virus m'empèche de lancer mes programmes Fermé

Question

xp sp2
bonjour
Alors voila mon problème: avast et avg me repèrent un trojan a chaque analyse j'ai le mettre en quarantaine il revient a chaque fois. Le plus ennuyeux c'est qu'il menpèche de lancer certains prog comme msn ou photoshop.
Je ne sais vraiment pas quoi faire please heeeeeeelp!!
merci d'avance

BrotherS · Answer

Tu as essayé Adware?

A+
BrotherS

Team Security Crawler
Http://www.securitycrawler.com

have some fun · Answer

non j'essaye de ce pas!! merci

have some fun · Answer

bon alors j'ai fais un scan je te poste le rapport parce que pr moi rien n'a changé...



Ad-Aware SE Build 1.06r1
Logfile Created on:dimanche 21 janvier 2007 16:08:40
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R145 17.01.2007
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Adware.PluginDL(TAC index:3):2 total references
AntiVermins(TAC index:3):4 total references
Other(TAC index:5):1 total references
SpySpotter(TAC index:3):3 total references
Tracking Cookie(TAC index:3):4 total references
Windows(TAC index:3):1 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


21-01-2007 16:08:40 - Scan started. (Full System Scan)

Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
    FilePath           : \SystemRoot\System32\
    ProcessID          : 552
    ThreadCreationTime : 20-01-2007 13:40:48
    BasePriority       : Normal


#:2 [csrss.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 616
    ThreadCreationTime : 20-01-2007 13:40:51
    BasePriority       : Normal


#:3 [winlogon.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 640
    ThreadCreationTime : 20-01-2007 13:40:52
    BasePriority       : High


#:4 [services.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 684
    ThreadCreationTime : 20-01-2007 13:40:53
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Applications Services et Contrôleur
    InternalName       : services.exe
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : services.exe

#:5 [lsass.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 696
    ThreadCreationTime : 20-01-2007 13:40:53
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : LSA Shell (Export Version)
    InternalName       : lsass.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : lsass.exe

#:6 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 836
    ThreadCreationTime : 20-01-2007 13:40:54
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:7 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 924
    ThreadCreationTime : 20-01-2007 13:40:55
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:8 [svchost.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 960
    ThreadCreationTime : 20-01-2007 13:40:55
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:9 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1016
    ThreadCreationTime : 20-01-2007 13:40:55
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:10 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1120
    ThreadCreationTime : 20-01-2007 13:40:55
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:11 [spoolsv.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1364
    ThreadCreationTime : 20-01-2007 13:40:57
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
    ProductVersion     : 5.1.2600.2696
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Spooler SubSystem App
    InternalName       : spoolsv.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : spoolsv.exe

#:12 [anbmserv.exe]
    FilePath           : C:\Acer\eManager\
    ProcessID          : 1476
    ThreadCreationTime : 20-01-2007 13:40:58
    BasePriority       : Normal
    FileVersion        : 3.0.5.8
    ProductVersion     : 1.0
    ProductName        : Acer eManager for Notebook
    CompanyName        : OSA Technologies Inc.
    FileDescription    : Service Program for Acer eManager
    LegalCopyright     : Acer Inc. (c) 2004
    LegalTrademarks    : Acer Empowering Technology
    Comments           : A Windows 2000/XP Service Program for Acer eManager

#:13 [aswupdsv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 1524
    ThreadCreationTime : 20-01-2007 13:40:59
    BasePriority       : Normal


#:14 [ashserv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 1544
    ThreadCreationTime : 20-01-2007 13:40:59
    BasePriority       : High
    FileVersion        : 4, 7, 936, 0
    ProductVersion     : 4, 7, 0, 0
    ProductName        : avast! Antivirus 
    FileDescription    : avast! antivirus service
    InternalName       : aswServ
    LegalCopyright     : Copyright (c) 2007 ALWIL Software
    OriginalFilename   : aswServ.exe

