Agent.xu : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP652\A0160107.exe -> Trojan.Agent.xu : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP659\A0162540.exe -> Trojan.Agent.xu : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP659\A0164498.exe -> Trojan.Agent.xu : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP702\A0190019.dll -> Trojan.LuckyBar888.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP710\A0191385.dll -> Trojan.LuckyBar888.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\wtssvit.exe -> Trojan.Small : Nettoyé et sauvegardé (mise en quarantaine).


Fin du rapport

Et enfin celui de Hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 18:23:51, on 22.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\WINDOWS\system32\svchost.exe
C:\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file)
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

Dans l'attente de votre futur réponse je vous remercie déjà, du temps que vous aller accorder à mon problème.

Utilisateur anonyme · Answer

Re

Le rapport d'AVG montre une infection Vundo.

Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
http://www.atribune.org/ccount/click.php?id=4

* Double-clique VundoFix.exe afin de le lancer.
* Lorsque l'outil se lance à nouveau, clique sur le bouton Scan for Vundo
* Clique sur le bouton Scan for Vundo.
* Lorsque le scan est complété, clique sur le bouton Remove Vundo
* Une invite te demandera si tu veux supprimer les fichiers, clique YES
* Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
* Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK
* Démarre ton PC à nouveau.
* Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse.

Note Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".

legras · Answer

Le rapport de VundoFix :

VundoFix V6.2.13

Checking Java version...

Java version is 1.5.0.6

Java version is 1.5.0.9

Scan started at 19:46:52 22.12.2006

Listing files found while scanning....

C:\WINDOWS\system32\cgevzkd.dll
C:\WINDOWS\system32\lctsupj.dll
C:\WINDOWS\system32\qrbddqi.dll
C:\WINDOWS\system32\ufkxftn.dll
C:\WINDOWS\system32\urwzhx.dll
C:\WINDOWS\system32\vtsqq.dll
C:\WINDOWS\system32\qqstv.ini
C:\WINDOWS\system32\qqstv.bak1
C:\WINDOWS\system32\qqstv.bak2
C:\WINDOWS\system32\qqstv.ini2
C:\WINDOWS\system32\qqstv.tmp
C:\WINDOWS\system32\xzzlbgi.dll
C:\WINDOWS\system32\yzivngl.dll
C:\WINDOWS\system32\vtsqq.dll
C:\WINDOWS\system32\qqstv.ini
C:\WINDOWS\system32\qqstv.bak1
C:\WINDOWS\system32\qqstv.bak2
C:\WINDOWS\system32\qqstv.ini2
C:\WINDOWS\system32\qqstv.tmp
C:\WINDOWS\system32\qqstv.ini
C:\WINDOWS\system32\qqstv.bak1
C:\WINDOWS\system32\qqstv.bak2
C:\WINDOWS\system32\qqstv.ini2
C:\WINDOWS\system32\qqstv.tmp

Beginning removal...

 Attempting to delete C:\WINDOWS\system32\cgevzkd.dll
C:\WINDOWS\system32\cgevzkd.dll Has been deleted!

 Attempting to delete C:\WINDOWS\system32\lctsupj.dll
C:\WINDOWS\system32\lctsupj.dll Has been deleted!

 Attempting to delete C:\WINDOWS\system32\qrbddqi.dll
C:\WINDOWS\system32\qrbddqi.dll Has been deleted!

 Attempting to delete C:\WINDOWS\system32\ufkxftn.dll
C:\WINDOWS\system32\ufkxftn.dll Has been deleted!

 Attempting to delete C:\WINDOWS\system32\urwzhx.dll
C:\WINDOWS\system32\urwzhx.dll Has been deleted!

 Attempting to delete C:\WINDOWS\system32\vtsqq.dll
C:\WINDOWS\system32\vtsqq.dll Could not be deleted.

 Attempting to delete C:\WINDOWS\system32\qqstv.ini
C:\WINDOWS\system32\qqstv.ini Has been deleted!

 Attempting to delete C:\WINDOWS\system32\qqstv.bak1
C:\WINDOWS\system32\qqstv.bak1 Has been deleted!

 Attempting to delete C:\WINDOWS\system32\qqstv.bak2
C:\WINDOWS\system32\qqstv.bak2 Has been deleted!

 Attempting to delete C:\WINDOWS\system32\qqstv.ini2
C:\WINDOWS\system32\qqstv.ini2 Has been deleted!

 Attempting to delete C:\WINDOWS\system32\qqstv.tmp
C:\WINDOWS\system32\qqstv.tmp Has been deleted!

 Attempting to delete C:\WINDOWS\system32\xzzlbgi.dll
C:\WINDOWS\system32\xzzlbgi.dll Has been deleted!

 Attempting to delete C:\WINDOWS\system32\yzivngl.dll
C:\WINDOWS\system32\yzivngl.dll Has been deleted!

 Attempting to delete C:\WINDOWS\system32\vtsqq.dll
C:\WINDOWS\system32\vtsqq.dll Could not be deleted.

Performing Repairs to the registry.
Done!

Beginning removal...

 Attempting to delete C:\WINDOWS\system32\vtsqq.dll
C:\WINDOWS\system32\vtsqq.dll Has been deleted!

Performing Repairs to the registry.
Done!

Et celui de Hijack :

Logfile of HijackThis v1.99.1
Scan saved at 20:15:35, on 22.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file)
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\PROGRA~1\DAP\dapbho.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0964344D-C233-DAF1-2ADC-08C2A8D60810} - C:\WINDOWS\system32\hptukyk.dll
O2 - BHO: (no name) - {2527DC3F-C7A0-CF37-33EA-0525C1600A34} - C:\WINDOWS\system32\quqrbkl.dll
O2 - BHO: (no name) - {36068946-CD51-1AC7-C4AD-044557583146} - C:\WINDOWS\system32\lctsupj.dll (file missing)
O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\hpvekfro.dll
O2 - BHO: (no name) - {42E53C82-E11D-E01B-A428-084851DB6947} - C:\WINDOWS\system32\yzivngl.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
O2 - BHO: (no name) - {61E91E9C-BF33-6A6A-7BFC-00B25F19A7AE} - C:\WINDOWS\system32\urwzhx.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - C:\WINDOWS\system32\vtsqq.dll (file missing)
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

Utilisateur anonyme · Answer

Re

Un grand ménage viens d'être fait.

On continue


$$ [*]Double-clique VundoFix.exe afin de le lancer.
[*]Fais un clic droit dans la fenêtre blanche et clique "Add more files?"
[*]Dans la nouvelle fenêtre qui apparait, Copie/colle le chemin du fichier suivant dans la première case (au haut):

C:\WINDOWS\system32\qvlaojwx.dll

[*]Clique sur le bouton "Add File(s)"
[*]Clique sur le bouton "Close Window".
[*]Clique à nouveau sur "Remove Vundo"
[*]Une invite te demandera si tu veux supprimer les fichiers, clique YES
[*]Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
[*]Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK
[*]Démarre ton PC à nouveau.


$$ Télécharge DiagHelp.zip (de Malekal_Morte) sur ton bureau 
http://www.malekal.com/download/DiagHelp.zip
- Fais un clic droit sur le fichier et extraire tout 
- Un nouveau dossier chercher va être créé DiagHelp 
- Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître) 
- Une fenêtre va s'ouvrir, choisis l'option 1 
- L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande 
- A la fin de l'analyse, il te sera redemandé de redémarrer l'ordinateur... Une fois l'ordinateur redémarré le rapport va apparaître sur le bloc-note.. Ce dernier se trouve sur C:\resultat.txt


- Copie/colle le contenu du bloc-note avec le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse.

