Infecte par drive cleaner et autres pubs

sebos007 Messages postés 6 Date d'inscription Statut Membre -
sebos007 Messages postés 6 Date d'inscription Statut Membre - 2 mai 2007 à 21:14

une alert internet explorer apparait lorsque je clique sur l icone triangulaire qui clignote situe dans la barre des tache une page de pub s ouvre proposant l achat d un antivirus
j ai eu se virus en telechargeant un codec (video ax object je crois)
ca ralenti le pc et ouvre des pages internet pas demandees
si quelqu un peut m aider
merci

voici un log hijacthis si ca peut aider
Logfile of HijackThis v1.99.1
Scan saved at 18:59:31, on 26/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Video AX Object\smmain.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Softwin\BitDefender8\bdswitch.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Giganology\Gigaget\Gigaget.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Rar$EX00.735\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=presario&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=presario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: GigagetIEHelper - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\system32\gigagetbho_v10.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - C:\Program Files\Video AX Object\bpvol.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Protection Bar - {F0993251-2512-4710-AF6E-0A13EA199D02} - C:\Program Files\Video AX Object\splug.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Fichiers communs\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Gigaget] "C:\Program Files\Giganology\Gigaget\GigagetShell.exe" /s
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxmk044YYFR
O9 - Extra button: (no name) - Software - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\Surfapps.com\PopThis! Free Version\PopThis.dll
O9 - Extra 'Tools' menuitem: PopThis! Options... - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\Surfapps.com\PopThis! Free Version\PopThis.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe

Configuration: Windows XP
Internet Explorer 7.0

Afficher la suite

A voir également:

Infecte par drive cleaner et autres pubs
Adw cleaner - Télécharger - Antivirus & Antimalwares
Fluent cleaner - Guide
Telecharger cleaner - Télécharger - Nettoyage
Windows memory cleaner - Télécharger - Optimisation
Hd cleaner - Télécharger - Optimisation

5 réponses

Réponse 1 / 5
plouf plouf Messages postés 25 Date d'inscription Statut Contributeur Dernière intervention 801

Bonjour ,
Peux tu faire dans l'ordre stp 1/,la méthode préliminaire jusqu'au .3 inclus et poste , les rapports que tu obtiendras

Ensuite :
2/Télécharge HijackThis ici:
http://telechargement.zebulon.fr/138-hijackthis-1991.html

Dézippe le dans un dossier prévu à cet effet.
Par exemple C:\hijackthis < Enregistre le bien dans c : !
Démo : (Merci a Balltrap34 pour cette réalisation)
http://pageperso.aol.fr/balltrap34/Hijenr.gif

Lance le puis:
clique sur "do a system scan and save logfile" (cf démo)
faire un copier coller du log entier sur le forum

Démo : (Merci a Balltrap34 pour cette réalisation)
http://pageperso.aol.fr/balltrap34/demohijack.htm

3/Prends connaissance du contenu le lien suivant:
http://www.f-secure.com/products/license-terms/eult_fra.pdf
Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.
Maintenant fais un clic droit sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/navilog1.zip
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Fais un clic droit sur navilog1.zip et choisis "tout extraire"
Ensuite double clique sur navilog1.bat
Laisses-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2 sans notre avis/accord)
Patientes jusqu'au message :
*** Analyse Termine le ..... ***
Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
Copies-colles l'intégralité dans une réponse. Refermes le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
A+
Bon courage
Plouf Plouf
0
1. sebos007 Messages postés 6 Date d'inscription Statut Membre
  
