Virus msn espagnol
Résolu/Fermé
al78wan
Messages postés
7
Date d'inscription
jeudi 15 février 2007
Statut
Membre
Dernière intervention
23 mars 2007
-
15 févr. 2007 à 22:25
al78wan Messages postés 7 Date d'inscription jeudi 15 février 2007 Statut Membre Dernière intervention 23 mars 2007 - 23 mars 2007 à 14:01
al78wan Messages postés 7 Date d'inscription jeudi 15 février 2007 Statut Membre Dernière intervention 23 mars 2007 - 23 mars 2007 à 14:01
A voir également:
- Virus msn espagnol
- Msn - Télécharger - Messagerie
- Msn actualités - Télécharger - Médias et Actualité
- Svchost.exe virus - Guide
- Msn québec français - Forum MSN / WLM
- Msn hotmail - Forum Hotmail / Outlook.com
10 réponses
Utilisateur anonyme
15 févr. 2007 à 23:02
15 févr. 2007 à 23:02
Salut
Télécharge lopxp :
http://perso.numericable.fr/~altshift/Info/Fichiers/lopxpMH2.zip
dézippe-le sur ton bureau puis double-clic sur le fichier "lopxpMH.bat"
quand il a terminé, un rapport s'ouvre : fait un copier-coller du rapport puis mets le ici
Télécharge lopxp :
http://perso.numericable.fr/~altshift/Info/Fichiers/lopxpMH2.zip
dézippe-le sur ton bureau puis double-clic sur le fichier "lopxpMH.bat"
quand il a terminé, un rapport s'ouvre : fait un copier-coller du rapport puis mets le ici
al78wan
Messages postés
7
Date d'inscription
jeudi 15 février 2007
Statut
Membre
Dernière intervention
23 mars 2007
17 févr. 2007 à 10:18
17 févr. 2007 à 10:18
Salut Boulepate62,
Merci de ta réponse.
Voir le rapport demandé ci-dessous.
Bon courage !
A+
al78wan
Rapport fait à 10:13:46,85 le 17/02/2007
******************************************
## Répertoires Application Data
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Administrateur\Application Data
28/01/2005 00:07 <REP> .
28/01/2005 00:07 <REP> ..
28/01/2005 00:07 <REP> Microsoft
28/01/2005 00:07 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ596ÿ992 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Administrateur\Local Settings\Application Data
28/01/2005 00:07 <REP> .
28/01/2005 00:07 <REP> ..
28/01/2005 00:07 <REP> Microsoft
28/01/2005 00:13 3ÿ184ÿ656 IconCache.db
1 fichier(s) 3ÿ184ÿ656 octets
3 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\All Users\Application Data
25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
30/01/2005 15:53 <REP> Adobe
04/02/2005 09:11 <REP> Ahead
11/09/2005 00:06 <REP> Creative
28/09/2006 19:08 <REP> Google
17/12/2006 18:05 <REP> Kaspersky Lab
29/09/2006 23:43 <REP> Macrovision
27/11/2005 17:46 <REP> Messenger Plus!
25/01/2005 20:53 <REP> Microsoft
26/01/2005 18:40 <REP> MSN6
10/02/2007 10:33 <REP> Quark
14/03/2006 20:31 <REP> QuickTime
20/10/2006 22:57 <REP> Spybot - Search & Destroy
28/10/2005 23:51 <REP> Symantec
19/12/2006 00:11 <REP> WholeSecurity
01/11/2005 21:44 <REP> Windows Genuine Advantage
22/04/2006 22:19 <REP> Wma 16 close idol
25/01/2005 20:53 62 desktop.ini
25/01/2005 22:09 188 hpzinstall.log
2 fichier(s) 250 octets
18 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Default User\Application Data
25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
25/01/2005 20:53 <REP> Microsoft
25/01/2005 20:53 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Default User\Local Settings\Application Data
25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
0 fichier(s) 0 octets
2 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\eMule_Secure\Application Data
26/11/2006 19:08 <REP> .
26/11/2006 19:08 <REP> ..
17/12/2006 09:20 <REP> Google
26/11/2006 19:08 <REP> Microsoft
26/11/2006 19:08 62 desktop.ini
1 fichier(s) 62 octets
4 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\eMule_Secure\Local Settings\Application Data
26/11/2006 19:08 <REP> .
26/11/2006 19:08 <REP> ..
17/12/2006 09:20 <REP> Google
26/11/2006 19:08 <REP> Microsoft
0 fichier(s) 0 octets
4 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Joanne\Application Data
27/01/2005 09:05 <REP> .
27/01/2005 09:05 <REP> ..
12/12/2005 22:01 <REP> Ahead
12/12/2005 21:46 <REP> Conceptworld
09/05/2005 19:04 <REP> Help
27/01/2005 09:05 <REP> Identities
10/05/2005 18:00 <REP> Macromedia
27/01/2005 09:05 <REP> Microsoft
09/05/2005 19:03 <REP> Real
27/01/2005 23:11 <REP> Symantec
27/01/2005 09:05 62 desktop.ini
1 fichier(s) 62 octets
10 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Joanne\Local Settings\Application Data
27/01/2005 09:05 <REP> .
27/01/2005 09:05 <REP> ..