legras · Answer

Alors c'est fais, mais maintenant quand je redémare mon ordi il me dis que le *.dll pour le fichier qvlaojwx.dll est introuvable. Et petite question c'est quoi un Vundo ? Voici le rapport Diaghelp : C:\WINDOWS\System32\wpa.dbl -->23.12.2006 11:03:15 C:\WINDOWS\System32\perfh00C.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfh009.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfc00C.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfc009.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\PerfStringBackup.INI -->23.12.2006 10:56:17 C:\WINDOWS\System32\xwjoalvq.ini -->23.12.2006 10:45:05 C:\WINDOWS\System32\odtpfici.dll -->22.12.2006 19:44:58 C:\WINDOWS\System32\oprsgstw.exe -->22.12.2006 19:44:54 C:\WINDOWS\System32\astpbqig.exe -->22.12.2006 19:20:47 C:\WINDOWS\System32\wbqmyces.dll -->22.12.2006 19:20:41 C:\WINDOWS\System32\ynktjcxl.exe -->22.12.2006 18:22:33 C:\WINDOWS\System32\axgvpryj.dll -->22.12.2006 18:22:27 C:\WINDOWS\System32 jimnfjf.dll -->22.12.2006 17:37:06 C:\WINDOWS\System32\cdjwyfix.exe -->22.12.2006 17:37:03 C:\WINDOWS\System32 mp.txt -->22.12.2006 17:34:49 C:\WINDOWS\System32 mp.reg -->22.12.2006 17:34:49 C:\WINDOWS\System32\dowllovy.exe -->22.12.2006 17:33:55 C:\WINDOWS\System32\cpdymfnb.dll -->22.12.2006 17:33:49 C:\WINDOWS\System32\cbhwfxuq.ini -->22.12.2006 17:33:08 C:\WINDOWS\System32\muaktpvk.dll -->22.12.2006 17:02:57 C:\WINDOWS\System32\cgfvpsjm.exe -->22.12.2006 17:02:52 C:\WINDOWS\System32\stuctgge.exe -->21.12.2006 19:03:25 C:\WINDOWS\System32\efvnvkme.dll -->21.12.2006 19:03:21 C:\WINDOWS\System32\cvfginer.dll -->20.12.2006 22:39:03 C:\WINDOWS\WindowsUpdate.log -->23.12.2006 11:03:06 C:\WINDOWS\bootstat.dat -->23.12.2006 11:03:00 C:\WINDOWS\SchedLgU.Txt -->23.12.2006 01:24:06 C:\WINDOWS\cdPlayer.ini -->26.11.2006 14:29:21 C:\WINDOWS\Thumbs.db -->19.11.2006 16:47:33 C:\WINDOWS\SWPRODPB.INI -->06.11.2006 23:17:10 C:\WINDOWS\system.ini -->06.11.2006 22:46:44 C:\WINDOWS\cserve.ini -->01.11.2006 21:44:14 C:\WINDOWS\WMSysPr9.prx -->04.10.2006 19:46:53 C:\WINDOWS\mngui.INI -->28.09.2006 10:43:09 C:\WINDOWS\pavsig.txt -->08.09.2006 19:57:38 C:\WINDOWS\BricoPackFoldersDelete.cmd -->12.08.2006 16:08:45 C:\WINDOWS\BricoPackUninst.txt -->12.08.2006 16:08:44 C:\WINDOWS\BricoPackUninst.cmd -->12.08.2006 16:08:44 C:\WINDOWS\BricoPack Wallpaper.bmp -->12.08.2006 16:08:35 C:\WINDOWS\ALCFDRTM.EXE |03/01/2002 17:07:42 C:\WINDOWS\alcrmv.exe |28/10/2004 16:12:26 C:\WINDOWS\alcupd.exe |28/10/2004 16:12:26 C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe |02/07/2005 17:43:37 C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe |17/07/2005 18:21:58 C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe |02/04/2006 17:45:49 C:\WINDOWS\GPInstall.exe |09/02/2005 17:57:37 C:\WINDOWS\IsUn040c.exe |28/10/2004 15:57:55 C:\WINDOWS\IsUninst.exe |28/10/2004 15:45:05 C:\WINDOWS\iun6002.exe |20/07/2005 20:25:04 C:\WINDOWS\ScUnin.exe |24/09/2005 13:02:20 C:\WINDOWS\Setup1.exe |18/12/2004 13:14:19 C:\WINDOWS\slrundll.exe |28/10/2004 15:27:29 C:\WINDOWS\SOUNDMAN.EXE |28/10/2004 16:12:34 C:\WINDOWS wunk_16.exe |24/04/2003 13:00:00 C:\WINDOWS wunk_32.exe |24/04/2003 13:00:00 C:\WINDOWS\una2setup.exe |06/12/2004 20:06:03 C:\WINDOWS\unADesktop.exe |14/01/2005 15:43:51 C:\WINDOWS\unin040c.exe |16/02/2005 17:56:29 C:\WINDOWS\uninst.exe |18/08/2005 16:50:31 C:\WINDOWS\USBK700iphmgunin.exe |04/01/2002 19:44:54 C:\WINDOWS wain.dll |24/04/2003 13:00:00 C:\WINDOWS wain_32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\AcSignOpt.exe |05/03/2005 13:18:15 C:\WINDOWS\system32\agfherdb.exe |12/11/2006 15:22:35 C:\WINDOWS\system32\amwskrut.exe |02/12/2006 10:10:42 C:\WINDOWS\system32\aolelmeq.exe |09/11/2006 22:22:04 C:\WINDOWS\system32\append.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\aqusnwid.exe |06/11/2006 20:39:32 C:\WINDOWS\system32\astpbqig.exe |22/12/2006 19:20:44 C:\WINDOWS\system32\asuninst.exe |23/01/2006 20:11:05 C:\WINDOWS\system32\aswBoot.exe |02/11/2006 22:11:06 C:\WINDOWS\system32\ati2evxx.exe |29/09/2004 07:16:44 C:\WINDOWS\system32\Ati2mdxx.exe |29/09/2004 07:18:28 C:\WINDOWS\system32\ati2sgag.exe |28/10/2004 16:20:39 C:\WINDOWS\system32\audimhij.exe |12/11/2006 20:54:38 C:\WINDOWS\system32\aupgnxlj.exe |10/11/2006 20:51:01 C:\WINDOWS\system32\bbjudflx.exe |18/11/2006 23:08:54 C:\WINDOWS\system32\bddoirhx.exe |08/11/2006 17:47:18 C:\WINDOWS\system32\bifvcaqc.exe |23/11/2006 22:57:34 C:\WINDOWS\system32\bldhynhq.exe |05/12/2006 17:35:24 C:\WINDOWS\system32\bnyvvhbm.exe |07/12/2006 22:10:45 C:\WINDOWS\system32\cdjwyfix.exe |22/12/2006 17:37:02 C:\WINDOWS\system32\cfvbcrlo.exe |17/12/2006 13:25:22 C:\WINDOWS\system32\cgfvpsjm.exe |22/12/2006 17:02:51 C:\WINDOWS\system32\cgtyqlrr.exe |18/11/2006 22:50:05 C:\WINDOWS\system32\cjgiktsa.exe |23/11/2006 22:57:43 C:\WINDOWS\system32\ckxhgpdf.exe |18/11/2006 23:02:29 C:\WINDOWS\system32\crdwqqep.exe |12/11/2006 16:53:27 C:\WINDOWS\system32\ddvvohgd.exe |09/11/2006 22:21:49 C:\WINDOWS\system32\debug.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\difwtfvm.exe |11/11/2006 12:49:52 C:\WINDOWS\system32\dikmwqyc.exe |11/11/2006 10:54:21 C:\WINDOWS\system32\dmgr2.exe |25/03/2005 20:32:41 C:\WINDOWS\system32\dosx.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\dowllovy.exe |22/12/2006 17:33:54 C:\WINDOWS\system32\dqacyhwy.exe |11/11/2006 09:40:54 C:\WINDOWS\system32\dqxktplr.exe |18/12/2006 19:14:24 C:\WINDOWS\system32\dtsijbas.exe |18/12/2006 18:58:30 C:\WINDOWS\system32\duajsngx.exe |01/12/2006 19:03:55 C:\WINDOWS\system32\dunxmasq.exe |26/11/2006 12:12:15 C:\WINDOWS\system32\duoollxq.exe |23/11/2006 23:11:12 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34 C:\WINDOWS\system32\dwarqyok.exe |04/12/2006 18:08:52 C:\WINDOWS\system32\ealavluy.exe |20/12/2006 18:15:00 C:\WINDOWS\system32\edeeccww.exe |12/11/2006 20:47:27 C:\WINDOWS\system32\edlin.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\elsdjceh.exe |11/11/2006 09:40:23 C:\WINDOWS\system32\eoffqsqk.exe |22/11/2006 20:45:25 C:\WINDOWS\system32\exe2bin.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\exrkvkgu.exe |11/12/2006 18:15:41 C:\WINDOWS\system32\fastopen.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\fopwmgdy.exe |03/11/2006 18:22:53 C:\WINDOWS\system32\fskmtsbm.exe |08/12/2006 17:59:51 C:\WINDOWS\system32\ftboxnxl.exe |16/11/2006 17:48:03 C:\WINDOWS\system32\fvsidooy.exe |05/11/2006 18:30:43 C:\WINDOWS\system32\gardhtfc.exe |20/11/2006 06:21:56 C:\WINDOWS\system32\gktfxipw.exe |10/12/2006 13:54:39 C:\WINDOWS\system32\gncopicl.exe |28/11/2006 17:42:14 C:\WINDOWS\system32\gobrxtwv.exe |21/11/2006 17:41:10 C:\WINDOWS\system32\guxarogi.exe |17/12/2006 18:04:27 C:\WINDOWS\system32\gvopwqdu.exe |25/11/2006 20:39:11 C:\WINDOWS\system32\gyjqeywt.exe |15/12/2006 19:15:29 C:\WINDOWS\system32\hgcddihu.exe |19/11/2006 23:21:40 C:\WINDOWS\system32\hjqqbfii.exe |12/11/2006 15:22:21 C:\WINDOWS\system32\hsrjerlt.exe |27/11/2006 20:35:08 C:\WINDOWS\system32\hxdfpeav.exe |25/11/2006 20:29:13 C:\WINDOWS\system32\ikicnabt.exe |17/11/2006 18:52:57 C:\WINDOWS\system32\imonihvr.exe |08/12/2006 22:51:10 C:\WINDOWS\system32\itdgccxx.exe |12/12/2006 17:39:48 C:\WINDOWS\system32\iuviiqct.exe |23/11/2006 22:05:02 C:\WINDOWS\system32\java.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\javaw.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\javaws.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\jkrmhoip.exe |26/11/2006 23:14:15 C:\WINDOWS\system32\katadsql.exe |16/12/2006 11:44:36 C:\WINDOWS\system32\krplutvf.exe |25/11/2006 15:36:46 C:\WINDOWS\system32\ksmnegtd.exe |18/12/2006 19:48:40 C:\WINDOWS\system32\kunweeey.exe |29/11/2006 18:46:32 C:\WINDOWS\system32\kvrmyshi.exe |06/11/2006 21:22:31 C:\WINDOWS\system32\ldguntat.exe |26/11/2006 18:37:33 C:\WINDOWS\system32\lvvoqgqi.exe |05/11/2006 18:27:03 C:\WINDOWS\system32\mcldsfkv.exe |12/11/2006 20:54:29 C:\WINDOWS\system32\mem.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\mgxpvprt.exe |25/11/2006 15:19:23 C:\WINDOWS\system32\mjwgqnkh.exe |09/12/2006 12:16:41 C:\WINDOWS\system32\mscdexnt.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\musqllhf.exe |10/11/2006 17:09:51 C:\WINDOWS\system32\mvtnxnrp.exe |30/11/2006 17:31:55 C:\WINDOWS\system32\mydcfiom.exe |26/11/2006 13:05:17 C:\WINDOWS\system32\mykecmyy.exe |13/12/2006 17:45:01 C:\WINDOWS\system32 djhporp.exe |09/12/2006 16:53:53 C:\WINDOWS\system32\NeroCheck.exe |09/07/2001 11:50:42 C:\WINDOWS\system32 fqwphvg.exe |10/11/2006 20:50:53 C:\WINDOWS\system32 hsraulq.exe |20/12/2006 18:34:52 C:\WINDOWS\system32 loyoorh.exe |12/11/2006 16:53:15 C:\WINDOWS\system32 lsfunc.exe |24/04/2003 13:00:00 C:\WINDOWS\system32 nddeawh.exe |13/11/2006 18:29:05 C:\WINDOWS\system32 tfwbkns.exe |17/12/2006 14:29:09 C:\WINDOWS\system32 wkrfcck.exe |17/12/2006 13:03:34 C:\WINDOWS\system32\odabjrlj.exe |17/12/2006 14:24:21 C:\WINDOWS\system32\ogpsrlax.exe |24/11/2006 18:35:45 C:\WINDOWS\system32\ohnjbmtx.exe |11/12/2006 19:55:04 C:\WINDOWS\system32\ohpkqvys.exe |04/11/2006 18:23:01 C:\WINDOWS\system32\oprsgstw.exe |22/12/2006 19:44:52 C:\WINDOWS\system32\otfoegrk.exe |11/12/2006 21:56:35 C:\WINDOWS\system32\owyllmmu.exe |19/12/2006 17:39:53 C:\WINDOWS\system32\pfodbooc.exe |13/11/2006 23:38:04 C:\WINDOWS\system32\pgshdnsa.exe |24/11/2006 18:09:29 C:\WINDOWS\system32\phlkcrom.exe |18/11/2006 12:11:46 C:\WINDOWS\system32\pmqbsdfq.exe |26/11/2006 13:34:25 C:\WINDOWS\system32\qktboyra.exe |12/11/2006 10:51:45 C:\WINDOWS\system32\qnstnlpd.exe |16/12/2006 16:56:20 C:\WINDOWS\system32\qobxyqqr.exe |05/11/2006 21:27:39 C:\WINDOWS\system32\quwjqcea.exe |25/11/2006 15:19:49 C:\WINDOWS\system32 bneyqpm.exe |18/12/2006 19:43:58 C:\WINDOWS\system32 edir.exe |24/04/2003 13:00:00 C:\WINDOWS\system32 eico.exe |18/02/2005 18:17:11 C:\WINDOWS\system32 riktdeh.exe |18/12/2006 19:10:08 C:\WINDOWS\system32\RTLCPL.EXE |28/10/2004 16:12:35 C:\WINDOWS\system32\setver.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\sgbpxmer.exe |07/11/2006 17:41:06 C:\WINDOWS\system32\share.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\slrundll.exe |28/10/2004 15:27:30 C:\WINDOWS\system32\slserv.exe |28/10/2004 15:27:30 C:\WINDOWS\system32\SpoonUninstall.exe |17/04/2005 13:31:15 C:\WINDOWS\system32\sqogavnb.exe |05/11/2006 21:27:51 C:\WINDOWS\system32\stuctgge.exe |21/12/2006 19:03:24 C:\WINDOWS\system32\stxubqlj.exe |26/11/2006 11:40:49 C:\WINDOWS\system32\sufgwnyi.exe |14/11/2006 17:30:33 C:\WINDOWS\system32\svyywssj.exe |30/11/2006 22:44:10 C:\WINDOWS\system32 dbxowgv.exe |11/12/2006 19:48:44 C:\WINDOWS\system32 duxgeqv.exe |08/11/2006 19:29:10 C:\WINDOWS\system32 ioxqmer.exe |08/11/2006 21:09:16 C:\WINDOWS\system32 nhgecfn.exe |15/11/2006 22:54:24 C:\WINDOWS\system32 qdncpme.exe |12/11/2006 21:44:10 C:\WINDOWS\system32 xhihndo.exe |06/11/2006 22:10:43 C:\WINDOWS\system32\UAService7.exe |27/03/2005 14:54:25 C:\WINDOWS\system32\ubhieikw.exe |15/11/2006 17:36:05 C:\WINDOWS\system32\uglxpxxn.exe |27/11/2006 18:09:37 C:\WINDOWS\system32\Uharc.exe |18/02/2005 18:16:23 C:\WINDOWS\system32\ujopqkeq.exe |27/11/2006 20:43:06 C:\WINDOWS\system32\unutsgdr.exe |06/11/2006 21:22:44 C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\usrprbda.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\usrshuta.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\vanlhmqa.exe |12/11/2006 17:03:43 C:\WINDOWS\system32\veeqhdea.exe |01/11/2006 19:14:33 C:\WINDOWS\system32\vfnvmtsv.exe |06/12/2006 19:16:38 C:\WINDOWS\system32\vjbmfnse.exe |25/11/2006 15:27:52 C:\WINDOWS\system32\vltjjnrm.exe |19/11/2006 18:17:10 C:\WINDOWS\system32\vsekpwgr.exe |12/11/2006 17:03:30 C:\WINDOWS\system32\vvnidnif.exe |29/11/2006 17:39:21 C:\WINDOWS\system32\vynxttnq.exe |22/11/2006 17:37:05 C:\WINDOWS\system32\waodljik.exe |16/11/2006 17:47:37 C:\WINDOWS\system32\wbxcojle.exe |20/12/2006 22:38:57 C:\WINDOWS\system32\whudvlfi.exe |05/11/2006 14:39:20 C:\WINDOWS\system32\wticjrpl.exe |19/11/2006 10:11:11 C:\WINDOWS\system32\xcbphrhg.exe |05/11/2006 18:30:34 C:\WINDOWS\system32\xcrnlyax.exe |17/12/2006 18:22:58 C:\WINDOWS\system32\xlltauir.exe |25/11/2006 19:08:10 C:\WINDOWS\system32\xonmwfdy.exe |05/11/2006 19:08:46 C:\WINDOWS\system32\xpeisose.exe |30/11/2006 18:07:37 C:\WINDOWS\system32\xsvgmppc.exe |19/12/2006 21:07:58 C:\WINDOWS\system32\xwlplaqj.exe |11/11/2006 10:53:52 C:\WINDOWS\system32\ybthtjqe.exe |12/12/2006 22:53:02 C:\WINDOWS\system32\ybulhxpc.exe |23/11/2006 17:40:01 C:\WINDOWS\system32\yifydmhf.exe |05/11/2006 21:15:40 C:\WINDOWS\system32\ylafajue.exe |09/11/2006 17:38:38 C:\WINDOWS\system32\ylorutgu.exe |19/11/2006 15:30:27 C:\WINDOWS\system32\yltenhbs.exe |15/12/2006 18:30:22 C:\WINDOWS\system32\ynktjcxl.exe |22/12/2006 18:22:32 C:\WINDOWS\system32\ytqesnjf.exe |25/11/2006 21:41:43 C:\WINDOWS\system32\yyqrwrsj.exe |17/12/2006 13:39:29 C:\WINDOWS\system32\a3d.dll |28/10/2004 16:12:34 C:\WINDOWS\system32\AcSignExt.dll |05/03/2005 13:18:09 C:\WINDOWS\system32\AcSignExtRes.dll |07/03/2005 19:00:01 C:\WINDOWS\system32\AcSignIcon.dll |05/03/2005 13:18:12 C:\WINDOWS\system32\amstream.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ati2cqag.dll |28/10/2004 15:27:32 C:\WINDOWS\system32\ati2dvaa.dll |28/10/2004 15:27:32 C:\WINDOWS\system32\ati2dvag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ati2edxx.dll |29/09/2004 07:18:20 C:\WINDOWS\system32\ati2evxx.dll |29/09/2004 07:18:08 C:\WINDOWS\system32\ati3d1ag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ati3d2ag.dll |13/11/2003 21:10:54 C:\WINDOWS\system32\ati3duag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ATIDDC.DLL |29/09/2004 07:16:22 C:\WINDOWS\system32\ATIDEMGR.dll |29/09/2004 09:32:34 C:\WINDOWS\system32\atiiiexx.dll |29/09/2004 09:58:44 C:\WINDOWS\system32\atikvmag.dll |21/02/2006 19:11:02 C:\WINDOWS\system32\atioglx1.dll |21/02/2006 19:27:14 C:\WINDOWS\system32\atioglxx.dll |29/09/2004 07:44:00 C:\WINDOWS\system32\atipdlxx.dll |29/09/2004 07:18:50 C:\WINDOWS\system32\atitvo32.dll |29/09/2004 06:36:20 C:\WINDOWS\system32\ativcoxx.dll |09/11/2001 10:01:04 C:\WINDOWS\system32\ativtmxx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ativvaxx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\atmfd.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\atmlib.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\Audio3D.dll |28/10/2004 16:12:34 C:\WINDOWS\system32\axgvpryj.dll |22/12/2006 18:22:25 C:\WINDOWS\system32\clrvidcc.dll |02/01/2005 21:33:57 C:\WINDOWS\system32\clrviddc.dll |11/08/1998 15:18:52 C:\WINDOWS\system32\CmdLineExt.dll |27/03/2005 14:54:25 C:\WINDOWS\system32\CNCS232.DLL |20/11/2003 14:09:09 C:\WINDOWS\system32\cncs32.dll |27/12/2005 18:15:46 C:\WINDOWS\system32\compatui.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\comypanr.dll |17/12/2006 18:48:34 C:\WINDOWS\system32\cpdymfnb.dll |22/12/2006 17:33:47 C:\WINDOWS\system32\cvfginer.dll |20/12/2006 22:39:02 C:\WINDOWS\system32\cvybqyrm.dll |02/12/2006 15:27:15 C:\WINDOWS\system32\decdnet.dll |11/08/1998 15:18:44 C:\WINDOWS\system32\dgrpsetu.dll |01/01/2002 00:07:13 C:\WINDOWS\system32\dgsetup.dll |01/01/2002 00:07:13 C:\WINDOWS\system32\dhywgghv.dll |27/11/2006 20:35:17 C:\WINDOWS\system32\DivX.dll |26/10/2004 23:38:23 C:\WINDOWS\system32\divxdec_0407.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divxdec_040c.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divxdec_0411.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divx_xx07.dll |26/10/2004 23:38:17 C:\WINDOWS\system32\divx_xx0c.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divx_xx11.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\dmgrax2.dll |25/03/2005 20:32:31 C:\WINDOWS\system32\dpu10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpuGUI10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpus10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpv10.dll |26/10/2004 23:39:04 C:\WINDOWS\system32\efvnvkme.dll |21/12/2006 19:03:21 C:\WINDOWS\system32\elxjyalh.dll |16/11/2006 17:48:12 C:\WINDOWS\system32\encdec.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\encdnet.dll |02/01/2005 21:33:57 C:\WINDOWS\system32\EnumDev111.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\EqnClass.Dll |01/01/2002 00:07:12 C:\WINDOWS\system32\fxdcbwjf.dll |19/11/2006 10:11:23 C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58 C:\WINDOWS\system32\gtmbnrcp.dll |20/12/2006 18:34:42 C:\WINDOWS\system32\hptukyk.dll |16/11/2006 17:57:26 C:\WINDOWS\system32\hpvekfro.dll |15/12/2006 19:15:40 C:\WINDOWS\system32\hsfcisp2.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\hticons.dll |28/10/2004 15:48:03 C:\WINDOWS\system32\hypertrm.dll |28/10/2004 15:48:03 C:\WINDOWS\system32\iawlppsf.dll |18/12/2006 19:15:34 C:\WINDOWS\system32\iccvid.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ieencode.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\iehncmpu.dll |15/12/2006 18:30:07 C:\WINDOWS\system32\imagr5.dll |21/09/2000 17:02:28 C:\WINDOWS\system32\imagx5.dll |27/09/2000 16:15:06 C:\WINDOWS\system32\ImagXpr5.dll |21/09/2000 12:53:00 C:\WINDOWS\system32\inetda.dll |02/08/2001 04:11:25 C:\WINDOWS\system32\IpLib.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\ir32_32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ir41_qc.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir41_qcx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_32.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_qc.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_qcx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\isrdbg32.dll |28/10/2004 15:48:58 C:\WINDOWS\system32\jgaw400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgdw400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgmd400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgpl400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgsd400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgsh400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jhhlvqts.dll |18/12/2006 19:49:12 C:\WINDOWS\system32\jrharjaq.dll |20/12/2006 18:14:51 C:\WINDOWS\system32\KMVIDC32.DLL |30/11/2004 18:40:54 C:\WINDOWS\system32\kyfahway.dll |26/11/2006 11:40:41 C:\WINDOWS\system32\lvaoqfey.dll |27/11/2006 20:43:09 C:\WINDOWS\system32\mdmxsdk.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 18:47:06 C:\WINDOWS\system32\mrvdlg.dll |28/10/2004 16:17:56 C:\WINDOWS\system32\msdmo.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\msencode.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\msttxl16.dll |24/02/1998 23:21:00 C:\WINDOWS\system32\MSWAY.dll |26/12/2005 11:09:15 C:\WINDOWS\system32\msxwnet32.dll |16/05/2001 11:52:26 C:\WINDOWS\system32\mtxparhd.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\muaktpvk.dll |22/12/2006 17:02:55 C:\WINDOWS\system32 bexprft.dll |18/12/2006 19:44:01 C:\WINDOWS\system32 jimnfjf.dll |22/12/2006 17:37:05 C:\WINDOWS\system32 v4_disp.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\odgjcuus.dll |26/11/2006 13:28:32 C:\WINDOWS\system32\odtpfici.dll |22/12/2006 19:44:55 C:\WINDOWS\system32\Oemdspif.dll |29/09/2004 07:18:36 C:\WINDOWS\system32\oigkpais.dll |23/11/2006 17:39:55 C:\WINDOWS\system32\orebdeyb.dll |13/12/2006 21:46:36 C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16 C:\WINDOWS\system32\pdfcmnnt.dll |26/03/2006 10:49:45 C:\WINDOWS\system32\picn20.dll |21/09/2000 07:47:10 C:\WINDOWS\system32\pnc32301.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pnc32401.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pncrt.dll |11/08/1998 15:18:44 C:\WINDOWS\system32\pndx5016.dll |26/11/2004 21:09:27 C:\WINDOWS\system32\pndx5032.dll |26/11/2004 21:09:27 C:\WINDOWS\system32\pnen3230.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pneng101.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\PSIKey.dll |26/10/2004 23:38:24 C:\WINDOWS\system32\ptipbmf.dll |28/10/2004 16:18:41 C:\WINDOWS\system32\qedwipes.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\qt-mt331.dll |26/10/2004 23:39:05 C:\WINDOWS\system32\quqrbkl.dll |19/11/2006 10:13:15 C:\WINDOWS\system32\quxfwhbc.dll |18/12/2006 19:18:34 C:\WINDOWS\system32\RA3214_4.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a3228_8.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32clv1.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32dnet.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32rv10.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32sipr.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 arv1032.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 arv10en.dll |02/01/2005 21:33:58 C:\WINDOWS\system32 dnoxssp.dll |19/12/2006 17:44:15 C:\WINDOWS\system32\RGSS100J.dll |11/06/2005 15:48:26 C:\WINDOWS\system32 mevents.dll |02/01/2005 21:33:58 C:\WINDOWS\system32 mmerge2.dll |02/01/2005 21:33:58 C:\WINDOWS\system32 moc3260.dll |26/11/2004 21:09:32 C:\WINDOWS\system32 nqlfsvi.dll |18/11/2006 22:50:11 C:\WINDOWS\system32\Roboex32.dll |30/01/2005 14:44:37 C:\WINDOWS\system32\RTLCPAPI.dll |28/10/2004 16:12:34 C:\WINDOWS\system32 voqxscq.dll |19/12/2006 21:08:22 C:\WINDOWS\system32\s3gnb.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\sbe.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\SIntf16.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\SIntf32.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\SIntfNT.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\slbcsp.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slbiop.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slbrccsp.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slcoinst.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\slextspk.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\slgen.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\spnike.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\sprio600.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\sprio800.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\spxcoins.dll |01/01/2002 00:07:12 C:\WINDOWS\system32\swxpckm.dll |19/11/2006 10:13:15 C:\WINDOWS\system32 sd32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\TwnLib20.dll |26/06/2000 10:45:30 C:\WINDOWS\system32\uetvjhau.dll |06/12/2006 21:47:35 C:\WINDOWS\system32\unrar.dll |06/12/2004 20:06:06 C:\WINDOWS\system32\unzip32.dll |05/12/2004 22:08:08 C:\WINDOWS\system32\usrcntra.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrcoina.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrdpa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrdtea.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrlbva.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrv42a.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrv80a.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrvoica.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrvpa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\vboxb410.dll |13/06/2001 03:52:44 C:\WINDOWS\system32\vboxp410.dll |13/06/2001 03:52:45 C:\WINDOWS\system32\vboxt410.dll |13/06/2001 03:52:45 C:\WINDOWS\system32\vrjsqmcb.dll |27/11/2006 20:40:07 C:\WINDOWS\system32\vturs.dll |05/12/2006 17:40:17 C:\WINDOWS\system32\wbhelp2.dll |02/11/2004 22:03:21 C:\WINDOWS\system32\wbqmyces.dll |22/12/2006 19:20:40 C:\WINDOWS\system32\WG1v2Lib.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\wh2robo.dll |30/01/2005 14:44:37 C:\WINDOWS\system32\win87em.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\WmJoyFrc.dll |21/08/2006 14:02:54 C:\WINDOWS\system32\xmlparse.dll |08/12/2004 13:09:09 C:\WINDOWS\system32\xmltok.dll |08/12/2004 13:09:09 C:\WINDOWS\system32\ysglannk.dll |18/11/2006 23:15:34 C:\WINDOWS\system32\ZPORT4AS.dll |23/01/2006 20:11:05 Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\WINDOWS\system32 19.08.2004 15:09 6'144 csrss.exe 1 fichier(s) 6'144 octets 0 Rép(s) 32'448'032'768 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\WINDOWS\system32 25.03.2005 20:32 860'160 dmgr2.exe 1 fichier(s) 860'160 octets 0 Rép(s) 32'448'032'768 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\WINDOWS\Downloaded Program Files 11.12.2006 19:07 . 11.12.2006 19:07 .. 11.04.2006 16:10 135'168 asinst.dll 03.04.2006 10:00 537 asinst.inf 17.05.2006 13:32 231'072 avsniff.dll 17.05.2006 13:29 878 avsniff.inf 17.05.2006 13:32 198'304 avsniffdlgs.dll 17.05.2006 13:26 537'704 AXXPEE.dll 09.12.2005 17:08 749 cab.inf 17.05.2006 13:29 241 CabSA.inf 06.09.2006 00:00 2'504 catalog.dat 18.11.2006 12:20 CONFLICT.1 22.12.2006 18:18 CONFLICT.2 22.12.2006 18:18 CONFLICT.3 22.12.2006 18:18 CONFLICT.4 22.12.2006 18:18 CONFLICT.5 22.12.2006 18:18 CONFLICT.6 28.10.2004 15:49 65 desktop.ini 06.09.2006 00:00 6'899 ecbootil.vxd 17.05.2006 13:26 42'112 ecmldr32.dll 06.09.2006 00:00 272'040 ecmsvr32.dll 08.09.2004 22:38 1'271 erma.inf 14.02.2003 09:32 283'296 IDrop.ocx 14.02.2003 09:34 114'848 IDropENU.dll 13.03.2003 09:58 114'600 IDropFRA.dll 10.11.2005 13:05 876 jinstall-1_5_0_06.inf 29.11.2006 14:00 367 LegitCheckControl.inf 17.05.2006 13:28 6'850 navapi.vxd 17.05.2006 13:28 201'896 navapi32.dll 06.09.2006 00:00 124'584 naveng32.dll 06.09.2006 00:00 882'344 navex32a.dll 09.12.2005 17:08 241'664 ocx_play.ocx 09.12.2005 14:47 24'576 playershim.dll 09.10.2003 10:32 144 QTPlugin.inf 17.05.2006 13:32 161'480 rufsi.dll 06.09.2006 00:00 97'552 scrauth.dat 22.06.2006 10:41 5'032 swflash.inf 06.09.2006 00:00 14 symaveng.cat 06.09.2006 00:00 901 symaveng.inf 06.09.2006 00:00 48'797 tcdefs.dat 06.09.2006 00:00 966'264 tcscan7.dat 06.09.2006 00:00 315'136 tcscan8.dat 06.09.2006 00:00 659'400 tcscan9.dat 06.09.2006 00:00 453 tinf.dat 06.09.2006 00:00 148 tinfidx.dat 06.09.2006 00:00 1'957 tinfl.dat 06.09.2006 00:00 58'587 tscan1.dat 06.09.2006 00:00 3'027 tscan1hd.dat 06.09.2006 00:00 5'116 v.grd 06.09.2006 00:00 2'261 v.sig 06.09.2006 00:00 106'244 virscan.inf 06.09.2006 00:00 966'811 virscan1.dat 06.09.2006 00:00 569'712 virscan2.dat 06.09.2006 00:00 146'612 virscan3.dat 06.09.2006 00:00 320'186 virscan4.dat 06.09.2006 00:00 2'700'020 virscan5.dat 06.09.2006 00:00 389'301 virscan6.dat 06.09.2006 00:00 4'468'258 virscan7.dat 06.09.2006 00:00 1'593'724 virscan8.dat 06.09.2006 00:00 3'622'432 virscan9.dat 06.09.2006 00:00 32 virscant.dat 08.09.2006 21:30 2'072 vscanmsx.dat 06.09.2006 00:00 224 zdone.dat 55 fichier(s) 20'637'342 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1 18.11.2006 12:20 . 18.11.2006 12:20 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.4 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.5 22.12.2006 18:18 . 22.12.2006 18:18 .. 07.09.2006 12:15 227 UDC6V_0001_D19M0709NetInstaller.inf 1 fichier(s) 227 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.6 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Total des fichiers listés : 56 fichier(s) 20'637'569 octets 20 Rép(s) 32'448'028'672 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Liste des programmes installes Ad-Aware SE Personal Adobe Flash Player 9 ActiveX Adobe Photoshop 6.0 Adobe Reader 7.0.8 - Français Adobe SVG Viewer adsl TV Apple Software Update Archiveur WinRAR AsusUpdate ATI - Utilitaire de désinstallation du logiciel ATI Control Panel ATI Display Driver Audacity 1.2.4 AutoCAD 2006 - Français Autodesk DWF Viewer AutoUpdate avast! Antivirus AVG Anti-Spyware 7.5 BitTorrent 4.0.1 CCleaner (remove only) Command & Conquer Red Alert 2 DirectX for Managed Code Update (December 2004) DivX Player DivX Pro Trial Download Accelerator Plus EA SPORTS online 2006 Easy TM 2.4 eMule FileZilla (remove only) Freelancer GeTax2005 Google Earth Google Toolbar for Internet Explorer Highway Pursuit v1.1 HijackThis 1.99.1 IGNMap 0.8.1 iTunes J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 9 K700i USB-Handset Manager Language pack for Ad-Aware SE Lecteur Windows Media 10 Logitech Desktop Messenger Logitech Gaming Software Logitech SetPoint LX Systems Download Manager Macromedia Shockwave Player MediaLife MediaTickets by OIN Messenger Plus! 3 & Sponsor Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Language Pack - FRA Microsoft Game Studios Common Redistributables Pack 1 Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (French) 2007 (Beta) Microsoft Office Excel MUI (French) 2007 (Beta) Microsoft Office InfoPath MUI (French) 2007 (Beta) Microsoft Office Outlook MUI (French) 2007 (Beta) Microsoft Office PowerPoint MUI (French) 2007 (Beta) Microsoft Office Professional 2007 (Beta) Microsoft Office Professional Plus 2007 (Beta) Microsoft Office Proof (Arabic) 2007 (Beta) Microsoft Office Proof (Dutch) 2007 (Beta) Microsoft Office Proof (English) 2007 (Beta) Microsoft Office Proof (French) 2007 (Beta) Microsoft Office Proof (German) 2007 (Beta) Microsoft Office Proof (Spanish) 2007 (Beta) Microsoft Office Publisher MUI (French) 2007 (Beta) Microsoft Office Shared MUI (French) 2007 (Beta) Microsoft Office Word MUI (French) 2007 (Beta) Microsoft XML Parser Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA MSXML 4.0 SP2 (KB927978) MSXML4 Parser Nero - Burning Rom NHL06 Package de base Microsoft de service de chiffrement pour cartes à puce Panda ActiveScan PDFCreator Plasma Pong v1.2 PowerDVD QuickTime RealPlayer Realtek AC'97 Audio Rise Of Legends Rise Of Legends Rise of Nations Security Update for Microsoft .NET Framework 2.0 (KB917283) Security Update pour Microsoft .NET Framework 2.0 (KB922770) Sony Ericsson Capability Manager Sony Ericsson Mobile Phone Monitor Spybot - Search & Destroy 1.4 Starcraft Steganos Internet Anonym 7.1.6 TrackMania Nations ESWC 0.1.7.5 Watchtower Library 2005 - Édition française WebFldrs XP WG111v2 Configuration Utility Windows Defender Windows Defender Signatures Windows Genuine Advantage Notifications (KB905474) Windows Live Messenger Windows Live Sign-in Assistant Windows Media Connect Windows Media Format Runtime Windows XP Service Pack 2 Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files 22.12.2006 17:34 . 22.12.2006 17:34 .. 11.09.2005 12:49 A4DeskMag2 24.11.2005 18:37 Admiresoft 26.03.2006 11:33 Adobe 13.11.2006 18:27 adslTV 17.11.2005 22:30 Adverts 01.01.2002 14:00 Ahead 06.02.2006 21:55 Alwil Software 07.06.2005 21:58 America's Army 05.11.2006 13:44 AnswerWorks 4.0 06.11.2006 21:17 Apple Software Update 25.03.2005 19:06 Ashampoo 28.10.2004 15:45 ASUS 28.10.2004 16:20 ATI Technologies 02.08.2006 19:03 Audacity 05.11.2006 13:49 AutoCAD 2006 04.11.2006 21:25 Autodesk 24.11.2005 18:36 AV MP3 Player-Morpher 28.10.2004 16:12 AvRack 19.04.2005 17:36 BitTorrent 27.03.2005 20:03 BoontyGames 18.11.2006 23:03 CCleaner 12.01.2006 18:02 Clash N Slash 14.01.2006 15:33 Common Files 07.02.2006 21:16 Comodo 28.10.2004 15:48 ComPlus Applications 29.10.2006 15:16 Corel(R) Painter(TM) IX.5 TBYB FR 21.03.2005 19:10 Creative 01.01.2002 13:57 CyberLink 08.09.2006 20:18 DAP 22.11.2004 21:21 directx 20.11.2004 10:31 DivX 17.04.2006 13:28 DOSBox-0.65 15.04.2006 11:42 D-Tools 18.11.2006 12:12 Easy TM 02.01.2002 16:26 eMule 21.06.2005 17:15 eoRezo 19.11.2006 13:26 Fichiers communs 03.04.2006 18:42 FileZilla 27.06.2005 21:22 FlashFXP 02.11.2006 22:05 F-Secure 11.03.2005 17:33 Game_Maker6 26.03.2006 11:34 GeTax2005 31.10.2006 21:26 Google 22.12.2006 17:10 Grisoft 30.04.2005 19:00 GSC Game World 12.09.2005 20:08 IDM Computer Solutions 18.12.2006 22:13 IGN 24.09.2006 12:39 IKEA HomePlanner 17.04.2005 13:31 Illustrate 28.10.2004 16:03 Intel 11.01.2006 18:47 InterActual 17.12.2006 18:21 Internet Explorer 06.11.2006 21:21 iPod 06.11.2006 21:22 iTunes 13.11.2006 18:41 Java 08.12.2004 12:57 K700i USB-Handset Manager 04.11.2006 16:24 Lavasoft 27.12.2005 12:02 Lecteur CANALPLAY 17.06.2006 13:00 LimeWire 21.08.2006 14:02 Logitech 15.05.2005 16:17 LucasFan Games 25.03.2005 20:32 LX Download Manager 23.01.2006 20:24 Messenger 24.09.2006 12:33 Messenger Plus! 3 28.10.2004 15:50 microsoft frontpage 23.05.2006 16:36 Microsoft Games 05.11.2006 13:44 Microsoft Office 02.07.2006 20:05 Microsoft Visual Studio 02.07.2006 20:04 Microsoft Works 02.07.2006 20:04 Microsoft.NET 16.12.2006 16:54 Movie Maker 09.01.2006 17:35 Mozilla Firefox 02.07.2006 20:05 MSBuild 28.10.2004 15:48 MSN 28.10.2004 15:48 MSN Gaming Zone 02.11.2006 22:24 MSN Messenger 17.11.2006 19:02 MSXML 4.0 12.09.2005 17:19 MUSICMATCH 19.04.2005 20:10 NASA 23.10.2006 19:29 NETGEAR 28.10.2004 15:26 NetMeeting 07.09.2006 14:40 Notepad++ 04.01.2002 18:33 OfficeUpdate11 11.12.2006 19:03 Opera 16.12.2006 16:54 Outlook Express 26.03.2006 10:50 PDFCreator 16.05.2005 17:39 PeerGuardian pr14 09.03.2005 18:13 Plustech Inc 27.03.2005 13:48 PopCap Games 06.11.2006 21:20 QuickTime 26.11.2004 21:09 Real 28.10.2004 16:12 Realtek Sound Manager 21.08.2006 14:07 ReflexiveArcade 18.02.2005 18:07 ScreenSaver 23.01.2006 20:26 Secure Surfing Engine 28.10.2004 15:48 Services en ligne 28.09.2006 10:59 Sony Ericsson 01.05.2006 16:03 Spybot - Search & Destroy 04.11.2006 20:08 Spybot - Search & Destroy2 23.01.2006 20:26 Steganos Internet Anonym 7 27.12.2005 12:03 StreetFighter Flash 17.06.2006 12:53 TheTurtle 07.02.2006 18:22 Trustix 31.07.2005 12:04 Ubi Soft 08.12.2004 13:09 Ubisoft 01.06.2005 22:14 Ulead Systems 17.06.2006 12:59 Visicom Media 17.06.2005 19:32 VoipBuster.com 22.12.2006 18:22 VSAdd-in 15.04.2006 12:11 VVSN 20.02.2006 19:44 Watchtower 09.03.2006 22:47 Webteh 18.11.2006 22:51 Windows Defender 05.11.2004 17:41 Windows Media Components 04.09.2006 19:43 Windows Media Connect 2 16.12.2006 16:54 Windows Media Player 28.10.2004 15:26 Windows NT 27.08.2005 19:55 WinHex 23.01.2006 20:26 WinRAR 28.10.2004 15:50 xerox 19.11.2006 13:26 ?ssembly 04.11.2006 12:26 ??stem 0 fichier(s) 0 octets 124 Rép(s) 32'447'733'760 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\fichiers communs 19.11.2006 13:26 . 19.11.2006 13:26 .. 26.03.2006 11:33 Adobe 05.11.2006 13:50 Autodesk Shared 05.08.2006 10:52 AVSMedia 05.11.2006 13:44 DESIGNER 21.11.2004 15:01 InstallShield 05.09.2006 20:30 Java 21.08.2006 14:02 Logitech 03.11.2004 19:17 Macrovision Shared 05.11.2006 13:44 Microsoft Shared 28.10.2004 15:48 MSSoap 01.01.2002 00:07 ODBC 24.09.2006 12:54 Panda Software 26.11.2004 21:09 Real 28.10.2004 15:48 Services 01.01.2002 00:07 SpeechEngines 20.06.2006 20:39 Synacast 16.12.2006 14:55 System 28.09.2006 10:59 Teleca Shared 26.11.2004 21:09 xing shared 22.12.2006 18:18 {84B2DB13-0C7E-1036-0924-040307090029} 0 fichier(s) 0 octets 22 Rép(s) 32'447'741'952 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 02.07.2006 20:05 . 02.07.2006 20:05 .. 04.01.2002 18:27 1033 02.07.2006 19:59 1036 25.04.2006 20:33 967'952 MSONSEXT.DLL 02.05.2006 18:37 40'208 MSOSV.DLL 03.06.1999 13:09 122'937 MSOWS409.DLL 07.03.2001 08:00 127'033 MSOWS40c.DLL 11.07.2003 02:25 80'448 PKMWS.DLL 5 fichier(s) 1'338'578 octets 4 Rép(s) 32'447'741'952 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\common files 14.01.2006 15:33 . 14.01.2006 15:33 .. 21.08.2006 17:33 EasyInfo 20.02.2005 12:17 Stardock 0 fichier(s) 0 octets 4 Rép(s) 32'447'741'952 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\ 11.11.2001 00:00 68'096 diff.exe 27.08.2006 14:10 103'424 grep.exe 31.10.2005 16:56 700'416 StubInstaller.exe 24.05.2001 11:59 162'304 UNWISE.EXE 4 fichier(s) 1'034'240 octets 0 Rép(s) 32'447'737'856 octets libres c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.0.2.16\iTunesSetupAdmin.exe c:\Documents and Settings\Wxp\.limewire\.NetworkShare\LimeWireWin4.10.5.exe c:\Documents and Settings\Wxp\.limewire\.NetworkShare\Incomplete\T-2840440-LimeWireWin4.10.9.exe c:\Documents and Settings\Wxp\Bureau\avgas-setup-7.5.0.50.exe c:\Documents and Settings\Wxp\Bureau\blbeta.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe c:\Documents and Settings\Wxp\Bureau\VundoFix.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\diff.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\Fport.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\grep.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LFiles.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\pslist.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\streams.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\swreg.exe c:\Documents and Settings\Wxp\Bureau ewbie\crackme1.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega11.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega22.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega4.exe c:\Documents and Settings\Wxp\Bureau ewbie\HexDecCharEditor\HexDecCharEditor.exe c:\Documents and Settings\Wxp\Bureau ewbie\Nouveau dossier\ocamlq-public[1].exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\dumphive.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\GenericRenosFix.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Process.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix estart.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SmiUpdate.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SrchSTS.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swreg.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swsc.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swxcacls.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\unzip.exe c:\Documents and Settings\Wxp\Bureau\Steganos Updates\sia7int.exe c:\Documents and Settings\Wxp\Local Settings\Temp\AutoRun.exe c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\LOAD.EXE c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\SETUP.EXE c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{05D79D39-D5A6-4866-9582-579B32CEA05A}\mpengine.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll c:\Documents and Settings\Wxp\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll Et celui d'HijackThis : Logfile of HijackThis v1.99.1 Scan saved at 11:16:30, on 23.12.2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\UAService7.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\SYSTEM32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\PROGRA~1\DAP\DAP.EXE C:\Program Files\Messenger Plus! 3\MsgPlus.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Logitech\Profiler\lwemon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe C:\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1<mpl=default<mplcache=2&emr=1&osid=1 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file) O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\PROGRA~1\DAP\dapbho.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {0964344D-C233-DAF1-2ADC-08C2A8D60810} - C:\WINDOWS\system32\hptukyk.dll O2 - BHO: (no name) - {2527DC3F-C7A0-CF37-33EA-0525C1600A34} - C:\WINDOWS\system32\quqrbkl.dll O2 - BHO: (no name) - {36068946-CD51-1AC7-C4AD-044557583146} - C:\WINDOWS\system32\lctsupj.dll (file missing) O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\hpvekfro.dll O2 - BHO: (no name) - {42E53C82-E11D-E01B-A428-084851DB6947} - C:\WINDOWS\system32\yzivngl.dll (file missing) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll O2 - BHO: (no name) - {61E91E9C-BF33-6A6A-7BFC-00B25F19A7AE} - C:\WINDOWS\system32\urwzhx.dll (file missing) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - C:\WINDOWS\system32\vtsqq.dll (file missing) O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" -osboot O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader eader_sl.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ? O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1 O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program