#:15 [guard.exe]
    FilePath           : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\
    ProcessID          : 1576
    ThreadCreationTime : 20-01-2007 13:40:59
    BasePriority       : Normal
    FileVersion        : 7, 5, 0, 47
    ProductVersion     : 7, 5, 0, 47
    ProductName        : AVG Anti-Spyware
    CompanyName        : Anti-Malware Development a.s.
    FileDescription    : AVG Anti-Spyware guard
    InternalName       : AVG Anti-Spyware guard
    LegalCopyright     : Copyright © 2006 Anti-Malware Development a.s.
    OriginalFilename   : guard.exe

#:16 [mdnsresponder.exe]
    FilePath           : C:\Program Files\Bonjour\
    ProcessID          : 1596
    ThreadCreationTime : 20-01-2007 13:41:00
    BasePriority       : Normal
    FileVersion        : 1,0,3,1
    ProductVersion     : 1,0,3,1
    ProductName        : Bonjour
    CompanyName        : Apple Computer, Inc.
    FileDescription    : Bonjour Service
    InternalName       : mDNSResponder.exe
    LegalCopyright     : Copyright (C) 2003-2006 Apple Computer, Inc.
    OriginalFilename   : mDNSResponder.exe

#:17 [cdac11ba.exe]
    FilePath           : C:\WINDOWS\system32\drivers\
    ProcessID          : 1608
    ThreadCreationTime : 20-01-2007 13:41:00
    BasePriority       : Normal
    FileVersion        : 4.20.020
    ProductVersion     : 4.20.020 Windows NT 2002/12/10
    ProductName        : SafeCast Windows NT
    CompanyName        : Macrovision
    FileDescription    : Macrovision RTS Service
    InternalName       : CDANTSRV
    LegalCopyright     : Copyright (c) 1998-2002 Macrovision Corp.
    OriginalFilename   : CDANTSRV.EXE
    Comments           : StringFileInfo: U.S. English

#:18 [wdfmgr.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1772
    ThreadCreationTime : 20-01-2007 13:41:01
    BasePriority       : Normal
    FileVersion        : 5.2.3790.1230 built by: dnsrv(bld4act)
    ProductVersion     : 5.2.3790.1230
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Windows User Mode Driver Manager
    InternalName       : WdfMgr
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : WdfMgr.exe

#:19 [ashmaisv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 452
    ThreadCreationTime : 20-01-2007 13:41:04
    BasePriority       : Normal


#:20 [ashwebsv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 480
    ThreadCreationTime : 20-01-2007 13:41:04
    BasePriority       : Normal


#:21 [monitor.exe]
    FilePath           : C:\Program Files\Acer\eRecovery\
    ProcessID          : 884
    ThreadCreationTime : 20-01-2007 13:45:03
    BasePriority       : Normal
    FileVersion        : 1, 2, 11, 1
    ProductVersion     : 1, 2, 11, 1
    ProductName        : eRecovery
    CompanyName        : acer Inc.
    FileDescription    : Monitor
    InternalName       : xOBRMonitor.exe
    LegalCopyright     : (c) acer Inc.  All rights reserved.
    OriginalFilename   : xOBRMonitor.exe

#:22 [ctfmon.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 688
    ThreadCreationTime : 20-01-2007 13:45:03
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : CTF Loader
    InternalName       : CTFMON
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : CTFMON.EXE

#:23 [syntplpr.exe]
    FilePath           : C:\Program Files\Synaptics\SynTP\
    ProcessID          : 388
    ThreadCreationTime : 20-01-2007 13:45:04
    BasePriority       : Normal
    FileVersion        : 7.12.3 08Oct04
    ProductVersion     : 7.12.3 08Oct04
    ProductName        : Synaptics Pointing Device Driver
    CompanyName        : Synaptics, Inc.
    FileDescription    : TouchPad Driver Helper Application
    InternalName       : SynTPLpr
    LegalCopyright     : Copyright (C) Synaptics, Inc. 1996-2004
    OriginalFilename   : SynTPLpr.exe