  ploufplouf ,
  
  voici le log Logfile of HijackThis v1.99.1
  Scan saved at 19:33:53, on 26/04/2007
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16414)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
  c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
  C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
  C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
  C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
  C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
  C:\WINDOWS\system32\HPZipm12.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\system32\UStorSrv.exe
  C:\Program Files\F-Secure\Common\FSMA32.EXE
  C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
  C:\Program Files\F-Secure\Common\FSMB32.EXE
  C:\Program Files\F-Secure\Common\FCH32.EXE
  C:\Program Files\F-Secure\Common\FAMEH32.EXE
  C:\Program Files\F-Secure\Common\FNRB32.EXE
  C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
  C:\Program Files\F-Secure\Common\FIH32.EXE
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Video AX Object\smmain.exe
  C:\HP\KBD\KBD.EXE
  C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
  C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
  C:\Program Files\F-Secure\Common\FSM32.EXE
  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\Softwin\BitDefender8\bdswitch.exe
  C:\Program Files\Softwin\BitDefender8\bdnagent.exe
  C:\Program Files\MSN Messenger\MsnMsgr.Exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
  C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
  C:\Program Files\MSN Messenger\usnsvc.exe
  C:\Program Files\Giganology\Gigaget\Gigaget.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\WINDOWS\system32\NOTEPAD.EXE
  C:\WINDOWS\system32\NOTEPAD.EXE
  C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Rar$EX00.344\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.html
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=presario&pf=desktop
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=presario&pf=desktop
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
  O2 - BHO: GigagetIEHelper - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\system32\gigagetbho_v10.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
  O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - C:\Program Files\Video AX Object\bpvol.dll
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
  O3 - Toolbar: Protection Bar - {F0993251-2512-4710-AF6E-0A13EA199D02} - C:\Program Files\Video AX Object\splug.dll
  O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
  O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
  O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
  O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
  O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Fichiers communs\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
  O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
  O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
  O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
  O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
  O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
  O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [Gigaget] "C:\Program Files\Giganology\Gigaget\GigagetShell.exe" /s
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
  O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
  O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
  O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxmk044YYFR
  O9 - Extra button: (no name) - Software - (no file)
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra button: (no name) - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\Surfapps.com\PopThis! Free Version\PopThis.dll
  O9 - Extra 'Tools' menuitem: PopThis! Options... - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\Surfapps.com\PopThis! Free Version\PopThis.dll
  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O11 - Options group: [INTERNATIONAL] International*
  O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
  O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
  O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
  O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
  O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
  O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
  O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
  O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
  O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
  O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe
  
  l autre rapport par contre je ne sais pas si c est ca car je ne l ai pas obtenu comme il fallait je crois j ai ouvert navilog1.bat on me demandait juste la langue,puis fsblc.exe pour lancer le scan sans que l on me demande un numero
  et j ai obtenu ceci
  
  04/26/07 19:46:09 [Info]: BlackLight Engine 1.0.61 initialized
  04/26/07 19:46:09 [Info]: OS: 5.1 build 2600 (Service Pack 2)
  04/26/07 19:46:10 [Note]: 7019 4
  04/26/07 19:46:10 [Note]: 7005 0
  04/26/07 19:46:10 [Note]: 7006 0
  04/26/07 19:46:10 [Note]: 7011 2960
  04/26/07 19:46:11 [Note]: 7026 0
  04/26/07 19:46:11 [Note]: 7026 0
  04/26/07 19:46:19 [Note]: FSRAW library version 1.7.1021
  04/26/07 19:52:25 [Note]: 7007 0
  
  voila et merci beaucoup de m aider
  a+
  sebos
  
  0
Réponse 2 / 5
plouf plouf Messages postés 25 Date d'inscription Statut Contributeur Dernière intervention 801

Bonjour ,
Tu n'as pas fait ce que j'avais demandé ;-) la méthode préliminaire et pour navilog tu peux recommencer stp , retélecharge -. puis dézippe le contenu de l'archive en faisant un clic droit /navilog1.zip puis choisis tout extraire.

double clic / navilog1.bat.
Laisse-toi guider par l'utilitaire. Choisis l'option 1 puis valide.
Bon courage
a+
Plouf Plouf
0
1. sebos007 Messages postés 6 Date d'inscription Statut Membre
  
  SALUT PLOUF PLOUF
  
  je te remet tout sauf le rapport navilog1 car j ai toujours le meme probleme
  on me demande juste la langue apres avoir fait enter plus rien ne se passe
  
  ---------------------------------------------------------
  AVG Anti-Spyware - Rapport d'analyse
  ---------------------------------------------------------
  
  + Créé à: 23:22:00 01/05/2007
  
  + Résultat de l'analyse:
  
  C:\WINDOWS\system32\ilmpjy.dll -> Downloader.Agent.bkd : Nettoyé.
  [292] C:\WINDOWS\system32\ilmpjy.dll -> Downloader.Agent.bkd : Nettoyé.
  [2004] C:\Program Files\Video AX Object\smmain.exe -> Not-A-Virus.Hoax.Win32.Renos.hq : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@e-2dj6wfkykhcjceq.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@goclick[2].txt -> TrackingCookie.Goclick : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@ehg-kodak.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@weborama[3].txt -> TrackingCookie.Weborama : Nettoyé.
  
