Infectée par 7 virus
maroutchka
Messages postés
20
Statut
Membre
-
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité -
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité -
bonsoir a tous ,
quelqun pourait'il me dire comment faire pour supprimer
ces 7 virus de mon pc? ; je n'arrive pas a les supprimés
définitivement ! !
-motor.a
-cool web shearch
-uncatégorized hijacker
-cookies
-lop
-prefetch-virus
ma configuration: windows xp pro + sp2, internet explorer 7,
norton internet sécurity 2005, malware sweeper, spyware doctor,
et spyboth shearch and destroy !
merçi d'avance a tous et bonne année !
quelqun pourait'il me dire comment faire pour supprimer
ces 7 virus de mon pc? ; je n'arrive pas a les supprimés
définitivement ! !
-motor.a
-cool web shearch
-uncatégorized hijacker
-cookies
-lop
-prefetch-virus
ma configuration: windows xp pro + sp2, internet explorer 7,
norton internet sécurity 2005, malware sweeper, spyware doctor,
et spyboth shearch and destroy !
merçi d'avance a tous et bonne année !
A voir également:
- Infectée par 7 virus
- Photofiltre 7 - Télécharger - Retouche d'image
- Clé windows 7 - Guide
- Delphi 7 - Télécharger - Langages
- Virus mcafee - Accueil - Piratage
- Télécharger 7-zip - Télécharger - Compression & Décompression
25 réponses
Bonsoir,
si cet utilitaire a un log, post le.
A défaut, il doit dire où il le trouve.
Sais tu ce qu'est ceci :
founstone division mc affea dans C:\Documents and Settings\lilou\Mes documents
Il y avait un malware qui a été supprimmé. Y a t-il autre chose dans le dossier ? Quelle est sa date de création dans l'ordi ? Que sasi tu du mécanisme qui l'a créé ?
@+
si cet utilitaire a un log, post le.
A défaut, il doit dire où il le trouve.
Sais tu ce qu'est ceci :
founstone division mc affea dans C:\Documents and Settings\lilou\Mes documents
Il y avait un malware qui a été supprimmé. Y a t-il autre chose dans le dossier ? Quelle est sa date de création dans l'ordi ? Que sasi tu du mécanisme qui l'a créé ?
@+
salut,
lien X ray PC :http://www.xblock.com/deluxe.php?pcode=spgprodpg lien xblock anti spy
Logfile of X-RayPc Build 38852 (Installed 1169156459)
Scan saved at 18/01/2007 21:42:31
C:\WINDOWS\system32\services.exe (108544 732e0b1abaace15d80ec19056b0a2af9)
C:\WINDOWS\system32\lsass.exe (13312 9f3744a5c6f49291a7a685040a013399)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\Program Files\DeviceLock\DLService.exe (974848 5b5d5084a3ec020dc5b779089eac0b58)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe (235168 9c19ba0d3f8909baf321d5fd7cca428c)
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe (181864 2652d3e89e6fdab77891b687e02113ba)
C:\Program Files\Norton Internet Security\ISSVC.exe (83584 64bc5239264896c8d8fce558cfba029b)
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (206552 443e397643965e08c5ab6a6caa732b97)
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe (173160 08fa56b7c13b4cbf0e5d351aecad92b1)
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe (198248 087238e6a0a67ebdf70b160814feae74)
C:\WINDOWS\system32\spoolsv.exe (57856 da81ec57acd4cdc3d4c51cf3d409af9f)
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (100032 7768ce75c5cbf0d8f441ce2bbd806b7f)
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (204800 e8fbdcc8d618d1bb84b828f247a6244b)
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe (343552 dd4db777d2ba1e475f75015b90557795)
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe (49664 30a14f65db477dc00a64a5a24e96919c)
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe (323072 4bb306ae21b59085d49cca16ea7dad18)
C:\Program Files\Hand-Crafted Software\FreeProxy\FreeProxy.exe (356352 46014d6929be91703163dea3ecb05699)
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (177264 8fc8458bcb585617aac9e17a558d9155)
C:\WINDOWS\system32\nvsvc32.exe (127043 f6fca6047879de7a2964757eb8b2101b)
C:\Program Files\PortsLock\PLService.exe (132194 e1f19f74afa0f3c94be19b783b048111)
C:\Program Files\Spyware Doctor2\sdhelp.exe (895088 d8ca03be0f6dc8c8d71009795028006a)
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (45056 3978f082274f723ad5a0a8058c2417dd)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe (69632 fe5c052fc82645f87139f6655b3c21e6)
C:\WINDOWS\System32\alg.exe (44544 2fe681d10c5fc343dbbc0610b8dd4d24)
C:\WINDOWS\system32\DLTray.EXE (102400 6b49942c640c794cbc252124c76a5a85)
C:\WINDOWS\Explorer.EXE (1036288 4c33e5b9a6197b6ed215f6cfba0a2daa)
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe (58984 dd35c08bad29b1c0ba6e6dbb1034769c)
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (790528 8a6ef2d20da01fc5934f63de43752c1b)
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (585728 5fa14654b827bc70dc14de586dc5d493)
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (241664 e91cde1b706189c03904a901a1ca1832)
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (49152 821f73b833c4daebc33c1a9a4b16bb5a)
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe (406016 ed0163acdb2834ac8f53b3265671fb1a)
C:\Program Files\Softwin\BitDefender8\bdnagent.exe (8192 641e3f9e3bd0856eb6c8f88f318df4d4)
C:\WINDOWS\system32\RUNDLL32.EXE (33792 f5402cd47b7389ddc21f92119a906eee)
C:\WINDOWS\SOUNDMAN.EXE (67072 e622e1b8598029294312eeee9b02b699)
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe (6266880 01d90ae5dccbce0c7b52874fec35a608)