#:24 [syntpenh.exe]
    FilePath           : C:\Program Files\Synaptics\SynTP\
    ProcessID          : 1932
    ThreadCreationTime : 20-01-2007 13:45:06
    BasePriority       : Normal
    FileVersion        : 7.12.3 08Oct04
    ProductVersion     : 7.12.3 08Oct04
    ProductName        : Synaptics Pointing Device Driver
    CompanyName        : Synaptics, Inc.
    FileDescription    : Synaptics TouchPad Enhancements
    InternalName       : Synaptics Enhancements Application
    LegalCopyright     : Copyright (C) Synaptics, Inc. 1996-2004
    OriginalFilename   : SynTPEnh.exe

#:25 [soundman.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 1980
    ThreadCreationTime : 20-01-2007 13:45:08
    BasePriority       : Normal
    FileVersion        : 5.1.0.36
    ProductVersion     : 5.1.0.36
    ProductName        : Realtek Sound Manager
    CompanyName        : Realtek Semiconductor Corp.
    FileDescription    : Realtek Sound Manager
    InternalName       : ALSMTray
    LegalCopyright     : Copyright (c) 2001-2004 Realtek Semiconductor Corp.
    OriginalFilename   : ALSMTray.exe
    Comments           : Realtek AC97 Audio Sound Manager

#:26 [agrsmmsg.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 1664
    ThreadCreationTime : 20-01-2007 13:45:08
    BasePriority       : Normal
    FileVersion        : 2.1.47 2.1.47 10/08/2004 09:50:51
    ProductVersion     : 2.1.47 2.1.47 10/08/2004 09:50:51
    ProductName        : Agere SoftModem Messaging Applet
    CompanyName        : Agere Systems
    FileDescription    : SoftModem Messaging Applet
    InternalName       : smdmstat.exe
    LegalCopyright     : Copyright © Agere Systems 1998-2000
    OriginalFilename   : smdmstat.exe

#:27 [rundll32.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1728
    ThreadCreationTime : 20-01-2007 13:45:08
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Exécuter une DLL en tant qu'application
    InternalName       : rundll
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : RUNDLL.EXE

#:28 [keyhook.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 2012
    ThreadCreationTime : 20-01-2007 13:45:08
    BasePriority       : Normal
    FileVersion        : 0.0.0.3654
    ProductVersion     : 0.0.0.3654
    ProductName        : SiS Compatible Super VGA Keyboard Daemon
    CompanyName        : Silicon Integrated Systems Corporation
    FileDescription    : SiS Compatible Super VGA Keyboard Daemon
    InternalName       : KeyHook 3.65f.04
    LegalCopyright     : Copyright (C) Silicon Integrated Systems Corp. 1998-2004
    OriginalFilename   : KeyHook.EXE
    Comments           : SiS Compatible Super VGA Keyboard Daemon

#:29 [pcmservice.exe]
    FilePath           : C:\Program Files\Arcade\
    ProcessID          : 2052
    ThreadCreationTime : 20-01-2007 13:45:09
    BasePriority       : Normal
    FileVersion        : 3.00.0000
    ProductVersion     : 3.00.0000
    ProductName        : Cyberlink PowerCinema 3.0
    CompanyName        : CyberLink Corp.
    FileDescription    : CyberLink PowerCinema Resident Program
    InternalName       : CyberLink PowerCinema Resident Program
    LegalCopyright     : Copyright (c) 2003 CyberLink Corp.
    OriginalFilename   : PCMService.EXE