12/12/2005 21:38 <REP> Copernic
09/05/2005 19:04 <REP> Help
12/12/2005 21:38 <REP> Logitech-LS
27/01/2005 09:05 <REP> Microsoft
27/01/2005 09:05 13ÿ104 GDIPFONTCACHEV1.DAT
27/01/2005 23:14 4ÿ318ÿ140 IconCache.db
2 fichier(s) 4ÿ331ÿ244 octets
6 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Lauren\Application Data
25/01/2005 21:09 <REP> .
25/01/2005 21:09 <REP> ..
25/01/2005 23:35 <REP> Adobe
25/01/2005 23:36 <REP> AdobeUM
04/02/2005 08:43 <REP> Ahead
03/02/2007 16:54 <REP> Conceptworld
11/09/2005 12:03 <REP> Creative
12/02/2005 19:14 <REP> DataLayer
04/02/2005 16:22 <REP> FotoWire
02/09/2005 21:26 <REP> Google
25/01/2005 23:33 <REP> Help
25/01/2005 22:17 <REP> Hewlett-Packard
25/01/2005 21:10 <REP> Identities
29/01/2005 18:01 <REP> Lavasoft
19/11/2006 18:34 <REP> Leadertech
30/01/2005 12:38 <REP> Macromedia
25/01/2005 21:09 <REP> Microsoft
03/02/2007 10:53 <REP> Mozilla
26/01/2005 18:40 <REP> MSN6
12/02/2005 19:14 <REP> Nokia
12/02/2005 19:40 <REP> Nokia Multimedia Player
12/02/2005 19:13 <REP> PC Suite
10/02/2007 10:37 <REP> Quark
30/01/2005 16:37 <REP> Real
13/02/2005 19:52 <REP> RTE
15/08/2006 16:28 <REP> Sun
25/03/2006 20:34 <REP> WholeSecurity
25/01/2005 21:09 62 desktop.ini
1 fichier(s) 62 octets
27 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Lauren\Local Settings\Application Data
25/01/2005 21:09 <REP> .
25/01/2005 21:09 <REP> ..
25/01/2005 23:36 <REP> Adobe
05/04/2005 08:12 <REP> Google
25/01/2005 23:33 <REP> Help
26/01/2005 20:38 <REP> Identities
04/02/2005 16:36 <REP> Logitech-LS
25/01/2005 21:09 <REP> Microsoft
03/02/2007 10:53 <REP> Mozilla
29/01/2005 17:46 77ÿ824 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
26/01/2005 06:42 66ÿ872 GDIPFONTCACHEV1.DAT
31/01/2005 23:19 2ÿ644ÿ898 IconCache.db
3 fichier(s) 2ÿ789ÿ594 octets
9 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\LocalService\Application Data
25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
27/08/2005 22:39 <REP> Macromedia
25/01/2005 21:08 <REP> Microsoft
20/10/2006 23:52 <REP> Webroot
0 fichier(s) 0 octets
5 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data
25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\NetworkService\Application Data
25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
28/01/2005 00:34 <REP> Symantec
0 fichier(s) 0 octets
4 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data
25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Application Data
25/01/2005 21:07 <REP> .
25/01/2005 21:07 <REP> ..
25/01/2005 21:07 <REP> Microsoft
25/01/2005 21:07 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data
25/01/2005 21:07 <REP> .
25/01/2005 21:07 <REP> ..
26/01/2005 06:42 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\WINDOWS\Tasks
20/10/2006 23:32 330 MP Scheduled Scan.job
30/01/2005 20:04 392 FRU Task #Hewlett-Packard#hp psc 1200 series#1107111835.job
25/01/2005 22:17 344 FRU Task #Hewlett-Packard#hp psc 1200 series#1106687810.job
25/01/2005 21:04 6 SA.DAT
25/01/2005 21:02 65 desktop.ini
25/01/2005 21:02 <REP> ..
25/01/2005 21:02 <REP> .
5 fichier(s) 1ÿ137 octets
2 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
******************************************
## Répertoires de C:\Program Files
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Program Files
11/02/2007 12:16 <REP> .
11/02/2007 12:16 <REP> ..
