[HIJACKTHIS] ligne 10 !!! nvappfilter kézaco?

GiZeL_KeRoZeN Messages postés 106 Statut Membre -  
GiZeL_KeRoZeN Messages postés 106 Statut Membre -
bonjour,

je viens de mettre mon PC a jour avec réinstallation de windows etc ... il est quasiment vide, mais ...
je viens de faire un log avec Hijackthis et là : surprise ... une montagne de ligne 10 .... kézaco ???

merci !

Logfile of HijackThis v1.99.1
Scan saved at 11:30:38, on 24/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Documents and Settings\GiZeL_KeRoZeN\Bureau\IEXPLORE.EXE
D:\LOGICIELS INSTALLATION\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
A voir également:

2 réponses

GiZeL_KeRoZeN Messages postés 106 Statut Membre 49
 
voici le log de ad-aware

Ad-Aware SE Build 1.06r1
Logfile Created on:mercredi 24 janvier 2007 11:38:16
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R146 22.01.2007
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Tracking Cookie(TAC index:3):25 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects

24-01-2007 11:38:16 - Scan started. (Full System Scan)

Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 732
ThreadCreationTime : 24-01-2007 10:21:16
BasePriority : Normal

#:2 [csrss.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 820
ThreadCreationTime : 24-01-2007 10:21:17
BasePriority : Normal

#:3 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 848
ThreadCreationTime : 24-01-2007 10:21:20
BasePriority : High

#:4 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 892
ThreadCreationTime : 24-01-2007 10:21:20
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Applications Services et Contrôleur
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : services.exe

#:5 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 904
ThreadCreationTime : 24-01-2007 10:21:20
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : lsass.exe

#:6 [ati2evxx.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1048
ThreadCreationTime : 24-01-2007 10:21:21
BasePriority : Normal
FileVersion : 6.14.10.4119
ProductVersion : 6.14.10.4119
ProductName : ATI External Event Utility for WindowsNT and Windows9X
CompanyName : ATI Technologies Inc.
FileDescription : ATI External Event Utility EXE Module
InternalName : ATI2EVXX.EXE
LegalCopyright : Copyright © 1999-2004 ATI Technologies Inc.
OriginalFilename : ATI2EVXX.EXE

#:7 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1060
ThreadCreationTime : 24-01-2007 10:21:21
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:8 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1136
ThreadCreationTime : 24-01-2007 10:21:21
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:9 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1180
ThreadCreationTime : 24-01-2007 10:21:22
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:10 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1216
ThreadCreationTime : 24-01-2007 10:21:22
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:11 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1260
ThreadCreationTime : 24-01-2007 10:21:22
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:12 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1380
ThreadCreationTime : 24-01-2007 10:21:23
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : spoolsv.exe

#:13 [aswupdsv.exe]
FilePath : C:\Program Files\Avast4\
ProcessID : 1508
ThreadCreationTime : 24-01-2007 10:21:23
BasePriority : Normal

#:14 [ashserv.exe]
FilePath : C:\Program Files\Avast4\
ProcessID : 1536
ThreadCreationTime : 24-01-2007 10:21:23
BasePriority : High
FileVersion : 4, 7, 936, 0
ProductVersion : 4, 7, 0, 0
ProductName : avast! Antivirus
FileDescription : avast! antivirus service
InternalName : aswServ
LegalCopyright : Copyright (c) 2007 ALWIL Software
OriginalFilename : aswServ.exe

#:15 [avgamsvr.exe]
FilePath : C:\PROGRA~1\Grisoft\AVGFRE~1\
ProcessID : 1560
ThreadCreationTime : 24-01-2007 10:21:23
BasePriority : Normal
FileVersion : 7.5.0.420
ProductVersion : 7.5.0.420
ProductName : AVG 7.5 Anti-Virus System
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG Alert Manager
InternalName : avgamsvr
LegalCopyright : Copyright © 2006 GRISOFT, s.r.o.
OriginalFilename : avgamsvr.EXE

