[virus] cheval de troie:beagle-ms Résolu/Fermé

Question

bonjour et bonne année à tous
j'ai attrappé un cheval de trois (win 32:beagle-ms.[trj]),
j'ai scaner les fichiers avec avast 0 infection
ensuite mème chose avec les archives la il y avait 100lignes listèes
j'ai tout detruit je pense que ça a marchè.
dois-je télécharger cleaner comme me le conseil avast.                autre chose depuis j'ai du faire une mauvaise manip de règlage dans avastquand j'allume mon pc l'anti-virus analyse tout plein de donnée il faut faire echap pour sauter celuis ci alors qu'avant il ne le fesait pas comment dois-je procèdè.
merci par avance.

^^Marie^^ · Answer

Salut

Fais un nettoyage complet


Il est important d’effectuer la manip dans sa totalité et dans l’ordre :

Télécharge (sauf si tu les as) et colle les 3 rapports EN GRAS dans l’ordre

A - ad-aware version 1.06 
 (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite 
voir demo 
http://pageperso.aol.fr/balltrap34/adwseflash.zip

B - spybot version 1.4 
 (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite 
voir demo d utilisation 
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

C -  Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..) 
Télécharge ici : 
https://www.ccleaner.com/ccleaner/download 
Tutorial ici: 
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php 
et
http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm 

D – Ewido – AVG 
AVG Anti-Spyware : 
https://www.avg.com/en-ww/free-antivirus-download 
Tu l'installes. 
Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente! 

Lance AVG Anti-Spyware 
Clique sur le bouton Analyse (de la barre d'outils) 
Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine. 
Reviens à l'onglet Analyse. Clique sur Analyse complète du système. 
/!\ Si un fichier est infecté en fin d'analyse /!\
choisis l'option " Appliquer toutes les actions " en bas. 
Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous" 
Enregistre ce fichier texte sur ton bureau.
Copie/colle le rapport


E - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX) 
https://assiste.com/404_La_page_demandee_n_existe_pas.php 
http://www.bitdefender.fr/scan8/ie.html 
Copie/COLLE le rapport entier 

F -  Hijackthis - Outil de diagnostic et réparation 
lire démo 
http://pageperso.aol.fr/balltrap34/Hijenr.gif 
http://pageperso.aol.fr/balltrap34/demohijack.htm 
Télécharge version française ici 
http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html 
Copie/colle le rapport 

Bon courage 

A++

^^Marie^^ · Answer

COPIE / COLLE les rapports D/E/F/

Je ne suis pas magicien...........ne..........

jp16 · Answer

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
salut marie je t'envoie le premier rapport
 + Créé à:	14:48:58 10/01/2007

 + Résultat de l'analyse:	