Utilisateur anonyme · Answer

Bonjour

Voilà à quoi ressemble Vundo
http://www.secuser.com/alertes/2005/vundo-virtumonde.htm


Ces rapports montrent de très nombreuses infections.

Une partie de la procédure se déroulera sans avoir accès à internet, prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant cette désinfection.
Les  manipulations sont à faire sans interruption et dans l'ordre.
Si tu ne comprends pas quelque chose, demande des explications avant de commencer

1 Télécharge eScan Antivirus Toolkit 
http://www.spywareinfo.dk/download/mwav.exe
Sauvegarde-le sur ton Bureau.
Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué ci-après

Voici comment mettre l'outil à jour :

1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau; dézippe les fichiers dans le nouveau dossier suggéré (Kaspersky) situé à la racine du lecteur C:\ (C:\Kaspersky.). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit").

2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky; ensuite, double-clique sur le fichier kavupd.exe. Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes.

3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue"; tape sur une clé pour continuer.

Ne pas lancer le scan tout de suite !


2 Télécharge ceci
http://www.outerinfo.com/OiUninstaller.exe
Sauvegarde le sur le Bureau.
Regarde si tu as ces programmes dans Ajout/suppression de programmes. Désinstalle les si présent.

Oin 
Purityscan by Oin 
Snowballwars by Oin 
Yazzle by Oin 
ou d'autres similaires avec Oin ou Outerinfo dedans
Cowabanga
MediaTickets 
Tizzletalk 
Zolero 

Lance OiUninstaller.exe
Entre le code qui apparait.
Clique sur Uninstall.
Clique sur OK ensuite.


3 Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarre l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows. 
En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuye sur Entrée.


4 Relance un scan HijackThis et coche les lignes ci-dessous :

R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file) 
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\PROGRA~1\DAP\dapbho.dll 
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll 
O2 - BHO: (no name) - {0964344D-C233-DAF1-2ADC-08C2A8D60810} - C:\WINDOWS\system32\hptukyk.dll 
O2 - BHO: (no name) - {2527DC3F-C7A0-CF37-33EA-0525C1600A34} - C:\WINDOWS\system32\quqrbkl.dll 
O2 - BHO: (no name) - {36068946-CD51-1AC7-C4AD-044557583146} - C:\WINDOWS\system32\lctsupj.dll (file missing) 
O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\hpvekfro.dll 
O2 - BHO: (no name) - {42E53C82-E11D-E01B-A428-084851DB6947} - C:\WINDOWS\system32\yzivngl.dll (file missing)  
O2 - BHO: (no name) - {61E91E9C-BF33-6A6A-7BFC-00B25F19A7AE} - C:\WINDOWS\system32\urwzhx.dll (file missing) 
O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - C:\WINDOWS\system32\vtsqq.dll (file missing) 
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll 
O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot 
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm 
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe 
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe 
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm 
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm 
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll 
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE 
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL 
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com 
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab 
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab 
O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg 
O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll 
O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwg0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 

Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »


5 Désinstalle ces applications (si tu les trouves) dans Ajout-Suppression de programmes :

VSAdd-in 
VVSN 
?ssembly 
??stem 


6 Supprime les fichiers/dossiers incriminés (s'ils existent encore) :

C:\Program Files\VSAdd-in 
C:\Program Files\VVSN 
C:\Program Files\?ssembly 
C:\Program Files\??stem 


7 Lance le nettoyage avec CCleaner


8 Lance eScan
1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky

2.) Double-clique sur mwavscan.com; l'interface d'eScan va apparaître à l'écran.

3.) Il est très important de bien cocher ces boîtes sous Scan Option
Memory, Registry, Startup Folders, System Folders, Services.

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive  (bouton rond) juste dessous; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\.

5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files.

6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite !

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum.

Ferme le programme.


9 Redémarre normalement


10 Télécharge DrWeb
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

La version est automatiquement à jour.
Installe le.
Lance le.
Une analyse des processus se lance.
Ensuite, choisis le lecteur à scanner et lance l'analyse.
Sauvegarde le rapport.

Poste ces trois rapports :
- un nouveau log HijackThis.
- celui d'escan
- celui de DrWeb

Attention, il faudra peut être les poster en deux messages si c'est trop long (ton dernier HijackThis était tronqué).

legras · Answer

Alors j'ai télécharger le premier fichier Escan mais quand je veux prendre le second :

http://www.outerinfo.com/OiUninstaller.exe 

il me met que c'est interdis pour ma sécurité. Et aussi mon mode sans-échec ne fonctionne pas, il plante après avoir chargé et me laisse avec "mode sans échec dans les coins".

Donc je ne sais pas si c'est parceque je ne suis pas assez patien (il lui faut déjà 5min) pour se lancer, ou si mon ordi bug pour le mode sans échec.

Utilisateur anonyme · Answer

Qui te met que c'est interdit ?

Si c'est ton antivirus, désactive le temporairement le temps du téléchargement.

legras · Answer

J'ai cette fenêtre qui apparais même je stop avast :

http://img293.imageshack.us/img293/3884/messagederreur2ii5.jpg

Et pour le coups du mode sans échec, c'est normale ou y faut faire quelque chose d'autre ?

Utilisateur anonyme · Answer

Bonjour

Pour pouvoir télécharger ce fichier, il faut configurer le niveau de sécurité IE sur Moyen.