  Fin du rapport
  
  BitDefender Online Scanner
  
  Scan report generated at: Wed, May 02, 2007 - 13:57:40
  
  Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;K:\;
  
  Statistics
  
  Time
  04:01:11
  
  Files
  632912
  
  Folders
  6894
  
  Boot Sectors
  3
  
  Archives
  14012
  
  Packed Files
  73409
  
  Results
  
  Identified Viruses
  5
  
  Infected Files
  24
  
  Suspect Files
  0
  
  Warnings
  0
  
  Disinfected
  0
  
  Deleted Files
  25
  
  Engines Info
  
  Virus Definitions
  503616
  
  Engine build
  AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
  
  Scan plugins
  14
  
  Archive plugins
  38
  
  Unpack plugins
  6
  
  E-mail plugins
  6
  
  System plugins
  1
  
  Scan Settings
  
  First Action
  Prompt
  
  Second Action
  Delete
  
  Heuristics
  Yes
  
  Enable Warnings
  Yes
  
  Scanned Extensions
  *;
  
  Exclude Extensions
  
  Scan Emails
  Yes
  
  Scan Archives
  Yes
  
  Scan Packed
  Yes
  
  Scan Files
  Yes
  
  Scan Boot
  Yes
  
  Scanned File
  Status
  
  C:\Program Files\a-squared Free\Quarantine\3dbd0173fa97ca40c358e6472846e171.a2q=>WINDOWS/system32/okkmtv.dll=>(Quarantine-PE)
  Infected with: Trojan.Fakealert.EE
  
  C:\Program Files\a-squared Free\Quarantine\3dbd0173fa97ca40c358e6472846e171.a2q=>WINDOWS/system32/okkmtv.dll=>(Quarantine-PE)
  Deleted
  
  C:\Program Files\a-squared Free\Quarantine\3dbd0173fa97ca40c358e6472846e171.a2q
  Updated
  
  C:\Program Files\Video AX Object\smmon.exe
  Infected with: Trojan.Renos.NAR
  
  C:\Program Files\Video AX Object\smmon.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281829.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281829.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281874.dll
  Infected with: Trojan.Fakealert.EE
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281874.dll
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281892.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281892.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0282892.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0282892.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283892.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283892.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283914.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283914.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283948.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283948.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283951.exe=>(NSIS o)=>lzma_solid_nsis0000
  Infected with: Trojan.Downloader.Zlob.BRW
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283951.exe=>(NSIS o)=>lzma_solid_nsis0000
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283951.exe=>(NSIS o)
  Update failed
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283959.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283959.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284250.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284250.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284341.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284341.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284358.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284358.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285363.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285363.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285385.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285385.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285404.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285404.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285465.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285465.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285494.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285494.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285509.dll
  Detected with: Adware.SpywareLock.A
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285509.dll
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285510.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285510.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285545.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285545.exe
  Deleted
  
  C:\TDdownload\review-play1163.exe=>(NSIS o)=>lzma_solid_nsis0001=>01.exe
  Infected with: MemScan:Trojan.DNSChanger.BF
  
  C:\TDdownload\review-play1163.exe=>(NSIS o)=>lzma_solid_nsis0001=>01.exe
  Deleted
  
  C:\TDdownload\review-play1163.exe=>(NSIS o)=>lzma_solid_nsis0001
  Update failed
  
  C:\TDdownload\review-play12163.exe=>(NSIS o)=>lzma_solid_nsis0001=>01.exe
  Infected with: MemScan:Trojan.DNSChanger.BF
  