13/02/2005 10:45 <REP> 4t Tray Minimizer
20/08/2006 11:23 <REP> Accords
29/09/2006 23:39 <REP> Adobe
04/02/2005 13:47 <REP> Ahead
21/01/2007 09:43 <REP> ASCII
13/02/2005 10:16 <REP> CodeStuff
29/04/2006 06:25 <REP> Common Files
13/02/2005 11:17 <REP> Conceptworld
30/11/2006 19:37 <REP> CoolMP3Splitter
11/09/2005 00:44 <REP> Creative
25/03/2006 20:33 <REP> eBay
17/04/2005 14:16 <REP> Elaborate Bytes
16/02/2007 19:50 <REP> eMule
25/12/2006 11:00 <REP> Fichiers communs
06/08/2006 13:51 <REP> GEOGRAPHIE
01/02/2007 21:11 <REP> Google
25/01/2005 22:16 <REP> Hewlett-Packard
30/12/2005 11:55 <REP> Intel
29/01/2005 01:32 <REP> Intel Corporation
21/10/2006 10:06 <REP> interMute
19/12/2006 00:06 <REP> Internet Explorer
01/11/2005 12:48 <REP> Inventel
28/09/2006 19:06 <REP> Java
17/12/2006 18:05 <REP> Kaspersky Lab
17/12/2006 11:01 <REP> kav-antiblaklist
02/02/2005 23:38 <REP> K-Lite Codec Pack
25/01/2005 21:32 <REP> Launch Manager
29/01/2005 20:51 <REP> Lavasoft
29/01/2005 20:58 <REP> Lavasoft Refupdate
29/01/2005 20:58 <REP> Lavasoft RegHance
04/02/2005 16:22 <REP> Logitech
03/04/2005 20:47 <REP> LRC Editor 4
25/06/2006 12:21 <REP> Macrogaming
13/05/2006 07:40 <REP> MediaCoder
11/02/2005 06:32 <REP> Messenger
25/01/2005 21:04 <REP> microsoft frontpage
26/12/2006 16:05 <REP> Microsoft Money 2005
07/10/2006 10:09 <REP> Microsoft Office
30/01/2005 18:13 <REP> Microsoft.NET
23/09/2006 00:17 <REP> MorpheusBar
26/01/2005 06:27 <REP> Movie Maker
03/02/2007 11:42 <REP> Mozilla Firefox
26/11/2006 18:27 <REP> MP3 EasySplitter Trial
01/11/2005 21:45 <REP> MSN Apps
01/11/2005 16:15 <REP> msn gaming zone
17/12/2006 18:48 <REP> MSN Messenger
16/11/2006 03:02 <REP> MSXML 4.0
11/02/2007 12:16 <REP> Native Instruments
25/01/2005 23:29 <REP> NETGEAR
26/01/2005 06:21 <REP> NetMeeting
13/10/2006 23:13 <REP> Neuf
12/02/2005 19:12 <REP> Nokia
30/01/2005 18:29 <REP> OfficeUpdate11
14/10/2006 17:10 <REP> Optical Mousemate
16/12/2006 03:01 <REP> Outlook Express
25/11/2006 15:59 <REP> PhotoRecoveryT for Digital Media
10/02/2007 10:33 <REP> Quark
14/03/2006 20:32 <REP> QuickTime
30/01/2005 16:38 <REP> Real
13/02/2005 19:52 <REP> RTE
14/02/2005 19:23 <REP> SAGEM
25/01/2005 21:00 <REP> Services en ligne
17/04/2005 14:16 <REP> SlySoft
21/01/2007 16:38 <REP> solarus
16/12/2006 17:01 <REP> Spybot - Search & Destroy
03/02/2007 17:03 <REP> Symantec
25/01/2005 21:32 <REP> Synaptics
14/07/2003 07:53 73ÿ771ÿ054 URLLists
01/11/2005 16:48 <REP> Utilitaire WLAN (USB) IEEE 802.11b
27/09/2005 20:55 <REP> Voice Rooms
27/09/2005 20:55 <REP> WebDeployerSupport
04/04/2005 18:52 <REP> Winamp
20/10/2006 23:29 <REP> Windows Defender
24/12/2006 12:49 <REP> Windows Media Connect 2
24/12/2006 17:05 <REP> Windows Media Player
18/09/2005 16:15 <REP> Windows NT
30/11/2005 19:04 <REP> WinRAR
22/12/2005 12:35 <REP> WinZip
25/01/2005 21:04 <REP> xerox
12/11/2005 10:43 <REP> YourWare Solutions
1 fichier(s) 73ÿ771ÿ054 octets
81 R‚p(s) 7ÿ888ÿ568ÿ320 octets libres
******************************************
## Popups autorisées
* Internet Explorer
! REG.EXE VERSION 3.0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow
*.creative.com REG_BINARY
support.fujitsu-siemens.fr REG_BINARY
www.rfm.fr REG_BINARY
www.lido.fr REG_BINARY
www.rtl2.fr REG_BINARY
* Mozilla Firefox (1 autorisé 2 interdit)
---------- C:\DOCUMENTS AND SETTINGS\LAUREN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\VNO8PW2A.DEFAULT\HOSTPERM.1
******************************************
## Registre
* [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
Search Bar REG_SZ http://www.google.com/toolbar/ie8/sidebar.html
* [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
closeidoldebugobj REG_SZ C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe
* [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
RectSoftware REG_SZ C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
******************************************
## Zones de sécurité
* HKCU Domains (4)
* P3P History (5)
******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"
*************** Fin du rapport ****************
Merci de ta réponse.
Voir le rapport demandé ci-dessous.
Bon courage !
A+
al78wan
Rapport fait à 10:13:46,85 le 17/02/2007
******************************************
## Répertoires Application Data
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Administrateur\Application Data
28/01/2005 00:07 <REP> .
28/01/2005 00:07 <REP> ..
28/01/2005 00:07 <REP> Microsoft
28/01/2005 00:07 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ596ÿ992 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Administrateur\Local Settings\Application Data
28/01/2005 00:07 <REP> .
28/01/2005 00:07 <REP> ..
28/01/2005 00:07 <REP> Microsoft
28/01/2005 00:13 3ÿ184ÿ656 IconCache.db
1 fichier(s) 3ÿ184ÿ656 octets
3 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\All Users\Application Data
25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
30/01/2005 15:53 <REP> Adobe
04/02/2005 09:11 <REP> Ahead
11/09/2005 00:06 <REP> Creative
28/09/2006 19:08 <REP> Google
17/12/2006 18:05 <REP> Kaspersky Lab
29/09/2006 23:43 <REP> Macrovision
27/11/2005 17:46 <REP> Messenger Plus!