C:\Documents and Settings\JEAN PHILIPPE\Local Settings\Temporary Internet Files\Content.IE5\TF3JH5CE\wanadoo_toolbar[1].zip/wanadoo_toolbar.dll -> Adware.BHO : Ignoré.
C:\Program Files\wanadoo_toolbar\__delete_on_reboot__W_A_N_A_D_O_~_2_._D_L_L_ -> Adware.BHO : Ignoré.
C:\Program Files\wanadoo_toolbar\wanadoo_toolbar.dll -> Adware.BHO : Ignoré.
C:\System Volume Information\_restore{4CB1D558-D11D-4C16-874B-96910B0CF6C4}\RP460\A0079922.dll -> Adware.BHO : Ignoré.
[2452] C:\PROGRA~1\WANADO~1\WANADO~2.DLL -> Adware.BHO : Ignoré.
[4008] C:\PROGRA~1\WANADO~1\WANADO~2.DLL -> Adware.BHO : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\Config.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\cs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\db -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\db\Aliases.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\db\Sites.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\dwld -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\dwld\WhiteList.xip -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\persist.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\report -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\report\aggr_storage.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\report\send_storage.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\res1 -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\cs\res1\WhiteList.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\report -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168179829.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168202965.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237314.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237375.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237436.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237497.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237558.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237619.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237680.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237741.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237802.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237863.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237924.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168237985.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238046.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238107.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238168.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238184.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238229.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238290.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238351.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238412.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238473.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238534.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238595.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238656.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238717.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238778.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238839.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238900.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168238961.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239022.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239083.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239144.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239205.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239266.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239327.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239388.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239449.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239510.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239571.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239632.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239693.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239754.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239815.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239876.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239937.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168239998.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240030.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240059.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240120.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240181.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240242.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240303.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240364.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240425.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240486.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240547.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240608.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240669.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240730.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240791.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240852.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240913.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168240974.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241035.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241096.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241157.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241218.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241279.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241340.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241401.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241462.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241523.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241584.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241645.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241706.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241767.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241828.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241889.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168241950.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242011.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242072.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242133.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242194.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242255.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242316.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242377.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242438.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242499.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242560.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242621.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242682.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242743.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242804.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242865.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242926.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168242987.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243030.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243048.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243109.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243170.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243231.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243292.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243353.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243414.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243475.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243536.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243597.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243658.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243719.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243780.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243841.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243902.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168243963.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168244007.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168254510.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168269866.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168287867.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168341092.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168346494.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168347094.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168347583.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168348183.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168348294.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168348604.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168348785.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168349494.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168349984.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168350094.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168350584.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168351489.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168352383.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168352689.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168352841.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168353289.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168355479.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168356679.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168358694.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168359294.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168361113.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168361349.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168361451.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168362302.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168362904.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168364630.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\CAROLE\Application Data\ShopperReports\shprrprt_1168418742.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\Config.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\db -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\dwld -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\dwld\WhiteList.xip -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\persist.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\report -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\report\aggr_storage.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\report\send_storage.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\res1 -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\cs\res1\WhiteList.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\LocalService\Application Data\ShopperReports\shprrprt.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\Config.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\db -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\db\Aliases.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\db\Sites.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\dwld -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\dwld\WhiteList.xip -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\persist.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\report -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\report\aggr_storage.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\report\send_storage.xml -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\res2 -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\cs\res2\WhiteList.dbs -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\shprrprt.log -> Adware.HotBar : Ignoré.
C:\Documents and Settings\MANON\Application Data\ShopperReports\shprrprt_1163573081.log -> Adware.HotBar : Ignoré.
C:\Program Files\ShopperReports -> Adware.HotBar : Ignoré.
C:\Program Files\ShopperReports\Bin -> Adware.HotBar : Ignoré.
C:\Program Files\ShopperReports\Bin\2.0.0 -> Adware.HotBar : Ignoré.
C:\Program Files\ShopperReports\Bin\2.0.0\__delete_on_reboot__S_h_p_r_R_p_r_t_._d_l_l_ -> Adware.HotBar : Ignoré.
C:\Program Files\ShopperReports\Uninst.exe -> Adware.HotBar : Ignoré.
C:\Program Files\ShopperReports\cs -> Adware.HotBar : Ignoré.
C:\Program Files\ShopperReports\cs\persist.dbs -> Adware.HotBar : Ignoré.
C:\Program Files\ShopperReports\uninstall.exe -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.HbAx -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.HbAx.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.IEButton -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.IEButton.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\ShopperReports -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\ShopperReports\ShopperReports -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\ShopperReports\ShopperReports\PostInstaller -> Adware.HotBar : Ignoré.
HKU\.DEFAULT\Software\ShopperReports -> Adware.HotBar : Ignoré.
HKU\.DEFAULT\Software\ShopperReports\ShopperReports -> Adware.HotBar : Ignoré.
HKU\.DEFAULT\Software\ShopperReports\ShopperReports\PostInstaller -> Adware.HotBar : Ignoré.
HKU\S-1-5-18\Software\ShopperReports -> Adware.HotBar : Ignoré.
HKU\S-1-5-18\Software\ShopperReports\ShopperReports -> Adware.HotBar : Ignoré.
HKU\S-1-5-18\Software\ShopperReports\ShopperReports\PostInstaller -> Adware.HotBar : Ignoré.
HKU\S-1-5-21-1340791720-3103030655-2577953177-1006\Software\ShopperReports -> Adware.HotBar : Ignoré.
HKU\S-1-5-21-1340791720-3103030655-2577953177-1006\Software\ShopperReports\ShopperReports -> Adware.HotBar : Ignoré.
HKU\S-1-5-21-1340791720-3103030655-2577953177-1006\Software\ShopperReports\ShopperReports\PostInstaller -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{4CB1D558-D11D-4C16-874B-96910B0CF6C4}\RP460\A0079921.dll -> Adware.Shopper : Ignoré.
[1352] C:\Program Files\ShopperReports\Bin\2.0.0\ShprRprt.dll -> Adware.Shopper : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@247realmedia[2].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@msnservices.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@ads.addynamix[2].txt -> TrackingCookie.Addynamix : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@fastclick[2].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@ehg-yvesrocher.hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@hitbox[2].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@ads13.hyperbanner[1].txt -> TrackingCookie.Hyperbanner : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@overture[1].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\CAROLE\Cookies\carole@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\JEAN PHILIPPE\Cookies\jean philippe@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\MANON\Cookies\manon@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.