Si tu n'y arrives toujours pas, dans l'étape 1 tu fais uniquement la désinstallation des programmes trouvés.
Et tu continues la manip.

legras · Answer

Bon alors je vais poster sur 3 réponse 1 rapport par réponse :

Rapport d'Hijack :

Logfile of HijackThis v1.99.1
Scan saved at 16:18:45, on 26.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - (no file)
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

legras · Answer

Rapport d'eScan :

File C:\WINDOWS\system32\agfherdb.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aolelmeq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aqusnwid.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\audimhij.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aupgnxlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bbjudflx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bddoirhx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bifvcaqc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cgtyqlrr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cjgiktsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ckxhgpdf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\comypanr.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\crdwqqep.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cvybqyrm.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ddvvohgd.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\difwtfvm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dikmwqyc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dqacyhwy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dunxmasq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\duoollxq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\edeeccww.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\elsdjceh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\elxjyalh.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\eoffqsqk.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fopwmgdy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ftboxnxl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fvsidooy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fxdcbwjf.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\gardhtfc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gobrxtwv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gvopwqdu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hgcddihu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hjqqbfii.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hxdfpeav.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\iawlppsf.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ikicnabt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\iuviiqct.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\jhhlvqts.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\jkrmhoip.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\krplutvf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\kvrmyshi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\kyfahway.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ldguntat.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\lvaoqfey.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\lvvoqgqi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mcldsfkv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mgxpvprt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\musqllhf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mydcfiom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32
bexprft.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32
fqwphvg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32
loyoorh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32
nddeawh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\odgjcuus.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ogpsrlax.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ohpkqvys.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\oigkpais.dll infected by "Trojan.Win32.BHO.o" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\orebdeyb.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\pfodbooc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pgshdnsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\phlkcrom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pmqbsdfq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\qktboyra.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\qobxyqqr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\quwjqcea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32dnoxssp.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32nqlfsvi.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\sgbpxmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sqogavnb.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\stxubqlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sufgwnyi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	duxgeqv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	ioxqmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	nhgecfn.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	qdncpme.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	xhihndo.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ubhieikw.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\uetvjhau.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\unutsgdr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vanlhmqa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\veeqhdea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vjbmfnse.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vltjjnrm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vrjsqmcb.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\vsekpwgr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vynxttnq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\waodljik.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\whudvlfi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\wticjrpl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xcbphrhg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xlltauir.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xonmwfdy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xwlplaqj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ybulhxpc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\yifydmhf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ylafajue.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ylorutgu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ysglannk.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ytqesnjf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP684\A0179308.exe infected by "Trojan-Proxy.Win32.Horst.av" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP703\A0190034.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203977.dll tagged as not-a-virus:AdWare.Win32.Softomate.u. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203978.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.ev. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203979.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.ev. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203981.dll infected by "not-virus:Hoax.Win32.Renos.fw" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0204022.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.fj. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204289.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204290.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204291.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204292.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204293.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204294.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204295.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204296.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204297.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204298.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204299.dll infected by "Trojan.Win32.BHO.o" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204300.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204301.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204302.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204303.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204304.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204305.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\VundoFix Backups\vtsqq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.fj. No Action Taken.
File C:\WINDOWS\system32\agfherdb.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aolelmeq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aqusnwid.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\audimhij.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aupgnxlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bbjudflx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bddoirhx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bifvcaqc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cgtyqlrr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cjgiktsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ckxhgpdf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\crdwqqep.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ddvvohgd.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\difwtfvm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dikmwqyc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dqacyhwy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dunxmasq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\duoollxq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\edeeccww.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\elsdjceh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\eoffqsqk.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fopwmgdy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ftboxnxl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fvsidooy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gardhtfc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gobrxtwv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gvopwqdu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hgcddihu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hjqqbfii.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hxdfpeav.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ikicnabt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\iuviiqct.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\jkrmhoip.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\krplutvf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\kvrmyshi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ldguntat.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\lvvoqgqi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mcldsfkv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mgxpvprt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\musqllhf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mydcfiom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32
fqwphvg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32
loyoorh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32
nddeawh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ogpsrlax.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ohpkqvys.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pfodbooc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pgshdnsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\phlkcrom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pmqbsdfq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\qktboyra.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\qobxyqqr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\quwjqcea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sgbpxmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sqogavnb.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\stxubqlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sufgwnyi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	duxgeqv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	ioxqmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	nhgecfn.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	qdncpme.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32	xhihndo.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ubhieikw.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\unutsgdr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vanlhmqa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\veeqhdea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vjbmfnse.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vltjjnrm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vsekpwgr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vynxttnq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\waodljik.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\whudvlfi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\wticjrpl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xcbphrhg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xlltauir.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xonmwfdy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xwlplaqj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ybulhxpc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\yifydmhf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ylafajue.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ylorutgu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ytqesnjf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.

legras · Answer

Et enfin celui du DrWeb :

Fport.exeC:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelpProgram.FPort.20
pslist.exeC:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelpProgram.PsList.126
Process.exeC:\Documents and Settings\Wxp\Bureau\SmitfraudFixTool.Prockill
restart.exeC:\Documents and Settings\Wxp\Bureau\SmitfraudFixTool.ShutDown.11
backup-20061226-111705-126.dllC:\HijackThis\backupsTrojan.DownLoader.based
backup-20061226-111705-436.dllC:\HijackThis\backupsTrojan.DownLoader.based
A0190033.exeC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP703Tool.Prockill
A0190035.exeC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP703Tool.ShutDown.11
A0203977.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Adware.Softomate
A0203978.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.Virtumod
A0203979.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.Virtumod
A0203980.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.Virtumod
A0204009.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.DownLoader.based
A0204022.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.Virtumod
A0204119.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP740Trojan.Juan
A0204120.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP740Adware.TopSearch
A0204121.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP740Trojan.Juan
A0204282.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742Trojan.DownLoader.based
A0204283.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742Trojan.DownLoader.based
A0204325.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742Trojan.DownLoader.based
A0204326.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742Trojan.DownLoader.based
urwzhx.dll.badC:\VundoFix BackupsTrojan.DownLoader.based
vtsqq.dll.badC:\VundoFix BackupsTrojan.Virtumod
agfherdb.exeC:\WINDOWS\system32Adware.SearchColours
amwskrut.exeC:\WINDOWS\system32Adware.TopSearch
aolelmeq.exeC:\WINDOWS\system32Adware.SearchColours
aqusnwid.exeC:\WINDOWS\system32Adware.SearchColours
astpbqig.exeC:\WINDOWS\system32Adware.TopSearch
audimhij.exeC:\WINDOWS\system32Adware.SearchColours
aupgnxlj.exeC:\WINDOWS\system32Adware.SearchColours
bbjudflx.exeC:\WINDOWS\system32Adware.SearchColours
bddoirhx.exeC:\WINDOWS\system32Adware.SearchColours
bifvcaqc.exeC:\WINDOWS\system32Adware.SearchColours
bldhynhq.exeC:\WINDOWS\system32Adware.TopSearch
bnyvvhbm.exeC:\WINDOWS\system32Adware.TopSearch
cdjwyfix.exeC:\WINDOWS\system32Adware.TopSearch
cfvbcrlo.exeC:\WINDOWS\system32Adware.TopSearch
cgfvpsjm.exeC:\WINDOWS\system32Adware.TopSearch
cgtyqlrr.exeC:\WINDOWS\system32Adware.SearchColours
cjgiktsa.exeC:\WINDOWS\system32Adware.SearchColours
ckxhgpdf.exeC:\WINDOWS\system32Adware.SearchColours
crdwqqep.exeC:\WINDOWS\system32Adware.SearchColours
ddvvohgd.exeC:\WINDOWS\system32Adware.SearchColours
dhywgghv.dllC:\WINDOWS\system32Trojan.Juan
difwtfvm.exeC:\WINDOWS\system32Adware.SearchColours
dikmwqyc.exeC:\WINDOWS\system32Adware.SearchColours
dowllovy.exeC:\WINDOWS\system32Adware.TopSearch
dqacyhwy.exeC:\WINDOWS\system32Adware.SearchColours
dqxktplr.exeC:\WINDOWS\system32Adware.TopSearch
dtsijbas.exeC:\WINDOWS\system32Adware.TopSearch
duajsngx.exeC:\WINDOWS\system32Adware.TopSearch
dunxmasq.exeC:\WINDOWS\system32Adware.SearchColours
duoollxq.exeC:\WINDOWS\system32Adware.SearchColours
dwarqyok.exeC:\WINDOWS\system32Adware.TopSearch
ealavluy.exeC:\WINDOWS\system32Adware.TopSearch
edeeccww.exeC:\WINDOWS\system32Adware.SearchColours
elsdjceh.exeC:\WINDOWS\system32Adware.SearchColours
eoffqsqk.exeC:\WINDOWS\system32Adware.SearchColours
exrkvkgu.exeC:\WINDOWS\system32Adware.TopSearch
fopwmgdy.exeC:\WINDOWS\system32Adware.SearchColours
fskmtsbm.exeC:\WINDOWS\system32Adware.TopSearch
ftboxnxl.exeC:\WINDOWS\system32Adware.SearchColours
fvsidooy.exeC:\WINDOWS\system32Adware.SearchColours
gardhtfc.exeC:\WINDOWS\system32Adware.SearchColours
gktfxipw.exeC:\WINDOWS\system32Adware.TopSearch
gncopicl.exeC:\WINDOWS\system32Adware.TopSearch
gobrxtwv.exeC:\WINDOWS\system32Adware.SearchColours
guxarogi.exeC:\WINDOWS\system32Adware.TopSearch
gvopwqdu.exeC:\WINDOWS\system32Adware.SearchColours
gyjqeywt.exeC:\WINDOWS\system32Adware.TopSearch
hgcddihu.exeC:\WINDOWS\system32Adware.SearchColours
hjqqbfii.exeC:\WINDOWS\system32Adware.SearchColours
hsrjerlt.exeC:\WINDOWS\system32Adware.TopSearch
hxdfpeav.exeC:\WINDOWS\system32Adware.SearchColours
ikicnabt.exeC:\WINDOWS\system32Adware.SearchColours
imonihvr.exeC:\WINDOWS\system32Adware.TopSearch
itdgccxx.exeC:\WINDOWS\system32Adware.TopSearch
iuviiqct.exeC:\WINDOWS\system32Adware.SearchColours
jkrmhoip.exeC:\WINDOWS\system32Adware.SearchColours
katadsql.exeC:\WINDOWS\system32Adware.TopSearch
krplutvf.exeC:\WINDOWS\system32Adware.SearchColours
ksmnegtd.exeC:\WINDOWS\system32Adware.TopSearch
kunweeey.exeC:\WINDOWS\system32Adware.TopSearch
kvrmyshi.exeC:\WINDOWS\system32Adware.SearchColours
ldguntat.exeC:\WINDOWS\system32Adware.SearchColours
lvvoqgqi.exeC:\WINDOWS\system32Adware.SearchColours
mcldsfkv.exeC:\WINDOWS\system32Adware.SearchColours
mgxpvprt.exeC:\WINDOWS\system32Adware.SearchColours
mjwgqnkh.exeC:\WINDOWS\system32Adware.TopSearch
musqllhf.exeC:\WINDOWS\system32Adware.SearchColours
mvtnxnrp.exeC:\WINDOWS\system32Adware.TopSearch
mydcfiom.exeC:\WINDOWS\system32Adware.SearchColours
mykecmyy.exeC:\WINDOWS\system32Adware.TopSearch
ndjhporp.exeC:\WINDOWS\system32Adware.TopSearch
nfqwphvg.exeC:\WINDOWS\system32Adware.SearchColours
nhsraulq.exeC:\WINDOWS\system32Adware.TopSearch
nloyoorh.exeC:\WINDOWS\system32Adware.SearchColours
nnddeawh.exeC:\WINDOWS\system32Adware.SearchColours
ntfwbkns.exeC:\WINDOWS\system32Adware.TopSearch
nwkrfcck.exeC:\WINDOWS\system32Adware.TopSearch
odabjrlj.exeC:\WINDOWS\system32Adware.TopSearch
ogpsrlax.exeC:\WINDOWS\system32Adware.SearchColours
ohnjbmtx.exeC:\WINDOWS\system32Adware.TopSearch
ohpkqvys.exeC:\WINDOWS\system32Adware.SearchColours
oprsgstw.exeC:\WINDOWS\system32Adware.TopSearch
otfoegrk.exeC:\WINDOWS\system32Adware.TopSearch
owyllmmu.exeC:\WINDOWS\system32Adware.TopSearch
pfodbooc.exeC:\WINDOWS\system32Adware.SearchColours
pgshdnsa.exeC:\WINDOWS\system32Adware.SearchColours
phlkcrom.exeC:\WINDOWS\system32Adware.SearchColours
pmqbsdfq.exeC:\WINDOWS\system32Adware.SearchColours
qktboyra.exeC:\WINDOWS\system32Adware.SearchColours
qnstnlpd.exeC:\WINDOWS\system32Adware.TopSearch
qobxyqqr.exeC:\WINDOWS\system32Adware.SearchColours
quwjqcea.exeC:\WINDOWS\system32Adware.SearchColours
rbneyqpm.exeC:\WINDOWS\system32Adware.TopSearch
rriktdeh.exeC:\WINDOWS\system32Adware.TopSearch
sgbpxmer.exeC:\WINDOWS\system32Adware.SearchColours
sqogavnb.exeC:\WINDOWS\system32Adware.SearchColours
stuctgge.exeC:\WINDOWS\system32Adware.TopSearch
stxubqlj.exeC:\WINDOWS\system32Adware.SearchColours
sufgwnyi.exeC:\WINDOWS\system32Adware.SearchColours
svyywssj.exeC:\WINDOWS\system32Adware.TopSearch
tdbxowgv.exeC:\WINDOWS\system32Adware.TopSearch
tduxgeqv.exeC:\WINDOWS\system32Adware.SearchColours
tioxqmer.exeC:\WINDOWS\system32Adware.SearchColours
tnhgecfn.exeC:\WINDOWS\system32Adware.SearchColours
tqdncpme.exeC:\WINDOWS\system32Adware.SearchColours
txhihndo.exeC:\WINDOWS\system32Adware.SearchColours
ubhieikw.exeC:\WINDOWS\system32Adware.SearchColours
uglxpxxn.exeC:\WINDOWS\system32Adware.TopSearch
ujopqkeq.exeC:\WINDOWS\system32Adware.TopSearch
unutsgdr.exeC:\WINDOWS\system32Adware.SearchColours
vanlhmqa.exeC:\WINDOWS\system32Adware.SearchColours
veeqhdea.exeC:\WINDOWS\system32Adware.SearchColours
vfnvmtsv.exeC:\WINDOWS\system32Adware.TopSearch
vjbmfnse.exeC:\WINDOWS\system32Adware.SearchColours
vltjjnrm.exeC:\WINDOWS\system32Adware.SearchColours
vsekpwgr.exeC:\WINDOWS\system32Adware.SearchColours
vvnidnif.exeC:\WINDOWS\system32Adware.TopSearch
vynxttnq.exeC:\WINDOWS\system32Adware.SearchColours
waodljik.exeC:\WINDOWS\system32Adware.SearchColours
wbxcojle.exeC:\WINDOWS\system32Adware.TopSearch
whudvlfi.exeC:\WINDOWS\system32Adware.SearchColours
wticjrpl.exeC:\WINDOWS\system32Adware.SearchColours
xcbphrhg.exeC:\WINDOWS\system32Adware.SearchColours
xcrnlyax.exeC:\WINDOWS\system32Adware.TopSearch
xlltauir.exeC:\WINDOWS\system32Adware.SearchColours
xonmwfdy.exeC:\WINDOWS\system32Adware.SearchColours
xpeisose.exeC:\WINDOWS\system32Adware.TopSearch
xsvgmppc.exeC:\WINDOWS\system32Adware.TopSearch
xwlplaqj.exeC:\WINDOWS\system32Adware.SearchColours
ybthtjqe.exeC:\WINDOWS\system32Adware.TopSearch
ybulhxpc.exeC:\WINDOWS\system32Adware.SearchColours
yifydmhf.exeC:\WINDOWS\system32Adware.SearchColours
ylafajue.exeC:\WINDOWS\system32Adware.SearchColours
ylorutgu.exeC:\WINDOWS\system32Adware.SearchColours
yltenhbs.exeC:\WINDOWS\system32Adware.TopSearch
ynktjcxl.exeC:\WINDOWS\system32Adware.TopSearch
ytqesnjf.exeC:\WINDOWS\system32Adware.SearchColours
yyqrwrsj.exeC:\WINDOWS\system32Adware.TopSearch

Utilisateur anonyme · Answer

Bonjour

Du ménage vient d'être fait. HijackThis est propre.

Mais pour le scan d'eScan, tu n'as pas supprimer les fichiers, c'est marqué No Action Taken..

Tu vas refaire ceci en mode normal

8 Lance eScan 
1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky 

2.) Double-clique sur mwavscan.com; l'interface d'eScan va apparaître à l'écran. 

3.) Il est très important de bien cocher ces boîtes sous Scan Option 
Memory, Registry, Startup Folders, System Folders, Services. 

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\. 

5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files. 

6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite ! 

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum. 

Poste le rapport avec un nouveau DiagHelp. Poste le en deux messages, ce sera trop long.

legras · Answer

Mais ca va faire la même chose qu'avant juste scanné et non nettoyer. Non ?

legras · Answer

Alors voila le rapport de eScan :

File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No 

Action Taken.
File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. 

No Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\agfherdb.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\aolelmeq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aqusnwid.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\audimhij.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\aupgnxlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bbjudflx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bddoirhx.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\bifvcaqc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgtyqlrr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cjgiktsa.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\ckxhgpdf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\crdwqqep.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ddvvohgd.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\difwtfvm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dikmwqyc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqacyhwy.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\dunxmasq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duoollxq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\edeeccww.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\elsdjceh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\eoffqsqk.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fopwmgdy.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\ftboxnxl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fvsidooy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gardhtfc.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\gobrxtwv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gvopwqdu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hgcddihu.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\hjqqbfii.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hxdfpeav.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ikicnabt.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\iuviiqct.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\jkrmhoip.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\krplutvf.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\kvrmyshi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ldguntat.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\lvvoqgqi.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\mcldsfkv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mgxpvprt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\musqllhf.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\mydcfiom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine
fqwphvg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine
loyoorh.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine
nddeawh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ogpsrlax.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohpkqvys.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\pfodbooc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pgshdnsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\phlkcrom.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\pmqbsdfq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qktboyra.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qobxyqqr.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\quwjqcea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sgbpxmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sqogavnb.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\stxubqlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sufgwnyi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine	duxgeqv.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine	ioxqmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine	nhgecfn.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine	qdncpme.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine	xhihndo.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ubhieikw.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\unutsgdr.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\vanlhmqa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\veeqhdea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vjbmfnse.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\vltjjnrm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vsekpwgr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vynxttnq.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\waodljik.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\whudvlfi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wticjrpl.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\xcbphrhg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xlltauir.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xonmwfdy.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\xwlplaqj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybulhxpc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No 

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yifydmhf.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and 

Settings\Wxp\DoctorWeb\Quarantine\ylafajue.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File 

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylorutgu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action 

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ytqesnjf.exe tagged as 

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.