#:16 [avgupsvc.exe]
FilePath : C:\PROGRA~1\Grisoft\AVGFRE~1\
ProcessID : 1580
ThreadCreationTime : 24-01-2007 10:21:23
BasePriority : Normal
FileVersion : 7.5.0.420
ProductVersion : 7.5.0.420
ProductName : AVG 7.5 Anti-Virus System
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG Update Service
InternalName : avgupsvc
LegalCopyright : Copyright © 2006 GRISOFT, s.r.o.
OriginalFilename : avgupdsvc.EXE

#:17 [avgemc.exe]
FilePath : C:\PROGRA~1\Grisoft\AVGFRE~1\
ProcessID : 1592
ThreadCreationTime : 24-01-2007 10:21:23
BasePriority : Normal
FileVersion : 7.5.0.432
ProductVersion : 7.5.0.432
ProductName : AVG Anti-Virus system
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG E-Mail Scanner
InternalName : avgemc
LegalCopyright : Copyright © 2006 GRISOFT, s.r.o.
OriginalFilename : avgemc.exe

#:18 [apache.exe]
FilePath : C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\
ProcessID : 1660
ThreadCreationTime : 24-01-2007 10:21:24
BasePriority : Normal
FileVersion : 2.0.52
ProductVersion : 2.0.52
ProductName : Apache HTTP Server
CompanyName : Apache Software Foundation
FileDescription : Apache HTTP Server
InternalName : Apache.exe
LegalCopyright : Copyright © 2000-2004 The Apache Software Foundation.
OriginalFilename : Apache.exe.exe
Comments : All rights reserved. The license is available at <http://www.apache.org/licenses/LICENSE-2.0.txt>. The Apache HTTP Server project pages are at <http://httpd.apache.org/>.

#:19 [ftrtsvc.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1868
ThreadCreationTime : 24-01-2007 10:21:26
BasePriority : Normal
FileVersion : 11.0 (4)
ProductVersion : 11.0 (4)
ProductName : FTRTSVC NT Service
CompanyName : France Telecom
FileDescription : FTRTSVC NT Service
InternalName : FTRTSVC
LegalCopyright : France Telecom R&D 2004
OriginalFilename : FTRTSVC.EXE

#:20 [ati2evxx.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1920
ThreadCreationTime : 24-01-2007 10:21:26
BasePriority : Normal
FileVersion : 6.14.10.4119
ProductVersion : 6.14.10.4119
ProductName : ATI External Event Utility for WindowsNT and Windows9X
CompanyName : ATI Technologies Inc.
FileDescription : ATI External Event Utility EXE Module
InternalName : ATI2EVXX.EXE
LegalCopyright : Copyright © 1999-2004 ATI Technologies Inc.
OriginalFilename : ATI2EVXX.EXE

#:21 [nsvcip.exe]
FilePath : C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\
ProcessID : 1980
ThreadCreationTime : 24-01-2007 10:21:26
BasePriority : Normal
FileVersion : 2, 2, 0, 464
ProductVersion : 2, 2, 0, 464
ProductName : NVIDIA nSvcIp
CompanyName : NVIDIA
FileDescription : nSvcIp
InternalName : nSvcIp
LegalCopyright : Copyright © 2004
OriginalFilename : nSvcIp.exe

#:22 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 1992
ThreadCreationTime : 24-01-2007 10:21:26
BasePriority : Normal
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Explorateur Windows
InternalName : explorer
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : EXPLORER.EXE

#:23 [nsvclog.exe]
FilePath : C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\
ProcessID : 312
ThreadCreationTime : 24-01-2007 10:21:30
BasePriority : Normal
FileVersion : 2, 2, 0, 464
ProductVersion : 2, 2, 0, 464
ProductName : NVIDIA nSvcLog
CompanyName : NVIDIA
FileDescription : nSvcLog
InternalName : nSvcLog
LegalCopyright : Copyright © 2004
OriginalFilename : nSvcLog.exe

