Raport HIjacthis

Bonjour PLOUF PLOUF, desolé du delai, j'etais a l'exterieur de la ville pour le week-end....
J'ai donc fait toutes les etapes que tu m'a demandé.....

1- CCLEANER (tel que decrit a l'étape 1
2 - Rapport de AVG:

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 17:34:25 16-04-07

+ Résultat de l'analyse:



C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP108\A0016534.dll -> Adware.Virtumonde : Ignoré.
C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP52\A0012213.exe -> Adware.Virtumonde : Ignoré.
C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012479.dll -> Adware.Virtumonde : Ignoré.
C:\VundoFix Backups\jkkhiig.dll.bad -> Adware.Virtumonde : Ignoré.
C:\WINDOWS\system32\urqnmki.dll -> Adware.Virtumonde : Ignoré.
C:\WINDOWS\system32\csjhr.exe -> Downloader.Agent.uj : Ignoré.
Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar/keygen.exe -> Downloader.Small.ehi : Ignoré.
C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP63\A0012702.exe -> Hijacker.Agent.jb : Ignoré.
C:\WINDOWS\system32\drvfov.dll -> Trojan.Agent.qt : Ignoré.
Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar/crack.exe -> Trojan.Agent.qt : Ignoré.
C:\WINDOWS\system32\dmwjm.exe -> Trojan.Small.fb : Ignoré.
C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012472.dll -> Trojan.Vundo : Ignoré.
C:\VundoFix Backups\awttuuu.dll.bad -> Trojan.Vundo : Ignoré.


Fin du rapport

3 - Rapport de BITDEFENDER:

BitDefender Online Scanner







Scan report generated at: Mon, Apr 16, 2007 - 18:36:29









Scan path: A:\;C:\;D:\;H:\;I:\;R:\;T:\;Y:\;Z:\;















Statistics

Time


00:51:00

Files


301611

Folders


4268

Boot Sectors


9

Archives


9500

Packed Files


25374







Results

Identified Viruses


17

Infected Files


42

Suspect Files


0

Warnings


0

Disinfected


0

Deleted Files


41







Engines Info

Virus Definitions


486308

Engine build


AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

Scan plugins


14

Archive plugins


38

Unpack plugins


6

E-mail plugins


6

System plugins


1







Scan Settings

First Action


Disinfect

Second Action


Delete

Heuristics


Yes

Enable Warnings


Yes

Scanned Extensions


*;

Exclude Extensions




Scan Emails


Yes

Scan Archives


Yes

Scan Packed


Yes

Scan Files


Yes

Scan Boot


Yes








Scanned File


Status

C:\Documents and Settings\Face de Crasse\Local Settings\Temporary Internet Files\Content.IE5\JCX5314S\functions.js[1].php


Detected with: Application.JS.ForcePopup.I

C:\Documents and Settings\Face de Crasse\Local Settings\Temporary Internet Files\Content.IE5\JCX5314S\functions.js[1].php


Disinfection failed

C:\Documents and Settings\Face de Crasse\Local Settings\Temporary Internet Files\Content.IE5\JCX5314S\functions.js[1].php


Deleted

C:\Documents and Settings\Face de Crasse\Local Settings\Temporary Internet Files\Content.IE5\JCX5314S\lo1[1]


Infected with: MemScan:Trojan.Virtumod.IX

C:\Documents and Settings\Face de Crasse\Local Settings\Temporary Internet Files\Content.IE5\JCX5314S\lo1[1]


Disinfection failed

C:\Documents and Settings\Face de Crasse\Local Settings\Temporary Internet Files\Content.IE5\JCX5314S\lo1[1]


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP108\A0016533.dll


Infected with: Trojan.BHO.G

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP108\A0016533.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP108\A0016533.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP108\A0016534.dll


Infected with: MemScan:Trojan.Vundo.DLM

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP108\A0016534.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP108\A0016534.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP110\A0016881.dll


Infected with: MemScan:Trojan.Vundo.DLM

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP110\A0016881.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP110\A0016881.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP52\A0012213.exe