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE (131072 4612d6c9c4b46132e47a6efd362672d6)
C:\WINDOWS\system32\ctfmon.exe (15360 5584247b568c2e53934873f4b655fe6a)
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (1415824 70496eee0ddbe485f658693826f44d38)
C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe (2613248 72bde886764ef06894459c809b7c505e)
C:\Program Files\Hide IP Platinum\hideippla.exe (1481216 edd58899bcf056969fe469343c50cba9)
C:\Program Files\MalwareSweeper.com\MalwareSweeper\MalSwep.exe (696320 8342f5c0bf1c3dfc05ce3597c08f05f3)
C:\Program Files\Spyware Doctor2\swdoctor.exe (2115728 1207f9803342bc2d4cafa9334561db85)
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (241664 16e91805cc071039372ae0037aaa9a2b)
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe (857696 8c97a57d7a89b5bf69fdf49eda113b03)
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe (520192 b828b8620cab7fc4d6865a30fb650049)
C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe (69632 4ef298f9218c61040a86ade86af3d9eb)
c:\program files\softwin\bitdefender8\bdmcon.exe (421888 fa4682f279a1449a8c33a19ed0d57b33)
C:\WINDOWS\system32\wuauclt.exe (125720 6cc08152ed8681bc176be1b0f3c0e908)
C:\PROGRA~1\X-CLEA~1\XCLEAN~1.EXE (954128 20b0fa9bae4909601bfac0d44b1e7bde)
C:\Documents and Settings\lilou\Mes documents\x-raypc.exe (346880 e4926469d1e9d33dc41f47475cba1255)
Service: ALG C:\WINDOWS\System32\alg.exe (44544 2fe681d10c5fc343dbbc0610b8dd4d24)
Service: AudioSrv C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Automatic LiveUpdate Scheduler C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (100032 7768ce75c5cbf0d8f441ce2bbd806b7f)
Service: AVG Anti-Spyware Guard C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (204800 e8fbdcc8d618d1bb84b828f247a6244b)
Service: Avg7Alrt C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe (343552 dd4db777d2ba1e475f75015b90557795)
Service: Avg7UpdSvc C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe (49664 30a14f65db477dc00a64a5a24e96919c)
Service: AVGEMS C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe (323072 4bb306ae21b59085d49cca16ea7dad18)
Service: bdss C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe (69632 4ef298f9218c61040a86ade86af3d9eb)
Service: BITS C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Browser C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: ccEvtMgr C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe (198248 087238e6a0a67ebdf70b160814feae74)
Service: ccProxy C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe (235168 9c19ba0d3f8909baf321d5fd7cca428c)
Service: ccSetMgr C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe (181864 2652d3e89e6fdab77891b687e02113ba)
Service: CryptSvc C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: DcomLaunch C:\WINDOWS\system32\svchost -k DcomLaunch
Service: Device Lock C:\Program Files\DeviceLock\DLService.exe (974848 5b5d5084a3ec020dc5b779089eac0b58)
Service: Dhcp C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: dmserver C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Dnscache C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: ERSvc C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Eventlog C:\WINDOWS\system32\services.exe (108544 732e0b1abaace15d80ec19056b0a2af9)
Service: EventSystem C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: FastUserSwitchingCompatibility C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: FreeProxy C:\Program Files\Hand-Crafted Software\FreeProxy\FreeProxy.exe (356352 46014d6929be91703163dea3ecb05699)
Service: helpsvc C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: HidServ C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: HTTPFilter C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: ISSVC C:\Program Files\Norton Internet Security\ISSVC.exe (83584 64bc5239264896c8d8fce558cfba029b)
Service: lanmanserver C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: lanmanworkstation C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: LmHosts C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: navapsvc C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (177264 8fc8458bcb585617aac9e17a558d9155)
Service: Netman C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Nla C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: NVSvc C:\WINDOWS\system32\nvsvc32.exe (127043 f6fca6047879de7a2964757eb8b2101b)
Service: PlugPlay C:\WINDOWS\system32\services.exe (108544 732e0b1abaace15d80ec19056b0a2af9)
Service: PolicyAgent C:\WINDOWS\system32\lsass.exe (13312 9f3744a5c6f49291a7a685040a013399)
Service: PortsLock C:\Program Files\PortsLock\PLService.exe (132194 e1f19f74afa0f3c94be19b783b048111)
Service: ProtectedStorage C:\WINDOWS\system32\lsass.exe (13312 9f3744a5c6f49291a7a685040a013399)
Service: RasMan C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: RemoteRegistry C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: RpcSs C:\WINDOWS\system32\svchost -k rpcss
Service: SamSs C:\WINDOWS\system32\lsass.exe (13312 9f3744a5c6f49291a7a685040a013399)
Service: Schedule C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: SDhelper C:\Program Files\Spyware Doctor2\sdhelp.exe (895088 d8ca03be0f6dc8c8d71009795028006a)