#:24 [ashdisp.exe]
FilePath : C:\PROGRA~1\Avast4\
ProcessID : 352
ThreadCreationTime : 24-01-2007 10:21:30
BasePriority : Normal
FileVersion : 4, 7, 936, 0
ProductVersion : 4, 7, 0, 0
ProductName : avast! Antivirus
FileDescription : avast! service GUI component
InternalName : aswDisp
LegalCopyright : Copyright (c) 2007 ALWIL Software
OriginalFilename : aswDisp.exe

#:25 [avgcc.exe]
FilePath : C:\PROGRA~1\Grisoft\AVGFRE~1\
ProcessID : 412
ThreadCreationTime : 24-01-2007 10:21:30
BasePriority : Normal
FileVersion : 7.5.0.418
ProductVersion : 7.5.0.418
ProductName : AVG 7.5 Anti-Virus System
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG Control Center
InternalName : AvgCC
LegalCopyright : Copyright © 2006 GRISOFT, s.r.o.
OriginalFilename : AvgCC.EXE

#:26 [wdfmgr.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 472
ThreadCreationTime : 24-01-2007 10:21:31
BasePriority : Normal
FileVersion : 5.2.3790.1230 built by: dnsrv(bld4act)
ProductVersion : 5.2.3790.1230
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows User Mode Driver Manager
InternalName : WdfMgr
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : WdfMgr.exe

#:27 [jusched.exe]
FilePath : C:\Program Files\Java\j2re1.4.2_04\bin\
ProcessID : 560
ThreadCreationTime : 24-01-2007 10:21:31
BasePriority : Normal

#:28 [soundman.exe]
FilePath : C:\WINDOWS\
ProcessID : 580
ThreadCreationTime : 24-01-2007 10:21:32
BasePriority : Normal
FileVersion : 5.1.0.40
ProductVersion : 5.1.0.40
ProductName : Realtek Sound Manager
CompanyName : Realtek Semiconductor Corp.
FileDescription : Realtek Sound Manager
InternalName : ALSMTray
LegalCopyright : Copyright (c) 2001-2004 Realtek Semiconductor Corp.
OriginalFilename : ALSMTray.exe
Comments : Realtek AC97 Audio Sound Manager

#:29 [nsvcappflt.exe]
FilePath : C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\
ProcessID : 596
ThreadCreationTime : 24-01-2007 10:21:32
BasePriority : Normal
FileVersion : 1, 0, 1, 0
ProductVersion : 1, 0, 1, 0
ProductName : app_filter Module
FileDescription : app_filter Module
InternalName : app_filter
LegalCopyright : Copyright 2004
OriginalFilename : app_filter.EXE

#:30 [ctfmon.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 684
ThreadCreationTime : 24-01-2007 10:21:33
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : CTFMON.EXE

#:31 [avgw.exe]
FilePath : C:\PROGRA~1\Grisoft\AVGFRE~1\
ProcessID : 1752
ThreadCreationTime : 24-01-2007 10:21:38
BasePriority : Normal
FileVersion : 7.5.0.417
ProductVersion : 7.5.0.417
ProductName : AVG 7.5 Anti-Virus System
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG 7.5 Launcher
InternalName : avgw
LegalCopyright : Copyright © 2006 GRISOFT, s.r.o.
OriginalFilename : AVGW.EXE

#:32 [apache.exe]
FilePath : C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\
ProcessID : 1776
ThreadCreationTime : 24-01-2007 10:21:39
BasePriority : Normal
FileVersion : 2.0.52
ProductVersion : 2.0.52
ProductName : Apache HTTP Server
CompanyName : Apache Software Foundation
FileDescription : Apache HTTP Server
InternalName : Apache.exe
LegalCopyright : Copyright © 2000-2004 The Apache Software Foundation.
OriginalFilename : Apache.exe.exe
Comments : All rights reserved. The license is available at <http://www.apache.org/licenses/LICENSE-2.0.txt>. The Apache HTTP Server project pages are at <http://httpd.apache.org/>.