  C:\TDdownload\review-play12163.exe=>(NSIS o)=>lzma_solid_nsis0001=>01.exe
  Deleted
  
  C:\TDdownload\review-play12163.exe=>(NSIS o)=>lzma_solid_nsis0001
  Update failed
  
  Logfile of HijackThis v1.99.1
  Scan saved at 16:03:07, on 02/05/2007
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16414)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\csrss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
  c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
  C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
  C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
  C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
  C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\HPZipm12.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\system32\wdfmgr.exe
  C:\WINDOWS\system32\UStorSrv.exe
  C:\Program Files\F-Secure\Common\FSMA32.EXE
  C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
  C:\Program Files\F-Secure\Common\FSMB32.EXE
  C:\Program Files\F-Secure\Common\FAMEH32.EXE
  C:\HP\KBD\KBD.EXE
  C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
  C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  C:\Program Files\F-Secure\Common\FSM32.EXE
  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\F-Secure\Common\FNRB32.EXE
  C:\Program Files\MSN Messenger\MsnMsgr.Exe
  C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\F-Secure\Common\FIH32.EXE
  C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
  C:\WINDOWS\System32\alg.exe
  C:\Program Files\MSN Messenger\usnsvc.exe
  C:\Program Files\Internet Explorer\IEXPLORE.EXE
  C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\Program Files\Giganology\Gigaget\Gigaget.exe
  C:\Program Files\WinRAR\WinRAR.exe
  C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Rar$EX00.031\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.html
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=presario&pf=desktop
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=presario&pf=desktop
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
  O2 - BHO: GigagetIEHelper - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\system32\gigagetbho_v10.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
  O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - (no file)
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
  O3 - Toolbar: Protection Bar - {F0993251-2512-4710-AF6E-0A13EA199D02} - C:\Program Files\Video AX Object\splug.dll
  O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
  O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
  O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
  O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
  O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Fichiers communs\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
  O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
  O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
  O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
  O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
  O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
  O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [Gigaget] "C:\Program Files\Giganology\Gigaget\GigagetShell.exe" /s
  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
  O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
  O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
  O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
  O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxmk044YYFR
  O9 - Extra button: (no name) - Software - (no file)
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra button: (no name) - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\Surfapps.com\PopThis! Free Version\PopThis.dll
  O9 - Extra 'Tools' menuitem: PopThis! Options... - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\Surfapps.com\PopThis! Free Version\PopThis.dll
  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O11 - Options group: [INTERNATIONAL] International*
  O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
  O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
  O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
  O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
  O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
  O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
  O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
  O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
  O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
  O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe
  
  apparement les icones de la barre des taches ont disparu
  
  ca a l air d aller mieux
  
  merci encore
  
  a+
  
  0
Réponse 3 / 5
Carinette

Salut Plouf Plouf

J'ai chopé une merde avec Video Ax Object, j'ai fait tout ce que tu as écrit, merci d'ailleurs.

J'ai fait le scan de Navilog, je vais d'ailleurs t'envoyer l'analyse.
Maintenant je fais quoi ?
Merci bcp.

Search Navipromo version 1.1.5 commencé le 01/05/2007 à 0:39:47,23

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Documents and Settings\DARTY\Mes documents
Mise a jour le 13.04.2007 a 20h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes ***

*** Recherche dossiers dans C:\WINDOWS ***

*** Recherche dossiers dans C:\Program Files ***

*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

*** Recherche dossiers dans C:\Documents and Settings\DARTY\Application Data ***

*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
https://www.f-secure.com/en

F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of April, 2007.
Version information: 2.2.1061.

[+] Started on 05/01/07 at 00:39:48.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items .........................................................................
[+] Scan complete.
[+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
[+] Exited on 05/01/07 at 00:48:34 (return code = 0).