25/01/2005 20:53 <REP> Microsoft
26/01/2005 18:40 <REP> MSN6
10/02/2007 10:33 <REP> Quark
14/03/2006 20:31 <REP> QuickTime
20/10/2006 22:57 <REP> Spybot - Search & Destroy
28/10/2005 23:51 <REP> Symantec
19/12/2006 00:11 <REP> WholeSecurity
01/11/2005 21:44 <REP> Windows Genuine Advantage
22/04/2006 22:19 <REP> Wma 16 close idol
25/01/2005 20:53 62 desktop.ini
25/01/2005 22:09 188 hpzinstall.log
2 fichier(s) 250 octets
18 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Default User\Application Data
25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
25/01/2005 20:53 <REP> Microsoft
25/01/2005 20:53 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Default User\Local Settings\Application Data
25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
0 fichier(s) 0 octets
2 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\eMule_Secure\Application Data
26/11/2006 19:08 <REP> .
26/11/2006 19:08 <REP> ..
17/12/2006 09:20 <REP> Google
26/11/2006 19:08 <REP> Microsoft
26/11/2006 19:08 62 desktop.ini
1 fichier(s) 62 octets
4 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\eMule_Secure\Local Settings\Application Data
26/11/2006 19:08 <REP> .
26/11/2006 19:08 <REP> ..
17/12/2006 09:20 <REP> Google
26/11/2006 19:08 <REP> Microsoft
0 fichier(s) 0 octets
4 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Joanne\Application Data
27/01/2005 09:05 <REP> .
27/01/2005 09:05 <REP> ..
12/12/2005 22:01 <REP> Ahead
12/12/2005 21:46 <REP> Conceptworld
09/05/2005 19:04 <REP> Help
27/01/2005 09:05 <REP> Identities
10/05/2005 18:00 <REP> Macromedia
27/01/2005 09:05 <REP> Microsoft
09/05/2005 19:03 <REP> Real
27/01/2005 23:11 <REP> Symantec
27/01/2005 09:05 62 desktop.ini
1 fichier(s) 62 octets
10 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Joanne\Local Settings\Application Data
27/01/2005 09:05 <REP> .
27/01/2005 09:05 <REP> ..
12/12/2005 21:38 <REP> Copernic
09/05/2005 19:04 <REP> Help
12/12/2005 21:38 <REP> Logitech-LS
27/01/2005 09:05 <REP> Microsoft
27/01/2005 09:05 13ÿ104 GDIPFONTCACHEV1.DAT
27/01/2005 23:14 4ÿ318ÿ140 IconCache.db
2 fichier(s) 4ÿ331ÿ244 octets
6 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Lauren\Application Data
25/01/2005 21:09 <REP> .
25/01/2005 21:09 <REP> ..
25/01/2005 23:35 <REP> Adobe
25/01/2005 23:36 <REP> AdobeUM
04/02/2005 08:43 <REP> Ahead
03/02/2007 16:54 <REP> Conceptworld
11/09/2005 12:03 <REP> Creative
12/02/2005 19:14 <REP> DataLayer
04/02/2005 16:22 <REP> FotoWire
02/09/2005 21:26 <REP> Google
25/01/2005 23:33 <REP> Help
25/01/2005 22:17 <REP> Hewlett-Packard
25/01/2005 21:10 <REP> Identities
29/01/2005 18:01 <REP> Lavasoft
19/11/2006 18:34 <REP> Leadertech
30/01/2005 12:38 <REP> Macromedia
25/01/2005 21:09 <REP> Microsoft
03/02/2007 10:53 <REP> Mozilla
26/01/2005 18:40 <REP> MSN6
12/02/2005 19:14 <REP> Nokia
12/02/2005 19:40 <REP> Nokia Multimedia Player
12/02/2005 19:13 <REP> PC Suite
10/02/2007 10:37 <REP> Quark
30/01/2005 16:37 <REP> Real
13/02/2005 19:52 <REP> RTE
15/08/2006 16:28 <REP> Sun
25/03/2006 20:34 <REP> WholeSecurity
25/01/2005 21:09 62 desktop.ini
1 fichier(s) 62 octets
27 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\Lauren\Local Settings\Application Data
25/01/2005 21:09 <REP> .
25/01/2005 21:09 <REP> ..
25/01/2005 23:36 <REP> Adobe
05/04/2005 08:12 <REP> Google
25/01/2005 23:33 <REP> Help
26/01/2005 20:38 <REP> Identities
04/02/2005 16:36 <REP> Logitech-LS
25/01/2005 21:09 <REP> Microsoft
03/02/2007 10:53 <REP> Mozilla
29/01/2005 17:46 77ÿ824 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
26/01/2005 06:42 66ÿ872 GDIPFONTCACHEV1.DAT
31/01/2005 23:19 2ÿ644ÿ898 IconCache.db
3 fichier(s) 2ÿ789ÿ594 octets
9 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\LocalService\Application Data
25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
27/08/2005 22:39 <REP> Macromedia
25/01/2005 21:08 <REP> Microsoft
20/10/2006 23:52 <REP> Webroot
0 fichier(s) 0 octets
5 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data
25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\NetworkService\Application Data
25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
28/01/2005 00:34 <REP> Symantec
0 fichier(s) 0 octets
4 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data
25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Application Data
25/01/2005 21:07 <REP> .
25/01/2005 21:07 <REP> ..
25/01/2005 21:07 <REP> Microsoft
25/01/2005 21:07 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data
25/01/2005 21:07 <REP> .
25/01/2005 21:07 <REP> ..