#:33 [ashmaisv.exe]
FilePath : C:\Program Files\Avast4\
ProcessID : 3052
ThreadCreationTime : 24-01-2007 10:21:43
BasePriority : Normal

#:34 [ashwebsv.exe]
FilePath : C:\Program Files\Avast4\
ProcessID : 3120
ThreadCreationTime : 24-01-2007 10:21:43
BasePriority : Normal

#:35 [alg.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 3360
ThreadCreationTime : 24-01-2007 10:21:45
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Application Layer Gateway Service
InternalName : ALG.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : ALG.exe

#:36 [wuauclt.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3764
ThreadCreationTime : 24-01-2007 10:22:40
BasePriority : Normal
FileVersion : 5.8.0.2469 built by: lab01_n(wmbla)
ProductVersion : 5.8.0.2469
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Mises à jour automatiques
InternalName : wuauclt.exe
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : wuauclt.exe

#:37 [gestionnaireinternet.exe]
FilePath : C:\Program Files\Wanadoo\
ProcessID : 1000
ThreadCreationTime : 24-01-2007 10:24:44
BasePriority : Normal
FileVersion : 5.9 (3)
ProductVersion : 5.9 (3)
ProductName : Kit de Connexion et de Services
CompanyName : France Télécom R&D
FileDescription : Espace Client
InternalName : EspaceClient
LegalCopyright : Copyright (C) France Télécom R&D 1999-2003
OriginalFilename : EspaceClient.exe

#:38 [comcomp.exe]
FilePath : C:\Program Files\Wanadoo\
ProcessID : 1700
ThreadCreationTime : 24-01-2007 10:24:45
BasePriority : Normal
FileVersion : 11b.0 (8)
ProductVersion : 11b.0 (8)
ProductName : Kit de Connexion et de Services
CompanyName : France Télécom R&D
FileDescription : Module de communication
InternalName : ComComp
LegalCopyright : Copyright (C) France Télécom R&D 1999-2003
OriginalFilename : ComComp.exe

#:39 [toaster.exe]
FilePath : C:\PROGRA~1\Wanadoo\
ProcessID : 1888
ThreadCreationTime : 24-01-2007 10:24:46
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : Application Toaster
CompanyName : France Telecom R&D
FileDescription : Application MFC Toaster
InternalName : Toaster
LegalCopyright : Copyright France Telecom R&D (C) 2004
OriginalFilename : Toaster.EXE

#:40 [inactivity.exe]
FilePath : C:\PROGRA~1\Wanadoo\
ProcessID : 948
ThreadCreationTime : 24-01-2007 10:24:46
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : Application Inactivity
FileDescription : Application MFC Inactivity
InternalName : Inactivity
LegalCopyright : Copyright France Telecom R&D (C) 2004
OriginalFilename : Inactivity.EXE

#:41 [pollingmodule.exe]
FilePath : C:\PROGRA~1\Wanadoo\
ProcessID : 212
ThreadCreationTime : 24-01-2007 10:24:46
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : Application PollingModule
FileDescription : Application PollingModule
InternalName : PollingModule
LegalCopyright : Copyright France Telecom R&D (C) 2004
OriginalFilename : PollingModule.EXE

#:42 [alertm~1.exe]
FilePath : C:\WINDOWS\System32\ALERTM~1\
ProcessID : 776
ThreadCreationTime : 24-01-2007 10:24:46
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : Application AlertModule
FileDescription : Application MFC AlertModule
InternalName : AlertModule
LegalCopyright : Copyright (C) 2003
OriginalFilename : AlertModule.EXE