#:30 [svchost.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 2328
    ThreadCreationTime : 20-01-2007 13:45:12
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:31 [qtzgacer.exe]
    FilePath           : C:\Program Files\Launch Manager\
    ProcessID          : 2412
    ThreadCreationTime : 20-01-2007 13:45:12
    BasePriority       : Normal
    FileVersion        : 1, 0, 5, 728
    ProductVersion     : 1, 0, 5, 728
    ProductName        : Launch Manager
    CompanyName        : Dritek System Inc.
    FileDescription    : Launch Manager
    LegalCopyright     : Copyright (c) 2001-2005 Dritek System Inc.
    OriginalFilename   : QtZgAcer.exe

#:32 [ituneshelper.exe]
    FilePath           : C:\Program Files\iTunes\
    ProcessID          : 2460
    ThreadCreationTime : 20-01-2007 13:45:14
    BasePriority       : Normal
    FileVersion        : 6.0.4.2
    ProductVersion     : 6.0.4.2
    ProductName        : iTunes
    CompanyName        : Apple Computer, Inc.
    FileDescription    : iTunesHelper Module
    InternalName       : iTunesHelper
    LegalCopyright     : © 2003-2006 Apple Computer, Inc. All Rights Reserved.
    OriginalFilename   : iTunesHelper.exe

#:33 [qttask.exe]
    FilePath           : C:\Program Files\QuickTime\
    ProcessID          : 2472
    ThreadCreationTime : 20-01-2007 13:45:14
    BasePriority       : Normal
    FileVersion        : 7.0.4
    ProductVersion     : QuickTime 7.0.4
    ProductName        : QuickTime
    CompanyName        : Apple Computer, Inc.
    FileDescription    : QuickTime Task
    InternalName       : QuickTime Task
    LegalCopyright     : Copyright Apple Computer, Inc. 1989-2006
    OriginalFilename   : QTTask.exe

#:34 [ipodservice.exe]
    FilePath           : C:\Program Files\iPod\bin\
    ProcessID          : 2500
    ThreadCreationTime : 20-01-2007 13:45:14
    BasePriority       : Normal
    FileVersion        : 6.0.4.2
    ProductVersion     : 6.0.4.2
    ProductName        : iTunes
    CompanyName        : Apple Computer, Inc.
    FileDescription    : iPodService Module
    InternalName       : iPodService
    LegalCopyright     : © 2003-2006 Apple Computer, Inc. All Rights Reserved.
    OriginalFilename   : iPodService.exe

#:35 [scusapi.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 2580
    ThreadCreationTime : 20-01-2007 13:45:15
    BasePriority       : Normal
    FileVersion        : 2.18
    ProductVersion     : 2.18
    ProductName        : Sharp SCUS
    CompanyName        : Sharp Corporation
    FileDescription    : Sharp SCUS - API Message Handler
    InternalName       : SCUSAPI
    LegalCopyright     : Copyright (C) 1997-2001 Xerox Corporation
    OriginalFilename   : SCUSAPI.EXE

#:36 [ashdisp.exe]
    FilePath           : C:\PROGRA~1\ALWILS~1\Avast4\
    ProcessID          : 2588
    ThreadCreationTime : 20-01-2007 13:45:15
    BasePriority       : Normal
    FileVersion        : 4, 7, 936, 0
    ProductVersion     : 4, 7, 0, 0
    ProductName        : avast! Antivirus 
    FileDescription    : avast! service GUI component
    InternalName       : aswDisp
    LegalCopyright     : Copyright (c) 2007 ALWIL Software
    OriginalFilename   : aswDisp.exe

#:37 [jusched.exe]
    FilePath           : C:\Program Files\Java\jre1.5.0_10\bin\
    ProcessID          : 2668
    ThreadCreationTime : 20-01-2007 13:45:16
    BasePriority       : Normal


#:38 [fppdis2a.exe]
    FilePath           : C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\
    ProcessID          : 2712
    ThreadCreationTime : 20-01-2007 13:45:17
    BasePriority       : Normal
    FileVersion        : 2.22
    ProductVersion     : 2.22
    ProductName        : FinePrint pdfFactory
    CompanyName        : FinePrint Software, LLC
    FileDescription    : FinePrint pdfFactory
    LegalCopyright     : Copyright (c) 2001-2004 FinePrint Software, LLC