26/01/2005 06:42 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\WINDOWS\Tasks
20/10/2006 23:32 330 MP Scheduled Scan.job
30/01/2005 20:04 392 FRU Task #Hewlett-Packard#hp psc 1200 series#1107111835.job
25/01/2005 22:17 344 FRU Task #Hewlett-Packard#hp psc 1200 series#1106687810.job
25/01/2005 21:04 6 SA.DAT
25/01/2005 21:02 65 desktop.ini
25/01/2005 21:02 <REP> ..
25/01/2005 21:02 <REP> .
5 fichier(s) 1ÿ137 octets
2 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
******************************************
## Répertoires de C:\Program Files
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7
R‚pertoire de C:\Program Files
11/02/2007 12:16 <REP> .
11/02/2007 12:16 <REP> ..
13/02/2005 10:45 <REP> 4t Tray Minimizer
20/08/2006 11:23 <REP> Accords
29/09/2006 23:39 <REP> Adobe
04/02/2005 13:47 <REP> Ahead
21/01/2007 09:43 <REP> ASCII
13/02/2005 10:16 <REP> CodeStuff
29/04/2006 06:25 <REP> Common Files
13/02/2005 11:17 <REP> Conceptworld
30/11/2006 19:37 <REP> CoolMP3Splitter
11/09/2005 00:44 <REP> Creative
25/03/2006 20:33 <REP> eBay
17/04/2005 14:16 <REP> Elaborate Bytes
16/02/2007 19:50 <REP> eMule
25/12/2006 11:00 <REP> Fichiers communs
06/08/2006 13:51 <REP> GEOGRAPHIE
01/02/2007 21:11 <REP> Google
25/01/2005 22:16 <REP> Hewlett-Packard
30/12/2005 11:55 <REP> Intel
29/01/2005 01:32 <REP> Intel Corporation
21/10/2006 10:06 <REP> interMute
19/12/2006 00:06 <REP> Internet Explorer
01/11/2005 12:48 <REP> Inventel
28/09/2006 19:06 <REP> Java
17/12/2006 18:05 <REP> Kaspersky Lab
17/12/2006 11:01 <REP> kav-antiblaklist
02/02/2005 23:38 <REP> K-Lite Codec Pack
25/01/2005 21:32 <REP> Launch Manager
29/01/2005 20:51 <REP> Lavasoft
29/01/2005 20:58 <REP> Lavasoft Refupdate
29/01/2005 20:58 <REP> Lavasoft RegHance
04/02/2005 16:22 <REP> Logitech
03/04/2005 20:47 <REP> LRC Editor 4
25/06/2006 12:21 <REP> Macrogaming
13/05/2006 07:40 <REP> MediaCoder
11/02/2005 06:32 <REP> Messenger
25/01/2005 21:04 <REP> microsoft frontpage
26/12/2006 16:05 <REP> Microsoft Money 2005
07/10/2006 10:09 <REP> Microsoft Office
30/01/2005 18:13 <REP> Microsoft.NET
23/09/2006 00:17 <REP> MorpheusBar
26/01/2005 06:27 <REP> Movie Maker
03/02/2007 11:42 <REP> Mozilla Firefox
26/11/2006 18:27 <REP> MP3 EasySplitter Trial
01/11/2005 21:45 <REP> MSN Apps
01/11/2005 16:15 <REP> msn gaming zone
17/12/2006 18:48 <REP> MSN Messenger
16/11/2006 03:02 <REP> MSXML 4.0
11/02/2007 12:16 <REP> Native Instruments
25/01/2005 23:29 <REP> NETGEAR
26/01/2005 06:21 <REP> NetMeeting
13/10/2006 23:13 <REP> Neuf
12/02/2005 19:12 <REP> Nokia
30/01/2005 18:29 <REP> OfficeUpdate11
14/10/2006 17:10 <REP> Optical Mousemate
16/12/2006 03:01 <REP> Outlook Express
25/11/2006 15:59 <REP> PhotoRecoveryT for Digital Media
10/02/2007 10:33 <REP> Quark
14/03/2006 20:32 <REP> QuickTime
30/01/2005 16:38 <REP> Real
13/02/2005 19:52 <REP> RTE
14/02/2005 19:23 <REP> SAGEM
25/01/2005 21:00 <REP> Services en ligne
17/04/2005 14:16 <REP> SlySoft
21/01/2007 16:38 <REP> solarus
16/12/2006 17:01 <REP> Spybot - Search & Destroy
03/02/2007 17:03 <REP> Symantec
25/01/2005 21:32 <REP> Synaptics
14/07/2003 07:53 73ÿ771ÿ054 URLLists
01/11/2005 16:48 <REP> Utilitaire WLAN (USB) IEEE 802.11b
27/09/2005 20:55 <REP> Voice Rooms
27/09/2005 20:55 <REP> WebDeployerSupport
04/04/2005 18:52 <REP> Winamp
20/10/2006 23:29 <REP> Windows Defender
24/12/2006 12:49 <REP> Windows Media Connect 2
24/12/2006 17:05 <REP> Windows Media Player
18/09/2005 16:15 <REP> Windows NT
30/11/2005 19:04 <REP> WinRAR
22/12/2005 12:35 <REP> WinZip
25/01/2005 21:04 <REP> xerox
12/11/2005 10:43 <REP> YourWare Solutions
1 fichier(s) 73ÿ771ÿ054 octets
81 R‚p(s) 7ÿ888ÿ568ÿ320 octets libres
******************************************
## Popups autorisées
* Internet Explorer
! REG.EXE VERSION 3.0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow
*.creative.com REG_BINARY
support.fujitsu-siemens.fr REG_BINARY
www.rfm.fr REG_BINARY
www.lido.fr REG_BINARY
www.rtl2.fr REG_BINARY
* Mozilla Firefox (1 autorisé 2 interdit)
---------- C:\DOCUMENTS AND SETTINGS\LAUREN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\VNO8PW2A.DEFAULT\HOSTPERM.1
******************************************
## Registre
* [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
Search Bar REG_SZ http://www.google.com/toolbar/ie8/sidebar.html
* [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
closeidoldebugobj REG_SZ C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe
* [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
RectSoftware REG_SZ C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
******************************************
## Zones de sécurité
* HKCU Domains (4)
* P3P History (5)
******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"
*************** Fin du rapport ****************
Utilisateur anonyme
17 févr. 2007 à 14:40
17 févr. 2007 à 14:40
Salut al78wan
Fait ceci :
Pour afficher tous les dossiers et fichiers cachés :
Clique sur "démarrer", "panneau de configuration", "outils" ,"option des dossiers", "affichage"
"
Coche:
¤ afficher les fichiers et dossiers cachés
- Clique sur "appliquer" puis "ok"
------------------------------------------------------------------
Clic sur C:\Documents and Settings\All Users\Application Data et supprime ce dossier :
- Wma 16 close idol
------------------------------------------------------------------
Télécharge et installe AVG anti-spyware :
Tu fais un scan complet de ton système, dès qu'il a fini.