Infected with: MemScan:Trojan.Vundo.AD

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP52\A0012213.exe


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP52\A0012213.exe


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012274.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012274.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012274.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012275.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012275.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012275.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012276.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012276.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP54\A0012276.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP56\A0012322.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP56\A0012322.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP56\A0012322.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012459.dll


Infected with: Trojan.Juan.Q

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012459.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012459.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012472.dll


Infected with: MemScan:Trojan.Downloader.NF

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012472.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012472.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012473.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012473.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012473.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012474.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012474.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012474.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012475.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012475.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012475.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012476.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012476.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012476.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012477.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012477.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012477.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012478.dll


Infected with: Trojan.Juan.Q

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012478.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012478.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012480.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012480.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012480.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012481.dll


Infected with: MemScan:Trojan.Virtumod.IX

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012481.dll


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP60\A0012481.dll


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP63\A0012702.exe


Infected with: Trojan.Downloader.AQY

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP63\A0012702.exe


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP63\A0012702.exe


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP73\A0013298.lnk=>Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>keygen.exe


Infected with: Trojan.Downloader.Small.AET

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP73\A0013298.lnk=>Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>keygen.exe


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP73\A0013298.lnk=>Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>keygen.exe


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP73\A0013298.lnk=>Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar


Update failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP73\A0013298.lnk=>Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>crack.exe


Infected with: Trojan.Agent.QT

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP73\A0013298.lnk=>Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>crack.exe


Disinfection failed

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP73\A0013298.lnk=>Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>crack.exe


Deleted

C:\System Volume Information\_restore{620A9EC8-3231-48F5-B10B-889EC15E2278}\RP73\A0013298.lnk=>Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar


Update failed

C:\VundoFix Backups\awttuuu.dll.bad


Infected with: MemScan:Trojan.Downloader.NF

C:\VundoFix Backups\awttuuu.dll.bad


Disinfection failed

C:\VundoFix Backups\awttuuu.dll.bad


Deleted

C:\VundoFix Backups\awvvu.dll.bad


Infected with: MemScan:Trojan.Virtumod.IX

C:\VundoFix Backups\awvvu.dll.bad


Disinfection failed

C:\VundoFix Backups\awvvu.dll.bad


Deleted

C:\VundoFix Backups\ddayv.dll.bad


Infected with: MemScan:Trojan.Virtumod.IX

C:\VundoFix Backups\ddayv.dll.bad


Disinfection failed

C:\VundoFix Backups\ddayv.dll.bad


Deleted

C:\VundoFix Backups\ddcyv.dll.bad


Infected with: MemScan:Trojan.Virtumod.IX

C:\VundoFix Backups\ddcyv.dll.bad


Disinfection failed

C:\VundoFix Backups\ddcyv.dll.bad


Deleted

C:\VundoFix Backups\ddcyx.dll.bad


Infected with: MemScan:Trojan.Virtumod.IX

C:\VundoFix Backups\ddcyx.dll.bad


Disinfection failed

C:\VundoFix Backups\ddcyx.dll.bad


Deleted

C:\VundoFix Backups\geeba.dll.bad


Infected with: MemScan:Trojan.Virtumod.IX

C:\VundoFix Backups\geeba.dll.bad


Disinfection failed

C:\VundoFix Backups\geeba.dll.bad


Deleted

C:\VundoFix Backups\hrwgkpbw.dll.bad


Infected with: Trojan.Juan.Q

C:\VundoFix Backups\hrwgkpbw.dll.bad


Disinfection failed

C:\VundoFix Backups\hrwgkpbw.dll.bad


Deleted

C:\VundoFix Backups\vtsqr.dll.bad


Infected with: MemScan:Trojan.Virtumod.IX

C:\VundoFix Backups\vtsqr.dll.bad


Disinfection failed

C:\VundoFix Backups\vtsqr.dll.bad


Deleted

C:\VundoFix Backups\vtutu.dll.bad


Infected with: MemScan:Trojan.Virtumod.IX

C:\VundoFix Backups\vtutu.dll.bad


Disinfection failed

C:\VundoFix Backups\vtutu.dll.bad


Deleted

C:\WINDOWS\system32\csjhr.exe


Infected with: Trojan.Rootkit.Qwakey.A

C:\WINDOWS\system32\csjhr.exe


Disinfection failed

C:\WINDOWS\system32\csjhr.exe


Deleted

C:\WINDOWS\system32\dmwjm.exe


Infected with: Trojan.Peed.Gen

C:\WINDOWS\system32\dmwjm.exe


Disinfection failed

C:\WINDOWS\system32\dmwjm.exe


Deleted

C:\WINDOWS\system32\drvfov.dll


Infected with: Trojan.Agent.QT

C:\WINDOWS\system32\drvfov.dll


Disinfection failed

C:\WINDOWS\system32\drvfov.dll


Deleted

C:\WINDOWS\system32\gkasb.exe


Infected with: MemScan:Trojan.DNSChanger.A

C:\WINDOWS\system32\gkasb.exe


Disinfection failed

C:\WINDOWS\system32\gkasb.exe


Deleted

C:\WINDOWS\system32\phxtamga.dll


Infected with: Trojan.Virtumod.JB

C:\WINDOWS\system32\phxtamga.dll


Disinfection failed

C:\WINDOWS\system32\phxtamga.dll


Delete failed

C:\WINDOWS\system32\wgmghkhy.dll


Infected with: Trojan.BHO.G

C:\WINDOWS\system32\wgmghkhy.dll


Disinfection failed

C:\WINDOWS\system32\wgmghkhy.dll


Deleted

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe=>(ZIP Sfx s)=>Crack/Key Generator (Crack 3).exe


Infected with: Trojan.Peed.Gen

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe=>(ZIP Sfx s)=>Crack/Key Generator (Crack 3).exe


Disinfection failed

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe=>(ZIP Sfx s)=>Crack/Key Generator (Crack 3).exe


Deleted

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe=>(ZIP Sfx s)


Updated

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe


Update failed

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.81 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=SHARE=-.zip=>Ad-Aware 6.1 FULL/!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe=>(ZIP Sfx s)=>Crack/Key Generator (Crack 3).exe


Infected with: Trojan.Peed.Gen

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.81 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=SHARE=-.zip=>Ad-Aware 6.1 FULL/!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe=>(ZIP Sfx s)=>Crack/Key Generator (Crack 3).exe


Disinfection failed

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.81 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=SHARE=-.zip=>Ad-Aware 6.1 FULL/!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe=>(ZIP Sfx s)=>Crack/Key Generator (Crack 3).exe


Deleted

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.81 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=SHARE=-.zip=>Ad-Aware 6.1 FULL/!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe=>(ZIP Sfx s)


Updated

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Ad-Aware\!_Ad-Aware 6.81 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=SHARE=-.zip=>Ad-Aware 6.1 FULL/!_Ad-Aware 6.1 Pro + KeyGen + Language Pack - ALL U NEED (16-07-2004) -=PaCmAn=-.exe=>(ZIP Sfx s)=>!_Evidence Eliminator 5.058 Cracked - Testet 11-07-2004 (Crack+Download Link).exe


Update failed

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>keygen.exe


Infected with: Trojan.Downloader.Small.AET

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>keygen.exe


Disinfection failed

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>keygen.exe


Deleted

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar


Update failed

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>crack.exe


Infected with: Trojan.Agent.QT

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>crack.exe


Disinfection failed

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar=>crack.exe


Deleted

Z:\Logiciels & Drivers (A Conserver)\Logiciel ANTI-SPYWARE\Spyware Doctor\PC Tools Spyware Doctor 4.0.0.2620.rar


