Probleme : mon pc rame énormement.
Chipandel
Messages postés
6
Statut
Membre
-
adk94 Messages postés 81 Statut Membre -
adk94 Messages postés 81 Statut Membre -
Bonjours voila mon ordinateur rame énormement depuis peu.
-Kapersky détéctant rien j'ai installé Avast qui a détécté trois cheval de troie je me rappelle plus de leur noms :w. Mais cela ne change tjs rien.
-J'ai installé Sdfix : voila le rapport :
SDFix: Version 1.79
Run by Zurcher - 03/01/2005 - 0:18:10,92
Microsoft Windows XP [version 5.1.2600]
Running From: C:\PROGRA~1\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
Below files will be copied to Backups folder then removed:
C:\DOCUME~1\Zurcher\LOCALS~1\Temp\ICD1.tmp\jinstall.exe - Deleted
C:\DOCUME~1\Zurcher\LOCALS~1\Temp\setup.exe - Deleted
Folder C:\DOCUME~1\Zurcher\LOCALS~1\Temp\ICD1.tmp - Removed
Removing Temp Files
ADS Check:
Checking if ADS is attached to system32 Folder
C:\WINDOWS\system32
No streams found.
Checking if ADS is attached to svchost.exe
C:\WINDOWS\system32\svchost.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe"="C:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe:*:Enabled:CyberLink PowerCinema"
"C:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe"="C:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.9.4.5086-to-1.10.0.5195-frFR-downloader.exe"="C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.9.4.5086-to-1.10.0.5195-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Jeux\\World of Warcraft\\jeux\\BackgroundDownloader.exe"="C:\\Jeux\\World of Warcraft\\jeux\\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.10.2.5302-to-1.11.0.5428-frFR-downloader.exe"="C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.10.2.5302-to-1.11.0.5428-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Jeux\\SteamApps\\althurnae\\counter-strike source\\hl2.exe"="C:\\Jeux\\SteamApps\\althurnae\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
"C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.11.1.5462-to-1.11.2.5464-frFR-downloader.exe"="C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.11.1.5462-to-1.11.2.5464-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\althurnae\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\althurnae\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus Personal\\kavsvc.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus Personal\\kavsvc.exe:*:Enabled:Kaspersky Anti-Virus Service"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Jeux\\UT2004Demo\\System\\UT2004.exe"="C:\\Jeux\\UT2004Demo\\System\\UT2004.exe:*:Enabled:UT2004"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\uTorrent\\utorrent.exe"="C:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:µTorrent"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\gdaignes\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\gdaignes\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\WINDOWS\\AdobeR.exe"="C:\\WINDOWS\\AdobeR.exe:*:Disabled:AdobeR"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
Remaining Files:
---------------
Backups Folder: - C:\PROGRA~1\SDFix\backups\backups.zip
Checking For Files with Hidden Attributes:
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\AlbumArtSmall.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\AlbumArt_{433A6A2D-5769-44BA-83B6-28C2EE0956E5}_Large.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\AlbumArt_{433A6A2D-5769-44BA-83B6-28C2EE0956E5}_Small.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\desktop.ini
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\Folder.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\291\291\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\291\291\colo\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Chap295_by_[NCT]MQ\Chap295_by_[NCT]MQ\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Chap295_by_[NCT]MQ\Chap295_by_[NCT]MQ\Colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Chap297__NCT_\Chap297 [NCT]\Chap297 [NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Chap297__NCT_\Chap297 [NCT]\Chap297 [NCT]\297 colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto chapitre 293 by [NCT]\Naruto chapitre 293 by [NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto chapitre 293 by [NCT]\Naruto chapitre 293 by [NCT]\Colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto chapitre 298 by [NCT]\Naruto chapitre 298 by [NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto chapitre 298 by [NCT]\Naruto chapitre 298 by [NCT]\colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_292_By__NCT_\Naruto_292_By_[NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_292_By__NCT_\Naruto_292_By_[NCT]\Colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_299_By__NCT_\Naruto 299 By [NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_299_By__NCT_\Naruto 299 By [NCT]\colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_Chap290_By_[NCT]\Naruto_Chap290_By_[NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_Chap290_By_[NCT]\Naruto_Chap290_By_[NCT]\Colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_chap_296_by_[NCT]\Naruto_chap_296_by_[NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_chap_296_by_[NCT]\Naruto_chap_296_by_[NCT]\Extras\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_v33_ch294-fr[NMT-FC]\naruto294[NMT-FC]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_v33_ch294-fr[NMT-FC]\naruto294[NMT-FC]\extra\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArtSmall.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArt_{C55ED10C-AF8F-41A6-9725-03494BF8DF2E}_Large.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArt_{C55ED10C-AF8F-41A6-9725-03494BF8DF2E}_Small.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArt_{CAD8CB3D-A890-40E1-8D5C-ACA336C6D779}_Large.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArt_{CAD8CB3D-A890-40E1-8D5C-ACA336C6D779}_Small.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\desktop.ini