Service: seclogon C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: SENS C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: SharedAccess C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: ShellHWDetection C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: SNDSrvc C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (206552 443e397643965e08c5ab6a6caa732b97)
Service: SoundMAX Agent Service (default) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (45056 3978f082274f723ad5a0a8058c2417dd)
Service: SPBBCSvc C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe (173160 08fa56b7c13b4cbf0e5d351aecad92b1)
Service: Spooler C:\WINDOWS\system32\spoolsv.exe (57856 da81ec57acd4cdc3d4c51cf3d409af9f)
Service: SSDPSRV C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: stisvc C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: TapiSrv C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: TermService C:\WINDOWS\System32\svchost -k DComLaunch
Service: Themes C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: TrkWks C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: W32Time C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: WebClient C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: winmgmt C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: wscsvc C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: wuauserv C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: WZCSVC C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: XCOMM C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe (69632 fe5c052fc82645f87139f6655b3c21e6)
O2 - BHO: (Yahoo! Toolbar Helper) - {02478d38-c3f9-4efb-9b51-7695eca05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (399424 8cf01bffb40c1cd6951e5c0a4f0b90a0)
O2 - BHO: (no name) - {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (853672 250d787a5712d7768ddc133b3e477759)
O2 - BHO: (PCTools Site Guard) - {5c8b2a36-3db1-42a4-a3cb-d426709bbfeb} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (825528 52fb9fa5db98d3bea1119c5f535a583a)
O2 - BHO: (CNisExtBho Class) - {9ecb9560-04f9-4bbc-943d-298ddf1699e1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (103568 c022e044c7693f7581ffa624bc61ba16)
O2 - BHO: (PCTools Browser Monitor) - {b56a7d7d-6927-48c8-a975-17df180c71ac} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll (850104 788bd4fbdc3d24b3d18b582d32ef00ea)
O2 - BHO: (CNavExtBho Class) - {bdf3e430-b101-42ad-a544-fadc6b084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (218736 eb77a64845d96a77c148a3905641fd45)
O3 - Toolbar: Norton Internet Security {0b53eac3-8d69-4b9e-9b19-a37c9a5676a7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (103568 c022e044c7693f7581ffa624bc61ba16)
O3 - Toolbar: Norton AntiVirus {42cdd1bf-3ffb-4238-8ad1-7859df00b1d6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (218736 eb77a64845d96a77c148a3905641fd45)
O3 - Toolbar: Yahoo! Toolbar {ef99bd32-c1fb-11d2-892f-0090271d4f88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (399424 8cf01bffb40c1cd6951e5c0a4f0b90a0)
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe (58984 dd35c08bad29b1c0ba6e6dbb1034769c)
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (790528 8a6ef2d20da01fc5934f63de43752c1b)
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (585728 5fa14654b827bc70dc14de586dc5d493)
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe (100056 f9418981ee4d7e995d359833adab59d5)
O4 - HKLM\..\Run: [HP Component Manager] C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (241664 e91cde1b706189c03904a901a1ca1832)
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (49152 821f73b833c4daebc33c1a9a4b16bb5a)
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe (406016 ed0163acdb2834ac8f53b3265671fb1a)
O4 - HKLM\..\Run: [BDMCon] C:\Program Files\Softwin\BitDefender8\bdmcon.exe (421888 fa4682f279a1449a8c33a19ed0d57b33)
O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender8\bdnagent.exe (8192 641e3f9e3bd0856eb6c8f88f318df4d4)
O4 - HKLM\..\Run: [NvCplDaemon] C:\WINDOWS\system32\NvCpl.dll (6803456 5641422c0f9160559dee3c92cb9ca192)
O4 - HKLM\..\Run: [nwiz] C:\WINDOWS\system32\nwiz.exe (1519616 7ecd5764e6418cb3baf52381c67fda11)
O4 - HKLM\..\Run: [NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll (86016 0ac8384cc58a993b8349b16500f5c2e1)
O4 - HKLM\..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (67072 e622e1b8598029294312eeee9b02b699)
O4 - HKLM\..\Run: [!AVG Anti-Spyware] C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe (6266880 01d90ae5dccbce0c7b52874fec35a608)
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE (131072 4612d6c9c4b46132e47a6efd362672d6)
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (15360 5584247b568c2e53934873f4b655fe6a)
O4 - HKCU\..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (1694208 74e6e96c6f0e2eca4edbb7f7a468f259)
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (1415824 70496eee0ddbe485f658693826f44d38)
O4 - HKCU\..\Run: [ParetoLogic Anti-Spyware] C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe (2613248 72bde886764ef06894459c809b7c505e)
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (1481216 edd58899bcf056969fe469343c50cba9)
O4 - HKCU\..\Run: [Malware Sweeper] C:\Program Files\MalwareSweeper.com\MalwareSweeper\MalSwep.exe (696320 8342f5c0bf1c3dfc05ce3597c08f05f3)