Update failed


4 - Rapport HIJACKTHIS:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 18:39:34, on 16-04-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Sygate Firewall\smc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Logiciels\Avast\aswUpdSv.exe
D:\Program Files\Logiciels\Avast\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\Program Files\ProShow Producer\ScsiAccess.exe
D:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Logiciels\Avast\ashMaiSv.exe
D:\Program Files\Logiciels\Avast\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\System32\svchost.exe
D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
D:\Program Files\Spyware Doctor\swdoctor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jean Pierre\Bureau\HiJackThis_v2.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {23AE2EC5-45A1-433B-981A-5B188A63853E} - C:\WINDOWS\system32\ssqpp.dll
O2 - BHO: (no name) - {4DB84E25-9415-46EB-88F6-55C65AC009E0} - C:\WINDOWS\system32\nasvsqao.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - D:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: (no name) - {67C55A8D-E808-4caa-9EA7-F77102DE0BB6} - C:\WINDOWS\system32\eyhrglxf.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {A416D604-EAA3-4618-958C-2ECA22414616} - C:\WINDOWS\system32\urqnmki.dll (file missing)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - D:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O2 - BHO: (no name) - {C2DB3255-D9B6-4D92-975E-854DA88976C9} - C:\WINDOWS\system32\nasvsqao.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Fichiers communs\Acronis\Acronis Disk Director\oss_reinstall.exe
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] D:\PROGRA~1\SYGATE~1\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB001" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\phxtamga.dll",setvm
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Spyware Doctor] "D:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - D:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
O20 - Winlogon Notify: ssqpp - C:\WINDOWS\system32\ssqpp.dll
O20 - Winlogon Notify: urqnmki - urqnmki.dll (file missing)
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Logiciels\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Logiciels\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Logiciels\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Logiciels\Avast\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: ScsiAccess - Unknown owner - D:\Program Files\ProShow Producer\ScsiAccess.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - Unknown owner - D:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - D:\Program Files\Sygate Firewall\smc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

Bonjour, un petit UP, car j'ai vraiment besoin d'aide...............

Merci!!!!!!!!

Re-encore Plouf-Plouf......je sais je fais encore un UP....mais j'ai vraiment besoin d'aide.......

Merci!!!!!!!!!!!

Jean-Pierre (jeenan)

Re-Bonjour Plouf-Plouf......desolé du delai.....sortie tout le week-end......
Donc voici les reponses a tes demandes:

1- Rapport Genproc:

Rapport GenProc 0.46 [2] effectué le 23-04-07 à 18:18:57,75 - SystemRoot = C:\WINDOWS

# Etape 1/ Télécharge :

- VundoFix.exe (par Atribune) http://www.atribune.org/ccount/click.php?id=4 sur ton Bureau

- SmitfrauFix de S!Ri: Moe et Balltrap34 http://siri.urz.free.fr/Fix/SmitfraudFix.exe
* double-clique sur le fichier "smitfraudfix.exe" et choisis l’option 1, il va lister tous les éléments nuisibles dans un rapport : poste le maintenant.


***** Copie ce qui suit dans un fichier texte et redémarre en mode sans échec comme indiqué ici https://docs.microsoft.com/en-us/?mfr=true (choisis ta session courante "Jean Pierre") *****


# Etape 2/

Double-clique VundoFix.exe afin de le lancer
Clique sur le bouton Scan for Vundo
Lorsque le scan est complété, clique sur le bouton "Remove Vundo"
Une invite te demandera si tu veux supprimer les fichiers, clique YES
Après avoir cliqué Yes, le Bureau disparaîtra un moment lors de la suppression des fichiers
Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo

# Etape 3/

Double-clique sur le fichier "SmitfraudFix.exe" et choisis l’option 2, réponds oui à tout et laisse-le procéder. Sauvegarde le rapport sur ton bureau.

# Etape 4/

Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

# Etape 5/

Redémarre normalement et poste :
- Un nouveau rapport HijackThis, toutes fenêtres et applications fermées si tu ne l'as pas tu trouveras HijackThis ici http://www.trendsecure.com/portal/en-US/threat_analytics/HiJackThis_v2.exe ;
- Le contenu du rapport situé dans C:\vundofix.txt ;
- Le rapport SmitfraudFix que tu as sauvegardé sur ton bureau ;


Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

2 - Je n'ai pas pu effacer GKASB.EXE.....il n'est pas dans le repertoire specifié....