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\Folder.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\AlbumArtSmall.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\AlbumArt_{7A442E05-BDB3-4FBA-99F8-0BED853B72CA}_Large.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\AlbumArt_{7A442E05-BDB3-4FBA-99F8-0BED853B72CA}_Small.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\desktop.ini
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\Folder.jpg
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5a0d771158cfd69be5ddd26d8f58c73b\BIT4.tmp
Finished
Voila un rapport hitjackthis actuel :
Logfile of HijackThis v1.99.1
Scan saved at 00:39:50, on 03/01/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware Pro\aawservice.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Zurcher\Bureau\hijackthis_hijackthis_1.99.1_anglais_17891.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/fuji/defaults/su/*https://fr.yahoo.com/?p=us
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O4 - HKLM\..\Run: [VideoraiPodConverter] C:\Program Files\VideoraiPodConverter\VideoraiPodConverter.exe -t
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [rcwinHyper] C:\Program Files\Le Robert\Le Robert & Collins\rcwinHyper.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O11 - Options group: [INTERNATIONAL] International*
O17 - HKLM\System\CCS\Services\Tcpip\..\{089270B7-A79F-49CB-B20E-64B081D3D1FC}: NameServer = 212.27.39.134,212.27.39.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{089270B7-A79F-49CB-B20E-64B081D3D1FC}: NameServer = 212.27.39.134,212.27.39.2
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware Pro\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
Merci de m'aider au plus vite je ne comprends vraiment pas ce qui se passe dans la tete de mon ordinateur :s
-Kapersky détéctant rien j'ai installé Avast qui a détécté trois cheval de troie je me rappelle plus de leur noms :w. Mais cela ne change tjs rien.
-J'ai installé Sdfix : voila le rapport :
SDFix: Version 1.79
Run by Zurcher - 03/01/2005 - 0:18:10,92
Microsoft Windows XP [version 5.1.2600]
Running From: C:\PROGRA~1\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
Below files will be copied to Backups folder then removed:
C:\DOCUME~1\Zurcher\LOCALS~1\Temp\ICD1.tmp\jinstall.exe - Deleted
C:\DOCUME~1\Zurcher\LOCALS~1\Temp\setup.exe - Deleted
Folder C:\DOCUME~1\Zurcher\LOCALS~1\Temp\ICD1.tmp - Removed
Removing Temp Files
ADS Check:
Checking if ADS is attached to system32 Folder
C:\WINDOWS\system32
No streams found.
Checking if ADS is attached to svchost.exe
C:\WINDOWS\system32\svchost.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe"="C:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe:*:Enabled:CyberLink PowerCinema"
"C:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe"="C:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.9.4.5086-to-1.10.0.5195-frFR-downloader.exe"="C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.9.4.5086-to-1.10.0.5195-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Jeux\\World of Warcraft\\jeux\\BackgroundDownloader.exe"="C:\\Jeux\\World of Warcraft\\jeux\\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.10.2.5302-to-1.11.0.5428-frFR-downloader.exe"="C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.10.2.5302-to-1.11.0.5428-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Jeux\\SteamApps\\althurnae\\counter-strike source\\hl2.exe"="C:\\Jeux\\SteamApps\\althurnae\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
"C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.11.1.5462-to-1.11.2.5464-frFR-downloader.exe"="C:\\Jeux\\World of Warcraft\\jeux\\WoW-1.11.1.5462-to-1.11.2.5464-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\althurnae\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\althurnae\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus Personal\\kavsvc.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus Personal\\kavsvc.exe:*:Enabled:Kaspersky Anti-Virus Service"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Jeux\\UT2004Demo\\System\\UT2004.exe"="C:\\Jeux\\UT2004Demo\\System\\UT2004.exe:*:Enabled:UT2004"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\uTorrent\\utorrent.exe"="C:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:µTorrent"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\gdaignes\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\gdaignes\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\WINDOWS\\AdobeR.exe"="C:\\WINDOWS\\AdobeR.exe:*:Disabled:AdobeR"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
Remaining Files:
---------------
Backups Folder: - C:\PROGRA~1\SDFix\backups\backups.zip
Checking For Files with Hidden Attributes:
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\AlbumArtSmall.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\AlbumArt_{433A6A2D-5769-44BA-83B6-28C2EE0956E5}_Large.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\AlbumArt_{433A6A2D-5769-44BA-83B6-28C2EE0956E5}_Small.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\desktop.ini