O4 - HKCU\..\Run: [Spyware Doctor] C:\Program Files\Spyware Doctor2\swdoctor.exe (2115728 1207f9803342bc2d4cafa9334561db85)
O4 - HKCU\..\Run: [X-Cleaner Deluxe] C:\PROGRA~1\X-CLEA~1\XCleaner_full.exe (954128 20b0fa9bae4909601bfac0d44b1e7bde)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [PostBootReminder] C:\WINDOWS\system32\SHELL32.dll (8509952 8749685a55509d44896ad3f2698be21f)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [CDBurn] C:\WINDOWS\system32\SHELL32.dll (8509952 8749685a55509d44896ad3f2698be21f)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [WebCheck] C:\WINDOWS\system32\webcheck.dll (231424 b26b2f14112371eca3e0377c28192ed6)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [SysTray] C:\WINDOWS\system32\stobject.dll (122368 abced4a936c93beff92f4b2c4650074e)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [WPDShServiceObj] C:\WINDOWS\system32\WPDShServiceObj.dll (133632 045e228f71c31901084b64be59093499)
O16 - DPF: {193c772a-87be-4b19-a7bb-445b226fe9a1} (ewidoOnlineScan Control)- http://downloads.ewido.net/ewidoOnlineScan.cab - C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL (345656 b284992540e0fa2b76dea56f93d49a16)
O16 - DPF: {215b8138-a3cf-44c5-803f-8226143cfc0a} (Trend Micro ActiveX Scan Agent 6.6)- http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab - C:\WINDOWS\Downloaded Program Files\hcImpl.inf (723 2781022c0395956ffb5ac9b26145027a)
O16 - DPF: {5d86ddb5-bdf9-441b-9e9e-d4730f4ee499} (BDSCANONLINE Control)- http://download.bitdefender.com/resources/scan8/oscan8.cab - C:\WINDOWS\Downloaded Program Files\oscan8.inf (1331 e36a526c5faad337a96e6c841d0eed1c)
O16 - DPF: {9a9307a0-7da4-4daf-b042-5009f29e09e1} (ActiveScan Installer Class)- http://acs.pandasoftware.com/activescan/as5free/asinst.cab - C:\WINDOWS\Downloaded Program Files\asinst.inf (537 9038ee674a66f5f50e71852a690bd188)
O16 - DPF: {bb21f850-63f4-4ec9-bf9d-565bd30c9ae9} (a-squared Scanner)- http://ax.emsisoft.com/asquared.cab - C:\WINDOWS\DOWNLO~1\asquared.ocx (946296 acd666818f4a6405ed9a80aa7e18cba9)
O16 - DPF: {d27cdb6e-ae6d-11cf-96b8-444553540000} (Shockwave Flash Object)- http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab - C:\WINDOWS\Downloaded Program Files\swflash.inf (5019 c1c7b5454a9f3d0ab31e90bcf8dfcf54)
020 - HKLM\..\Notify: [crypt32chain] C:\WINDOWS\system32\crypt32.dll (604672 fd8631128e14583f135eb4b3f37ef626)
020 - HKLM\..\Notify: [cryptnet] C:\WINDOWS\system32\cryptnet.dll (63488 344dcb5a0c57e0fc3714c5e5e5fbc232)
020 - HKLM\..\Notify: [cscdll] C:\WINDOWS\system32\cscdll.dll (102912 fbc2cd20b107b6525dfee9f6e41dcc8b)
020 - HKLM\..\Notify: [ScCertProp] C:\WINDOWS\system32\wlnotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
020 - HKLM\..\Notify: [Schedule] C:\WINDOWS\system32\wlnotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
020 - HKLM\..\Notify: [sclgntfy] C:\WINDOWS\system32\sclgntfy.dll (22016 83db3b831c845699ad4f6bfb37c4790c)
020 - HKLM\..\Notify: [SensLogn] C:\WINDOWS\system32\WlNotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
020 - HKLM\..\Notify: [termsrv] C:\WINDOWS\system32\wlnotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
020 - HKLM\..\Notify: [wlballoon] C:\WINDOWS\system32\wlnotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
lien X ray PC :http://www.xblock.com/deluxe.php?pcode=spgprodpg lien xblock anti spy
Logfile of X-RayPc Build 38852 (Installed 1169156459)
Scan saved at 18/01/2007 21:42:31
C:\WINDOWS\system32\services.exe (108544 732e0b1abaace15d80ec19056b0a2af9)
C:\WINDOWS\system32\lsass.exe (13312 9f3744a5c6f49291a7a685040a013399)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\Program Files\DeviceLock\DLService.exe (974848 5b5d5084a3ec020dc5b779089eac0b58)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe (235168 9c19ba0d3f8909baf321d5fd7cca428c)
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe (181864 2652d3e89e6fdab77891b687e02113ba)
C:\Program Files\Norton Internet Security\ISSVC.exe (83584 64bc5239264896c8d8fce558cfba029b)
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (206552 443e397643965e08c5ab6a6caa732b97)
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe (173160 08fa56b7c13b4cbf0e5d351aecad92b1)
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe (198248 087238e6a0a67ebdf70b160814feae74)
C:\WINDOWS\system32\spoolsv.exe (57856 da81ec57acd4cdc3d4c51cf3d409af9f)
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (100032 7768ce75c5cbf0d8f441ce2bbd806b7f)
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (204800 e8fbdcc8d618d1bb84b828f247a6244b)
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe (343552 dd4db777d2ba1e475f75015b90557795)
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe (49664 30a14f65db477dc00a64a5a24e96919c)
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe (323072 4bb306ae21b59085d49cca16ea7dad18)
C:\Program Files\Hand-Crafted Software\FreeProxy\FreeProxy.exe (356352 46014d6929be91703163dea3ecb05699)
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (177264 8fc8458bcb585617aac9e17a558d9155)
C:\WINDOWS\system32\nvsvc32.exe (127043 f6fca6047879de7a2964757eb8b2101b)
C:\Program Files\PortsLock\PLService.exe (132194 e1f19f74afa0f3c94be19b783b048111)