#:39 [avgas.exe]
    FilePath           : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\
    ProcessID          : 2736
    ThreadCreationTime : 20-01-2007 13:45:18
    BasePriority       : Normal
    FileVersion        : 7, 5, 0, 50
    ProductVersion     : 7, 5, 0, 50
    ProductName        : AVG Anti-Spyware
    CompanyName        : Anti-Malware Development a.s.
    FileDescription    : AVG Anti-Spyware
    InternalName       : AVG Anti-Spyware
    LegalCopyright     : Copyright © 2006 Anti-Malware Development a.s.
    OriginalFilename   : avgas.exe

#:40 [msmsgs.exe]
    FilePath           : C:\Program Files\Messenger\
    ProcessID          : 2868
    ThreadCreationTime : 20-01-2007 13:45:21
    BasePriority       : Normal
    FileVersion        : 4.7.3001
    ProductVersion     : Version 4.7.3001
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Windows Messenger
    InternalName       : msmsgs
    LegalCopyright     : Copyright (c) Microsoft Corporation 2004
    LegalTrademarks    : Microsoft(R) is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
    OriginalFilename   : msmsgs.exe

#:41 [sharptray.exe]
    FilePath           : C:\Program Files\Sharp\Sharpdesk\
    ProcessID          : 2876
    ThreadCreationTime : 20-01-2007 13:45:22
    BasePriority       : Normal


#:42 [shareaza.exe]
    FilePath           : C:\Program Files\Shareaza\
    ProcessID          : 2992
    ThreadCreationTime : 20-01-2007 13:45:25
    BasePriority       : Normal


#:43 [ubericon manager.exe]
    FilePath           : C:\Program Files\UberIcon\
    ProcessID          : 3004
    ThreadCreationTime : 20-01-2007 13:45:25
    BasePriority       : High


#:44 [winroll.exe]
    FilePath           : C:\Program Files\WinRoll\
    ProcessID          : 3032
    ThreadCreationTime : 20-01-2007 13:45:25
    BasePriority       : Normal


#:45 [9129837.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 3108
    ThreadCreationTime : 20-01-2007 13:45:26
    BasePriority       : Normal


#:46 [emule.exe]
    FilePath           : C:\Program Files\eMule\
    ProcessID          : 3184
    ThreadCreationTime : 20-01-2007 13:45:31
    BasePriority       : Normal
    FileVersion        : 0.47.2 Unicode
    ProductVersion     : 0.47.2 Unicode
    ProductName        : eMule
    CompanyName        : https://www.emule-project.net/home/perl/general.cgi?l=1
    FileDescription    : eMule
    InternalName       : emule.exe
    LegalCopyright     : Copyright © 2002-2006 Merkur - read license.txt for more infos
    OriginalFilename   : emule.exe

#:47 [sistray.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 3520
    ThreadCreationTime : 20-01-2007 13:45:43
    BasePriority       : Normal
    FileVersion        : 0.0.0.3650
    ProductVersion     : 0.0.0.3650
    ProductName        : SiS (R) Compatible Super VGA SiSTray application
    CompanyName        : Silicon Integrated Systems Corporation
    FileDescription    : SiS Compatible Super VGA Tray Application
    InternalName       : SISTRAY 3.65.52
    LegalCopyright     : Copyright (C) Silicon Integrated Systems Corp. 1998-2004
    OriginalFilename   : SISTRAY.EXE
    Comments           : SiS Compatible Super VGA Tray Application