Si il te trouve des espions, supprime les. Enregistre le rapport et colle le ici stp
AVG anti-spyware : reste gratuit après la période d'essai en français
---->http://www.infos-du-net.com/telecharger/Anti-Spyware-AVG,0301-7063.html
Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
--> http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
Fait ceci :
Pour afficher tous les dossiers et fichiers cachés :
Clique sur "démarrer", "panneau de configuration", "outils" ,"option des dossiers", "affichage"
"
Coche:
¤ afficher les fichiers et dossiers cachés
- Clique sur "appliquer" puis "ok"
------------------------------------------------------------------
Clic sur C:\Documents and Settings\All Users\Application Data et supprime ce dossier :
- Wma 16 close idol
------------------------------------------------------------------
Télécharge et installe AVG anti-spyware :
Tu fais un scan complet de ton système, dès qu'il a fini.
Si il te trouve des espions, supprime les. Enregistre le rapport et colle le ici stp
AVG anti-spyware : reste gratuit après la période d'essai en français
---->http://www.infos-du-net.com/telecharger/Anti-Spyware-AVG,0301-7063.html
Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
--> http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
al78wan
Messages postés
7
Date d'inscription
jeudi 15 février 2007
Statut
Membre
Dernière intervention
23 mars 2007
17 févr. 2007 à 23:07
17 févr. 2007 à 23:07
Bonsoir,
Voir ci-dessous le rapport en question.
Merci,
Al78wan
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 22:59:03 17/02/2007
+ Résultat de l'analyse:
C:\Program Files\Common Files\Companion Wizard\compwiz.exe -> Adware.Companion : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\Program Files\Common Files\Companion Wizard\WapCHK.dll -> Adware.Companion : Ignoré.
C:\WINDOWS\system32\server.exe -> Dropper.Paradrop.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5V_0001_N57M1412NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.7\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.8\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D18M3107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
:mozilla.219:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@gettyimages.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.397:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.398:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.370:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.393:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.419:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.124:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.125:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.116:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.130:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.142:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.97:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
Voir ci-dessous le rapport en question.
Merci,
Al78wan
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 22:59:03 17/02/2007
+ Résultat de l'analyse:
C:\Program Files\Common Files\Companion Wizard\compwiz.exe -> Adware.Companion : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\Program Files\Common Files\Companion Wizard\WapCHK.dll -> Adware.Companion : Ignoré.
C:\WINDOWS\system32\server.exe -> Dropper.Paradrop.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5V_0001_N57M1412NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.7\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.8\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D18M3107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
:mozilla.219:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@gettyimages.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.397:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.398:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.370:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.393:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.419:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.124:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.125:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.116:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.130:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.142:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.97:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Utilisateur anonyme
17 févr. 2007 à 23:20
17 févr. 2007 à 23:20
Regarde ici rien n'a été supprimé Ignoré
Une fois que le scan est terminé, tu dois y avoir un bouton mettre en quarantaine ou supprimer.
Regarde le tutoriel si besoin est ;-)
Une fois que le scan est terminé, tu dois y avoir un bouton mettre en quarantaine ou supprimer.
Regarde le tutoriel si besoin est ;-)
al78wan
Messages postés
7
Date d'inscription
jeudi 15 février 2007
Statut
Membre
Dernière intervention
23 mars 2007
18 févr. 2007 à 10:38
18 févr. 2007 à 10:38
Bonjour,
Désolé d'avoir appliqué les actions un peu vite !
Voir nouveau rapport ci-dessous.
Remarque :
Lors de la remise sous tension du PC, Kaspersky a supprimé un certain nombre de menaces.
A+
Al78wan
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 10:31:13 18/02/2007
+ Résultat de l'analyse:
C:\Program Files\Common Files\Companion Wizard\compwiz.exe -> Adware.Companion : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\Program Files\Common Files\Companion Wizard\WapCHK.dll -> Adware.Companion : Nettoyé.