#:43 [watch.exe]
FilePath : C:\Program Files\Wanadoo\
ProcessID : 1024
ThreadCreationTime : 24-01-2007 10:24:48
BasePriority : Normal
FileVersion : 11.0 (2)
ProductVersion : 11.0 (2)
ProductName : Kit de Connexion et de Services
CompanyName : France Télécom R&D
FileDescription : Surveillance des modifications
InternalName : Watch
LegalCopyright : Copyright (C) France Télécom R&D 1999-2003
OriginalFilename : Watch.exe

#:44 [iexplore.exe]
FilePath : C:\Documents and Settings\GiZeL_KeRoZeN\Bureau\
ProcessID : 240
ThreadCreationTime : 24-01-2007 10:24:55
BasePriority : Normal
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : IEXPLORE.EXE

#:45 [hijackthis.exe]
FilePath : D:\LOGICIELS INSTALLATION\
ProcessID : 808
ThreadCreationTime : 24-01-2007 10:30:29
BasePriority : Normal
FileVersion : 1.99.0001
ProductVersion : 1.99.0001
ProductName : HijackThis
CompanyName : Soeperman Enterprises Ltd.
FileDescription : HijackThis
InternalName : HijackThis
LegalCopyright : Freeware
OriginalFilename : HijackThis.exe
Comments : Version history is in Help section

#:46 [notepad.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 256
ThreadCreationTime : 24-01-2007 10:30:38
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Bloc-notes
InternalName : Notepad
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : NOTEPAD.EXE

#:47 [wmiprvse.exe]
FilePath : C:\WINDOWS\system32\wbem\
ProcessID : 3892
ThreadCreationTime : 24-01-2007 10:33:13
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : WMI
InternalName : Wmiprvse.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : Wmiprvse.exe

#:48 [ad-aware.exe]
FilePath : C:\PROGRA~1\Lavasoft\AD-AWA~1\
ProcessID : 3780
ThreadCreationTime : 24-01-2007 10:38:01
BasePriority : Normal
FileVersion : 6.2.0.236
ProductVersion : SE 106
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft AB Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0

Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0

Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0

Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@atdmt[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:20
Value : Cookie:gizel_kerozen@atdmt.com/
Expires : 08-01-2012 01:00:00
LastSync : Hits:20
UseCount : 0
Hits : 20

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@msnportal.112.2o7[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:1
Value : Cookie:gizel_kerozen@msnportal.112.2o7.net/
Expires : 22-01-2012 05:36:52
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@247realmedia[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:77
Value : Cookie:gizel_kerozen@247realmedia.com/
Expires : 01-01-2021 01:00:00
LastSync : Hits:77
UseCount : 0
Hits : 77

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@bluestreak[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:36
Value : Cookie:gizel_kerozen@bluestreak.com/
Expires : 20-01-2017 00:43:22
LastSync : Hits:36
UseCount : 0
Hits : 36

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@advertising[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:27
Value : Cookie:gizel_kerozen@advertising.com/
Expires : 21-01-2012 17:17:02
LastSync : Hits:27
UseCount : 0
Hits : 27

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@adtech[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:10
Value : Cookie:gizel_kerozen@adtech.de/
Expires : 15-01-2017 15:43:50
LastSync : Hits:10
UseCount : 0
Hits : 10

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@estat[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:1
Value : Cookie:gizel_kerozen@estat.com/
Expires : 16-01-2017 11:31:40
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@perf.overture[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:1
Value : Cookie:gizel_kerozen@perf.overture.com/
Expires : 17-01-2011 17:23:50
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@overture[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:3
Value : Cookie:gizel_kerozen@overture.com/
Expires : 15-01-2017 17:23:46
LastSync : Hits:3
UseCount : 0
Hits : 3

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@2o7[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:17
Value : Cookie:gizel_kerozen@2o7.net/
Expires : 21-01-2012 20:09:20
LastSync : Hits:17
UseCount : 0
Hits : 17

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@weborama[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:34
Value : Cookie:gizel_kerozen@weborama.fr/
Expires : 23-01-2012 11:36:06
LastSync : Hits:34
UseCount : 0
Hits : 34