#:48 [btnman.exe]
    FilePath           : C:\Program Files\Sharp\Utilitaires AJ6110\Gestionnaire de destinations\
    ProcessID          : 3588
    ThreadCreationTime : 20-01-2007 13:45:46
    BasePriority       : Normal
    FileVersion        : 1, 0, 0, 101
    ProductVersion     : 1, 0, 0, 0
    ProductName        : Button Manager
    CompanyName        : SHARP CORPORATION
    FileDescription    : Button Manager for AJ Series
    InternalName       : Button Manager
    LegalCopyright     : Copyright (C) 2000 SHARP CORPORATION
    OriginalFilename   : btnman.exe

#:49 [firefox.exe]
    FilePath           : C:\Program Files\Mozilla Firefox\
    ProcessID          : 2824
    ThreadCreationTime : 20-01-2007 13:46:06
    BasePriority       : Normal


#:50 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 2912
    ThreadCreationTime : 20-01-2007 13:47:51
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:51 [msnmsgr.exe]
    FilePath           : C:\Program Files\MSN Messenger\
    ProcessID          : 3764
    ThreadCreationTime : 20-01-2007 14:22:56
    BasePriority       : Normal
    FileVersion        : 8.0.0812.00
    ProductVersion     : 8.0.0812
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Messenger
    InternalName       : msnmsgr.exe
    LegalCopyright     : Copyright (c) Microsoft Corporation.  All rights reserved.
    OriginalFilename   : msnmsgr.exe

#:52 [mmjb.exe]
    FilePath           : C:\Program Files\Musicmatch\Musicmatch Jukebox\
    ProcessID          : 3208
    ThreadCreationTime : 20-01-2007 23:54:21
    BasePriority       : Normal
    FileVersion        : 9.00.5100
    ProductVersion     : 9.00.5100
    ProductName        : Musicmatch Jukebox
    CompanyName        : Musicmatch, Inc.
    FileDescription    : Musicmatch Jukebox
    InternalName       : mmjb
    LegalCopyright     : Copyright © Musicmatch 1998-2004
    LegalTrademarks    :     
    OriginalFilename   : mmjb.EXE

#:53 [mmdiag.exe]
    FilePath           : C:\Program Files\Musicmatch\Musicmatch Jukebox\
    ProcessID          : 2148
    ThreadCreationTime : 20-01-2007 23:54:24
    BasePriority       : Normal
    FileVersion        : 9.00.5100
    ProductVersion     : 9.00.5100
    ProductName        : Musicmatch Jukebox
    CompanyName        : Musicmatch, Inc.
    FileDescription    : Logging and tracing manager
    InternalName       : MMTraceExe
    LegalCopyright     : Copyright © Musicmatch 1998-2004
    LegalTrademarks    :     
    OriginalFilename   : MMTraceExe.EXE

#:54 [photoshop.exe]
    FilePath           : C:\Program Files\Adobe\Photoshop CS\
    ProcessID          : 3660
    ThreadCreationTime : 21-01-2007 00:23:12
    BasePriority       : Normal
    FileVersion        : 8.0.1 (8.0x125)
    ProductVersion     : CS
    ProductName        : Adobe Photoshop CS
    CompanyName        : Adobe Systems, Incorporated
    FileDescription    : Adobe Photoshop CS
    InternalName       : Photoshop
    LegalCopyright     : Copyright 2003 Adobe Systems Inc.
    OriginalFilename   : Photoshop.exe

#:55 [realsched.exe]
    FilePath           : C:\Program Files\Fichiers communs\Real\Update_OB\
    ProcessID          : 236
    ThreadCreationTime : 21-01-2007 01:58:45
    BasePriority       : Normal
    FileVersion        : 0.1.0.3510
    ProductVersion     : 0.1.0.3510
    ProductName        : RealPlayer (32-bit) 
    CompanyName        : RealNetworks, Inc.
    FileDescription    : RealNetworks Scheduler
    InternalName       : schedapp
    LegalCopyright     : Copyright © RealNetworks, Inc. 1995-2004
    LegalTrademarks    : RealAudio(tm) is a trademark of RealNetworks, Inc.
    OriginalFilename   : realsched.exe