C:\Program Files\Spyware Doctor2\sdhelp.exe (895088 d8ca03be0f6dc8c8d71009795028006a)
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (45056 3978f082274f723ad5a0a8058c2417dd)
C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe (69632 fe5c052fc82645f87139f6655b3c21e6)
C:\WINDOWS\System32\alg.exe (44544 2fe681d10c5fc343dbbc0610b8dd4d24)
C:\WINDOWS\system32\DLTray.EXE (102400 6b49942c640c794cbc252124c76a5a85)
C:\WINDOWS\Explorer.EXE (1036288 4c33e5b9a6197b6ed215f6cfba0a2daa)
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe (58984 dd35c08bad29b1c0ba6e6dbb1034769c)
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (790528 8a6ef2d20da01fc5934f63de43752c1b)
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (585728 5fa14654b827bc70dc14de586dc5d493)
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (241664 e91cde1b706189c03904a901a1ca1832)
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (49152 821f73b833c4daebc33c1a9a4b16bb5a)
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe (406016 ed0163acdb2834ac8f53b3265671fb1a)
C:\Program Files\Softwin\BitDefender8\bdnagent.exe (8192 641e3f9e3bd0856eb6c8f88f318df4d4)
C:\WINDOWS\system32\RUNDLL32.EXE (33792 f5402cd47b7389ddc21f92119a906eee)
C:\WINDOWS\SOUNDMAN.EXE (67072 e622e1b8598029294312eeee9b02b699)
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe (6266880 01d90ae5dccbce0c7b52874fec35a608)
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE (131072 4612d6c9c4b46132e47a6efd362672d6)
C:\WINDOWS\system32\ctfmon.exe (15360 5584247b568c2e53934873f4b655fe6a)
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (1415824 70496eee0ddbe485f658693826f44d38)
C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe (2613248 72bde886764ef06894459c809b7c505e)
C:\Program Files\Hide IP Platinum\hideippla.exe (1481216 edd58899bcf056969fe469343c50cba9)
C:\Program Files\MalwareSweeper.com\MalwareSweeper\MalSwep.exe (696320 8342f5c0bf1c3dfc05ce3597c08f05f3)
C:\Program Files\Spyware Doctor2\swdoctor.exe (2115728 1207f9803342bc2d4cafa9334561db85)
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (241664 16e91805cc071039372ae0037aaa9a2b)
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe (857696 8c97a57d7a89b5bf69fdf49eda113b03)
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe (520192 b828b8620cab7fc4d6865a30fb650049)
C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe (69632 4ef298f9218c61040a86ade86af3d9eb)
c:\program files\softwin\bitdefender8\bdmcon.exe (421888 fa4682f279a1449a8c33a19ed0d57b33)
C:\WINDOWS\system32\wuauclt.exe (125720 6cc08152ed8681bc176be1b0f3c0e908)
C:\PROGRA~1\X-CLEA~1\XCLEAN~1.EXE (954128 20b0fa9bae4909601bfac0d44b1e7bde)
C:\Documents and Settings\lilou\Mes documents\x-raypc.exe (346880 e4926469d1e9d33dc41f47475cba1255)
Service: ALG C:\WINDOWS\System32\alg.exe (44544 2fe681d10c5fc343dbbc0610b8dd4d24)
Service: AudioSrv C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Automatic LiveUpdate Scheduler C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (100032 7768ce75c5cbf0d8f441ce2bbd806b7f)
Service: AVG Anti-Spyware Guard C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (204800 e8fbdcc8d618d1bb84b828f247a6244b)
Service: Avg7Alrt C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe (343552 dd4db777d2ba1e475f75015b90557795)
Service: Avg7UpdSvc C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe (49664 30a14f65db477dc00a64a5a24e96919c)
Service: AVGEMS C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe (323072 4bb306ae21b59085d49cca16ea7dad18)
Service: bdss C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe (69632 4ef298f9218c61040a86ade86af3d9eb)
Service: BITS C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Browser C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: ccEvtMgr C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe (198248 087238e6a0a67ebdf70b160814feae74)
Service: ccProxy C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe (235168 9c19ba0d3f8909baf321d5fd7cca428c)
Service: ccSetMgr C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe (181864 2652d3e89e6fdab77891b687e02113ba)
Service: CryptSvc C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: DcomLaunch C:\WINDOWS\system32\svchost -k DcomLaunch
Service: Device Lock C:\Program Files\DeviceLock\DLService.exe (974848 5b5d5084a3ec020dc5b779089eac0b58)
Service: Dhcp C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: dmserver C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Dnscache C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: ERSvc C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Eventlog C:\WINDOWS\system32\services.exe (108544 732e0b1abaace15d80ec19056b0a2af9)
Service: EventSystem C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: FastUserSwitchingCompatibility C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: FreeProxy C:\Program Files\Hand-Crafted Software\FreeProxy\FreeProxy.exe (356352 46014d6929be91703163dea3ecb05699)
Service: helpsvc C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: HidServ C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: HTTPFilter C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: ISSVC C:\Program Files\Norton Internet Security\ISSVC.exe (83584 64bc5239264896c8d8fce558cfba029b)