C:\System Volume Information\_restore{C0C8113E-1810-4FE1-804D-44BA8AB99697}\RP851\A0118967.exe -> Dropper.Paradrop.a : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5V_0001_N57M1412NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.7\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.8\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D18M3107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
Désolé d'avoir appliqué les actions un peu vite !
Voir nouveau rapport ci-dessous.
Remarque :
Lors de la remise sous tension du PC, Kaspersky a supprimé un certain nombre de menaces.
A+
Al78wan
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 10:31:13 18/02/2007
+ Résultat de l'analyse:
C:\Program Files\Common Files\Companion Wizard\compwiz.exe -> Adware.Companion : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\Program Files\Common Files\Companion Wizard\WapCHK.dll -> Adware.Companion : Nettoyé.
C:\System Volume Information\_restore{C0C8113E-1810-4FE1-804D-44BA8AB99697}\RP851\A0118967.exe -> Dropper.Paradrop.a : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5V_0001_N57M1412NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.7\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.8\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D18M3107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
Utilisateur anonyme
18 févr. 2007 à 21:38
18 févr. 2007 à 21:38
Salut
Ok, très bien.
Clic sur démarrer, poste de travail, C:, program files et supprime ce dossier :
- eoRezo < n'installe plus ça
**Si un fichier/dossier persiste lors de la suppression fait ceci:
- Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..
Puis va supprimer les fichiers/dossiers, vide ta corbeille et redémarre ton PC normalement.
¤ Tu as quoi comme anti-spywares ?
¤ Remet un rapport hijackthis pour faire le nettoyage ;-)
Ok, très bien.
Clic sur démarrer, poste de travail, C:, program files et supprime ce dossier :
- eoRezo < n'installe plus ça
**Si un fichier/dossier persiste lors de la suppression fait ceci:
- Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..
Puis va supprimer les fichiers/dossiers, vide ta corbeille et redémarre ton PC normalement.
¤ Tu as quoi comme anti-spywares ?
¤ Remet un rapport hijackthis pour faire le nettoyage ;-)
al78wan
Messages postés
7
Date d'inscription
jeudi 15 février 2007
Statut
Membre
Dernière intervention
23 mars 2007
22 févr. 2007 à 22:46
22 févr. 2007 à 22:46
Bonsoir boulepate62,
1. eoRezo : Je l'ai desinstallé depuis un bon moment déjà. Peut-être en reste-t-il quelques traces dans le PC
2. J'ai utilisé Spybot et Spysubtract mais je ne les utilisais guère dernèrement
3. Rapport Hijackthis : voir ci-desous.
Merci,
Al78wan
Logfile of HijackThis v1.99.1
Scan saved at 22:38:44, on 22/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\wlancfg.exe
C:\WINDOWS\system32\1XConfig.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Launch Manager\LaunchAp.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\AcroTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTC07.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Lauren\Local Settings\Temporary Internet Files\Content.IE5\Q3YUWJHV\HijackThis[1].exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [ElbyCheckElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [CloneCDTray] C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
O4 - HKLM\..\Run: [Ad-watch] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe"
O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Install_BlueDSL] D:\install.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [closeidoldebugobj] C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [RTEGPRS] "C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe" tray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [RectSoftware] C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O4 - Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {00330010-0000-0000-0000-000020060010} - http://207.234.185.217/ABoxInst_int22.exe
O16 - DPF: {00330010-0000-0000-0000-000020160010} - http://207.234.185.217/ABoxInst_int25.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://fr.systemdoctor.com/download/2006/cab/SystemDoctor2006FreeInstall_fr.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by102fd.bay102.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6DB731A3-B074-4118-8B1C-32511C65D836} (FotovistaPhotoUploader.ctrFpu) - http://www.mypixmania.com/fr/fr/tools/activex/fpu.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A8482EAF-A1F3-4934-AE3F-56EB195A50BF} (DeskUpdate- Activex Control) - https://www.songtexte.de
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: bw+0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: "C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InCD Helper (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe (file missing)
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\WINDOWS\wlancfg.exe
1. eoRezo : Je l'ai desinstallé depuis un bon moment déjà. Peut-être en reste-t-il quelques traces dans le PC
2. J'ai utilisé Spybot et Spysubtract mais je ne les utilisais guère dernèrement
3. Rapport Hijackthis : voir ci-desous.
Merci,
Al78wan
Logfile of HijackThis v1.99.1
Scan saved at 22:38:44, on 22/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\wlancfg.exe
C:\WINDOWS\system32\1XConfig.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Launch Manager\LaunchAp.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\AcroTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTC07.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Lauren\Local Settings\Temporary Internet Files\Content.IE5\Q3YUWJHV\HijackThis[1].exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [ElbyCheckElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [CloneCDTray] C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
O4 - HKLM\..\Run: [Ad-watch] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe"
O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Install_BlueDSL] D:\install.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [closeidoldebugobj] C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [RTEGPRS] "C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe" tray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [RectSoftware] C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O4 - Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {00330010-0000-0000-0000-000020060010} - http://207.234.185.217/ABoxInst_int22.exe
O16 - DPF: {00330010-0000-0000-0000-000020160010} - http://207.234.185.217/ABoxInst_int25.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://fr.systemdoctor.com/download/2006/cab/SystemDoctor2006FreeInstall_fr.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by102fd.bay102.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6DB731A3-B074-4118-8B1C-32511C65D836} (FotovistaPhotoUploader.ctrFpu) - http://www.mypixmania.com/fr/fr/tools/activex/fpu.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A8482EAF-A1F3-4934-AE3F-56EB195A50BF} (DeskUpdate- Activex Control) - https://www.songtexte.de
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: bw+0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: "C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InCD Helper (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe (file missing)
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\WINDOWS\wlancfg.exe
Utilisateur anonyme
22 févr. 2007 à 23:47
22 févr. 2007 à 23:47
Salut al78wan
Ok, très bien. On va faire le nettoyage rien ne sera supprimé sauf si indiqué.
¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [Install_BlueDSL] D:\install.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [closeidoldebugobj] C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [RectSoftware] C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
+ Toutes les O16
¤ Clic sur démarrer, poste de travail, C:, program files et supprime ces dossiers si présents :
- Symantec / Norton
- MSN Apps
¤ Clic sur "démarrer", "exécuter", tape: services.msc
Cherche dans la liste les lignes ci-dessous, tu fais un clic droit dessus choisis "propriétés" et régle les sur "désactivé"
- AVG Anti-Spyware Guard
- LiveUpdate
- Planificateur LiveUpdate automatique
¤ Désinstalle ce programme inutile pas de souci pour ta cam ;-)
- Desktop Messenger
- FreeRAM XP Pro < à toi de voir, pour moi ce genre de logiciel n'est pas très utile si ton système est bien configuré. De plus il consomme lui aussi de la RAM pour fonctionner :-/
Prècise ou en est ton problème puis n'ésite pas à remettre un rapport hijackthis car c'est le chantier ;-)
Ok, très bien. On va faire le nettoyage rien ne sera supprimé sauf si indiqué.
¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [Install_BlueDSL] D:\install.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [closeidoldebugobj] C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [RectSoftware] C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
+ Toutes les O16
¤ Clic sur démarrer, poste de travail, C:, program files et supprime ces dossiers si présents :
- Symantec / Norton
- MSN Apps
¤ Clic sur "démarrer", "exécuter", tape: services.msc
Cherche dans la liste les lignes ci-dessous, tu fais un clic droit dessus choisis "propriétés" et régle les sur "désactivé"
- AVG Anti-Spyware Guard
- LiveUpdate
- Planificateur LiveUpdate automatique
¤ Désinstalle ce programme inutile pas de souci pour ta cam ;-)
- Desktop Messenger
- FreeRAM XP Pro < à toi de voir, pour moi ce genre de logiciel n'est pas très utile si ton système est bien configuré. De plus il consomme lui aussi de la RAM pour fonctionner :-/
Prècise ou en est ton problème puis n'ésite pas à remettre un rapport hijackthis car c'est le chantier ;-)
al78wan
Messages postés
7
Date d'inscription
jeudi 15 février 2007
Statut
Membre
Dernière intervention
23 mars 2007
25 févr. 2007 à 21:00
25 févr. 2007 à 21:00
Bonsoir,
J'ai suivi tes instructions à la lettre.
En ce qui concerne le pb, je pense que durant nos différents échanges le virus MSN Espagnol dont nous étions affecté a du être éliminé par nogtre antivirus Kaspersky lors s'une remise sous tension, car j'ai vu ma fille utiliser MSN messenger récemment.
Toutefois, un bon ménage de ce PC s'imposant, je te logge ci-dessous un rapport Hijackthis.
Merci et à bientôt
Al78WAN
Logfile of HijackThis v1.99.1
Scan saved at 20:47:27, on 25/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wlancfg.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\1XConfig.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Launch Manager\Wbutton.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Launch Manager\LaunchAp.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [ElbyCheckElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [Ad-watch] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe"
O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [RTEGPRS] "C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe" tray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [RectSoftware] C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O4 - Global Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: "C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InCD Helper (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\WINDOWS\wlancfg.exe
J'ai suivi tes instructions à la lettre.
En ce qui concerne le pb, je pense que durant nos différents échanges le virus MSN Espagnol dont nous étions affecté a du être éliminé par nogtre antivirus Kaspersky lors s'une remise sous tension, car j'ai vu ma fille utiliser MSN messenger récemment.
Toutefois, un bon ménage de ce PC s'imposant, je te logge ci-dessous un rapport Hijackthis.
Merci et à bientôt
Al78WAN
Logfile of HijackThis v1.99.1
Scan saved at 20:47:27, on 25/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wlancfg.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\1XConfig.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Launch Manager\Wbutton.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Launch Manager\LaunchAp.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [ElbyCheckElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [Ad-watch] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe"
O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [RTEGPRS] "C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe" tray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [RectSoftware] C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O4 - Global Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: "C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InCD Helper (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\WINDOWS\wlancfg.exe
al78wan
Messages postés
7
Date d'inscription
jeudi 15 février 2007
Statut
Membre
Dernière intervention
23 mars 2007
23 mars 2007 à 14:01
23 mars 2007 à 14:01
Bonjour Boulepate 62,
Le problème étant résolu, je clos ce post en te remerciant de nouveau pour ton aide.
A bientôt et bon courage pour les autres pbs à régler !
Al78wan
Le problème étant résolu, je clos ce post en te remerciant de nouveau pour ton aide.
A bientôt et bon courage pour les autres pbs à régler !
Al78wan