#:56 [drwtsn32.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 5580
    ThreadCreationTime : 21-01-2007 14:00:14
    BasePriority       : Normal
    FileVersion        : 5.1.2600.0 (XPClient.010817-1148)
    ProductVersion     : 5.1.2600.0
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Débogueur Postmortem Dr Watson
    InternalName       : drwtsn32.exe
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : drwtsn32.exe

#:57 [drwtsn32.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 6004
    ThreadCreationTime : 21-01-2007 14:01:09
    BasePriority       : Normal
    FileVersion        : 5.1.2600.0 (XPClient.010817-1148)
    ProductVersion     : 5.1.2600.0
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Débogueur Postmortem Dr Watson
    InternalName       : drwtsn32.exe
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : drwtsn32.exe

#:58 [explorer.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 2264
    ThreadCreationTime : 21-01-2007 14:05:52
    BasePriority       : Normal
    FileVersion        : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 6.00.2900.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Explorateur Windows
    InternalName       : explorer
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : EXPLORER.EXE

#:59 [msnmsgr.exe]
    FilePath           : C:\Program Files\MSN Messenger\
    ProcessID          : 4372
    ThreadCreationTime : 21-01-2007 14:50:31
    BasePriority       : Normal
    FileVersion        : 8.0.0812.00
    ProductVersion     : 8.0.0812
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Messenger
    InternalName       : msnmsgr.exe
    LegalCopyright     : Copyright (c) Microsoft Corporation.  All rights reserved.
    OriginalFilename   : msnmsgr.exe

#:60 [msnmsgr.exe]
    FilePath           : C:\Program Files\MSN Messenger\
    ProcessID          : 5820
    ThreadCreationTime : 21-01-2007 14:51:07
    BasePriority       : Normal
    FileVersion        : 8.0.0812.00
    ProductVersion     : 8.0.0812
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Messenger
    InternalName       : msnmsgr.exe
    LegalCopyright     : Copyright (c) Microsoft Corporation.  All rights reserved.
    OriginalFilename   : msnmsgr.exe

#:61 [msnmsgr.exe]
    FilePath           : C:\Program Files\MSN Messenger\
    ProcessID          : 540
    ThreadCreationTime : 21-01-2007 14:51:15
    BasePriority       : Normal
    FileVersion        : 8.0.0812.00
    ProductVersion     : 8.0.0812
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Messenger
    InternalName       : msnmsgr.exe
    LegalCopyright     : Copyright (c) Microsoft Corporation.  All rights reserved.
    OriginalFilename   : msnmsgr.exe

#:62 [msnmsgr.exe]
    FilePath           : C:\Program Files\MSN Messenger\
    ProcessID          : 4780
    ThreadCreationTime : 21-01-2007 14:51:28
    BasePriority       : Normal
    FileVersion        : 8.0.0812.00
    ProductVersion     : 8.0.0812
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Messenger
    InternalName       : msnmsgr.exe
    LegalCopyright     : Copyright (c) Microsoft Corporation.  All rights reserved.
    OriginalFilename   : msnmsgr.exe

#:63 [ad-aware.exe]
    FilePath           : C:\PROGRA~1\LAVASOFT\AD-AWA~1\
    ProcessID          : 3936
    ThreadCreationTime : 21-01-2007 15:07:18
    BasePriority       : Normal
    FileVersion        : 6.2.0.236
    ProductVersion     : SE 106
    ProductName        : Lavasoft Ad-Aware SE
    CompanyName        : Lavasoft Sweden
    FileDescription    : Ad-Aware SE Core application
    InternalName       : Ad-Aware.exe
    LegalCopyright     : Copyright © Lavasoft AB Sweden
    OriginalFilename   : Ad-Aware.exe
    Comments           : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

 AntiVermins Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 3
    Category           : Malware
    Comment            : 
    Rootkey            : HKEY_CLASSES_ROOT
    Object             : clsid\{663de629-4ffd-a944-6f0a-64f98e925b62}