legras · Answer

et celui de DiagHelp : C:\WINDOWS\System32\wpa.dbl -->27.12.2006 09:41:25 C:\WINDOWS\System32\perfh00C.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfh009.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfc00C.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfc009.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\PerfStringBackup.INI -->23.12.2006 10:56:17 C:\WINDOWS\System32\xwjoalvq.ini -->23.12.2006 10:45:05 C:\WINDOWS\System32\odtpfici.dll -->22.12.2006 19:44:58 C:\WINDOWS\System32\wbqmyces.dll -->22.12.2006 19:20:41 C:\WINDOWS\System32\axgvpryj.dll -->22.12.2006 18:22:27 C:\WINDOWS\System32 jimnfjf.dll -->22.12.2006 17:37:06 C:\WINDOWS\System32 mp.txt -->22.12.2006 17:34:49 C:\WINDOWS\System32 mp.reg -->22.12.2006 17:34:49 C:\WINDOWS\System32\cpdymfnb.dll -->22.12.2006 17:33:49 C:\WINDOWS\System32\cbhwfxuq.ini -->22.12.2006 17:33:08 C:\WINDOWS\System32\muaktpvk.dll -->22.12.2006 17:02:57 C:\WINDOWS\System32\efvnvkme.dll -->21.12.2006 19:03:21 C:\WINDOWS\System32\cvfginer.dll -->20.12.2006 22:39:03 C:\WINDOWS\System32\gtmbnrcp.dll -->20.12.2006 18:34:44 C:\WINDOWS\System32\jrharjaq.dll -->20.12.2006 18:14:52 C:\WINDOWS\System32 voqxscq.dll -->19.12.2006 21:08:23 C:\WINDOWS\System32\quxfwhbc.dll -->18.12.2006 19:18:38 C:\WINDOWS\System32\spupdsvc.inf -->17.12.2006 18:19:27 C:\WINDOWS\System32\mcrh.tmp -->17.12.2006 14:26:34 C:\WINDOWS\System32\MRT.exe -->08.12.2006 00:13:44 C:\WINDOWS\BlendSettings.ini -->27.12.2006 14:42:40 C:\WINDOWS\WindowsUpdate.log -->27.12.2006 09:40:58 C:\WINDOWS\bootstat.dat -->27.12.2006 09:40:48 C:\WINDOWS\SchedLgU.Txt -->26.12.2006 23:29:25 C:\WINDOWS\QTFont.qfn -->26.12.2006 18:44:24 C:\WINDOWS\QTFont.for -->24.12.2006 16:04:06 C:\WINDOWS\cdPlayer.ini -->26.11.2006 14:29:21 C:\WINDOWS\Thumbs.db -->19.11.2006 16:47:33 C:\WINDOWS\SWPRODPB.INI -->06.11.2006 23:17:10 C:\WINDOWS\system.ini -->06.11.2006 22:46:44 C:\WINDOWS\cserve.ini -->01.11.2006 21:44:14 C:\WINDOWS\WMSysPr9.prx -->04.10.2006 19:46:53 C:\WINDOWS\mngui.INI -->28.09.2006 10:43:09 C:\WINDOWS\pavsig.txt -->08.09.2006 19:57:38 C:\WINDOWS\BricoPackFoldersDelete.cmd -->12.08.2006 16:08:45 C:\WINDOWS\ALCFDRTM.EXE |03/01/2002 17:07:42 C:\WINDOWS\alcrmv.exe |28/10/2004 16:12:26 C:\WINDOWS\alcupd.exe |28/10/2004 16:12:26 C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe |02/07/2005 17:43:37 C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe |17/07/2005 18:21:58 C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe |02/04/2006 17:45:49 C:\WINDOWS\GPInstall.exe |09/02/2005 17:57:37 C:\WINDOWS\IsUn040c.exe |28/10/2004 15:57:55 C:\WINDOWS\IsUninst.exe |28/10/2004 15:45:05 C:\WINDOWS\iun6002.exe |20/07/2005 20:25:04 C:\WINDOWS\ScUnin.exe |24/09/2005 13:02:20 C:\WINDOWS\Setup1.exe |18/12/2004 13:14:19 C:\WINDOWS\slrundll.exe |28/10/2004 15:27:29 C:\WINDOWS\SOUNDMAN.EXE |28/10/2004 16:12:34 C:\WINDOWS wunk_16.exe |24/04/2003 13:00:00 C:\WINDOWS wunk_32.exe |24/04/2003 13:00:00 C:\WINDOWS\una2setup.exe |06/12/2004 20:06:03 C:\WINDOWS\unADesktop.exe |14/01/2005 15:43:51 C:\WINDOWS\unin040c.exe |16/02/2005 17:56:29 C:\WINDOWS\uninst.exe |18/08/2005 16:50:31 C:\WINDOWS\USBK700iphmgunin.exe |04/01/2002 19:44:54 C:\WINDOWS wain.dll |24/04/2003 13:00:00 C:\WINDOWS wain_32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\AcSignOpt.exe |05/03/2005 13:18:15 C:\WINDOWS\system32\append.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\asuninst.exe |23/01/2006 20:11:05 C:\WINDOWS\system32\aswBoot.exe |02/11/2006 22:11:06 C:\WINDOWS\system32\ati2evxx.exe |29/09/2004 07:16:44 C:\WINDOWS\system32\Ati2mdxx.exe |29/09/2004 07:18:28 C:\WINDOWS\system32\ati2sgag.exe |28/10/2004 16:20:39 C:\WINDOWS\system32\debug.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\dmgr2.exe |25/03/2005 20:32:41 C:\WINDOWS\system32\dosx.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34 C:\WINDOWS\system32\edlin.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\exe2bin.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\fastopen.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\java.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\javaw.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\javaws.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\mem.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\mscdexnt.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\NeroCheck.exe |09/07/2001 11:50:42 C:\WINDOWS\system32 lsfunc.exe |24/04/2003 13:00:00 C:\WINDOWS\system32 edir.exe |24/04/2003 13:00:00 C:\WINDOWS\system32 eico.exe |18/02/2005 18:17:11 C:\WINDOWS\system32\RTLCPL.EXE |28/10/2004 16:12:35 C:\WINDOWS\system32\setver.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\share.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\slrundll.exe |28/10/2004 15:27:30 C:\WINDOWS\system32\slserv.exe |28/10/2004 15:27:30 C:\WINDOWS\system32\SpoonUninstall.exe |17/04/2005 13:31:15 C:\WINDOWS\system32\UAService7.exe |27/03/2005 14:54:25 C:\WINDOWS\system32\Uharc.exe |18/02/2005 18:16:23 C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\usrprbda.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\usrshuta.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\a3d.dll |28/10/2004 16:12:34 C:\WINDOWS\system32\AcSignExt.dll |05/03/2005 13:18:09 C:\WINDOWS\system32\AcSignExtRes.dll |07/03/2005 19:00:01 C:\WINDOWS\system32\AcSignIcon.dll |05/03/2005 13:18:12 C:\WINDOWS\system32\amstream.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ati2cqag.dll |28/10/2004 15:27:32 C:\WINDOWS\system32\ati2dvaa.dll |28/10/2004 15:27:32 C:\WINDOWS\system32\ati2dvag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ati2edxx.dll |29/09/2004 07:18:20 C:\WINDOWS\system32\ati2evxx.dll |29/09/2004 07:18:08 C:\WINDOWS\system32\ati3d1ag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ati3d2ag.dll |13/11/2003 21:10:54 C:\WINDOWS\system32\ati3duag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ATIDDC.DLL |29/09/2004 07:16:22 C:\WINDOWS\system32\ATIDEMGR.dll |29/09/2004 09:32:34 C:\WINDOWS\system32\atiiiexx.dll |29/09/2004 09:58:44 C:\WINDOWS\system32\atikvmag.dll |21/02/2006 19:11:02 C:\WINDOWS\system32\atioglx1.dll |21/02/2006 19:27:14 C:\WINDOWS\system32\atioglxx.dll |29/09/2004 07:44:00 C:\WINDOWS\system32\atipdlxx.dll |29/09/2004 07:18:50 C:\WINDOWS\system32\atitvo32.dll |29/09/2004 06:36:20 C:\WINDOWS\system32\ativcoxx.dll |09/11/2001 10:01:04 C:\WINDOWS\system32\ativtmxx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ativvaxx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\atmfd.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\atmlib.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\Audio3D.dll |28/10/2004 16:12:34 C:\WINDOWS\system32\axgvpryj.dll |22/12/2006 18:22:25 C:\WINDOWS\system32\clrvidcc.dll |02/01/2005 21:33:57 C:\WINDOWS\system32\clrviddc.dll |11/08/1998 15:18:52 C:\WINDOWS\system32\CmdLineExt.dll |27/03/2005 14:54:25 C:\WINDOWS\system32\CNCS232.DLL |20/11/2003 14:09:09 C:\WINDOWS\system32\cncs32.dll |27/12/2005 18:15:46 C:\WINDOWS\system32\compatui.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\cpdymfnb.dll |22/12/2006 17:33:47 C:\WINDOWS\system32\cvfginer.dll |20/12/2006 22:39:02 C:\WINDOWS\system32\decdnet.dll |11/08/1998 15:18:44 C:\WINDOWS\system32\dgrpsetu.dll |01/01/2002 00:07:13 C:\WINDOWS\system32\dgsetup.dll |01/01/2002 00:07:13 C:\WINDOWS\system32\DivX.dll |26/10/2004 23:38:23 C:\WINDOWS\system32\divxdec_0407.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divxdec_040c.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divxdec_0411.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divx_xx07.dll |26/10/2004 23:38:17 C:\WINDOWS\system32\divx_xx0c.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divx_xx11.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\dmgrax2.dll |25/03/2005 20:32:31 C:\WINDOWS\system32\dpu10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpuGUI10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpus10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpv10.dll |26/10/2004 23:39:04 C:\WINDOWS\system32\efvnvkme.dll |21/12/2006 19:03:21 C:\WINDOWS\system32\encdec.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\encdnet.dll |02/01/2005 21:33:57 C:\WINDOWS\system32\EnumDev111.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\EqnClass.Dll |01/01/2002 00:07:12 C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58 C:\WINDOWS\system32\gtmbnrcp.dll |20/12/2006 18:34:42 C:\WINDOWS\system32\hsfcisp2.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\hticons.dll |28/10/2004 15:48:03 C:\WINDOWS\system32\hypertrm.dll |28/10/2004 15:48:03 C:\WINDOWS\system32\iccvid.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ieencode.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\imagr5.dll |21/09/2000 17:02:28 C:\WINDOWS\system32\imagx5.dll |27/09/2000 16:15:06 C:\WINDOWS\system32\ImagXpr5.dll |21/09/2000 12:53:00 C:\WINDOWS\system32\inetda.dll |02/08/2001 04:11:25 C:\WINDOWS\system32\IpLib.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\ir32_32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ir41_qc.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir41_qcx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_32.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_qc.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_qcx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\isrdbg32.dll |28/10/2004 15:48:58 C:\WINDOWS\system32\jgaw400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgdw400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgmd400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgpl400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgsd400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgsh400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jrharjaq.dll |20/12/2006 18:14:51 C:\WINDOWS\system32\KMVIDC32.DLL |30/11/2004 18:40:54 C:\WINDOWS\system32\mdmxsdk.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 18:47:06 C:\WINDOWS\system32\mrvdlg.dll |28/10/2004 16:17:56 C:\WINDOWS\system32\msdmo.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\msencode.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\msttxl16.dll |24/02/1998 23:21:00 C:\WINDOWS\system32\MSWAY.dll |26/12/2005 11:09:15 C:\WINDOWS\system32\msxwnet32.dll |16/05/2001 11:52:26 C:\WINDOWS\system32\mtxparhd.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\muaktpvk.dll |22/12/2006 17:02:55 C:\WINDOWS\system32 jimnfjf.dll |22/12/2006 17:37:05 C:\WINDOWS\system32 v4_disp.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\odtpfici.dll |22/12/2006 19:44:55 C:\WINDOWS\system32\Oemdspif.dll |29/09/2004 07:18:36 C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16 C:\WINDOWS\system32\pdfcmnnt.dll |26/03/2006 10:49:45 C:\WINDOWS\system32\picn20.dll |21/09/2000 07:47:10 C:\WINDOWS\system32\pnc32301.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pnc32401.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pncrt.dll |11/08/1998 15:18:44 C:\WINDOWS\system32\pndx5016.dll |26/11/2004 21:09:27 C:\WINDOWS\system32\pndx5032.dll |26/11/2004 21:09:27 C:\WINDOWS\system32\pnen3230.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pneng101.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\PSIKey.dll |26/10/2004 23:38:24 C:\WINDOWS\system32\ptipbmf.dll |28/10/2004 16:18:41 C:\WINDOWS\system32\qedwipes.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\qt-mt331.dll |26/10/2004 23:39:05 C:\WINDOWS\system32\quxfwhbc.dll |18/12/2006 19:18:34 C:\WINDOWS\system32\RA3214_4.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a3228_8.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32clv1.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32dnet.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32rv10.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32sipr.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 arv1032.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 arv10en.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\RGSS100J.dll |11/06/2005 15:48:26 C:\WINDOWS\system32 mevents.dll |02/01/2005 21:33:58 C:\WINDOWS\system32 mmerge2.dll |02/01/2005 21:33:58 C:\WINDOWS\system32 moc3260.dll |26/11/2004 21:09:32 C:\WINDOWS\system32\Roboex32.dll |30/01/2005 14:44:37 C:\WINDOWS\system32\RTLCPAPI.dll |28/10/2004 16:12:34 C:\WINDOWS\system32 voqxscq.dll |19/12/2006 21:08:22 C:\WINDOWS\system32\s3gnb.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\sbe.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\SIntf16.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\SIntf32.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\SIntfNT.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\slbcsp.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slbiop.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slbrccsp.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slcoinst.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\slextspk.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\slgen.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\spnike.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\sprio600.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\sprio800.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\spxcoins.dll |01/01/2002 00:07:12 C:\WINDOWS\system32\swxpckm.dll |19/11/2006 10:13:15 C:\WINDOWS\system32 sd32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\TwnLib20.dll |26/06/2000 10:45:30 C:\WINDOWS\system32\unrar.dll |06/12/2004 20:06:06 C:\WINDOWS\system32\unzip32.dll |05/12/2004 22:08:08 C:\WINDOWS\system32\usrcntra.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrcoina.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrdpa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrdtea.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrlbva.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrv42a.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrv80a.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrvoica.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrvpa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\vboxb410.dll |13/06/2001 03:52:44 C:\WINDOWS\system32\vboxp410.dll |13/06/2001 03:52:45 C:\WINDOWS\system32\vboxt410.dll |13/06/2001 03:52:45 C:\WINDOWS\system32\vturs.dll |05/12/2006 17:40:17 C:\WINDOWS\system32\wbhelp2.dll |02/11/2004 22:03:21 C:\WINDOWS\system32\wbqmyces.dll |22/12/2006 19:20:40 C:\WINDOWS\system32\WG1v2Lib.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\wh2robo.dll |30/01/2005 14:44:37 C:\WINDOWS\system32\win87em.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\WmJoyFrc.dll |21/08/2006 14:02:54 C:\WINDOWS\system32\xmlparse.dll |08/12/2004 13:09:09 C:\WINDOWS\system32\xmltok.dll |08/12/2004 13:09:09 C:\WINDOWS\system32\ZPORT4AS.dll |23/01/2006 20:11:05 Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\WINDOWS\system32 19.08.2004 15:09 6'144 csrss.exe 1 fichier(s) 6'144 octets 0 Rép(s) 32'277'811'200 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\WINDOWS\system32 25.03.2005 20:32 860'160 dmgr2.exe 1 fichier(s) 860'160 octets 0 Rép(s) 32'277'811'200 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\WINDOWS\Downloaded Program Files 26.12.2006 11:17 . 26.12.2006 11:17 .. 11.04.2006 16:10 135'168 asinst.dll 03.04.2006 10:00 537 asinst.inf 17.05.2006 13:32 198'304 avsniffdlgs.dll 17.05.2006 13:26 537'704 AXXPEE.dll 06.09.2006 00:00 2'504 catalog.dat 18.11.2006 12:20 CONFLICT.1 22.12.2006 18:18 CONFLICT.2 22.12.2006 18:18 CONFLICT.3 22.12.2006 18:18 CONFLICT.4 26.12.2006 11:17 CONFLICT.5 22.12.2006 18:18 CONFLICT.6 28.10.2004 15:49 65 desktop.ini 06.09.2006 00:00 6'899 ecbootil.vxd 17.05.2006 13:26 42'112 ecmldr32.dll 06.09.2006 00:00 272'040 ecmsvr32.dll 08.09.2004 22:38 1'271 erma.inf 14.02.2003 09:32 283'296 IDrop.ocx 14.02.2003 09:34 114'848 IDropENU.dll 13.03.2003 09:58 114'600 IDropFRA.dll 10.11.2005 13:05 876 jinstall-1_5_0_06.inf 29.11.2006 14:00 367 LegitCheckControl.inf 17.05.2006 13:28 6'850 navapi.vxd 17.05.2006 13:28 201'896 navapi32.dll 06.09.2006 00:00 124'584 naveng32.dll 06.09.2006 00:00 882'344 navex32a.dll 09.12.2005 14:47 24'576 playershim.dll 09.10.2003 10:32 144 QTPlugin.inf 06.09.2006 00:00 97'552 scrauth.dat 22.06.2006 10:41 5'032 swflash.inf 06.09.2006 00:00 14 symaveng.cat 06.09.2006 00:00 901 symaveng.inf 06.09.2006 00:00 48'797 tcdefs.dat 06.09.2006 00:00 966'264 tcscan7.dat 06.09.2006 00:00 315'136 tcscan8.dat 06.09.2006 00:00 659'400 tcscan9.dat 06.09.2006 00:00 453 tinf.dat 06.09.2006 00:00 148 tinfidx.dat 06.09.2006 00:00 1'957 tinfl.dat 06.09.2006 00:00 58'587 tscan1.dat 06.09.2006 00:00 3'027 tscan1hd.dat 06.09.2006 00:00 5'116 v.grd 06.09.2006 00:00 2'261 v.sig 06.09.2006 00:00 106'244 virscan.inf 06.09.2006 00:00 966'811 virscan1.dat 06.09.2006 00:00 569'712 virscan2.dat 06.09.2006 00:00 146'612 virscan3.dat 06.09.2006 00:00 320'186 virscan4.dat 06.09.2006 00:00 2'700'020 virscan5.dat 06.09.2006 00:00 389'301 virscan6.dat 06.09.2006 00:00 4'468'258 virscan7.dat 06.09.2006 00:00 1'593'724 virscan8.dat 06.09.2006 00:00 3'622'432 virscan9.dat 06.09.2006 00:00 32 virscant.dat 08.09.2006 21:30 2'072 vscanmsx.dat 06.09.2006 00:00 224 zdone.dat 49 fichier(s) 20'001'258 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1 18.11.2006 12:20 . 18.11.2006 12:20 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.4 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.5 26.12.2006 11:17 . 26.12.2006 11:17 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.6 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Total des fichiers listés : 49 fichier(s) 20'001'258 octets 20 Rép(s) 32'277'807'104 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Liste des programmes installes Ad-Aware SE Personal Adobe Flash Player 9 ActiveX Adobe Photoshop 6.0 Adobe Reader 7.0.8 - Français Adobe SVG Viewer adsl TV Apple Software Update Archiveur WinRAR AsusUpdate ATI - Utilitaire de désinstallation du logiciel ATI Control Panel ATI Display Driver Audacity 1.2.4 AutoCAD 2006 - Français Autodesk DWF Viewer AutoUpdate avast! Antivirus AVG Anti-Spyware 7.5 BitTorrent 4.0.1 CCleaner (remove only) DirectX for Managed Code Update (December 2004) DivX Player DivX Pro Trial Download Accelerator Plus EA SPORTS online 2006 Easy TM 2.4 eMule FileZilla (remove only) Freelancer GeTax2005 Google Earth Google Toolbar for Internet Explorer Highway Pursuit v1.1 HijackThis 1.99.1 IGNMap 0.8.1 iTunes J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 9 K700i USB-Handset Manager Language pack for Ad-Aware SE Lecteur Windows Media 10 Logitech Desktop Messenger Logitech Gaming Software Logitech SetPoint LX Systems Download Manager Macromedia Shockwave Player MediaLife MediaTickets by OIN Messenger Plus! 3 & Sponsor Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Language Pack - FRA Microsoft Game Studios Common Redistributables Pack 1 Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (French) 2007 (Beta) Microsoft Office Excel MUI (French) 2007 (Beta) Microsoft Office InfoPath MUI (French) 2007 (Beta) Microsoft Office Outlook MUI (French) 2007 (Beta) Microsoft Office PowerPoint MUI (French) 2007 (Beta) Microsoft Office Professional 2007 (Beta) Microsoft Office Professional Plus 2007 (Beta) Microsoft Office Proof (Arabic) 2007 (Beta) Microsoft Office Proof (Dutch) 2007 (Beta) Microsoft Office Proof (English) 2007 (Beta) Microsoft Office Proof (French) 2007 (Beta) Microsoft Office Proof (German) 2007 (Beta) Microsoft Office Proof (Spanish) 2007 (Beta) Microsoft Office Publisher MUI (French) 2007 (Beta) Microsoft Office Shared MUI (French) 2007 (Beta) Microsoft Office Word MUI (French) 2007 (Beta) Microsoft XML Parser Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA MSXML 4.0 SP2 (KB927978) MSXML4 Parser Nero - Burning Rom NHL06 Oblivion Package de base Microsoft de service de chiffrement pour cartes à puce Panda ActiveScan PDFCreator Plasma Pong v1.2 PowerDVD Prince of Persia T2T Prince of Persia The Two Thrones QuickTime RealPlayer Realtek AC'97 Audio Rise Of Legends Rise Of Legends Rise of Nations Security Update for Microsoft .NET Framework 2.0 (KB917283) Security Update pour Microsoft .NET Framework 2.0 (KB922770) Sony Ericsson Capability Manager Sony Ericsson Mobile Phone Monitor Spybot - Search & Destroy 1.4 Starcraft Steganos Internet Anonym 7.1.6 TrackMania Nations ESWC 0.1.7.5 Watchtower Library 2005 - Édition française WebFldrs XP WG111v2 Configuration Utility Windows Defender Windows Defender Signatures Windows Genuine Advantage Notifications (KB905474) Windows Live Messenger Windows Live Sign-in Assistant Windows Media Connect Windows Media Format Runtime Windows XP Service Pack 2 Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files 26.12.2006 11:19 . 26.12.2006 11:19 .. 11.09.2005 12:49 A4DeskMag2 24.11.2005 18:37 Admiresoft 26.03.2006 11:33 Adobe 13.11.2006 18:27 adslTV 17.11.2005 22:30 Adverts 01.01.2002 14:00 Ahead 06.02.2006 21:55 Alwil Software 07.06.2005 21:58 America's Army 05.11.2006 13:44 AnswerWorks 4.0 06.11.2006 21:17 Apple Software Update 25.03.2005 19:06 Ashampoo 28.10.2004 15:45 ASUS 28.10.2004 16:20 ATI Technologies 02.08.2006 19:03 Audacity 05.11.2006 13:49 AutoCAD 2006 04.11.2006 21:25 Autodesk 24.11.2005 18:36 AV MP3 Player-Morpher 28.10.2004 16:12 AvRack 19.04.2005 17:36 BitTorrent 27.03.2005 20:03 BoontyGames 18.11.2006 23:03 CCleaner 12.01.2006 18:02 Clash N Slash 14.01.2006 15:33 Common Files 07.02.2006 21:16 Comodo 28.10.2004 15:48 ComPlus Applications 29.10.2006 15:16 Corel(R) Painter(TM) IX.5 TBYB FR 21.03.2005 19:10 Creative 01.01.2002 13:57 CyberLink 26.12.2006 11:17 DAP 22.11.2004 21:21 directx 20.11.2004 10:31 DivX 17.04.2006 13:28 DOSBox-0.65 15.04.2006 11:42 D-Tools 18.11.2006 12:12 Easy TM 02.01.2002 16:26 eMule 21.06.2005 17:15 eoRezo 19.11.2006 13:26 Fichiers communs 03.04.2006 18:42 FileZilla 27.06.2005 21:22 FlashFXP 02.11.2006 22:05 F-Secure 11.03.2005 17:33 Game_Maker6 26.03.2006 11:34 GeTax2005 31.10.2006 21:26 Google 22.12.2006 17:10 Grisoft 30.04.2005 19:00 GSC Game World 12.09.2005 20:08 IDM Computer Solutions 18.12.2006 22:13 IGN 24.09.2006 12:39 IKEA HomePlanner 17.04.2005 13:31 Illustrate 28.10.2004 16:03 Intel 11.01.2006 18:47 InterActual 17.12.2006 18:21 Internet Explorer 06.11.2006 21:21 iPod 06.11.2006 21:22 iTunes 13.11.2006 18:41 Java 08.12.2004 12:57 K700i USB-Handset Manager 04.11.2006 16:24 Lavasoft 27.12.2005 12:02 Lecteur CANALPLAY 17.06.2006 13:00 LimeWire 21.08.2006 14:02 Logitech 15.05.2005 16:17 LucasFan Games 25.03.2005 20:32 LX Download Manager 23.01.2006 20:24 Messenger 24.09.2006 12:33 Messenger Plus! 3 28.10.2004 15:50 microsoft frontpage 23.05.2006 16:36 Microsoft Games 05.11.2006 13:44 Microsoft Office 02.07.2006 20:05 Microsoft Visual Studio 02.07.2006 20:04 Microsoft Works 02.07.2006 20:04 Microsoft.NET 16.12.2006 16:54 Movie Maker 09.01.2006 17:35 Mozilla Firefox 02.07.2006 20:05 MSBuild 28.10.2004 15:48 MSN 28.10.2004 15:48 MSN Gaming Zone 02.11.2006 22:24 MSN Messenger 17.11.2006 19:02 MSXML 4.0 12.09.2005 17:19 MUSICMATCH 19.04.2005 20:10 NASA 23.10.2006 19:29 NETGEAR 28.10.2004 15:26 NetMeeting 07.09.2006 14:40 Notepad++ 04.01.2002 18:33 OfficeUpdate11 11.12.2006 19:03 Opera 16.12.2006 16:54 Outlook Express 26.03.2006 10:50 PDFCreator 16.05.2005 17:39 PeerGuardian pr14 09.03.2005 18:13 Plustech Inc 27.03.2005 13:48 PopCap Games 06.11.2006 21:20 QuickTime 26.11.2004 21:09 Real 28.10.2004 16:12 Realtek Sound Manager 21.08.2006 14:07 ReflexiveArcade 18.02.2005 18:07 ScreenSaver 23.01.2006 20:26 Secure Surfing Engine 28.10.2004 15:48 Services en ligne 28.09.2006 10:59 Sony Ericsson 01.05.2006 16:03 Spybot - Search & Destroy 04.11.2006 20:08 Spybot - Search & Destroy2 23.01.2006 20:26 Steganos Internet Anonym 7 27.12.2005 12:03 StreetFighter Flash 17.06.2006 12:53 TheTurtle 07.02.2006 18:22 Trustix 31.07.2005 12:04 Ubi Soft 08.12.2004 13:09 Ubisoft 01.06.2005 22:14 Ulead Systems 17.06.2006 12:59 Visicom Media 17.06.2005 19:32 VoipBuster.com 20.02.2006 19:44 Watchtower 09.03.2006 22:47 Webteh 18.11.2006 22:51 Windows Defender 05.11.2004 17:41 Windows Media Components 04.09.2006 19:43 Windows Media Connect 2 16.12.2006 16:54 Windows Media Player 28.10.2004 15:26 Windows NT 27.08.2005 19:55 WinHex 23.01.2006 20:26 WinRAR 28.10.2004 15:50 xerox 19.11.2006 13:26 ?ssembly 04.11.2006 12:26 ??stem 0 fichier(s) 0 octets 122 Rép(s) 32'277'479'424 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\fichiers communs 19.11.2006 13:26 . 19.11.2006 13:26 .. 26.03.2006 11:33 Adobe 05.11.2006 13:50 Autodesk Shared 05.08.2006 10:52 AVSMedia 05.11.2006 13:44 DESIGNER 21.11.2004 15:01 InstallShield 05.09.2006 20:30 Java 21.08.2006 14:02 Logitech 03.11.2004 19:17 Macrovision Shared 05.11.2006 13:44 Microsoft Shared 28.10.2004 15:48 MSSoap 01.01.2002 00:07 ODBC 24.09.2006 12:54 Panda Software 26.11.2004 21:09 Real 28.10.2004 15:48 Services 01.01.2002 00:07 SpeechEngines 20.06.2006 20:39 Synacast 16.12.2006 14:55 System 28.09.2006 10:59 Teleca Shared 26.11.2004 21:09 xing shared 22.12.2006 18:18 {84B2DB13-0C7E-1036-0924-040307090029} 0 fichier(s) 0 octets 22 Rép(s) 32'277'487'616 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 02.07.2006 20:05 . 02.07.2006 20:05 .. 04.01.2002 18:27 1033 02.07.2006 19:59 1036 25.04.2006 20:33 967'952 MSONSEXT.DLL 02.05.2006 18:37 40'208 MSOSV.DLL 03.06.1999 13:09 122'937 MSOWS409.DLL 07.03.2001 08:00 127'033 MSOWS40c.DLL 11.07.2003 02:25 80'448 PKMWS.DLL 5 fichier(s) 1'338'578 octets 4 Rép(s) 32'277'487'616 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\common files 14.01.2006 15:33 . 14.01.2006 15:33 .. 21.08.2006 17:33 EasyInfo 20.02.2005 12:17 Stardock 0 fichier(s) 0 octets 4 Rép(s) 32'277'483'520 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\ 11.11.2001 00:00 68'096 diff.exe 27.08.2006 14:10 103'424 grep.exe 31.10.2005 16:56 700'416 StubInstaller.exe 24.05.2001 11:59 162'304 UNWISE.EXE 4 fichier(s) 1'034'240 octets 0 Rép(s) 32'277'483'520 octets libres c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.0.2.16\iTunesSetupAdmin.exe c:\Documents and Settings\Wxp\.limewire\.NetworkShare\LimeWireWin4.10.5.exe c:\Documents and Settings\Wxp\.limewire\.NetworkShare\Incomplete\T-2840440-LimeWireWin4.10.9.exe c:\Documents and Settings\Wxp\Bureau\avgas-setup-7.5.0.50.exe c:\Documents and Settings\Wxp\Bureau\blbeta.exe c:\Documents and Settings\Wxp\Bureau\drweb-cureit.exe c:\Documents and Settings\Wxp\Bureau\mwav.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe c:\Documents and Settings\Wxp\Bureau\VundoFix.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\diff.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\grep.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LFiles.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\streams.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\swreg.exe c:\Documents and Settings\Wxp\Bureau ewbie\crackme1.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega11.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega22.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega4.exe c:\Documents and Settings\Wxp\Bureau ewbie\HexDecCharEditor\HexDecCharEditor.exe c:\Documents and Settings\Wxp\Bureau ewbie\Nouveau dossier\ocamlq-public[1].exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\dumphive.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\GenericRenosFix.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SmiUpdate.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SrchSTS.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swreg.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swsc.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swxcacls.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\unzip.exe c:\Documents and Settings\Wxp\Bureau\Steganos Updates\sia7int.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\A0190033.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\A0190035.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\agfherdb.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\amwskrut.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aolelmeq.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aqusnwid.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\astpbqig.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\audimhij.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aupgnxlj.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bbjudflx.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bddoirhx.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bifvcaqc.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bldhynhq.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bnyvvhbm.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cdjwyfix.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cfvbcrlo.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgfvpsjm.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgtyqlrr.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cjgiktsa.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ckxhgpdf.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\crdwqqep.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ddvvohgd.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\difwtfvm.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dikmwqyc.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dowllovy.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqacyhwy.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqxktplr.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dtsijbas.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duajsngx.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dunxmasq.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duoollxq.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dwarqyok.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ealavluy.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\edeeccww.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\elsdjceh.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\eoffqsqk.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\exrkvkgu.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fopwmgdy.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\Fport.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fskmtsbm.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ftboxnxl.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fvsidooy.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gardhtfc.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gktfxipw.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gncopicl.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gobrxtwv.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\guxarogi.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gvopwqdu.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gyjqeywt.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hgcddihu.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hjqqbfii.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hsrjerlt.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hxdfpeav.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ikicnabt.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\imonihvr.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\itdgccxx.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\iuviiqct.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\jkrmhoip.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\katadsql.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\krplutvf.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ksmnegtd.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\kunweeey.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\kvrmyshi.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ldguntat.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\lvvoqgqi.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mcldsfkv.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mgxpvprt.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mjwgqnkh.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\musqllhf.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mvtnxnrp.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mydcfiom.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mykecmyy.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine djhporp.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine fqwphvg.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine hsraulq.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine loyoorh.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine nddeawh.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine tfwbkns.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine wkrfcck.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\odabjrlj.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ogpsrlax.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohnjbmtx.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohpkqvys.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\oprsgstw.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\otfoegrk.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\owyllmmu.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pfodbooc.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pgshdnsa.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\phlkcrom.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pmqbsdfq.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\Process.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pslist.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qktboyra.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qnstnlpd.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qobxyqqr.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\quwjqcea.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine bneyqpm.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine estart.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine riktdeh.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sgbpxmer.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sqogavnb.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\stuctgge.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\stxubqlj.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sufgwnyi.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\svyywssj.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine dbxowgv.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine duxgeqv.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine ioxqmer.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine nhgecfn.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine qdncpme.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine xhihndo.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ubhieikw.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\uglxpxxn.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ujopqkeq.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\unutsgdr.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vanlhmqa.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\veeqhdea.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vfnvmtsv.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vjbmfnse.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vltjjnrm.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vsekpwgr.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vvnidnif.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vynxttnq.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\waodljik.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wbxcojle.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\whudvlfi.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wticjrpl.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xcbphrhg.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xcrnlyax.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xlltauir.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xonmwfdy.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xpeisose.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xsvgmppc.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xwlplaqj.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybthtjqe.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybulhxpc.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yifydmhf.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylafajue.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylorutgu.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yltenhbs.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ynktjcxl.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ytqesnjf.exe c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yyqrwrsj.exe c:\Documents and Settings\Wxp\Local Settings\Temp\Uninst.exe c:\Documents and Settings\Wxp\Local Settings\Temp\AUG2005DXREDIST\DXSETUP.exe c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\LOAD.EXE c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\SETUP.EXE c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{05D79D39-D5A6-4866-9582-579B32CEA05A}\mpengine.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll c:\Documents and Settings\Wxp\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll

Utilisateur anonyme · Answer

Bonjour

c'est déja mieux.
Encore quelques corrections.

Une partie de la procédure se déroulera sans avoir accès à internet, prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant cette désinfection.
Les  manipulations sont à faire sans interruption et dans l'ordre.
Si tu ne comprends pas quelque chose, demande des explications avant de commencer


1 Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarre l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows. 
En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuye sur Entrée.


2 Assure toi d'avoir accés à tous les fichiers.
Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :
Activer la case : Afficher les fichiers et dossiers cachés
Désactiver la case : Masquer les extensions des fichiers dont le type est connu
Désactiver la case : Masquer les fichiers protégés du système d'exploitation
Puis Appliquer


3 Désinstalle ces applications (si tu les trouves) dans Ajout-Suppression de programmes :

MediaTickets by OIN
Adverts 
?ssembly 
??stem


4 Supprime les fichiers/dossiers incriminés (s'ils existent encore) :

C:\Program Files\MediaTickets by OIN
C:\Program Files\Adverts 
C:\Program Files\?ssembly 
C:\Program Files\??stem
c:\Documents and Settings\Wxp\Bureau\avgas-setup-7.5.0.50.exe 
c:\Documents and Settings\Wxp\Bureau\blbeta.exe 
c:\Documents and Settings\Wxp\Bureau\drweb-cureit.exe 
c:\Documents and Settings\Wxp\Bureau\mwav.exe 
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe 
c:\Documents and Settings\Wxp\DoctorWeb
C:\WINDOWS\System32\xwjoalvq.ini 
C:\WINDOWS\System32\odtpfici.dll 
C:\WINDOWS\System32\wbqmyces.dll 
C:\WINDOWS\System32\axgvpryj.dll 
C:\WINDOWS\System32
jimnfjf.dll
C:\WINDOWS\System32\cpdymfnb.dll
C:\WINDOWS\System32\cbhwfxuq.ini 
C:\WINDOWS\System32\muaktpvk.dll 
C:\WINDOWS\System32\efvnvkme.dll
C:\WINDOWS\System32\cvfginer.dll 
C:\WINDOWS\System32\gtmbnrcp.dll 
C:\WINDOWS\System32\jrharjaq.dll 
C:\WINDOWS\System32voqxscq.dll 
C:\WINDOWS\System32\quxfwhbc.dll 
C:\WINDOWS\system32\vturs.dll 
c:\WINDOWS\system32\dmgr2.exe

Recache les fichiers systeme afin de ne pas faire d'erreur à l'avenir en sélectionnant ne pas afficher les fichiers cachés ou les fichiers système.


5 Lance le nettoyage avec CCleaner


6 Redémarre normalement

Poste un nouveau rapport DiagHelp.

