win32 adware gen +souris folle

Question

bonjour tout le monde

mon curseur s'affole (souris intégrée:touchpad).

un ami m'a dit que j'avais surement un virus.
J'ai téléchargé avast et il a diagnostiqué un  win32 adware-gen dans deux fichiers (system volume information,windows 32 pbfrv2)
qui sont actuellement en quarantaine.

Pour information, j'utilise emule depuis deux semaines et mon power cinema ne lit plus les dvd et realplayer et windows video ne lit que les videos sur le disque dur mais les dvd et souvent je n'ai pas de son .
Et hier j'ai recu une fenetre qui disaient que des options de mon dispositif de pointage sinoptics ont été désactivés car un un autre dispostif est arrivé (je me souviens plus des termes exacts) alors que je ne n'ai rien demandé

questions:
-emule est-il pour quelque chose sachant que je n'étais pas protégé(je pensais que je l'étais , en tout cas c'est ce que m'a dit celui qui m'a vendu le pc)?
-win32 adware a t-il provoqué la folie de ma souris?

ps: j'ai essayé de suivre les instructions dans les posts qui parlent des win32 adware-gen mais j'avoue que c'est assez compliqué pour moi , j'ai besoin d'une procedure plus détaillée (par exemple je ne sais ce que veut dire dézippé)

merci por votre aide et voilà mon hijack que j'ai mis deux heures à avoir hihihihi

Logfile of HijackThis v1.99.1
Scan saved at 00:26:41, on 05/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Logitech\Video\LowLight.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\macromed\flash\GetFlash.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ABOUJA~1\LOCALS~1\Temp\Rar$EX27.328\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll (file missing)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Install5G] D:\Install.exe /SI=30
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NetAppel] "C:\Program Files\NetAppel\NetAppel.exe" -nosplash -minimized
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin
pjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin
pjpi142_05.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll (file missing)
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe (file missing)
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

Myself · Answer

télécharge ewidoo, virus total et Ccleaner et post les logs.

kikoche · Answer

salut et merci pour ton aide

apparemment plus de probleme de souris depuis que j'ai utulisé c cleaner.  peux tu me donner une explication?

et voilà le resultat pour ad-ware se QU EST CE QUE JE FAIS AVEC CA   SI JE DOIS LE SUPPRIMER  COMMENT FAIRE?  

je continue  la suite ewido etc

Ad-Aware SE Build 1.06r1
Logfile Created on:vendredi 5 janvier 2007 21:20:21
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R142 02.01.2007
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Softomate Toolbar(TAC index:9):3 total references
Tracking Cookie(TAC index:3):3 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


05-01-2007 21:20:21 - Scan started. (Full System Scan)

Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
    FilePath           : \SystemRoot\System32\
    ProcessID          : 688
    ThreadCreationTime : 05-01-2007 19:58:08
    BasePriority       : Normal


#:2 [csrss.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 736
    ThreadCreationTime : 05-01-2007 19:58:12
    BasePriority       : Normal


#:3 [winlogon.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 760
    ThreadCreationTime : 05-01-2007 19:58:16
    BasePriority       : High


#:4 [services.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 804
    ThreadCreationTime : 05-01-2007 19:58:19
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Applications Services et Contrôleur
    InternalName       : services.exe
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : services.exe

#:5 [lsass.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 816
    ThreadCreationTime : 05-01-2007 19:58:20
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : LSA Shell (Export Version)
    InternalName       : lsass.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : lsass.exe

#:6 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 968
    ThreadCreationTime : 05-01-2007 19:58:24
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:7 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1048
    ThreadCreationTime : 05-01-2007 19:58:27
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:8 [svchost.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 1204
    ThreadCreationTime : 05-01-2007 19:58:29
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:9 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1328
    ThreadCreationTime : 05-01-2007 19:58:29
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:10 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1428
    ThreadCreationTime : 05-01-2007 19:58:30
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:11 [spoolsv.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1916
    ThreadCreationTime : 05-01-2007 19:58:37
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
    ProductVersion     : 5.1.2600.2696
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Spooler SubSystem App
    InternalName       : spoolsv.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : spoolsv.exe

#:12 [explorer.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 1928
    ThreadCreationTime : 05-01-2007 19:58:37
    BasePriority       : Normal
    FileVersion        : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 6.00.2900.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Explorateur Windows
    InternalName       : explorer
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : EXPLORER.EXE