 SpySpotter Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 3
    Category           : Misc
    Comment            : 
    Rootkey            : HKEY_USERS
    Object             : S-1-5-21-4283703853-1560221679-1447081827-1005\software\vb and vba program settings\spyspotter

 Windows Object Recognized!
    Type               : RegData
    Data               : "regedit.exe" "%1"
    TAC Rating         : 3
    Category           : Vulnerability
    Comment            : 
    Rootkey            : HKEY_CLASSES_ROOT
    Object             : regfile\shell\open\command
    Value              : 
    Data               : "regedit.exe" "%1"

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 3
Objects found so far: 3


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 3


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : windows_xp_mci@real[2].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:6
    Value              : Cookie:windows xp mci@real.com/
    Expires            : 22-03-2007 00:34:26
    LastSync           : Hits:6
    UseCount           : 0
    Hits               : 6

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : windows_xp_mci@weborama[2].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:4
    Value              : Cookie:windows xp mci@weborama.fr/
    Expires            : 19-01-2009 15:26:26
    LastSync           : Hits:4
    UseCount           : 0
    Hits               : 4

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 2
Objects found so far: 5



Deep scanning and examining files (C:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

 Adware.PluginDL Object Recognized!
    Type               : File
    Data               : bone start.exe
    TAC Rating         : 3
    Category           : Adware
    Comment            : 
    Object             : C:\Documents and Settings\All Users\Application Data\Pile amen sixth blue\



 Adware.PluginDL Object Recognized!
    Type               : File
    Data               : kfvvzzte.exe
    TAC Rating         : 3
    Category           : Adware
    Comment            : 
    Object             : C:\Documents and Settings\WINDOWS XP MCI\Application Data\Else plus\



 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : henri@real[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : 
    Value              : C:\Documents and Settings\Henri.ACER-6281EFDEF1\Cookies\henri@real[1].txt

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : henri@ads.multimania.lycos[2].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : 
    Value              : C:\Documents and Settings\Henri.ACER-6281EFDEF1\Cookies\henri@ads.multimania.lycos[2].txt

Disk Scan Result for C:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 9


Deep scanning and examining files (D:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for D:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 9


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
71 entries scanned.
New critical objects:0
Objects found so far: 9




Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

 AntiVermins Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 3
    Category           : Malware
    Comment            : 
    Rootkey            : HKEY_LOCAL_MACHINE
    Object             : software\antivermins

 AntiVermins Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 3
    Category           : Malware
    Comment            : 
    Rootkey            : HKEY_LOCAL_MACHINE
    Object             : software\microsoft\windows\currentversion\app paths\antivermins.exe

 AntiVermins Object Recognized!
    Type               : Folder
    TAC Rating         : 3
    Category           : Malware
    Comment            : AntiVermins
    Object             : C:\Documents and Settings\WINDOWS XP MCI\Menu Démarrer\Programmes\AntiVermins

 SpySpotter Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 3
    Category           : Misc
    Comment            : 
    Rootkey            : HKEY_CLASSES_ROOT
    Object             : tabdlg.sstab

 SpySpotter Object Recognized!
    Type               : Regkey
    Data               : 
    TAC Rating         : 3
    Category           : Misc
    Comment            : 
    Rootkey            : HKEY_CLASSES_ROOT
    Object             : tabdlg.sstab.1

 Other Object Recognized!
    Type               : File
    Data               : BONE START.EXE-25EDB0A4.pf
    TAC Rating         : 10
    Category           : Malware
    Comment            : 
    Object             : C:\WINDOWS\prefetch\



Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 6
Objects found so far: 15

16:33:04 Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:24:24.641
Objects scanned:256550
Objects identified:16
Objects ignored:0
New critical objects:16

have some fun · Answer

up

Virus m'empèche de lancer mes programmes

4 réponses

Discussions similaires