*** Recherche fichiers ***

*** Recherche cles registre ***

Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]

Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]

Recherche Clé Magic Control

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :
*
**
***
****
*****
******
*******
********

*** Analyse Terminé le 01/05/2007 à 0:50:07,05 ***
0
Réponse 4 / 5
plouf plouf Messages postés 25 Date d'inscription Statut Contributeur Dernière intervention 801

Bonjour,
Oui maintenant ton rapport navilog me convient
Oui j'ai vu pour video ax

O3 - Toolbar: Protection Bar - {F0993251-2512-4710-AF6E-0A13EA199D02} - C:\Program Files\Video AX Object\splug.dll

O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - C:\Program Files\Video AX Object\bpvol.dll

Relance hijacthis et fixe ces deux lignes stp.Il faudrait que tu supprime video AX en mode sans echec

Aprés ça peux tu ,remettre un hijacthis aussi stp .
a+
Plouf Plouf
0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 5 / 5
plouf plouf Messages postés 25 Date d'inscription Statut Contributeur Dernière intervention 801

Bonjour ,
Des soucis Sebos007 !?
a+
Plouf Plouf
0
1. sebos007 Messages postés 6 Date d'inscription Statut Membre
  
  bonjour,
  
  je te remet tout sauf le rapport navilog1 car j ai toujours le meme probleme
  on me demande juste la langue apres avoir fait f+enter plus rien ne se passe
  bizzaare
  
  ---------------------------------------------------------
  AVG Anti-Spyware - Rapport d'analyse
  ---------------------------------------------------------
  
  + Créé à: 23:22:00 01/05/2007
  
  + Résultat de l'analyse:
  
  C:\WINDOWS\system32\ilmpjy.dll -> Downloader.Agent.bkd : Nettoyé.
  [292] C:\WINDOWS\system32\ilmpjy.dll -> Downloader.Agent.bkd : Nettoyé.
  [2004] C:\Program Files\Video AX Object\smmain.exe -> Not-A-Virus.Hoax.Win32.Renos.hq : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@e-2dj6wfkykhcjceq.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@goclick[2].txt -> TrackingCookie.Goclick : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@ehg-kodak.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
  C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@weborama[3].txt -> TrackingCookie.Weborama : Nettoyé.
  
  Fin du rapport
  
  BitDefender Online Scanner
  
  Scan report generated at: Wed, May 02, 2007 - 13:57:40
  
  Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;K:\;
  
  Statistics
  
  Time
  04:01:11
  
  Files
  632912
  
  Folders
  6894
  
  Boot Sectors
  3
  
  Archives
  14012
  
  Packed Files
  73409
  
  Results
  
  Identified Viruses
  5
  
  Infected Files
  24
  
  Suspect Files
  0
  
  Warnings
  0
  
  Disinfected
  0
  
  Deleted Files
  25
  
  Engines Info
  
  Virus Definitions
  503616
  
  Engine build
  AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
  
  Scan plugins
  14
  
  Archive plugins
  38
  
  Unpack plugins
  6
  
  E-mail plugins
  6
  
  System plugins
  1
  
  Scan Settings
  
  First Action
  Prompt
  
  Second Action
  Delete
  
  Heuristics
  Yes
  
  Enable Warnings
  Yes
  
  Scanned Extensions
  *;
  
  Exclude Extensions
  
  Scan Emails
  Yes
  
  Scan Archives
  Yes
  
  Scan Packed
  Yes
  
  Scan Files
  Yes
  
  Scan Boot
  Yes
  
  Scanned File
  Status
  
  C:\Program Files\a-squared Free\Quarantine\3dbd0173fa97ca40c358e6472846e171.a2q=>WINDOWS/system32/okkmtv.dll=>(Quarantine-PE)
  Infected with: Trojan.Fakealert.EE
  
  C:\Program Files\a-squared Free\Quarantine\3dbd0173fa97ca40c358e6472846e171.a2q=>WINDOWS/system32/okkmtv.dll=>(Quarantine-PE)
  Deleted
  
  C:\Program Files\a-squared Free\Quarantine\3dbd0173fa97ca40c358e6472846e171.a2q
  Updated
  