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@bs.serving-sys[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:2
Value : Cookie:gizel_kerozen@bs.serving-sys.com/
Expires : 31-12-2037 23:00:00
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@mediaplex[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:8
Value : Cookie:gizel_kerozen@mediaplex.com/
Expires : 22-06-2009 01:00:00
LastSync : Hits:8
UseCount : 0
Hits : 8

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@serving-sys[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:10
Value : Cookie:gizel_kerozen@serving-sys.com/
Expires : 31-12-2037 23:00:00
LastSync : Hits:10
UseCount : 0
Hits : 10

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@tradedoubler[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:23
Value : Cookie:gizel_kerozen@tradedoubler.com/
Expires : 18-01-2027 05:45:52
LastSync : Hits:23
UseCount : 0
Hits : 23

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@countus.get.kadserver[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:4
Value : Cookie:gizel_kerozen@countus.get.kadserver.com/
Expires : 25-01-2007 11:39:06
LastSync : Hits:4
UseCount : 0
Hits : 4

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@server.iad.liveperson[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:6
Value : Cookie:gizel_kerozen@server.iad.liveperson.net/
Expires : 18-01-2008 17:23:54
LastSync : Hits:6
UseCount : 0
Hits : 6

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@doubleclick[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:28
Value : Cookie:gizel_kerozen@doubleclick.net/
Expires : 08-01-2010 20:52:46
LastSync : Hits:28
UseCount : 0
Hits : 28

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@www.smartadserver[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:97
Value : Cookie:gizel_kerozen@www.smartadserver.com/
Expires : 17-01-2027 19:54:52
LastSync : Hits:97
UseCount : 0
Hits : 97

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : gizel_kerozen@paypal.112.2o7[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:1
Value : Cookie:gizel_kerozen@paypal.112.2o7.net/
Expires : 21-01-2012 20:12:06
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 20
Objects found so far: 20

Deep scanning and examining files (C:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : °°gizel_kerozen°°@247realmedia[1].txt
TAC Rating : 3
Category : Data Miner
Comment :
Value : C:\Documents and Settings\°°GiZeL_KeRoZeN°°\Cookies\°°gizel_kerozen°°@247realmedia[1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : °°gizel_kerozen°°@atdmt[2].txt
TAC Rating : 3
Category : Data Miner
Comment :
Value : C:\Documents and Settings\°°GiZeL_KeRoZeN°°\Cookies\°°gizel_kerozen°°@atdmt[2].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : °°gizel_kerozen°°@bluestreak[1].txt
TAC Rating : 3
Category : Data Miner
Comment :
Value : C:\Documents and Settings\°°GiZeL_KeRoZeN°°\Cookies\°°gizel_kerozen°°@bluestreak[1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : °°gizel_kerozen°°@doubleclick[1].txt
TAC Rating : 3
Category : Data Miner
Comment :
Value : C:\Documents and Settings\°°GiZeL_KeRoZeN°°\Cookies\°°gizel_kerozen°°@doubleclick[1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : °°gizel_kerozen°°@mediaplex[1].txt
TAC Rating : 3
Category : Data Miner
Comment :
Value : C:\Documents and Settings\°°GiZeL_KeRoZeN°°\Cookies\°°gizel_kerozen°°@mediaplex[1].txt

Disk Scan Result for C:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 25

Deep scanning and examining files (D:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for D:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 25

Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
1 entries scanned.
New critical objects:0
Objects found so far: 25

Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 25

11:59:58 Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:21:42.703
Objects scanned:224363
Objects identified:25
Objects ignored:0
New critical objects:25
0
GiZeL_KeRoZeN Messages postés 106 Statut Membre 49
 
bon

apparement l'entrée 010 répétée s'agirait du pare feu rattaché à ma carte mere ... pourtant désactivé ..

une proposition ?

dois-je le desinstaller ?
0