#:13 [syntplpr.exe]
    FilePath           : C:\Program Files\Synaptics\SynTP\
    ProcessID          : 464
    ThreadCreationTime : 05-01-2007 19:58:48
    BasePriority       : Normal
    FileVersion        : 7.11.9 12Aug04
    ProductVersion     : 7.11.9 12Aug04
    ProductName        : Synaptics Pointing Device Driver
    CompanyName        : Synaptics, Inc.
    FileDescription    : TouchPad Driver Helper Application
    InternalName       : SynTPLpr
    LegalCopyright     : Copyright (C) Synaptics, Inc. 1996-2004
    OriginalFilename   : SynTPLpr.exe

#:14 [syntpenh.exe]
    FilePath           : C:\Program Files\Synaptics\SynTP\
    ProcessID          : 472
    ThreadCreationTime : 05-01-2007 19:58:48
    BasePriority       : Normal
    FileVersion        : 7.11.9 12Aug04
    ProductVersion     : 7.11.9 12Aug04
    ProductName        : Synaptics Pointing Device Driver
    CompanyName        : Synaptics, Inc.
    FileDescription    : Synaptics TouchPad Enhancements
    InternalName       : Synaptics Enhancements Application
    LegalCopyright     : Copyright (C) Synaptics, Inc. 1996-2004
    OriginalFilename   : SynTPEnh.exe

#:15 [vttimer.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 500
    ThreadCreationTime : 05-01-2007 19:58:49
    BasePriority       : Normal
    FileVersion        : 2.00.01-0307
    ProductVersion     : 2.00.01-0307
    ProductName        : S3 Graphics, Inc. Utilities
    CompanyName        : S3 Graphics, Inc.
    InternalName       : S3Timer
    LegalCopyright     : Copyright (C) 2001-2005 S3 Graphics, Inc.
    LegalTrademarks    : S3 is a registered trademark of S3 Incorporated

#:16 [vttrayp.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 520
    ThreadCreationTime : 05-01-2007 19:58:49
    BasePriority       : Normal
    FileVersion        : 2.00.35-0110
    ProductVersion     : 2.00.35-0110
    ProductName        : Part of S3 Screen Toys
    CompanyName        : S3 Graphics Co., Ltd.
    FileDescription    : s3contrl (32-bit)
    InternalName       : s3contrl
    LegalCopyright     : Copyright (c) 2004-2005 S3 Graphics Co., Ltd.
    LegalTrademarks    : S3 is a registered trademark of S3 Incorporated
    Comments           : S3TrayPlus tray icon utility (32-bit)

#:17 [soundman.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 528
    ThreadCreationTime : 05-01-2007 19:58:49
    BasePriority       : Normal
    FileVersion        : 5.1.0.30
    ProductVersion     : 5.1.0.29
    ProductName        : Realtek Sound Manager
    CompanyName        : Realtek Semiconductor Corp.
    FileDescription    : Realtek Sound Manager
    InternalName       : ALSMTray
    LegalCopyright     : Copyright (c) 2001-2004 Realtek Semiconductor Corp.
    OriginalFilename   : ALSMTray.exe
    Comments           : Realtek AC97 Audio Sound Manager

#:18 [jusched.exe]
    FilePath           : C:\Program Files\Java\j2re1.4.2_05\bin\
    ProcessID          : 536
    ThreadCreationTime : 05-01-2007 19:58:49
    BasePriority       : Normal


#:19 [realsched.exe]
    FilePath           : C:\Program Files\Fichiers communs\Real\Update_OB\
    ProcessID          : 560
    ThreadCreationTime : 05-01-2007 19:58:50
    BasePriority       : Normal
    FileVersion        : 0.1.0.3249
    ProductVersion     : 0.1.0.3249
    ProductName        : RealPlayer (32-bit) 
    CompanyName        : RealNetworks, Inc.
    FileDescription    : RealNetworks Scheduler
    InternalName       : schedapp
    LegalCopyright     : Copyright © RealNetworks, Inc. 1995-2004
    LegalTrademarks    : RealAudio(tm) is a trademark of RealNetworks, Inc.
    OriginalFilename   : realsched.exe

#:20 [logitray.exe]
    FilePath           : C:\Program Files\Logitech\Video\
    ProcessID          : 576
    ThreadCreationTime : 05-01-2007 19:58:50
    BasePriority       : Normal
    FileVersion        : 8.0.3.1112
    ProductVersion     : 8.0.3.1112
    ProductName        : Logitech QuickCam
    CompanyName        : Logitech Inc.
    FileDescription    : ImageStudio Tray Application
    InternalName       : LogiTray.exe
    LegalCopyright     : (c) 1996-2003 Logitech.  All rights reserved.
    OriginalFilename   : LogiTray.exe