  C:\Program Files\Video AX Object\smmon.exe
  Infected with: Trojan.Renos.NAR
  
  C:\Program Files\Video AX Object\smmon.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281829.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281829.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281874.dll
  Infected with: Trojan.Fakealert.EE
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281874.dll
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281892.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0281892.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0282892.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0282892.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283892.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283892.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283914.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283914.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283948.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283948.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283951.exe=>(NSIS o)=>lzma_solid_nsis0000
  Infected with: Trojan.Downloader.Zlob.BRW
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283951.exe=>(NSIS o)=>lzma_solid_nsis0000
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283951.exe=>(NSIS o)
  Update failed
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283959.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP527\A0283959.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284250.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284250.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284341.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284341.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284358.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0284358.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285363.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285363.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285385.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285385.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285404.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP528\A0285404.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285465.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285465.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285494.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285494.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285509.dll
  Detected with: Adware.SpywareLock.A
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285509.dll
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285510.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285510.exe
  Deleted
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285545.exe
  Infected with: Trojan.Renos.NAR
  
  C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP529\A0285545.exe
  Deleted
  
  C:\TDdownload\review-play1163.exe=>(NSIS o)=>lzma_solid_nsis0001=>01.exe
  Infected with: MemScan:Trojan.DNSChanger.BF
  
  C:\TDdownload\review-play1163.exe=>(NSIS o)=>lzma_solid_nsis0001=>01.exe
  Deleted
  
  C:\TDdownload\review-play1163.exe=>(NSIS o)=>lzma_solid_nsis0001
  Update failed
  
  C:\TDdownload\review-play12163.exe=>(NSIS o)=>lzma_solid_nsis0001=>01.exe
  Infected with: MemScan:Trojan.DNSChanger.BF
  
  C:\TDdownload\review-play12163.exe=>(NSIS o)=>lzma_solid_nsis0001=>01.exe
  Deleted
  
  C:\TDdownload\review-play12163.exe=>(NSIS o)=>lzma_solid_nsis0001
  Update failed
  
  Logfile of HijackThis v1.99.1
  Scan saved at 16:03:07, on 02/05/2007
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16414)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\csrss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
  c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
  C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
  C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
  C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
  C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\HPZipm12.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\system32\wdfmgr.exe
  C:\WINDOWS\system32\UStorSrv.exe
  C:\Program Files\F-Secure\Common\FSMA32.EXE
  C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
  C:\Program Files\F-Secure\Common\FSMB32.EXE
  C:\Program Files\F-Secure\Common\FAMEH32.EXE
  C:\HP\KBD\KBD.EXE
  C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
  C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  C:\Program Files\F-Secure\Common\FSM32.EXE
  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\F-Secure\Common\FNRB32.EXE
  C:\Program Files\MSN Messenger\MsnMsgr.Exe
  C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\F-Secure\Common\FIH32.EXE
  C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
  C:\WINDOWS\System32\alg.exe
  C:\Program Files\MSN Messenger\usnsvc.exe
  C:\Program Files\Internet Explorer\IEXPLORE.EXE
  C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
  C:\Program Files\Giganology\Gigaget\Gigaget.exe
  C:\Program Files\WinRAR\WinRAR.exe
  C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Rar$EX00.031\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.html
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=presario&pf=desktop
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=presario&pf=desktop
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
  O2 - BHO: GigagetIEHelper - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\system32\gigagetbho_v10.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
  O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - (no file)
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
  O3 - Toolbar: Protection Bar - {F0993251-2512-4710-AF6E-0A13EA199D02} - C:\Program Files\Video AX Object\splug.dll
  O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
  O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
  O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
  O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
  O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Fichiers communs\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
  O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
  O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
  O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
  O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
  O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
  O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [Gigaget] "C:\Program Files\Giganology\Gigaget\GigagetShell.exe" /s
  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
  O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
  O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
  O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
  O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxmk044YYFR
  O9 - Extra button: (no name) - Software - (no file)
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra button: (no name) - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\Surfapps.com\PopThis! Free Version\PopThis.dll
  O9 - Extra 'Tools' menuitem: PopThis! Options... - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\Surfapps.com\PopThis! Free Version\PopThis.dll
  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O11 - Options group: [INTERNATIONAL] International*
  O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
  O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
  O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
  O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
  O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
  O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
  O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
  O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
  O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
  O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe
  
  apparement les icones de la barre des taches ont disparu
  
  ca a l air d aller mieux
  
  merci encore
  
  a+
  
  0

Newsletters