Service: lanmanserver C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: lanmanworkstation C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: LmHosts C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: navapsvc C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (177264 8fc8458bcb585617aac9e17a558d9155)
Service: Netman C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: Nla C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: NVSvc C:\WINDOWS\system32\nvsvc32.exe (127043 f6fca6047879de7a2964757eb8b2101b)
Service: PlugPlay C:\WINDOWS\system32\services.exe (108544 732e0b1abaace15d80ec19056b0a2af9)
Service: PolicyAgent C:\WINDOWS\system32\lsass.exe (13312 9f3744a5c6f49291a7a685040a013399)
Service: PortsLock C:\Program Files\PortsLock\PLService.exe (132194 e1f19f74afa0f3c94be19b783b048111)
Service: ProtectedStorage C:\WINDOWS\system32\lsass.exe (13312 9f3744a5c6f49291a7a685040a013399)
Service: RasMan C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: RemoteRegistry C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: RpcSs C:\WINDOWS\system32\svchost -k rpcss
Service: SamSs C:\WINDOWS\system32\lsass.exe (13312 9f3744a5c6f49291a7a685040a013399)
Service: Schedule C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: SDhelper C:\Program Files\Spyware Doctor2\sdhelp.exe (895088 d8ca03be0f6dc8c8d71009795028006a)
Service: seclogon C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: SENS C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: SharedAccess C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: ShellHWDetection C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: SNDSrvc C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (206552 443e397643965e08c5ab6a6caa732b97)
Service: SoundMAX Agent Service (default) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (45056 3978f082274f723ad5a0a8058c2417dd)
Service: SPBBCSvc C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe (173160 08fa56b7c13b4cbf0e5d351aecad92b1)
Service: Spooler C:\WINDOWS\system32\spoolsv.exe (57856 da81ec57acd4cdc3d4c51cf3d409af9f)
Service: SSDPSRV C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: stisvc C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: TapiSrv C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: TermService C:\WINDOWS\System32\svchost -k DComLaunch
Service: Themes C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: TrkWks C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: W32Time C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: WebClient C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: winmgmt C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: wscsvc C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: wuauserv C:\WINDOWS\system32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: WZCSVC C:\WINDOWS\System32\svchost.exe (14336 1bd6c2f707a275cb7c16fd99fe0f31ca)
Service: XCOMM C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe (69632 fe5c052fc82645f87139f6655b3c21e6)
O2 - BHO: (Yahoo! Toolbar Helper) - {02478d38-c3f9-4efb-9b51-7695eca05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (399424 8cf01bffb40c1cd6951e5c0a4f0b90a0)
O2 - BHO: (no name) - {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (853672 250d787a5712d7768ddc133b3e477759)
O2 - BHO: (PCTools Site Guard) - {5c8b2a36-3db1-42a4-a3cb-d426709bbfeb} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (825528 52fb9fa5db98d3bea1119c5f535a583a)
O2 - BHO: (CNisExtBho Class) - {9ecb9560-04f9-4bbc-943d-298ddf1699e1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (103568 c022e044c7693f7581ffa624bc61ba16)
O2 - BHO: (PCTools Browser Monitor) - {b56a7d7d-6927-48c8-a975-17df180c71ac} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll (850104 788bd4fbdc3d24b3d18b582d32ef00ea)
O2 - BHO: (CNavExtBho Class) - {bdf3e430-b101-42ad-a544-fadc6b084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (218736 eb77a64845d96a77c148a3905641fd45)
O3 - Toolbar: Norton Internet Security {0b53eac3-8d69-4b9e-9b19-a37c9a5676a7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (103568 c022e044c7693f7581ffa624bc61ba16)
O3 - Toolbar: Norton AntiVirus {42cdd1bf-3ffb-4238-8ad1-7859df00b1d6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (218736 eb77a64845d96a77c148a3905641fd45)
O3 - Toolbar: Yahoo! Toolbar {ef99bd32-c1fb-11d2-892f-0090271d4f88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (399424 8cf01bffb40c1cd6951e5c0a4f0b90a0)
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe (58984 dd35c08bad29b1c0ba6e6dbb1034769c)
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (790528 8a6ef2d20da01fc5934f63de43752c1b)
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (585728 5fa14654b827bc70dc14de586dc5d493)
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe (100056 f9418981ee4d7e995d359833adab59d5)
O4 - HKLM\..\Run: [HP Component Manager] C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (241664 e91cde1b706189c03904a901a1ca1832)
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (49152 821f73b833c4daebc33c1a9a4b16bb5a)
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe (406016 ed0163acdb2834ac8f53b3265671fb1a)
O4 - HKLM\..\Run: [BDMCon] C:\Program Files\Softwin\BitDefender8\bdmcon.exe (421888 fa4682f279a1449a8c33a19ed0d57b33)
O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender8\bdnagent.exe (8192 641e3f9e3bd0856eb6c8f88f318df4d4)