legras · Answer

Et voila le dernier rapport Daig : C:\WINDOWS\System32\wpa.dbl -->30.12.2006 14:45:58 C:\WINDOWS\System32\perfh00C.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfh009.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfc00C.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\perfc009.dat -->23.12.2006 10:56:18 C:\WINDOWS\System32\PerfStringBackup.INI -->23.12.2006 10:56:17 C:\WINDOWS\System32 mp.txt -->22.12.2006 17:34:49 C:\WINDOWS\System32 mp.reg -->22.12.2006 17:34:49 C:\WINDOWS\System32\quxfwhbc.dll -->18.12.2006 19:18:38 C:\WINDOWS\System32\spupdsvc.inf -->17.12.2006 18:19:27 C:\WINDOWS\System32\mcrh.tmp -->17.12.2006 14:26:34 C:\WINDOWS\System32\MRT.exe -->08.12.2006 00:13:44 C:\WINDOWS\System32\wmvcore.dll -->07.12.2006 06:29:34 C:\WINDOWS\System32\vturs.dll -->05.12.2006 17:40:25 C:\WINDOWS\System32\LegitCheckControl.DLL -->29.11.2006 16:31:32 C:\WINDOWS\System32\swxpckm.dll -->19.11.2006 10:13:15 C:\WINDOWS\System32\FNTCACHE.DAT -->19.11.2006 10:08:47 C:\WINDOWS\System32\jupdate-1.5.0_09-b03.log -->13.11.2006 18:41:28 C:\WINDOWS\System32\CmdLineExt.dll -->12.11.2006 19:50:00 C:\WINDOWS\System32\inetcomm.dll -->08.11.2006 06:07:30 C:\WINDOWS\System32\TitanPokerIconDropTRA108.ico -->04.11.2006 16:42:53 C:\WINDOWS\System32\MobileSidewalkRON_2.ico -->04.11.2006 16:32:42 C:\WINDOWS\System32\msxml4.dll -->04.11.2006 14:14:00 C:\WINDOWS\System32\CONFIG.NT -->02.11.2006 22:11:17 C:\WINDOWS\System32\Thumbs.db -->01.11.2006 21:37:45 C:\WINDOWS\WindowsUpdate.log -->30.12.2006 14:45:53 C:\WINDOWS\SchedLgU.Txt -->30.12.2006 14:45:49 C:\WINDOWS\bootstat.dat -->30.12.2006 14:45:47 C:\WINDOWS\BlendSettings.ini -->29.12.2006 23:46:37 C:\WINDOWS\QTFont.qfn -->28.12.2006 20:05:26 C:\WINDOWS\QTFont.for -->24.12.2006 16:04:06 C:\WINDOWS\cdPlayer.ini -->26.11.2006 14:29:21 C:\WINDOWS\Thumbs.db -->19.11.2006 16:47:33 C:\WINDOWS\SWPRODPB.INI -->06.11.2006 23:17:10 C:\WINDOWS\system.ini -->06.11.2006 22:46:44 C:\WINDOWS\cserve.ini -->01.11.2006 21:44:14 C:\WINDOWS\WMSysPr9.prx -->04.10.2006 19:46:53 C:\WINDOWS\mngui.INI -->28.09.2006 10:43:09 C:\WINDOWS\pavsig.txt -->08.09.2006 19:57:38 C:\WINDOWS\BricoPackFoldersDelete.cmd -->12.08.2006 16:08:45 C:\WINDOWS\ALCFDRTM.EXE |03/01/2002 17:07:42 C:\WINDOWS\alcrmv.exe |28/10/2004 16:12:26 C:\WINDOWS\alcupd.exe |28/10/2004 16:12:26 C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe |02/07/2005 17:43:37 C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe |17/07/2005 18:21:58 C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe |02/04/2006 17:45:49 C:\WINDOWS\GPInstall.exe |09/02/2005 17:57:37 C:\WINDOWS\IsUn040c.exe |28/10/2004 15:57:55 C:\WINDOWS\IsUninst.exe |28/10/2004 15:45:05 C:\WINDOWS\iun6002.exe |20/07/2005 20:25:04 C:\WINDOWS\ScUnin.exe |24/09/2005 13:02:20 C:\WINDOWS\Setup1.exe |18/12/2004 13:14:19 C:\WINDOWS\slrundll.exe |28/10/2004 15:27:29 C:\WINDOWS\SOUNDMAN.EXE |28/10/2004 16:12:34 C:\WINDOWS wunk_16.exe |24/04/2003 13:00:00 C:\WINDOWS wunk_32.exe |24/04/2003 13:00:00 C:\WINDOWS\una2setup.exe |06/12/2004 20:06:03 C:\WINDOWS\unADesktop.exe |14/01/2005 15:43:51 C:\WINDOWS\unin040c.exe |16/02/2005 17:56:29 C:\WINDOWS\uninst.exe |18/08/2005 16:50:31 C:\WINDOWS\USBK700iphmgunin.exe |04/01/2002 19:44:54 C:\WINDOWS wain.dll |24/04/2003 13:00:00 C:\WINDOWS wain_32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\AcSignOpt.exe |05/03/2005 13:18:15 C:\WINDOWS\system32\append.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\asuninst.exe |23/01/2006 20:11:05 C:\WINDOWS\system32\aswBoot.exe |02/11/2006 22:11:06 C:\WINDOWS\system32\ati2evxx.exe |29/09/2004 07:16:44 C:\WINDOWS\system32\Ati2mdxx.exe |29/09/2004 07:18:28 C:\WINDOWS\system32\ati2sgag.exe |28/10/2004 16:20:39 C:\WINDOWS\system32\debug.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\dosx.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34 C:\WINDOWS\system32\edlin.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\exe2bin.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\fastopen.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\java.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\javaw.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\javaws.exe |13/11/2006 18:41:29 C:\WINDOWS\system32\mem.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\mscdexnt.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\NeroCheck.exe |09/07/2001 11:50:42 C:\WINDOWS\system32 lsfunc.exe |24/04/2003 13:00:00 C:\WINDOWS\system32 edir.exe |24/04/2003 13:00:00 C:\WINDOWS\system32 eico.exe |18/02/2005 18:17:11 C:\WINDOWS\system32\RTLCPL.EXE |28/10/2004 16:12:35 C:\WINDOWS\system32\setver.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\share.exe |24/04/2003 13:00:00 C:\WINDOWS\system32\slrundll.exe |28/10/2004 15:27:30 C:\WINDOWS\system32\slserv.exe |28/10/2004 15:27:30 C:\WINDOWS\system32\SpoonUninstall.exe |17/04/2005 13:31:15 C:\WINDOWS\system32\UAService7.exe |27/03/2005 14:54:25 C:\WINDOWS\system32\Uharc.exe |18/02/2005 18:16:23 C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\usrprbda.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\usrshuta.exe |23/08/2001 18:47:48 C:\WINDOWS\system32\a3d.dll |28/10/2004 16:12:34 C:\WINDOWS\system32\AcSignExt.dll |05/03/2005 13:18:09 C:\WINDOWS\system32\AcSignExtRes.dll |07/03/2005 19:00:01 C:\WINDOWS\system32\AcSignIcon.dll |05/03/2005 13:18:12 C:\WINDOWS\system32\amstream.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ati2cqag.dll |28/10/2004 15:27:32 C:\WINDOWS\system32\ati2dvaa.dll |28/10/2004 15:27:32 C:\WINDOWS\system32\ati2dvag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ati2edxx.dll |29/09/2004 07:18:20 C:\WINDOWS\system32\ati2evxx.dll |29/09/2004 07:18:08 C:\WINDOWS\system32\ati3d1ag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ati3d2ag.dll |13/11/2003 21:10:54 C:\WINDOWS\system32\ati3duag.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ATIDDC.DLL |29/09/2004 07:16:22 C:\WINDOWS\system32\ATIDEMGR.dll |29/09/2004 09:32:34 C:\WINDOWS\system32\atiiiexx.dll |29/09/2004 09:58:44 C:\WINDOWS\system32\atikvmag.dll |21/02/2006 19:11:02 C:\WINDOWS\system32\atioglx1.dll |21/02/2006 19:27:14 C:\WINDOWS\system32\atioglxx.dll |29/09/2004 07:44:00 C:\WINDOWS\system32\atipdlxx.dll |29/09/2004 07:18:50 C:\WINDOWS\system32\atitvo32.dll |29/09/2004 06:36:20 C:\WINDOWS\system32\ativcoxx.dll |09/11/2001 10:01:04 C:\WINDOWS\system32\ativtmxx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ativvaxx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\atmfd.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\atmlib.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\Audio3D.dll |28/10/2004 16:12:34 C:\WINDOWS\system32\clrvidcc.dll |02/01/2005 21:33:57 C:\WINDOWS\system32\clrviddc.dll |11/08/1998 15:18:52 C:\WINDOWS\system32\CmdLineExt.dll |27/03/2005 14:54:25 C:\WINDOWS\system32\CNCS232.DLL |20/11/2003 14:09:09 C:\WINDOWS\system32\cncs32.dll |27/12/2005 18:15:46 C:\WINDOWS\system32\compatui.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\decdnet.dll |11/08/1998 15:18:44 C:\WINDOWS\system32\dgrpsetu.dll |01/01/2002 00:07:13 C:\WINDOWS\system32\dgsetup.dll |01/01/2002 00:07:13 C:\WINDOWS\system32\DivX.dll |26/10/2004 23:38:23 C:\WINDOWS\system32\divxdec_0407.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divxdec_040c.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divxdec_0411.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divx_xx07.dll |26/10/2004 23:38:17 C:\WINDOWS\system32\divx_xx0c.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\divx_xx11.dll |26/10/2004 23:38:18 C:\WINDOWS\system32\dmgrax2.dll |25/03/2005 20:32:31 C:\WINDOWS\system32\dpu10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpuGUI10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpus10.dll |26/10/2004 23:39:03 C:\WINDOWS\system32\dpv10.dll |26/10/2004 23:39:04 C:\WINDOWS\system32\encdec.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\encdnet.dll |02/01/2005 21:33:57 C:\WINDOWS\system32\EnumDev111.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\EqnClass.Dll |01/01/2002 00:07:12 C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58 C:\WINDOWS\system32\hsfcisp2.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\hticons.dll |28/10/2004 15:48:03 C:\WINDOWS\system32\hypertrm.dll |28/10/2004 15:48:03 C:\WINDOWS\system32\iccvid.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ieencode.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\imagr5.dll |21/09/2000 17:02:28 C:\WINDOWS\system32\imagx5.dll |27/09/2000 16:15:06 C:\WINDOWS\system32\ImagXpr5.dll |21/09/2000 12:53:00 C:\WINDOWS\system32\inetda.dll |02/08/2001 04:11:25 C:\WINDOWS\system32\IpLib.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\ir32_32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\ir41_qc.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir41_qcx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_32.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_qc.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\ir50_qcx.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\isrdbg32.dll |28/10/2004 15:48:58 C:\WINDOWS\system32\jgaw400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgdw400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgmd400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgpl400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgsd400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\jgsh400.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\KMVIDC32.DLL |30/11/2004 18:40:54 C:\WINDOWS\system32\mdmxsdk.dll |28/10/2004 15:27:31 C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 18:47:06 C:\WINDOWS\system32\mrvdlg.dll |28/10/2004 16:17:56 C:\WINDOWS\system32\msdmo.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\msencode.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\msttxl16.dll |24/02/1998 23:21:00 C:\WINDOWS\system32\MSWAY.dll |26/12/2005 11:09:15 C:\WINDOWS\system32\msxwnet32.dll |16/05/2001 11:52:26 C:\WINDOWS\system32\mtxparhd.dll |28/10/2004 15:27:30 C:\WINDOWS\system32 v4_disp.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\Oemdspif.dll |29/09/2004 07:18:36 C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16 C:\WINDOWS\system32\pdfcmnnt.dll |26/03/2006 10:49:45 C:\WINDOWS\system32\picn20.dll |21/09/2000 07:47:10 C:\WINDOWS\system32\pnc32301.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pnc32401.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pncrt.dll |11/08/1998 15:18:44 C:\WINDOWS\system32\pndx5016.dll |26/11/2004 21:09:27 C:\WINDOWS\system32\pndx5032.dll |26/11/2004 21:09:27 C:\WINDOWS\system32\pnen3230.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\pneng101.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\PSIKey.dll |26/10/2004 23:38:24 C:\WINDOWS\system32\ptipbmf.dll |28/10/2004 16:18:41 C:\WINDOWS\system32\qedwipes.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\qt-mt331.dll |26/10/2004 23:39:05 C:\WINDOWS\system32\quxfwhbc.dll |18/12/2006 19:18:34 C:\WINDOWS\system32\RA3214_4.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a3228_8.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32clv1.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32dnet.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32rv10.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 a32sipr.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 arv1032.dll |11/08/1998 15:18:44 C:\WINDOWS\system32 arv10en.dll |02/01/2005 21:33:58 C:\WINDOWS\system32\RGSS100J.dll |11/06/2005 15:48:26 C:\WINDOWS\system32 mevents.dll |02/01/2005 21:33:58 C:\WINDOWS\system32 mmerge2.dll |02/01/2005 21:33:58 C:\WINDOWS\system32 moc3260.dll |26/11/2004 21:09:32 C:\WINDOWS\system32\Roboex32.dll |30/01/2005 14:44:37 C:\WINDOWS\system32\RTLCPAPI.dll |28/10/2004 16:12:34 C:\WINDOWS\system32\s3gnb.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\sbe.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\SIntf16.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\SIntf32.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\SIntfNT.dll |10/12/2004 17:11:20 C:\WINDOWS\system32\slbcsp.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slbiop.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slbrccsp.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\slcoinst.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\slextspk.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\slgen.dll |28/10/2004 15:27:30 C:\WINDOWS\system32\spnike.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\sprio600.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\sprio800.dll |23/08/2001 18:47:18 C:\WINDOWS\system32\spxcoins.dll |01/01/2002 00:07:12 C:\WINDOWS\system32\swxpckm.dll |19/11/2006 10:13:15 C:\WINDOWS\system32 sd32.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\TwnLib20.dll |26/06/2000 10:45:30 C:\WINDOWS\system32\unrar.dll |06/12/2004 20:06:06 C:\WINDOWS\system32\unzip32.dll |05/12/2004 22:08:08 C:\WINDOWS\system32\usrcntra.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrcoina.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrdpa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrdtea.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrlbva.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrv42a.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrv80a.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrvoica.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\usrvpa.dll |23/08/2001 18:47:20 C:\WINDOWS\system32\vboxb410.dll |13/06/2001 03:52:44 C:\WINDOWS\system32\vboxp410.dll |13/06/2001 03:52:45 C:\WINDOWS\system32\vboxt410.dll |13/06/2001 03:52:45 C:\WINDOWS\system32\vturs.dll |05/12/2006 17:40:17 C:\WINDOWS\system32\wbhelp2.dll |02/11/2004 22:03:21 C:\WINDOWS\system32\WG1v2Lib.dll |23/10/2006 19:29:44 C:\WINDOWS\system32\wh2robo.dll |30/01/2005 14:44:37 C:\WINDOWS\system32\win87em.dll |24/04/2003 13:00:00 C:\WINDOWS\system32\WmJoyFrc.dll |21/08/2006 14:02:54 C:\WINDOWS\system32\xmlparse.dll |08/12/2004 13:09:09 C:\WINDOWS\system32\xmltok.dll |08/12/2004 13:09:09 C:\WINDOWS\system32\ZPORT4AS.dll |23/01/2006 20:11:05 Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\WINDOWS\system32 19.08.2004 15:09 6'144 csrss.exe 1 fichier(s) 6'144 octets 0 Rép(s) 32'159'334'400 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\WINDOWS\Downloaded Program Files 26.12.2006 11:17 . 26.12.2006 11:17 .. 11.04.2006 16:10 135'168 asinst.dll 03.04.2006 10:00 537 asinst.inf 17.05.2006 13:32 198'304 avsniffdlgs.dll 17.05.2006 13:26 537'704 AXXPEE.dll 06.09.2006 00:00 2'504 catalog.dat 18.11.2006 12:20 CONFLICT.1 22.12.2006 18:18 CONFLICT.2 22.12.2006 18:18 CONFLICT.3 22.12.2006 18:18 CONFLICT.4 26.12.2006 11:17 CONFLICT.5 22.12.2006 18:18 CONFLICT.6 28.10.2004 15:49 65 desktop.ini 06.09.2006 00:00 6'899 ecbootil.vxd 17.05.2006 13:26 42'112 ecmldr32.dll 06.09.2006 00:00 272'040 ecmsvr32.dll 08.09.2004 22:38 1'271 erma.inf 14.02.2003 09:32 283'296 IDrop.ocx 14.02.2003 09:34 114'848 IDropENU.dll 13.03.2003 09:58 114'600 IDropFRA.dll 10.11.2005 13:05 876 jinstall-1_5_0_06.inf 29.11.2006 14:00 367 LegitCheckControl.inf 17.05.2006 13:28 6'850 navapi.vxd 17.05.2006 13:28 201'896 navapi32.dll 06.09.2006 00:00 124'584 naveng32.dll 06.09.2006 00:00 882'344 navex32a.dll 09.12.2005 14:47 24'576 playershim.dll 09.10.2003 10:32 144 QTPlugin.inf 06.09.2006 00:00 97'552 scrauth.dat 22.06.2006 10:41 5'032 swflash.inf 06.09.2006 00:00 14 symaveng.cat 06.09.2006 00:00 901 symaveng.inf 06.09.2006 00:00 48'797 tcdefs.dat 06.09.2006 00:00 966'264 tcscan7.dat 06.09.2006 00:00 315'136 tcscan8.dat 06.09.2006 00:00 659'400 tcscan9.dat 06.09.2006 00:00 453 tinf.dat 06.09.2006 00:00 148 tinfidx.dat 06.09.2006 00:00 1'957 tinfl.dat 06.09.2006 00:00 58'587 tscan1.dat 06.09.2006 00:00 3'027 tscan1hd.dat 06.09.2006 00:00 5'116 v.grd 06.09.2006 00:00 2'261 v.sig 06.09.2006 00:00 106'244 virscan.inf 06.09.2006 00:00 966'811 virscan1.dat 06.09.2006 00:00 569'712 virscan2.dat 06.09.2006 00:00 146'612 virscan3.dat 06.09.2006 00:00 320'186 virscan4.dat 06.09.2006 00:00 2'700'020 virscan5.dat 06.09.2006 00:00 389'301 virscan6.dat 06.09.2006 00:00 4'468'258 virscan7.dat 06.09.2006 00:00 1'593'724 virscan8.dat 06.09.2006 00:00 3'622'432 virscan9.dat 06.09.2006 00:00 32 virscant.dat 08.09.2006 21:30 2'072 vscanmsx.dat 06.09.2006 00:00 224 zdone.dat 49 fichier(s) 20'001'258 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1 18.11.2006 12:20 . 18.11.2006 12:20 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.4 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.5 26.12.2006 11:17 . 26.12.2006 11:17 .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.6 22.12.2006 18:18 . 22.12.2006 18:18 .. 0 fichier(s) 0 octets Total des fichiers listés : 49 fichier(s) 20'001'258 octets 20 Rép(s) 32'159'330'304 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Liste des programmes installes Ad-Aware SE Personal Adobe Flash Player 9 ActiveX Adobe Photoshop 6.0 Adobe Reader 7.0.8 - Français Adobe SVG Viewer adsl TV Apple Software Update Archiveur WinRAR AsusUpdate ATI - Utilitaire de désinstallation du logiciel ATI Control Panel ATI Display Driver Audacity 1.2.4 AutoCAD 2006 - Français Autodesk DWF Viewer AutoUpdate avast! Antivirus AVG Anti-Spyware 7.5 BitTorrent 4.0.1 CCleaner (remove only) DirectX for Managed Code Update (December 2004) DivX Player DivX Pro Trial Download Accelerator Plus EA SPORTS online 2006 Easy TM 2.4 eMule FileZilla (remove only) Freelancer GeTax2005 Google Earth Google Toolbar for Internet Explorer Highway Pursuit v1.1 HijackThis 1.99.1 IGNMap 0.8.1 iTunes J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 9 K700i USB-Handset Manager Language pack for Ad-Aware SE Lecteur Windows Media 10 Logitech Desktop Messenger Logitech Gaming Software Logitech SetPoint LX Systems Download Manager Macromedia Shockwave Player MediaLife Messenger Plus! 3 & Sponsor Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Language Pack - FRA Microsoft Game Studios Common Redistributables Pack 1 Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (French) 2007 (Beta) Microsoft Office Excel MUI (French) 2007 (Beta) Microsoft Office InfoPath MUI (French) 2007 (Beta) Microsoft Office Outlook MUI (French) 2007 (Beta) Microsoft Office PowerPoint MUI (French) 2007 (Beta) Microsoft Office Professional 2007 (Beta) Microsoft Office Professional Plus 2007 (Beta) Microsoft Office Proof (Arabic) 2007 (Beta) Microsoft Office Proof (Dutch) 2007 (Beta) Microsoft Office Proof (English) 2007 (Beta) Microsoft Office Proof (French) 2007 (Beta) Microsoft Office Proof (German) 2007 (Beta) Microsoft Office Proof (Spanish) 2007 (Beta) Microsoft Office Publisher MUI (French) 2007 (Beta) Microsoft Office Shared MUI (French) 2007 (Beta) Microsoft Office Word MUI (French) 2007 (Beta) Microsoft XML Parser Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA MSXML 4.0 SP2 (KB927978) MSXML4 Parser Nero - Burning Rom NHL06 Oblivion Package de base Microsoft de service de chiffrement pour cartes à puce Panda ActiveScan PDFCreator Plasma Pong v1.2 PowerDVD Prince of Persia T2T Prince of Persia The Two Thrones QuickTime RealPlayer Realtek AC'97 Audio Rise Of Legends Rise Of Legends Rise of Nations Security Update for Microsoft .NET Framework 2.0 (KB917283) Security Update pour Microsoft .NET Framework 2.0 (KB922770) Sony Ericsson Capability Manager Sony Ericsson Mobile Phone Monitor Spybot - Search & Destroy 1.4 Starcraft Steganos Internet Anonym 7.1.6 TrackMania Nations ESWC 0.1.7.5 Watchtower Library 2005 - Édition française WebFldrs XP WG111v2 Configuration Utility Windows Defender Windows Defender Signatures Windows Genuine Advantage Notifications (KB905474) Windows Live Messenger Windows Live Sign-in Assistant Windows Media Connect Windows Media Format Runtime Windows XP Service Pack 2 Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files 30.12.2006 14:33 . 30.12.2006 14:33 .. 11.09.2005 12:49 A4DeskMag2 24.11.2005 18:37 Admiresoft 26.03.2006 11:33 Adobe 13.11.2006 18:27 adslTV 01.01.2002 14:00 Ahead 06.02.2006 21:55 Alwil Software 07.06.2005 21:58 America's Army 05.11.2006 13:44 AnswerWorks 4.0 06.11.2006 21:17 Apple Software Update 25.03.2005 19:06 Ashampoo 28.10.2004 15:45 ASUS 28.10.2004 16:20 ATI Technologies 02.08.2006 19:03 Audacity 05.11.2006 13:49 AutoCAD 2006 04.11.2006 21:25 Autodesk 24.11.2005 18:36 AV MP3 Player-Morpher 28.10.2004 16:12 AvRack 19.04.2005 17:36 BitTorrent 27.03.2005 20:03 BoontyGames 18.11.2006 23:03 CCleaner 12.01.2006 18:02 Clash N Slash 14.01.2006 15:33 Common Files 07.02.2006 21:16 Comodo 28.10.2004 15:48 ComPlus Applications 29.10.2006 15:16 Corel(R) Painter(TM) IX.5 TBYB FR 21.03.2005 19:10 Creative 01.01.2002 13:57 CyberLink 26.12.2006 11:17 DAP 22.11.2004 21:21 directx 20.11.2004 10:31 DivX 17.04.2006 13:28 DOSBox-0.65 15.04.2006 11:42 D-Tools 18.11.2006 12:12 Easy TM 02.01.2002 16:26 eMule 21.06.2005 17:15 eoRezo 30.12.2006 14:15 Fichiers communs 03.04.2006 18:42 FileZilla 27.06.2005 21:22 FlashFXP 02.11.2006 22:05 F-Secure 11.03.2005 17:33 Game_Maker6 26.03.2006 11:34 GeTax2005 31.10.2006 21:26 Google 22.12.2006 17:10 Grisoft 30.04.2005 19:00 GSC Game World 12.09.2005 20:08 IDM Computer Solutions 18.12.2006 22:13 IGN 24.09.2006 12:39 IKEA HomePlanner 17.04.2005 13:31 Illustrate 28.10.2004 16:03 Intel 11.01.2006 18:47 InterActual 17.12.2006 18:21 Internet Explorer 06.11.2006 21:21 iPod 06.11.2006 21:22 iTunes 13.11.2006 18:41 Java 08.12.2004 12:57 K700i USB-Handset Manager 04.11.2006 16:24 Lavasoft 27.12.2005 12:02 Lecteur CANALPLAY 17.06.2006 13:00 LimeWire 21.08.2006 14:02 Logitech 15.05.2005 16:17 LucasFan Games 25.03.2005 20:32 LX Download Manager 23.01.2006 20:24 Messenger 24.09.2006 12:33 Messenger Plus! 3 28.10.2004 15:50 microsoft frontpage 23.05.2006 16:36 Microsoft Games 05.11.2006 13:44 Microsoft Office 02.07.2006 20:05 Microsoft Visual Studio 02.07.2006 20:04 Microsoft Works 02.07.2006 20:04 Microsoft.NET 16.12.2006 16:54 Movie Maker 09.01.2006 17:35 Mozilla Firefox 02.07.2006 20:05 MSBuild 28.10.2004 15:48 MSN 28.10.2004 15:48 MSN Gaming Zone 02.11.2006 22:24 MSN Messenger 17.11.2006 19:02 MSXML 4.0 12.09.2005 17:19 MUSICMATCH 19.04.2005 20:10 NASA 23.10.2006 19:29 NETGEAR 28.10.2004 15:26 NetMeeting 07.09.2006 14:40 Notepad++ 04.01.2002 18:33 OfficeUpdate11 11.12.2006 19:03 Opera 16.12.2006 16:54 Outlook Express 26.03.2006 10:50 PDFCreator 16.05.2005 17:39 PeerGuardian pr14 09.03.2005 18:13 Plustech Inc 27.03.2005 13:48 PopCap Games 06.11.2006 21:20 QuickTime 26.11.2004 21:09 Real 28.10.2004 16:12 Realtek Sound Manager 21.08.2006 14:07 ReflexiveArcade 18.02.2005 18:07 ScreenSaver 23.01.2006 20:26 Secure Surfing Engine 28.10.2004 15:48 Services en ligne 28.09.2006 10:59 Sony Ericsson 01.05.2006 16:03 Spybot - Search & Destroy 04.11.2006 20:08 Spybot - Search & Destroy2 23.01.2006 20:26 Steganos Internet Anonym 7 27.12.2005 12:03 StreetFighter Flash 17.06.2006 12:53 TheTurtle 07.02.2006 18:22 Trustix 31.07.2005 12:04 Ubi Soft 08.12.2004 13:09 Ubisoft 01.06.2005 22:14 Ulead Systems 17.06.2006 12:59 Visicom Media 17.06.2005 19:32 VoipBuster.com 20.02.2006 19:44 Watchtower 09.03.2006 22:47 Webteh 18.11.2006 22:51 Windows Defender 05.11.2004 17:41 Windows Media Components 04.09.2006 19:43 Windows Media Connect 2 16.12.2006 16:54 Windows Media Player 28.10.2004 15:26 Windows NT 27.08.2005 19:55 WinHex 23.01.2006 20:26 WinRAR 28.10.2004 15:50 xerox 19.11.2006 13:26 ?ssembly 04.11.2006 12:26 ??stem 0 fichier(s) 0 octets 121 Rép(s) 32'159'117'312 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\fichiers communs 30.12.2006 14:15 . 30.12.2006 14:15 .. 26.03.2006 11:33 Adobe 05.11.2006 13:50 Autodesk Shared 05.08.2006 10:52 AVSMedia 05.11.2006 13:44 DESIGNER 21.11.2004 15:01 InstallShield 05.09.2006 20:30 Java 21.08.2006 14:02 Logitech 03.11.2004 19:17 Macrovision Shared 05.11.2006 13:44 Microsoft Shared 28.10.2004 15:48 MSSoap 01.01.2002 00:07 ODBC 24.09.2006 12:54 Panda Software 26.11.2004 21:09 Real 28.10.2004 15:48 Services 01.01.2002 00:07 SpeechEngines 20.06.2006 20:39 Synacast 16.12.2006 14:55 System 28.09.2006 10:59 Teleca Shared 26.11.2004 21:09 xing shared 22.12.2006 18:18 {84B2DB13-0C7E-1036-0924-040307090029} 0 fichier(s) 0 octets 22 Rép(s) 32'159'113'216 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 02.07.2006 20:05 . 02.07.2006 20:05 .. 04.01.2002 18:27 1033 02.07.2006 19:59 1036 25.04.2006 20:33 967'952 MSONSEXT.DLL 02.05.2006 18:37 40'208 MSOSV.DLL 03.06.1999 13:09 122'937 MSOWS409.DLL 07.03.2001 08:00 127'033 MSOWS40c.DLL 11.07.2003 02:25 80'448 PKMWS.DLL 5 fichier(s) 1'338'578 octets 4 Rép(s) 32'159'113'216 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\Program Files\common files 14.01.2006 15:33 . 14.01.2006 15:33 .. 21.08.2006 17:33 EasyInfo 20.02.2005 12:17 Stardock 0 fichier(s) 0 octets 4 Rép(s) 32'159'113'216 octets libres Le volume dans le lecteur C s'appelle Wxp Le numéro de série du volume est 84B2-DB13 Répertoire de C:\ 11.11.2001 00:00 68'096 diff.exe 27.08.2006 14:10 103'424 grep.exe 31.10.2005 16:56 700'416 StubInstaller.exe 24.05.2001 11:59 162'304 UNWISE.EXE 4 fichier(s) 1'034'240 octets 0 Rép(s) 32'159'113'216 octets libres c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.0.2.16\iTunesSetupAdmin.exe c:\Documents and Settings\Wxp\.limewire\.NetworkShare\LimeWireWin4.10.5.exe c:\Documents and Settings\Wxp\.limewire\.NetworkShare\Incomplete\T-2840440-LimeWireWin4.10.9.exe c:\Documents and Settings\Wxp\Bureau\VundoFix.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\diff.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\grep.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LFiles.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\streams.exe c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\swreg.exe c:\Documents and Settings\Wxp\Bureau ewbie\crackme1.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega11.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega22.exe c:\Documents and Settings\Wxp\Bureau ewbie\stega4.exe c:\Documents and Settings\Wxp\Bureau ewbie\HexDecCharEditor\HexDecCharEditor.exe c:\Documents and Settings\Wxp\Bureau ewbie\Nouveau dossier\ocamlq-public[1].exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\dumphive.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\GenericRenosFix.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SmiUpdate.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SrchSTS.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swreg.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swsc.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swxcacls.exe c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\unzip.exe c:\Documents and Settings\Wxp\Bureau\Steganos Updates\sia7int.exe c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\LOAD.EXE c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\SETUP.EXE c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{15BEA3B1-56BA-483F-B423-5FF9C3F2C64C}\mpengine.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll c:\Documents and Settings\Wxp\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll

Utilisateur anonyme · Answer

Bonjour


C'est beaucoup mieux.


Télécharge Combofix.exe (par sUBs) sur ton Bureau
http://download.bleepingcomputer.com/sUBs/combofix.exe 

Double clique combofix.exe et suis les invites.
Lorsque le scan sera complété, un rapport apparaîtra. 
Copie/colle ce rapport dans ta prochaine réponse avec un nouveau HijackThis.

legras · Answer

Alors voici le rapport de ce chère Hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 16:11:02, on 31.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\iTunes\iTunes.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - (no file)
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

legras · Answer

Et du Combofix : Wxp - 06-12-31 11:58:37.10 Service Pack 2 ComboFix 06.11.27 - Running from: "C:\Documents and Settings\Wxp\Bureau" (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\WINDOWS\system32\components C:\Program Files\Fichiers communs\{84B2DB13-0C7E-1036-0924-040307090029} ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Folders Quarantined: C:\QooBox\Purity\Program Files\SSEMBL~1 C:\QooBox\Purity\Program Files\STEM~1 C:\QooBox\Purity\Program Files\STEM~1\??stem ((((((((((((((((((((((((((((((( Files Created from 2006-11-31 to 2006-12-31 )))))))))))))))))))))))))))))))))) 2006-12-31 11:06 d--hs---- C:\Documents and Settings\Wxp\Recent 2006-12-24 18:05 d-------- C:\Documents and Settings\All Users\Application Data\POP3Profiles 2006-12-23 16:43 d-------- C:\Downloads 2006-12-23 16:43 d-------- C:\Bases 2006-12-23 16:42 d-------- C:\Kaspersky 2006-12-23 11:06 853 --a------ C: eboot.cmd 2006-12-23 11:06 68,096 --a------ C:\diff.exe 2006-12-23 11:06 103,424 --a------ C:\grep.exe 2006-12-22 19:46 d-------- C:\VundoFix Backups 2006-12-22 17:10 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2006-12-22 17:10 d-------- C:\Program Files\Grisoft 2006-12-20 19:20 2,788 --a------ C:\WINDOWS\system32 mp.reg 2006-12-20 18:43 d-------- C:\HijackThis 2006-12-18 22:13 d-------- C:\Program Files\IGN 2006-12-18 19:18 118,804 --a------ C:\WINDOWS\system32\quxfwhbc.dll 2006-12-05 17:40 90,164 --ahs---- C:\WINDOWS\system32\vturs.dll (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-12-31 11:59 -------- d-------- C:\Program Files\Fichiers communs 2006-12-26 17:02 -------- d--h----- C:\Program Files\InstallShield Installation Information 2006-12-26 11:17 -------- d-------- C:\Program Files\DAP 2006-12-23 10:56 -------- d---s---- C:\Documents and Settings\Wxp\Application Data\Microsoft 2006-12-17 18:21 -------- d-------- C:\Program Files\Internet Explorer 2006-12-16 16:54 -------- d-------- C:\Program Files\Windows Media Player 2006-12-16 16:54 -------- d-------- C:\Program Files\Outlook Express 2006-12-16 16:54 -------- d-------- C:\Program Files\Movie Maker 2006-12-16 14:55 -------- d-------- C:\Program Files\Fichiers communs\System 2006-12-11 19:03 -------- d-------- C:\Program Files\Opera 2006-12-07 06:29 2374472 --a------ C:\WINDOWS\system32\wmvcore.dll 2006-11-19 10:13 93696 --a------ C:\WINDOWS\system32\swxpckm.dll 2006-11-18 23:03 -------- d-------- C:\Program Files\CCleaner 2006-11-18 22:51 -------- d-------- C:\Program Files\Windows Defender 2006-11-18 12:12 -------- d-------- C:\Program Files\Easy TM 2006-11-17 19:02 -------- d-------- C:\Program Files\MSXML 4.0 2006-11-13 18:41 -------- d-------- C:\Program Files\Java 2006-11-13 18:27 -------- d-------- C:\Program Files\adslTV 2006-11-12 19:50 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2006-11-08 06:07 679424 --a------ C:\WINDOWS\system32\inetcomm.dll 2006-11-06 21:22 -------- d-------- C:\Program Files\iTunes 2006-11-06 21:21 -------- d-------- C:\Program Files\iPod 2006-11-06 21:20 -------- d-------- C:\Program Files\QuickTime 2006-11-06 21:17 -------- d-------- C:\Program Files\Apple Software Update 2006-11-05 22:27 -------- d-------- C:\Documents and Settings\Wxp\Application Data\vlc 2006-11-05 21:44 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Opera 2006-11-05 13:50 -------- d-------- C:\Program Files\Fichiers communs\Autodesk Shared 2006-11-05 13:49 -------- d-------- C:\Program Files\AutoCAD 2006 2006-11-05 13:44 -------- d-------- C:\Program Files\Microsoft Office 2006-11-05 13:44 -------- d-------- C:\Program Files\Fichiers communs\Microsoft Shared 2006-11-05 13:44 -------- d-------- C:\Program Files\Fichiers communs\DESIGNER 2006-11-05 13:44 -------- d-------- C:\Program Files\AnswerWorks 4.0 2006-11-05 13:41 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Autodesk 2006-11-04 21:25 -------- d-------- C:\Program Files\Autodesk 2006-11-04 20:08 -------- d-------- C:\Program Files\Spybot - Search & Destroy2 2006-11-04 16:25 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Lavasoft 2006-11-04 16:24 -------- d-------- C:\Program Files\Lavasoft 2006-11-04 14:14 1245696 --a------ C:\WINDOWS\system32\msxml4.dll 2006-11-02 22:24 -------- d-------- C:\Program Files\MSN Messenger 2006-11-02 22:05 -------- d-------- C:\Program Files\F-Secure 2006-11-01 20:50 -------- d-------- C:\Documents and Settings\Wxp\Application Data\F-Secure 2006-10-31 21:26 -------- d-------- C:\Program Files\Google 2006-10-29 15:28 88 -r-hs---- C:\WINDOWS\system32\4393551409.sys 2006-10-29 15:28 2516 --ahsc--- C:\WINDOWS\system32\KGyGaAvL.sys 2006-10-20 02:38 716800 --a------ C:\WINDOWS\system32\sxs.dll 2006-10-13 13:36 145920 --a------ C:\WINDOWS\system32 wprovau.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un] "MessengerPlus3"="\"C:\Program Files\Messenger Plus! 3\MsgPlus.exe\" /WinStart" "MSMSGS"="\"C:\Program Files\Messenger\msmsgs.exe\" /background" "Start WingMan Profiler"="\"C:\Program Files\Logitech\Profiler\lwemon.exe\" /noui" "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" "ccleaner"="\"C:\Program Files\CCleaner\ccleaner.exe\" /AUTO" "msnmsgr"="\"C:\Program Files\MSN Messenger\msnmsgr.exe\" /background" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" "MessengerPlus3"="\"C:\Program Files\Messenger Plus! 3\MsgPlus.exe\"" "SunJavaUpdateSched"="\"C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe\"" "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" "iTunesHelper"="\"C:\Program Files\iTunes\iTunesHelper.exe\"" "Windows Defender"="\"C:\Program Files\Windows Defender\MSASCui.exe\" -hide" "!AVG Anti-Spyware"="\"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe\" /minimized" "QuickTime Task"="\"C:\Program Files\QuickTime\qttask.exe\" -atboottime" "KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\ 65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\MAPI] "NoChange"="1" "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\MSFS] "Installed"="1" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000003 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "Source"="C:\WINDOWS\SideBar\sidebar\index.html" "SubscribedURL"="C:\WINDOWS\SideBar\sidebar\index.html" "FriendlyName"="Longhorn SideBar" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,ea,01,00,00,01,00,00,00,96,00,00,00,c1,01,00,00,ec,\ 03,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:01,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,ea,01,00,00,01,00,00,00,96,00,00,00,c1,01,\ 00,00,01,00,00,40 "RestoredStateInfo"=hex:18,00,00,00,13,01,00,00,1d,01,00,00,da,00,00,00,d2,00,\ 00,00,01,00,00,40 [HKEY_USERS\.default\software\microsoft\windows\currentversion unonce] "SIA7"="\"C:\Program Files\Steganos Internet Anonym 7\SIA7.exe\" -firstboot" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion unonce] "SIA7"="\"C:\Program Files\Steganos Internet Anonym 7\SIA7.exe\" -firstboot" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" "{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook" "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000000 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "0aMCPClient"="{F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}" "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.exe.lnk] "path"="C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.exe.lnk" "backup"="C:\WINDOWS\pss\Adobe Gamma Loader.exe.lnkCommon Startup" "location"="Common Startup" "command"="C:\PROGRA~1\FICHIE~1\Adobe\CALIBR~1\ADOBEG~1.EXE " "item"="Adobe Gamma Loader.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^VoipBuster.lnk] "path"="C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\VoipBuster.lnk" "backup"="C:\WINDOWS\pss\VoipBuster.lnkCommon Startup" "location"="Common Startup" "command"="C:\PROGRA~1\VOIPBU~1.COM\VOIPBU~1\VOIPBU~1.EXE -nosplash -minimized" "item"="VoipBuster" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="NeroCheck" "hkey"="HKLM" "command"="C:\WINDOWS\system32\\NeroCheck.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PeerGuardian] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="PeerGuardian_1" "hkey"="HKCU" "command"="C:\Program Files\PeerGuardian pr14\PeerGuardian_1.99b_pr14.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="qttask" "hkey"="HKLM" "command"="\"C:\Program Files\QuickTime\qttask.exe\" -atboottime" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="SOUNDMAN" "hkey"="HKLM" "command"="SOUNDMAN.EXE" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="jusched" "hkey"="HKLM" "command"="C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="realsched" "hkey"="HKLM" "command"="\"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe\" -osboot" "inimapping"="0" HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\wingdm32 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" ~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ backup-20061226-111707-214 O18 - Protocol: bwz0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-339 O18 - Protocol: bww0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-669 O18 - Protocol: bwx0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-370 O18 - Protocol: bww0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-947 O18 - Protocol: bwx0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-919 O18 - Protocol: bwy0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-284 O18 - Protocol: bwz0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-904 O18 - Protocol: bwy0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-625 O18 - Protocol: bwt0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-371 O18 - Protocol: bwv0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-507 O18 - Protocol: bws0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-471 O18 - Protocol: bwr0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-360 O18 - Protocol: bwv0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-133 O18 - Protocol: bws0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-520 O18 - Protocol: bwt0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-578 O18 - Protocol: bwu0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-187 O18 - Protocol: bwu0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-237 O18 - Protocol: bwn0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-971 O18 - Protocol: bwp0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-668 O18 - Protocol: bwp0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-647 O18 - Protocol: bwn0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-644 O18 - Protocol: bwo0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-495 O18 - Protocol: bwo0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-612 O18 - Protocol: bwq0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-967 O18 - Protocol: bwr0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-431 O18 - Protocol: bwq0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-984 O18 - Protocol: bwl0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-436 O18 - Protocol: bwl0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-900 O18 - Protocol: bwi0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-816 O18 - Protocol: bwm0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-980 O18 - Protocol: bwk0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-173 O18 - Protocol: bwj0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-901 O18 - Protocol: bwj0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-378 O18 - Protocol: bwm0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-478 O18 - Protocol: bwk0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-112 O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll backup-20061226-111707-786 O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-310 O18 - Protocol: bwg0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-739 O18 - Protocol: bwh0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-256 O18 - Protocol: bwi0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-716 O18 - Protocol: bwh0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-420 O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-223 O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-820 O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-683 O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-416 O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-588 O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-449 O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-428 O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-201 O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-597 O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-844 O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-908 O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-393 O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-752 O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-404 O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-398 O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-394 O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-526 O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-259 O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-231 O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-216 O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-981 O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-745 O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-215 O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-188 O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-443 O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-496 O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-888 O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-830 O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-315 O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-781 O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-200 O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-681 O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-670 O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-649 O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111707-978 O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll backup-20061226-111706-358 O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg backup-20061226-111706-950 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab backup-20061226-111706-479 O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab backup-20061226-111706-180 O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com backup-20061226-111706-846 O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) backup-20061226-111706-613 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) backup-20061226-111706-362 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL backup-20061226-111706-609 O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE backup-20061226-111705-672 O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll backup-20061226-111705-795 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll backup-20061226-111705-845 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 backup-20061226-111705-135 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 backup-20061226-111705-830 O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm backup-20061226-111705-443 O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP backup-20061226-111705-495 O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe backup-20061226-111705-851 O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader eader_sl.exe backup-20061226-111705-334 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" -osboot backup-20061226-111705-905 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime backup-20061226-111705-576 O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm backup-20061226-111705-559 O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm backup-20061226-111705-706 O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll backup-20061226-111705-952 O2 - BHO: (no name) - {61E91E9C-BF33-6A6A-7BFC-00B25F19A7AE} - C:\WINDOWS\system32\urwzhx.dll (file missing) backup-20061226-111705-824 O2 - BHO: (no name) - {36068946-CD51-1AC7-C4AD-044557583146} - C:\WINDOWS\system32\lctsupj.dll (file missing) backup-20061226-111705-959 O2 - BHO: (no name) - {42E53C82-E11D-E01B-A428-084851DB6947} - C:\WINDOWS\system32\yzivngl.dll (file missing) backup-20061226-111705-290 O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\hpvekfro.dll (file missing) backup-20061226-111705-126 O2 - BHO: (no name) - {2527DC3F-C7A0-CF37-33EA-0525C1600A34} - C:\WINDOWS\system32\quqrbkl.dll backup-20061226-111705-436 O2 - BHO: (no name) - {0964344D-C233-DAF1-2ADC-08C2A8D60810} - C:\WINDOWS\system32\hptukyk.dll backup-20061226-111705-231 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll backup-20061226-111705-638 O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\PROGRA~1\DAP\dapbho.dll backup-20061226-111705-783 R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file) Contents of the 'Scheduled Tasks' folder C:\WINDOWS asks\AppleSoftwareUpdate.job C:\WINDOWS asks\MP Scheduled Scan.job C:\WINDOWS asks\{DE596C44-D582-438D-BE6A-E311E18B1DC2}_MICHAEL_Wxp.job Completion time: 06-12-31 11:59:51.34 C:\ComboFix.txt ... 06-12-31 11:59

Utilisateur anonyme · Answer

Re


Quelques lignes inutiles dans HijackThis
Relance un scan HijackThis et coche les lignes ci-dessous :

O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - (no file) 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k 
O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing) 

Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »

Combofix a fait du ménage.


As tu encore des dysfonctionnements  ?

legras · Answer

Non tous à l'air de bien fonctionner, j'ai pu installer IE7 (pas de commentaires svp :~) ) et plus aucune pub non incorporé au site n'apparaissent, et l'ordi s'éteinds de plus en plus rapidement.

Merci en tous cas de votre aide.

[Virus] Infections par de multiple pub

30 réponses

Discussions similaires

Newsletters