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\Folder.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\291\291\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\291\291\colo\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Chap295_by_[NCT]MQ\Chap295_by_[NCT]MQ\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Chap295_by_[NCT]MQ\Chap295_by_[NCT]MQ\Colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Chap297__NCT_\Chap297 [NCT]\Chap297 [NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Chap297__NCT_\Chap297 [NCT]\Chap297 [NCT]\297 colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto chapitre 293 by [NCT]\Naruto chapitre 293 by [NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto chapitre 293 by [NCT]\Naruto chapitre 293 by [NCT]\Colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto chapitre 298 by [NCT]\Naruto chapitre 298 by [NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto chapitre 298 by [NCT]\Naruto chapitre 298 by [NCT]\colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_292_By__NCT_\Naruto_292_By_[NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_292_By__NCT_\Naruto_292_By_[NCT]\Colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_299_By__NCT_\Naruto 299 By [NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_299_By__NCT_\Naruto 299 By [NCT]\colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_Chap290_By_[NCT]\Naruto_Chap290_By_[NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_Chap290_By_[NCT]\Naruto_Chap290_By_[NCT]\Colos\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_chap_296_by_[NCT]\Naruto_chap_296_by_[NCT]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_chap_296_by_[NCT]\Naruto_chap_296_by_[NCT]\Extras\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_v33_ch294-fr[NMT-FC]\naruto294[NMT-FC]\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\gdaignes@hotmail.com\tome 33\Naruto_v33_ch294-fr[NMT-FC]\naruto294[NMT-FC]\extra\Thumbs.db
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArtSmall.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArt_{C55ED10C-AF8F-41A6-9725-03494BF8DF2E}_Large.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArt_{C55ED10C-AF8F-41A6-9725-03494BF8DF2E}_Small.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArt_{CAD8CB3D-A890-40E1-8D5C-ACA336C6D779}_Large.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\AlbumArt_{CAD8CB3D-A890-40E1-8D5C-ACA336C6D779}_Small.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\desktop.ini
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\hugo@roy-devred.com\Folder.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\AlbumArtSmall.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\AlbumArt_{7A442E05-BDB3-4FBA-99F8-0BED853B72CA}_Large.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\AlbumArt_{7A442E05-BDB3-4FBA-99F8-0BED853B72CA}_Small.jpg
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\desktop.ini
C:\Documents and Settings\Zurcher\Local Settings\Application Data\Microsoft\Messenger\chipandel89@hotmail.com\Sharing Folders\marcfroget@hotmail.com\Folder.jpg
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5a0d771158cfd69be5ddd26d8f58c73b\BIT4.tmp
Finished
Voila un rapport hitjackthis actuel :
Logfile of HijackThis v1.99.1
Scan saved at 00:39:50, on 03/01/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware Pro\aawservice.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Zurcher\Bureau\hijackthis_hijackthis_1.99.1_anglais_17891.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/fuji/defaults/su/*https://fr.yahoo.com/?p=us
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O4 - HKLM\..\Run: [VideoraiPodConverter] C:\Program Files\VideoraiPodConverter\VideoraiPodConverter.exe -t
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [rcwinHyper] C:\Program Files\Le Robert\Le Robert & Collins\rcwinHyper.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O11 - Options group: [INTERNATIONAL] International*
O17 - HKLM\System\CCS\Services\Tcpip\..\{089270B7-A79F-49CB-B20E-64B081D3D1FC}: NameServer = 212.27.39.134,212.27.39.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{089270B7-A79F-49CB-B20E-64B081D3D1FC}: NameServer = 212.27.39.134,212.27.39.2
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware Pro\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
Merci de m'aider au plus vite je ne comprends vraiment pas ce qui se passe dans la tete de mon ordinateur :s
7 réponses
Heuu ok :(.
Le soucis c est que je comprend rien du tout au rapport... Je suis tres tres mauvais en info...
Et je ne trouve pas les posts appropriés.
Je ne pourrais pas juste avoir un tout ptit peu de votre aide ^^'
(s'il vous plait :p)
Le soucis c est que je comprend rien du tout au rapport... Je suis tres tres mauvais en info...
Et je ne trouve pas les posts appropriés.
Je ne pourrais pas juste avoir un tout ptit peu de votre aide ^^'
(s'il vous plait :p)
ué atta un peu jrecherche dotre post plus explicite. Sinon tu peu faire un scan avec Avast en mode san echec, avec Adware en mode san echec, y compris tout les futurs scan que tu aura a faire se feron en mode sans echec.
PS : t'a des ptit prog pas trè legaux ! :) comme emule, ou limewire
et tu jou a counter ( ça fai longpts )
PS : t'a des ptit prog pas trè legaux ! :) comme emule, ou limewire
et tu jou a counter ( ça fai longpts )
Ok j'attend :)
Effectivement je joue a css depuis pas mal de tps. C'est une source de virus?
Et les serveurs p2p sont illégaux? (merde je croyais qu on pouvait en avoir mais pas télécharger de chose illégal avec !)
ET donc tu me conseilles de refaire tous mes scans en mode sans échec?
Effectivement je joue a css depuis pas mal de tps. C'est une source de virus?
Et les serveurs p2p sont illégaux? (merde je croyais qu on pouvait en avoir mais pas télécharger de chose illégal avec !)
ET donc tu me conseilles de refaire tous mes scans en mode sans échec?
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Ps : je viens de tenter de formater la machine vite fait avec mon cd d'installation.
Il y a marqué le fichier iastor.sys manque et la réinstallation de window est impossible.
Je supose que c est pas normale.
Es ce lié?
Il y a marqué le fichier iastor.sys manque et la réinstallation de window est impossible.
Je supose que c est pas normale.
Es ce lié?