#:21 [qttask.exe]
    FilePath           : C:\Program Files\QuickTime\
    ProcessID          : 716
    ThreadCreationTime : 05-01-2007 19:58:52
    BasePriority       : Normal
    FileVersion        : 6.5
    ProductVersion     : QuickTime 6.5
    ProductName        : QuickTime
    CompanyName        : Apple Computer, Inc.
    InternalName       : QuickTime Task
    LegalCopyright     : © Apple Computer, Inc. 2001-2004
    OriginalFilename   : QTTask.exe

#:22 [ashdisp.exe]
    FilePath           : C:\PROGRA~1\ALWILS~1\Avast4\
    ProcessID          : 956
    ThreadCreationTime : 05-01-2007 19:58:54
    BasePriority       : Normal
    FileVersion        : 5, 0, 0, 0
    ProductVersion     : 5, 0, 0, 0
    ProductName        : avast! Antivirus
    FileDescription    : avast! service GUI component
    InternalName       : aswDisp
    LegalCopyright     : Copyright (c) 2006 ALWIL Software
    OriginalFilename   : aswDisp.exe

#:23 [ctfmon.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 960
    ThreadCreationTime : 05-01-2007 19:58:54
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : CTF Loader
    InternalName       : CTFMON
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : CTFMON.EXE

#:24 [skype.exe]
    FilePath           : C:\Program Files\Skype\Phone\
    ProcessID          : 1116
    ThreadCreationTime : 05-01-2007 19:58:55
    BasePriority       : Normal


#:25 [googletoolbarnotifier.exe]
    FilePath           : C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\
    ProcessID          : 1124
    ThreadCreationTime : 05-01-2007 19:58:56
    BasePriority       : Normal
    FileVersion        : 1, 2, 908, 5008
    ProductVersion     : 1, 2, 908, 5008
    ProductName        : GoogleToolbarNotifier
    CompanyName        : Google Inc.
    FileDescription    : GoogleToolbarNotifier
    LegalCopyright     : Copyright © 2005-2006
    OriginalFilename   : GoogleToolbarNotifier.exe

#:26 [aolacsd.exe]
    FilePath           : C:\PROGRA~1\FICHIE~1\AOL\ACS\
    ProcessID          : 1608
    ThreadCreationTime : 05-01-2007 19:59:09
    BasePriority       : Normal


#:27 [aswupdsv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 1756
    ThreadCreationTime : 05-01-2007 19:59:11
    BasePriority       : Normal


#:28 [ashserv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 1708
    ThreadCreationTime : 05-01-2007 19:59:12
    BasePriority       : High
    FileVersion        : 4, 7, 889, 0
    ProductVersion     : 4, 7, 0, 0
    ProductName        : avast! Antivirus 
    FileDescription    : avast! antivirus service
    InternalName       : aswServ
    LegalCopyright     : Copyright (c) 2006 ALWIL Software
    OriginalFilename   : aswServ.exe

#:29 [lvcoms.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1808
    ThreadCreationTime : 05-01-2007 19:59:12
    BasePriority       : Normal
    FileVersion        : 8.0.3.1110
    ProductVersion     : 8.0.3.1110
    ProductName        : Logitech QuickCam
    CompanyName        : Logitech Inc.
    FileDescription    : LVCom Server
    InternalName       : LVComS.exe
    LegalCopyright     : (c) 1996-2003 Logitech.  All rights reserved.
    OriginalFilename   : LVComS.exe

#:30 [lowlight.exe]
    FilePath           : C:\Program Files\Logitech\Video\
    ProcessID          : 1932
    ThreadCreationTime : 05-01-2007 19:59:14
    BasePriority       : Normal
    FileVersion        : 8.0.3.1112
    ProductVersion     : 8.0.3.1112
    ProductName        : Logitech QuickCam
    CompanyName        : Logitech Inc.
    FileDescription    : Automatic Low Light Module
    InternalName       : LowLight.exe
    LegalCopyright     : (c) 1996-2003 Logitech.  All rights reserved.
    OriginalFilename   : LowLight.exe

#:31 [mdm.exe]
    FilePath           : C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\
    ProcessID          : 1940
    ThreadCreationTime : 05-01-2007 19:59:15
    BasePriority       : Normal
    FileVersion        : 7.00.9064.9150
    ProductVersion     : 7.00.9064.9150
    ProductName        : Microsoft Development Environment
    CompanyName        : Microsoft Corporation
    FileDescription    : Machine Debug Manager
    InternalName       : mdm.exe
    LegalCopyright     : Copyright (C) Microsoft Corp. 1997-2000
    OriginalFilename   : mdm.exe