O4 - HKLM\..\Run: [NvCplDaemon] C:\WINDOWS\system32\NvCpl.dll (6803456 5641422c0f9160559dee3c92cb9ca192)
O4 - HKLM\..\Run: [nwiz] C:\WINDOWS\system32\nwiz.exe (1519616 7ecd5764e6418cb3baf52381c67fda11)
O4 - HKLM\..\Run: [NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll (86016 0ac8384cc58a993b8349b16500f5c2e1)
O4 - HKLM\..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (67072 e622e1b8598029294312eeee9b02b699)
O4 - HKLM\..\Run: [!AVG Anti-Spyware] C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe (6266880 01d90ae5dccbce0c7b52874fec35a608)
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE (131072 4612d6c9c4b46132e47a6efd362672d6)
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (15360 5584247b568c2e53934873f4b655fe6a)
O4 - HKCU\..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (1694208 74e6e96c6f0e2eca4edbb7f7a468f259)
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (1415824 70496eee0ddbe485f658693826f44d38)
O4 - HKCU\..\Run: [ParetoLogic Anti-Spyware] C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe (2613248 72bde886764ef06894459c809b7c505e)
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (1481216 edd58899bcf056969fe469343c50cba9)
O4 - HKCU\..\Run: [Malware Sweeper] C:\Program Files\MalwareSweeper.com\MalwareSweeper\MalSwep.exe (696320 8342f5c0bf1c3dfc05ce3597c08f05f3)
O4 - HKCU\..\Run: [Spyware Doctor] C:\Program Files\Spyware Doctor2\swdoctor.exe (2115728 1207f9803342bc2d4cafa9334561db85)
O4 - HKCU\..\Run: [X-Cleaner Deluxe] C:\PROGRA~1\X-CLEA~1\XCleaner_full.exe (954128 20b0fa9bae4909601bfac0d44b1e7bde)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [PostBootReminder] C:\WINDOWS\system32\SHELL32.dll (8509952 8749685a55509d44896ad3f2698be21f)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [CDBurn] C:\WINDOWS\system32\SHELL32.dll (8509952 8749685a55509d44896ad3f2698be21f)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [WebCheck] C:\WINDOWS\system32\webcheck.dll (231424 b26b2f14112371eca3e0377c28192ed6)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [SysTray] C:\WINDOWS\system32\stobject.dll (122368 abced4a936c93beff92f4b2c4650074e)
O4 - HKLM\..\ShellServiceObjectDelayLoad: [WPDShServiceObj] C:\WINDOWS\system32\WPDShServiceObj.dll (133632 045e228f71c31901084b64be59093499)
O16 - DPF: {193c772a-87be-4b19-a7bb-445b226fe9a1} (ewidoOnlineScan Control)- http://downloads.ewido.net/ewidoOnlineScan.cab - C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL (345656 b284992540e0fa2b76dea56f93d49a16)
O16 - DPF: {215b8138-a3cf-44c5-803f-8226143cfc0a} (Trend Micro ActiveX Scan Agent 6.6)- http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab - C:\WINDOWS\Downloaded Program Files\hcImpl.inf (723 2781022c0395956ffb5ac9b26145027a)
O16 - DPF: {5d86ddb5-bdf9-441b-9e9e-d4730f4ee499} (BDSCANONLINE Control)- http://download.bitdefender.com/resources/scan8/oscan8.cab - C:\WINDOWS\Downloaded Program Files\oscan8.inf (1331 e36a526c5faad337a96e6c841d0eed1c)
O16 - DPF: {9a9307a0-7da4-4daf-b042-5009f29e09e1} (ActiveScan Installer Class)- http://acs.pandasoftware.com/activescan/as5free/asinst.cab - C:\WINDOWS\Downloaded Program Files\asinst.inf (537 9038ee674a66f5f50e71852a690bd188)
O16 - DPF: {bb21f850-63f4-4ec9-bf9d-565bd30c9ae9} (a-squared Scanner)- http://ax.emsisoft.com/asquared.cab - C:\WINDOWS\DOWNLO~1\asquared.ocx (946296 acd666818f4a6405ed9a80aa7e18cba9)
O16 - DPF: {d27cdb6e-ae6d-11cf-96b8-444553540000} (Shockwave Flash Object)- http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab - C:\WINDOWS\Downloaded Program Files\swflash.inf (5019 c1c7b5454a9f3d0ab31e90bcf8dfcf54)
020 - HKLM\..\Notify: [crypt32chain] C:\WINDOWS\system32\crypt32.dll (604672 fd8631128e14583f135eb4b3f37ef626)
020 - HKLM\..\Notify: [cryptnet] C:\WINDOWS\system32\cryptnet.dll (63488 344dcb5a0c57e0fc3714c5e5e5fbc232)
020 - HKLM\..\Notify: [cscdll] C:\WINDOWS\system32\cscdll.dll (102912 fbc2cd20b107b6525dfee9f6e41dcc8b)
020 - HKLM\..\Notify: [ScCertProp] C:\WINDOWS\system32\wlnotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
020 - HKLM\..\Notify: [Schedule] C:\WINDOWS\system32\wlnotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
020 - HKLM\..\Notify: [sclgntfy] C:\WINDOWS\system32\sclgntfy.dll (22016 83db3b831c845699ad4f6bfb37c4790c)
020 - HKLM\..\Notify: [SensLogn] C:\WINDOWS\system32\WlNotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
020 - HKLM\..\Notify: [termsrv] C:\WINDOWS\system32\wlnotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
020 - HKLM\..\Notify: [wlballoon] C:\WINDOWS\system32\wlnotify.dll (94208 8201bb13554a855cabd88bbf14b2166b)
Bonsoir,
post 19 no action taken. Relance AVG et supprimme ce qu'il trouve.
Post 22 Je n'ai pas demandé ce log.
par contre, j'ai demandé si malware sweeper a un log, si oui de me le poster, si non de me dire ou il te détecte imaut:b
Je t'ai demandé des informations au post 21.
Relance un scan en ligne bit defender et poste le log.
Remets un log HijackThis
et un log AVG
@+
post 19 no action taken. Relance AVG et supprimme ce qu'il trouve.
Post 22 Je n'ai pas demandé ce log.
par contre, j'ai demandé si malware sweeper a un log, si oui de me le poster, si non de me dire ou il te détecte imaut:b
Je t'ai demandé des informations au post 21.