Fin du rapport

bonne journèe

jp16 · Answer

BitDefender Online Scanner
  
  
 
Rapport d'analyse généré à: Wed, Jan 10, 2007 - 17:49:56
 
 
  
  
 
Voie d'analyse: C:\;D:\;E:\;F:\;G:\;H:\;I:\;
  
  
 
 
  
  
 
Statistiques
 
Temps
 00:47:21
 
Fichiers
 234748
 
Directoires
 6250
 
Secteurs de boot
 2
 
Archives
 6678
 
Paquets programmes
 284
 
  
  
 
Résultats
 
Virus identifiés
 1
 
Fichiers infectés
 2
 
Fichiers suspects
 0
 
Avertissements
 0
 
Désinfectés
 0
 
Fichiers effacés
 2
 
  
  
 
Info sur les moteurs
 
Définition virus
 335850
 
Version des moteurs
 AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)
 
Analyse des plugins
 2
 
Archive des plugins
 10
 
Unpack des plugins
 2
 
E-mail plugins
 1
 
Système plugins
 1
 
  
  
 
Paramètres d'analyse
 
Première action
 Désinfecté
 
Seconde Action
 Supprimé
 
Heuristique
 Oui
 
Acceptez les avertissements
 Oui
 
Extensions analysées
 *;
 
Excludez les extensions
  
 
Analyse d'emails
 Oui
 
Analyse des Archives
 Oui
 
Analyser paquets programmes
 Oui
 
Analyse des fichiers
 Oui
 
Analyse de boot
 Oui
 
  
  
 
  Fichier analysé
  Statut
 
C:\Program Files\Stella\su32.exe
 Infecté par: Backdoor.Servu.25
 
C:\Program Files\Stella\su32.exe
 Echec de la désinfection
 
C:\Program Files\Stella\su32.exe
 Supprimé
 
C:\System Volume Information\_restore{4CB1D558-D11D-4C16-874B-96910B0CF6C4}\RP460\A0079930.exe
 Infecté par: Backdoor.Servu.25
 
C:\System Volume Information\_restore{4CB1D558-D11D-4C16-874B-96910B0CF6C4}\RP460\A0079930.exe
 Echec de la désinfection
 
C:\System Volume Information\_restore{4CB1D558-D11D-4C16-874B-96910B0CF6C4}\RP460\A0079930.exe
 Supprimé

jp16 · Answer

Logfile of HijackThis v1.99.1
Scan saved at 18:24:50, on 10/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI-CPanel\atiptaxx.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\SAGEM Wi-Fi USB 802.11g\WLANUTL.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://side.search.ke.voila.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Program Files\ShopperReports\Bin\2.0.0\ShprRprt.dll (file missing)
O2 - BHO: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~1\WANADO~2.DLL (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~1\WANADO~2.DLL (file missing)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [MSys32] "C:\Program Files\Sectors of Death\Web\morfitwebentrance.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\NVC\BIN\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [helpr] C:\Program Files\SETI\helper.exe -loader -nolog
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [hldrrr] C:\WINDOWS\system32\hldrrr.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [implus] C:\Program Files\implus\implus.exe
O4 - HKCU\..\Run: [hldrrr] C:\WINDOWS\system32\hldrrr.exe
O4 - Startup: BoontyBox Cdiscount.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: Rechercher avec Voila - file://C:\Program Files\WANADOO_TOOLBAR\Cache\SelectedContextSearch.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: ShopperReports - Compare product prices - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\2.0.0\ShprRprt.dll (file missing)
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE15} - C:\Program Files\ShopperReports\Bin\2.0.0\ShprRprt.dll (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~2\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~2\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bw+0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {F48AD0CF-1A14-40C7-984F-D099F2A721EA} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\Zanda.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

voila marie c'est fait et maintenant je m'en remet à toi à.
       salut

^^Marie^^ · Answer

On continue

1°/ - Télécharge le logiciel SmitfraudFix ((crée par S!Ri J) 
http://siri.urz.free.fr/Fix/SmitfraudFix.zip et décompresse le. 


En image : 
http://siri.urz.free.fr/Fix/SmitfraudFix.php 

tu le décompresses tu doubles cliques sur smitfraudfix.cmd et tu choisi l option 1 
cela vas générer un rapport. 
Copie/colle le rapport

jp16 · Answer

SmitFraudFix v2.132

Rapport fait à 20:30:55,98, 10/01/2007
Executé à partir de C:\Documents and Settings\CAROLE\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\CAROLE


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\CAROLE\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\CAROLE\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

^^Marie^^ · Answer

ok

On continue

Redémarres le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou F5 ) et tu choisis le mode sans échec) 

- Ouvre le dossier "SmitfraudFix" et double clic sur "Smitfraudfix.cmd", choisit l’option 2 et tu réponds oui à tout. 

Copie/colle le rapport sur le forum stp.

Refais un hitjackthis

A++

^^Marie^^ · Answer

OK

110€ !! ébé !! un peu cher à mon goût

Bonne route

A++

[virus] cheval de troie:beagle-ms

9 réponses

Discussions similaires