#:32 [slserv.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 116
    ThreadCreationTime : 05-01-2007 19:59:15
    BasePriority       : Normal
    FileVersion        : 2.80.00(24Apr2000)
    ProductVersion     : 2.80.00
    ProductName        : Modem
    FileDescription    : User-Level Modem Service
    InternalName       : slserv
    LegalCopyright     : Copyright © 1999-2000
    OriginalFilename   : slserv.exe

#:33 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 140
    ThreadCreationTime : 05-01-2007 19:59:15
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:34 [wlancfg.exe]
    FilePath           : C:\Program Files\Inventel\Gateway\
    ProcessID          : 156
    ThreadCreationTime : 05-01-2007 19:59:16
    BasePriority       : Normal
    FileVersion        : 4, 0, 0, 0
    ProductVersion     : 4, 0, 0, 0
    ProductName        : Application WLANCfg
    CompanyName        : Inventel
    FileDescription    : WLANCfg
    InternalName       : WLANCfg
    LegalCopyright     : Copyright (C) 2003 - 2004 Inventel
    LegalTrademarks    : Inventel
    OriginalFilename   : WLANCfg.EXE

#:35 [ashmaisv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 2924
    ThreadCreationTime : 05-01-2007 19:59:58
    BasePriority       : Normal


#:36 [ashwebsv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 2992
    ThreadCreationTime : 05-01-2007 19:59:59
    BasePriority       : Normal


#:37 [alg.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 3572
    ThreadCreationTime : 05-01-2007 20:00:06
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Application Layer Gateway Service
    InternalName       : ALG.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : ALG.exe

#:38 [iexplore.exe]
    FilePath           : C:\Program Files\Internet Explorer\
    ProcessID          : 108
    ThreadCreationTime : 05-01-2007 20:00:58
    BasePriority       : Normal
    FileVersion        : 7.00.5730.11 (winmain(wmbla).061017-1135)
    ProductVersion     : 7.00.5730.11
    ProductName        : Windows® Internet Explorer
    CompanyName        : Microsoft Corporation
    FileDescription    : Internet Explorer
    InternalName       : iexplore
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : IEXPLORE.EXE

#:39 [rundll32.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 3316
    ThreadCreationTime : 05-01-2007 20:12:39
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Exécuter une DLL en tant qu'application
    InternalName       : rundll
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : RUNDLL.EXE

#:40 [ad-aware.exe]
    FilePath           : C:\PROGRA~1\Lavasoft\AD-AWA~1\
    ProcessID          : 2648
    ThreadCreationTime : 05-01-2007 20:19:11
    BasePriority       : Normal
    FileVersion        : 6.2.0.236
    ProductVersion     : SE 106
    ProductName        : Lavasoft Ad-Aware SE
    CompanyName        : Lavasoft Sweden
    FileDescription    : Ad-Aware SE Core application
    InternalName       : Ad-Aware.exe
    LegalCopyright     : Copyright © Lavasoft AB Sweden
    OriginalFilename   : Ad-Aware.exe
    Comments           : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

 Softomate Toolbar Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 9
    Category           : Data Miner
    Comment            : 
    Rootkey            : HKEY_CLASSES_ROOT
    Object             : softomate.ietoolbar.1

 Softomate Toolbar Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 9
    Category           : Data Miner
    Comment            : 
    Rootkey            : HKEY_CLASSES_ROOT
    Object             : softomate.ietoolbar

 Softomate Toolbar Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 9
    Category           : Data Miner
    Comment            : 
    Rootkey            : HKEY_CLASSES_ROOT
    Object             : interface\{cabbb49a-4d7b-415b-8250-15c3b854e9ff}

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 3
Objects found so far: 3


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 3


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : aboujaida@247realmedia[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:7
    Value              : Cookie:aboujaida@247realmedia.com/
    Expires            : 01-01-2021 01:00:00
    LastSync           : Hits:7
    UseCount           : 0
    Hits               : 7

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : aboujaida@weborama[2].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:2
    Value              : Cookie:aboujaida@weborama.fr/
    Expires            : 08-03-2007 20:18:44
    LastSync           : Hits:2
    UseCount           : 0
    Hits               : 2

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : aboujaida@www.smartadserver[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:13
    Value              : Cookie:aboujaida@www.smartadserver.com/
    Expires            : 31-12-2026 20:19:20
    LastSync           : Hits:13
    UseCount           : 0
    Hits               : 13

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 3
Objects found so far: 6



Deep scanning and examining files (C:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for C:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 6


Deep scanning and examining files (E:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for E:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 6


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
1 entries scanned.
New critical objects:0
Objects found so far: 6




Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 6

21:27:36 Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:07:14.266
Objects scanned:123783
Objects identified:6
Objects ignored:0
New critical objects:6

Win32 adware gen +souris folle

2 réponses

Votre réponse

Discussions similaires

Newsletters