Relance un scan en ligne bit defender et poste le log.
Remets un log HijackThis
et un log AVG
@+
bonsoir,
pour ta question sur imaut.b ;
malware sweeper me le detecte dans: HKEY_CURRENT_USER\software\Microsoft\Windows\Curent version\Imaut.b
quand au log de malware sweeper; il est reserver a la version pro du logiciel.
voiçi le log bit defender online: mince ,
je l'ait perdu; mais c'est pas grave car il ne me detectait aucuns virus !
______________________________________________________
voiçi celuis d'hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 17:04:32, on 19/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\DeviceLock\DLService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Hand-Crafted Software\FreeProxy\FreeProxy.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\PortsLock\PLService.exe
C:\Program Files\Spyware Doctor2\sdhelp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\DLTray.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Softwin\BitDefender8\bdmcon.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe
C:\Program Files\Hide IP Platinum\hideippla.exe
C:\Program Files\MalwareSweeper.com\MalwareSweeper\MalSwep.exe
C:\Program Files\Spyware Doctor2\swdoctor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Advanced IP Scanner\Advanced IP Scanner.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\lilou\Mes documents\HijackThis.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.138.64.142:8000
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU "C:\WINDOWS\TEMP\E_S88.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ParetoLogic Anti-Spyware] "C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe" -NM -hidesplash
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe
O4 - HKCU\..\Run: [Malware Sweeper] C:\Program Files\MalwareSweeper.com\MalwareSweeper\MalSwep.exe
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor2\swdoctor.exe" /Q
O4 - HKCU\..\Run: [X-Cleaner Deluxe] "C:\PROGRA~1\X-CLEA~1\XCleaner_full.exe" -turbo -autostart -NOREBOOT
O4 - Startup: BoontyBox Alice Jeux.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Panda ActiveScan - {653D93AF-C741-4e5e-8C1B-59BA43F93E16} - https://www.pandasecurity.com/?ref=www.pandasoftware.com/activescan (file missing)
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,4942/mcfscan.cab
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: DeviceLock Service (Device Lock) - SmartLine Inc - C:\Program Files\DeviceLock\DLService.exe
O23 - Service: Free Proxy Service (FreeProxy) - Hand-Crafted Software - C:\Program Files\Hand-Crafted Software\FreeProxy\FreeProxy.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PortsLock Service (PortsLock) - SmartLine Inc - C:\Program Files\PortsLock\PLService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor2\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
________________________________________________________
puis celuis d'AVG:
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 17:47:35 19/01/2007
+ Résultat de l'analyse:
:mozilla.12:C:\Documents and Settings\lilou\Application Data\Mozilla\Firefox\Profiles\mnpsfyc2.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
________________________________________________________
c'est tout !
merçi encore pour ton aide....
A+
pour ta question sur imaut.b ;
malware sweeper me le detecte dans: HKEY_CURRENT_USER\software\Microsoft\Windows\Curent version\Imaut.b
quand au log de malware sweeper; il est reserver a la version pro du logiciel.
voiçi le log bit defender online: mince ,
je l'ait perdu; mais c'est pas grave car il ne me detectait aucuns virus !
______________________________________________________
voiçi celuis d'hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 17:04:32, on 19/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\DeviceLock\DLService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Hand-Crafted Software\FreeProxy\FreeProxy.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\PortsLock\PLService.exe
C:\Program Files\Spyware Doctor2\sdhelp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\DLTray.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Softwin\BitDefender8\bdmcon.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe
C:\Program Files\Hide IP Platinum\hideippla.exe
C:\Program Files\MalwareSweeper.com\MalwareSweeper\MalSwep.exe
C:\Program Files\Spyware Doctor2\swdoctor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Advanced IP Scanner\Advanced IP Scanner.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\lilou\Mes documents\HijackThis.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.138.64.142:8000
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU "C:\WINDOWS\TEMP\E_S88.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ParetoLogic Anti-Spyware] "C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe" -NM -hidesplash
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe
O4 - HKCU\..\Run: [Malware Sweeper] C:\Program Files\MalwareSweeper.com\MalwareSweeper\MalSwep.exe
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor2\swdoctor.exe" /Q
O4 - HKCU\..\Run: [X-Cleaner Deluxe] "C:\PROGRA~1\X-CLEA~1\XCleaner_full.exe" -turbo -autostart -NOREBOOT
O4 - Startup: BoontyBox Alice Jeux.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Panda ActiveScan - {653D93AF-C741-4e5e-8C1B-59BA43F93E16} - https://www.pandasecurity.com/?ref=www.pandasoftware.com/activescan (file missing)
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,4942/mcfscan.cab
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: DeviceLock Service (Device Lock) - SmartLine Inc - C:\Program Files\DeviceLock\DLService.exe
O23 - Service: Free Proxy Service (FreeProxy) - Hand-Crafted Software - C:\Program Files\Hand-Crafted Software\FreeProxy\FreeProxy.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PortsLock Service (PortsLock) - SmartLine Inc - C:\Program Files\PortsLock\PLService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor2\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
________________________________________________________
puis celuis d'AVG:
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 17:47:35 19/01/2007
+ Résultat de l'analyse:
:mozilla.12:C:\Documents and Settings\lilou\Application Data\Mozilla\Firefox\Profiles\mnpsfyc2.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
________________________________________________________
c'est tout !
merçi encore pour ton aide....
A+
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question