3 - Rapport A2

Version - a-squared Anti-Malware 2.1

Réglages Scan:

Objets: Mémoire, Traces, Cookies, C:\WINDOWS\, C:\Program Files
Scan archives: Marche
Heuristiques: Marche
Scan ADS: Marche

Début du scan: 23-04-07 19:07:12

C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:64 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:65 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:66 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:67 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:68 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:70 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:116 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:117 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:119 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:120 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:121 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:156 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:157 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:172 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:173 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:174 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:175 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:176 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:177 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:178 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:179 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:180 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:181 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:194 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:195 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:196 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:197 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:239 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:240 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:241 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:259 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:275 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:276 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:277 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:289 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:293 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:308 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:313 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:327 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:331 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:332 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:333 Détecter: Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:334 Détecter: Trace.TrackingCookie

Scanné

Fichiers: 61504
Traces: 111000
Cookies: 405
Processus: 31

Trouver

Fichiers: 0
Traces: 0
Cookies: 43
Processus: 0
Clés de Registre: 0

Fin du Scan: 23-04-07 19:21:10
Temps du Scan: 00:13:58

C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:64 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:65 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:66 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:67 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:68 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:70 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:116 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:117 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:119 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:120 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:121 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:156 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:157 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:172 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:173 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:174 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:175 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:176 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:177 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:178 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:179 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:180 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:181 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:194 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:195 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:196 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:197 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:239 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:240 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:241 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:259 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:275 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:276 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:277 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:289 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:293 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:308 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:313 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:327 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:331 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:332 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:333 Supprimé Trace.TrackingCookie
C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\aa01zhsw.default\cookies.txt:334 Supprimé Trace.TrackingCookie

Supprimé

Fichiers: 0
Traces: 0
Cookies: 43


4 - Rapport HIJACKTHIS:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:17:18, on 23-04-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Sygate Firewall\smc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Logiciels\Avast\aswUpdSv.exe
D:\Program Files\Logiciels\Avast\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\Program Files\ProShow Producer\ScsiAccess.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Logiciels\Avast\ashMaiSv.exe
D:\Program Files\Logiciels\Avast\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\Jean Pierre\Bureau\HiJackThis_v2.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - C:\WINDOWS\system32\npslsxhp.dll
O2 - BHO: (no name) - {4DB84E25-9415-46EB-88F6-55C65AC009E0} - C:\WINDOWS\system32\dyiriuxp.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {69E0D5DA-31DB-435F-9F4D-CC119728433B} - C:\WINDOWS\system32\ssqpp.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {A416D604-EAA3-4618-958C-2ECA22414616} - C:\WINDOWS\system32\urqnmki.dll (file missing)
O2 - BHO: (no name) - {C2DB3255-D9B6-4D92-975E-854DA88976C9} - C:\WINDOWS\system32\dyiriuxp.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Fichiers communs\Acronis\Acronis Disk Director\oss_reinstall.exe
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] D:\PROGRA~1\SYGATE~1\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB001" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\phxtamga.dll",setvm
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
O20 - Winlogon Notify: ssqpp - C:\WINDOWS\system32\ssqpp.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Logiciels\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Logiciels\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Logiciels\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Logiciels\Avast\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: ScsiAccess - Unknown owner - D:\Program Files\ProShow Producer\ScsiAccess.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - D:\Program Files\Sygate Firewall\smc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

Bonjour Plouf Plouf............voici les 4 rapports:

1 - SMITFRAUDFIX:

SmitFraudFix v2.171

Rapport fait à 22:13:05,14, 25-04-07
Executé à partir de C:\Documents and Settings\Jean Pierre\Bureau\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Sygate Firewall\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\Logiciels\Avast\aswUpdSv.exe
D:\Program Files\Logiciels\Avast\ashServ.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\Program Files\ProShow Producer\ScsiAccess.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Logiciels\Avast\ashMaiSv.exe
D:\Program Files\Logiciels\Avast\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Jean Pierre


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Jean Pierre\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\JEANPI~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{606A7AE1-272C-4375-80E6-FD834B2325EA}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{606A7AE1-272C-4375-80E6-FD834B2325EA}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{606A7AE1-272C-4375-80E6-FD834B2325EA}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin


2 - CLEAN:

25-04-07 a 22:27:14,64

*** Recherche des fichiers dans C:

*** Recherche des fichiers dans C:\WINDOWS\

*** Recherche des fichiers dans C:\WINDOWS\system32
C:\WINDOWS\system32\mcrh.tmp FOUND

*** Recherche des fichiers dans C:\Program Files
*** Fin du rapport !


3 - HIJACKTHIS:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 22:30:16, on 25-04-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Sygate Firewall\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\Logiciels\Avast\aswUpdSv.exe
D:\Program Files\Logiciels\Avast\ashServ.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\ProShow Producer\ScsiAccess.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
D:\Program Files\Logiciels\Avast\ashMaiSv.exe
D:\Program Files\Logiciels\Avast\ashWebSv.exe
C:\Documents and Settings\Jean Pierre\Bureau\HiJackThis_v2.exe
C:\WINDOWS\System32\svchost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - C:\WINDOWS\system32\npslsxhp.dll
O2 - BHO: (no name) - {4DB84E25-9415-46EB-88F6-55C65AC009E0} - C:\WINDOWS\system32\dyiriuxp.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {8A66DD2F-5D8B-4B0B-B7EE-7E2D4AF1821E} - C:\WINDOWS\system32\ssqpp.dll
O2 - BHO: (no name) - {A416D604-EAA3-4618-958C-2ECA22414616} - C:\WINDOWS\system32\urqnmki.dll (file missing)
O2 - BHO: (no name) - {C2DB3255-D9B6-4D92-975E-854DA88976C9} - C:\WINDOWS\system32\dyiriuxp.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Fichiers communs\Acronis\Acronis Disk Director\oss_reinstall.exe
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] D:\PROGRA~1\SYGATE~1\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB001" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\phxtamga.dll",setvm
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\srxfrjik.dll",realset
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
O20 - Winlogon Notify: ssqpp - C:\WINDOWS\system32\ssqpp.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Logiciels\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Logiciels\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Logiciels\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Logiciels\Avast\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: ScsiAccess - Unknown owner - D:\Program Files\ProShow Producer\ScsiAccess.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - D:\Program Files\Sygate Firewall\smc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

Re-Bonjour......

Voici les 2 rapports:

1- CLEAN:

Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 26-04-07 a 16:47:51,53

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32
tentative de suppression de C:\WINDOWS\system32\mcrh.tmp

*** Suppression des fichiers dans C:\Program Files

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !


2- HIJACKTHIS

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 16:52:14, on 26-04-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Sygate Firewall\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
D:\Program Files\Logiciels\Avast\aswUpdSv.exe
D:\Program Files\Logiciels\Avast\ashServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\Program Files\ProShow Producer\ScsiAccess.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Logiciels\Avast\ashMaiSv.exe
D:\Program Files\Logiciels\Avast\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Jean Pierre\Bureau\HiJackThis_v2.exe
C:\WINDOWS\system32\wuauclt.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - C:\WINDOWS\system32\npslsxhp.dll
O2 - BHO: (no name) - {4DB84E25-9415-46EB-88F6-55C65AC009E0} - C:\WINDOWS\system32\dyiriuxp.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6F178687-9EED-4858-85DD-07FFD40FF68A} - C:\WINDOWS\system32\ssqpp.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {A416D604-EAA3-4618-958C-2ECA22414616} - C:\WINDOWS\system32\urqnmki.dll (file missing)
O2 - BHO: (no name) - {C2DB3255-D9B6-4D92-975E-854DA88976C9} - C:\WINDOWS\system32\dyiriuxp.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Fichiers communs\Acronis\Acronis Disk Director\oss_reinstall.exe
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\LOGICI~1\Avast\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] D:\PROGRA~1\SYGATE~1\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB001" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\phxtamga.dll",setvm
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\srxfrjik.dll",realset
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
O20 - Winlogon Notify: ssqpp - C:\WINDOWS\system32\ssqpp.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Logiciels\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Logiciels\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Logiciels\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Logiciels\Avast\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: ScsiAccess - Unknown owner - D:\Program Files\ProShow Producer\ScsiAccess.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - D:\Program Files\Sygate Firewall\smc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe