infection fenêtres publicitaires Résolu

Question

Bonjour à tous,
 
depuis quelques jours je suis agressé par des fenêtre publicitaires  de tous genres et je commence à craquer. Je viens d'acheter un portable avec Vista et voila le remerciement....
Je joins un rapport de hijackthis.
Merci de votre aide. Séb.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 11:30:11, on 12/06/2007
Platform: Windows Vista  (WinNT 6.00.1904)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\System32\ASUSTPE.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\User\Desktop\HiJackThis_v2.exe
C:\Windows\system32\msfeedssync.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUSTPE] C:\Windows\system32\ASUSTPE.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O13 - Gopher Prefix: 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (BthServ) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\system32
etman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32
etprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32
lasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: @%SystemRoot%\system32
sisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32asauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32asmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe
O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	apisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	bssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32	ermsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32	rkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

Utilisateur anonyme · Answer

Bonjour

Qu'as-tu comme anti-spywares mis à part Windows Defender ?

Utilisateur anonyme · Answer

Télécharge ComboScan sur ton Bureau. 
---> http://www.techsupportforum.com/sectools/Deckard/dss.exe
Ferme toutes les applications en cours ; antivirus, pare-feu, etc ..
Double-clic sur comboscan.exe  A la fenêtre qui s'affiche, clic sur OK. 
Soit patient ..
Le rapport Comboscan.txt s'affichera, copie et colle le contenu de ce fichier ici.
Attention, il peut avoir deux, trois rapports mets les tous ici stp

sebmanzo · Answer

voila le premier scan.
Deckard's System Scanner v20070611.50
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft® Windows Vista™ Édition Familiale Premium  (build 6000)
Architecture: X86; Language: French

CPU 0: Intel(R) Core(TM) Duo CPU      T2350  @ 1.86GHz
Percentage of Memory in Use: 72%
Physical Memory (total/avail): 894.63 MiB / 247.8 MiB
Pagefile Memory (total/avail): 2047.64 MiB / 967.23 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1940.91 MiB

C: is Fixed (NTFS) - 67.07 GiB total, 40.84 GiB free. 
D: is Fixed (NTFS) - 39.83 GiB total, 38.38 GiB free. 
E: is Removable (No Media)
F: is CDROM (No Media)


-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.

AV: avast! antivirus 4.7.1001 [VPS 000748-4] v4.7.1001 (ALWIL Software) [COLOR=RED]Disabled[/COLOR]
AS: Windows Defender v1.1.1505.0 (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\User\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=ORDIDESEBETSIB
ComSpec=C:\Windows\system32\cmd.exe
configsetroot=C:\Windows\ConfigSetRoot
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\User
LOCALAPPDATA=C:\Users\User\AppData\Local
LOGONSERVER=\ORDIDESEBETSIB
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 14 Stepping 12, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0e0c
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PROMPT=$P$G
PUBLIC=C:\Users\Public
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\User\AppData\Local\Temp
TMP=C:\Users\User\AppData\Local\Temp
USERDOMAIN=ORDIDESEBETSIB
USERNAME=User
USERPROFILE=C:\Users\User
windir=C:\Windows


-- User Profiles ---------------------------------------------------------------

User
Sibille


-- Add/Remove Programs ---------------------------------------------------------

 --> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
 --> C:\Program Files\Nero\Nero 7
ero\uninstall\UNNERO.exe /UNINSTALL
 --> C:\Windows\UNNeroBackItUp.exe /UNINSTALL
 --> C:\Windows\UNRecode.exe /UNINSTALL
 --> MsiExec.exe /I{977FBE6C-AE9A-4429-B249-814F0B3A4CB1}
Ad-Aware SE Personal --> MsiExec.exe /X{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747}
Adobe Flash Player 9 ActiveX --> C:\Windows\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Reader 7.0 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
ASUS InstantFun --> MsiExec.exe /I{57B15AD4-8C9D-4164-82BB-E33D8644E757}
ASUS Live Update --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}\setup.exe" -l0x9 
ASUS Splendid Video Enhancement Technology --> C:\Program Files\InstallShield Installation Information\{C0FC1C14-4824-4A73-87A6-9E888C9C3102}\SETUP.exe -runfromtemp -l0x0009 -removeonly
ASUS Touch Pad Extra --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DB891739-2EB3-45A8-9CBD-941C255CECD4}\SETUP.EXE" -l0x9 
Asus_Camera_ScreenSaver --> "C:\Windows\ASUS Camera ScreenSaver Uninstaller.exe"
ATI Uninstaller --> C:\Program Files\ATI\CIM\Bin\Atisetup.exe -uninstall all
ATK Hotkey --> C:\Program Files\InstallShield Installation Information\{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}\SETUP.exe -runfromtemp -l0x0009 -removeonly
ATK Media --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}\SETUP.EXE" -l0x9 
ATKOSD2 --> C:\Program Files\InstallShield Installation Information\{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}\SETUP.exe -runfromtemp -l0x0009 -removeonly
Attansic Giga Ethernet Utility --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1F698102-5739-441E-96F0-74F4EA540F06}\SETUP.EXE" -l0x9 
avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
DivX Codec --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter --> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Empereur : L'Empire du Milieu --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{821DABD6-26F2-49E5-AE55-40A589ADBE6D}\setup.exe" -l0x40c 
eMule --> "C:\Program Files\eMule\Uninstall.exe"
HijackThis 1.99.1 --> C:\PROGRA~1\HIJACK~1\HijackThis.exe /uninstall
Language pack for Ad-Aware SE --> C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG
LifeFrame2 --> MsiExec.exe /I{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Motorola SM56 Speakerphone Modem --> rundll32.exe sm56co6a.dll,SM56UnInstaller
MSXML 4.0 SP2 (KB927978) --> MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
NB Probe --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}\SETUP.EXE" -l0x9 
Nero 7 Essentials --> MsiExec.exe /X{8A8C4EAC-9AB7-45FA-9480-5716FD261036}
Net4Switch --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9D6D7811-43B3-463C-BC79-5D1755269989}\setup.exe" -l0x9 
OpenOffice.org 2.2 --> MsiExec.exe /I{7FD7F10E-0666-4C9F-A0A8-422EA5E31C4C}
Outil de mise à jour Google --> "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Power4Gear eXtreme --> C:\Program Files\InstallShield Installation Information\{8CFEBE9C-F29F-4C49-80E0-7106970F8734}\setup.exe -runfromtemp -l0x0009 -removeonly
Realtek High Definition Audio Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.exe" -l0x9  -removeonly
Realtek USB 2.0 Card Reader --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC24971E-1946-445D-8A82-CE685433FA7D}\SETUP.exe" -l0x9  -removeonly
Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Synaptics Pointing Device Driver --> rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
USB2.0 1.3M WebCam --> C:\Windows\StkUnist.exe
Windows Live Messenger --> MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Live OneCare safety scanner --> MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}
WinFlash --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DE10AB76-4756-4913-BE25-55D1C1051F9A}\setup.exe" -l0x9 
Wireless Console 2 --> C:\Program Files\InstallShield Installation Information\{83F73CB1-7705-49D1-9852-84D839CA2A45}\SETUP.exe -runfromtemp -l0x0009 -removeonly
XnView 1.91 --> "C:\Program Files\XnView\unins000.exe"


-- End of Deckard's System Scanner: finished at 2007-06-12 at 22:16:52 ---------

sebmanzo · Answer

Et voila le deuxieme. C'est un peu du chinois tout ca. A plus. Séb Deckard's System Scanner v20070611.50 Run by User on 2007-06-12 at 22:13:33 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- Last 5 Restore Point(s) -- 9: 2007-06-12 09:13:12 UTC - RP69 - Removed Google Toolbar for Internet Explorer 8: 2007-06-12 09:05:16 UTC - RP68 - Windows Update 7: 2007-06-05 10:43:01 UTC - RP67 - Point de contrôle planifié 6: 2007-06-04 19:49:19 UTC - RP66 - Point de contrôle planifié 5: 2007-06-01 09:14:23 UTC - RP65 - Installation du package de pilote logiciel : Pilotes d'imprimante à jet d'encre Lexmark Imprimantes -- First Restore Point -- 1: 2007-05-30 06:33:32 UTC - RP60 - Registre nettoyé à l'aide du scanner de sécurité Windows Live OneCare Backed up registry hives. Performed disk cleanup. -- HijackThis (run as User.exe) ------------------------------------------------ Logfile of HijackThis v1.99.1 Scan saved at 22:16:17, on 12/06/2007 Platform: Unknown Windows (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16386) Running processes: C:\Windows\system32 askeng.exe C:\Program Files\ASUS\ASUS Live Update\ALU.exe C:\Windows\system32 askeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\ASUS\Net4Switch\Net4Switch.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\ASUS\ATK Media\DMedia.exe C:\Windows\System32\ASUSTPE.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\ASScrPro.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Windows\System32\qlgceakfac.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Users\User\Desktop\dss.exe C:\Windows\system32\conime.exe C:\Program Files\Internet Explorer\ieuser.exe C:\Windows\system32\SearchFilterHost.exe C:\PROGRA~1\HIJACK~1\User.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.asus.com/fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE O4 - HKLM\..\Run: [ASUSTPE] C:\Windows\system32\ASUSTPE.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [qlgceakfac] c:\windows\system32\qlgceakfac.exe qlgceakfac O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O10 - Unknown file in Winsock LSP: c:\windows\system32 laapi.dll O10 - Unknown file in Winsock LSP: c:\windows\system32 apinsp.dll O11 - Options group: [INTERNATIONAL] International* O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing) -- File Associations ----------------------------------------------------------- All associations okay. -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- All drivers whitelisted. -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 ASLDRService (ASLDR Service) - c:\program files\atk hotkey\asldrsrv.exe S2 CLTNetCnService (Symantec Lic NetConnect service) - "c:\program files\common files\symantec shared\ccsvchst.exe" /h cccommon (file missing) S3 NBService - c:\program files ero ero 7 ero backitup bservice.exe S3 NMIndexingService - "c:\program files\common files\ahead\lib mindexingservice.exe" -- Scheduled Tasks ------------------------------------------------------------- 2007-06-12 22:15:11 422 --ah----- C:\Windows\Tasks\User_Feed_Synchronization-{8CF64691-30F5-4CEB-9EDD-6A83A4E1F961}.job 2007-06-12 22:15:10 416 --ah----- C:\Windows\Tasks\User_Feed_Synchronization-{1F6319C2-1091-416F-8E2A-87183F35BF06}.job -- Files created between 2007-05-12 and 2007-06-12 ----------------------------- 2007-06-03 23:36:38 0 d-------- C:\Windows\pss 2007-06-01 11:07:59 49152 --a------ C:\Windows\system32\Lexunst1.exe 2007-06-01 11:07:58 190464 --a------ C:\Windows\system32\LXBOlmpm.dll 2007-06-01 11:07:58 102400 --a------ C:\Windows\system32\lxbobce.dll 2007-06-01 11:06:13 298496 --a------ C:\Windows\unin040c.exe 2007-06-01 11:05:56 0 -rahs---- C:\MSDOS.SYS 2007-06-01 11:05:56 0 -rahs---- C:\IO.SYS 2007-06-01 11:03:27 33792 --a------ C:\Windows\system32\LXBOUSCI.EXE 2007-06-01 11:03:27 4672 --a------ C:\Windows\system32\LXBOUSCI.DLL 2007-05-30 20:54:34 0 d-------- C:\Program Files\Navilog1 2007-05-30 16:18:20 0 d-------- C:\Program Files\Spyware Doctor 2007-05-29 23:32:57 0 d-------- C:\Program Files\Windows Live Safety Center 2007-05-29 23:16:18 0 d-------- C:\Program Files\RegCure 2007-05-29 22:07:26 0 d-------- C:\Program Files\Lavasoft 2007-05-29 22:06:01 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-05-27 21:12:00 0 d-------- C:\Sierra 2007-05-27 15:43:38 0 d-------- C:\Program Files\XnView 2007-05-26 17:30:22 0 d--h----- C:\Program Files\BSX view 2007-05-24 23:24:12 259113 --a------ C:\Windows\system32\qlgceakfac_nav.dat 2007-05-24 23:23:41 332 --a------ C:\Windows\system32\qlgceakfac_navps.dat 2007-05-24 23:23:36 4531 --a------ C:\Windows\system32\qlgceakfac.dat 2007-05-24 23:23:34 361472 --a------ C:\Windows\system32\qlgceakfac.exe 2007-05-22 23:21:34 0 dr------- C:\Users\Sibille\Searches 2007-05-22 23:21:17 0 dr------- C:\Users\Sibille\Contacts 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Voisinage réseau 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Voisinage d'impression 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\SendTo 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Recent 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Modèles 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Mes documents 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Menu Démarrer 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Local Settings 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Cookies 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Application Data 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Videos 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Saved Games 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Pictures 2007-05-22 23:19:47 1048576 --ahs---- C:\Users\Sibille\NTUSER.DAT 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Music 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Links 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Favorites 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Downloads 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Documents 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Desktop 2007-05-22 23:19:47 0 d--h----- C:\Users\Sibille\AppData 2007-05-22 20:34:48 0 d-------- C:\Users\User\SEB 2007-05-22 20:32:06 0 d-------- C:\Program Files\eMule 2007-05-22 19:01:36 0 d-------- C:\Program Files\Google 2007-05-22 16:13:56 0 d-------- C:\Program Files\OpenOffice.org 2.2 2007-05-22 16:10:12 0 d-------- C:\Windows\PCHEALTH 2007-05-22 16:10:12 0 d-------- C:\Program Files\MSN Messenger 2007-05-22 16:07:57 0 d-------- C:\Program Files\DivX 2007-05-22 15:45:27 0 d-------- C:\Program Files\Common Files\LightScribe 2007-05-22 15:39:19 0 d-------- C:\Program Files\Nero 2007-05-22 15:39:19 0 d-------- C:\Program Files\Common Files\Ahead 2007-05-22 15:26:32 0 d-------- C:\Program Files\Alwil Software 2007-05-22 15:19:25 546 --a------ C:\Windows\system32\ABF5R.DAT 2007-05-22 15:07:09 0 dr------- C:\Users\User\Searches 2007-05-22 15:06:56 0 dr------- C:\Users\User\Contacts 2007-05-22 15:05:59 45056 --a------ C:\Windows\system32\acovcnt.exe 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Voisinage réseau 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Voisinage d'impression 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\SendTo 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Recent 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Modèles 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Mes documents 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Menu Démarrer 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Local Settings 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Cookies 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Application Data 2007-05-22 15:05:45 0 dr------- C:\Users\User\Videos 2007-05-22 15:05:45 0 dr------- C:\Users\User\Saved Games 2007-05-22 15:05:45 0 dr------- C:\Users\User\Pictures 2007-05-22 15:05:45 2097152 --ahs---- C:\Users\User\NTUSER.DAT 2007-05-22 15:05:45 0 dr------- C:\Users\User\Music 2007-05-22 15:05:45 0 dr------- C:\Users\User\Links 2007-05-22 15:05:45 0 dr------- C:\Users\User\Favorites 2007-05-22 15:05:45 0 dr------- C:\Users\User\Downloads 2007-05-22 15:05:45 0 dr------- C:\Users\User\Documents 2007-05-22 15:05:45 0 dr------- C:\Users\User\Desktop 2007-05-22 15:05:45 0 d--h----- C:\Users\User\AppData -- Find3M Report --------------------------------------------------------------- 2007-06-12 22:01:00 12 --a------ C:\Windows\bthservsdp.dat 2007-06-12 20:06:59 0 d-------- C:\Users\User\AppData\Roaming\OpenOffice.org2 2007-06-03 20:23:42 690832 --a------ C:\Windows\system32\perfh00C.dat 2007-06-03 20:23:42 117572 --a------ C:\Windows\system32\perfc00C.dat 2007-06-01 10:56:48 0 d-------- C:\Users\User\AppData\Roaming\U3 2007-05-31 17:01:25 0 d-------- C:\Program Files\PowerForPhone 2007-05-31 13:48:50 0 d--h----- C:\Program Files\InstallShield Installation Information 2007-05-29 22:12:19 0 d-------- C:\Users\User\AppData\Roaming\Lavasoft 2007-05-27 15:51:29 0 d-------- C:\Users\User\AppData\Roaming\XnView 2007-05-25 13:06:22 0 d-------- C:\Users\User\AppData\Roaming\AdobeUM 2007-05-24 19:51:11 0 d-------- C:\Users\User\AppData\Roaming\DivX 2007-05-22 19:08:36 0 d-------- C:\Users\User\AppData\Roaming\Adobe 2007-05-22 19:03:35 0 d-------- C:\Users\User\AppData\Roaming\Google 2007-05-22 15:49:00 0 d-------- C:\Program Files\Windows Mail 2007-05-22 15:49:00 0 d-------- C:\Program Files\Windows Defender 2007-05-22 15:42:40 0 d-------- C:\Users\User\AppData\Roaming\Ahead 2007-05-22 15:18:18 0 d-------- C:\Program Files\Common Files\Symantec Shared 2007-05-22 15:09:03 0 d-------- C:\Users\User\AppData\Roaming\ATI 2007-05-22 15:08:07 0 d-------- C:\Users\User\AppData\Roaming\Macromedia 2007-05-22 15:06:59 0 d-------- C:\Users\User\AppData\Roaming\Identities 2007-05-22 15:05:57 0 d-------- C:\Users\User\AppData\Roaming\InstallShield 2007-05-11 06:37:15 802816 --a------ C:\Windows\system32\divx_xx11.dll 2007-05-11 06:37:15 823296 --a------ C:\Windows\system32\divx_xx0c.dll 2007-05-11 06:37:15 823296 --a------ C:\Windows\system32\divx_xx07.dll 2007-05-11 06:37:15 740442 --a------ C:\Windows\system32\DivX.dll 2007-04-28 07:15:30 0 d-------- C:\Program Files\ATI Technologies 2007-04-28 07:13:08 0 d-------- C:\Program Files\ATI 2007-04-28 06:55:26 0 d-------- C:\Program Files\Common Files\Adobe 2007-04-28 06:46:51 0 d-------- C:\Program Files\ASUS 2007-04-28 06:45:53 0 d-------- C:\Program Files\P4G 2007-04-28 06:45:14 4499453 --a------ C:\Windows\ASUS Camera ScreenSaver.exe 2007-04-28 06:45:13 503808 --a------ C:\Windows\Asus_Camera_ScreenSaver.scr 2007-04-28 06:45:12 12288 --a------ C:\Windows\impborl.dll 2007-04-28 06:45:12 606848 --a------ C:\Windows\flashax.exe 2007-04-28 06:42:47 0 d-------- C:\Program Files\Synaptics 2007-04-28 06:37:34 0 d-------- C:\Program Files\Common Files\InstallShield 2007-04-28 06:37:01 0 d-------- C:\Program Files\Wireless Console 2 2007-04-28 06:35:48 0 d-------- C:\Program Files\Motorola 2007-04-28 06:34:05 0 d-------- C:\Program Files\Realtek 2007-04-28 06:33:36 0 d-------- C:\Program Files\Attansic 2007-04-28 06:33:09 0 d-------- C:\Program Files\ATKOSD2 2007-04-28 06:32:39 0 d-------- C:\Program Files\ATK Hotkey 2007-04-23 02:15:29 3596288 --a------ C:\Windows\system32\qt-dx331.dll 2007-04-23 02:02:34 196608 --a------ C:\Windows\system32\dtu100.dll 2007-04-23 02:02:34 73728 --a------ C:\Windows\system32\dpl100.dll 2007-04-23 02:01:47 12288 --a------ C:\Windows\system32\DivXWMPExtType.dll -- Registry Dump --------------------------------------------------------------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll {53707962-6F74-2D53-2644-206D7942484F} C:\PROGRA~1\SPYBOT~1\SDHelper.dll {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un] "Windows Defender"=hex(2):25,50,72,6f,67,72,61,6d,46,69,6c,65,73,25,5c,57,69,\ "RtHDVCpl"="RtHDVCpl.exe" "SMSERIAL"="C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" "ATKMEDIA"="C:\Program Files\ASUS\ATK Media\DMEDIA.EXE" "ASUSTPE"="C:\Windows\system32\ASUSTPE.exe" "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "ASUS Camera ScreenSaver"="C:\Windows\ASScrProlog.exe" "ASUS Screen Saver Protector"="C:\Windows\ASScrPro.exe" "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" "qlgceakfac"="c:\windows\system32\qlgceakfac.exe qlgceakfac" "MSConfig"="\"C:\Windows\system32\msconfig.exe\" /auto" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" @="" "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"=dword:00000002 "ConsentPromptBehaviorUser"=dword:00000001 "EnableInstallerDetection"=dword:00000001 "EnableLUA"=dword:00000001 "EnableSecureUIAPaths"=dword:00000001 "EnableVirtualization"=dword:00000001 "PromptOnSecureDesktop"=dword:00000001 "ValidateAdminCodeSignatures"=dword:00000000 "scforceoption"=dword:00000000 "FilterAdministratorToken"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\UIPI] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\UIPI\Clipboard] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\UIPI\Clipboard\ExceptionFormats] "CF_TEXT"=dword:00000001 "CF_BITMAP"=dword:00000002 "CF_OEMTEXT"=dword:00000007 "CF_DIB"=dword:00000008 "CF_PALETTE"=dword:00000009 "CF_UNICODETEXT"=dword:0000000d "CF_DIBV5"=dword:00000011 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="credssp.dll" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Notification Packages REG_MULTI_SZ scecli\0\0 Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0tspkg\0\0 Authentication Packages REG_MULTI_SZ msv1_0\0\0 HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AppInfo HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\KeyIso HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\NTDS HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\ProfSvc HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sacsvr HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\SWPRV HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\TabletInputService HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\TBS HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\TrustedInstaller HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\volmgr.sys HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\volmgrx.sys HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F} HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7} HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6} [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] "path"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk" "backup"="C:\Windows\pss\Adobe Reader Speed Launch.lnk.CommonStartup" "location"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup" "backupExtension"=".CommonStartup" "command"="C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE " "item"="Adobe Reader Speed Launch" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Outil de mise à jour Google.lnk] "path"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Outil de mise à jour Google.lnk" "backup"="C:\Windows\pss\Outil de mise à jour Google.lnk.CommonStartup" "location"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup" "backupExtension"=".CommonStartup" "command"="C:\PROGRA~1\Google\GOOGLE~1\GOOGLE~1.EXE -systray -startup" "item"="Outil de mise à jour Google" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 2.2.lnk] "path"="C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 2.2.lnk" "backup"="C:\Windows\pss\OpenOffice.org 2.2.lnk.Startup" "location"="C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup" "backupExtension"=".Startup" "command"="C:\PROGRA~1\OPENOF~1.2\program\QUICKS~1.EXE " "item"="OpenOffice.org 2.2" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X84-X85 Button Manager] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="Lexmark X84-X85 Button Manager" "hkey"="HKLM" "command"="C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X84-X85.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X84-X85 Button Monitor] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="Lexmark X84-X85 Button Monitor" "hkey"="HKLM" "command"="C:\PROGRA~1\LEXMAR~1\ACMonitor_X84-X85.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="NeroFilterCheck" "hkey"="HKLM" "command"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrinTray] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="PrinTray" "hkey"="HKLM" "command"="C:\Windows\system32\spool\DRIVERS\W32X86\3\printray.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="swg" "hkey"="HKCU" "command"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ nsi\0lltdsvc\0SSDPSRV\0upnphost\0SCardSvr\0w32time\0EventSystem\0RemoteRegistry\0WinHttpAutoProxySvc\0lanmanworkstation\0TBS\0SLUINotify\0THREADORDER\0fdrespub\0netprofm\0fdphost\0wcncsvc\0QWAVE\0Mcx2Svc\0WebClient\0\0 LocalSystemNetworkRestricted REG_MULTI_SZ hidserv\0UxSms\0WdiSystemHost\0Netman\0trkwks\0AudioEndpointBuilder\0WUDFSvc\0irmon\0sysmain\0IPBusEnum\0dot3svc\0PcaSvc\0EMDMgmt\0TabletInputService\0wlansvc\0WPDBusEnum\0\0 NetworkServiceNetworkRestricted REG_MULTI_SZ PolicyAgent\0\0 LocalServiceNoNetwork REG_MULTI_SZ PLA\0DPS\0BFE\0mpssvc\0ehstart\0\0 NetworkService REG_MULTI_SZ CryptSvc\0DHCP\0TermService\0KtmRm\0DNSCache\0NapAgent\0nlasvc\0WinRM\0WECSVC\0Tapisrv\0\0 termsvcs REG_MULTI_SZ TermService\0\0 WerSvcGroup REG_MULTI_SZ wersvc\0\0 swprv REG_MULTI_SZ swprv\0\0 LocalServiceNetworkRestricted REG_MULTI_SZ DHCP\0eventlog\0AudioSrv\0LmHosts\0wscsvc\0p2pimsvc\0PNRPSvc\0p2psvc\0WPCSvc\0PnrpAutoReg\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 regsvc REG_MULTI_SZ RemoteRegistry\0\0 wcssvc REG_MULTI_SZ WcsPlugInService\0\0 DcomLaunch REG_MULTI_SZ PlugPlay\0DcomLaunch\0\0 wdisvc REG_MULTI_SZ WdiServiceHost\0\0 sdrsvc REG_MULTI_SZ sdrsvc\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 secsvcs REG_MULTI_SZ WinDefend\0\0 bthsvcs REG_MULTI_SZ BthServ\0\0 hklm\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs* AeLookupSvc wercplsupport CertPropSvc SCPolicySvc gpsvc IKEEXT LogonHours PCAudit iphlpsvc AppInfo msiscsi MMCSS ProfSvc EapHost SessionEnv hkmsvc [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8944ad7e-100a-11dc-a60f-001bfc3dd75d}] shell\AutoRun\command H:\LaunchU3.exe -a -- End of Deckard's System Scanner: finished at 2007-06-12 at 22:16:52 ---------

Utilisateur anonyme · Answer

Télécharges Blacklight et sauvegarde le sur ton bureau.
https://www.f-secure.com/en
Double cliques sur  " blbeta.exe " et acceptes la licence; clic sur "Scan" puis "Next"

Un rapport, va se créer sur ton bureau "fslb-....."
Copies et colles le contenu de ce rapport ici.

Ne touche à rien d'autre!


Lance Blacklight en double cliquant sur blbeta.exe et accepte la licence. 
Clique sur Scan pour lancer l'analyse. 
Une fois fait, selectionnes chaques fichiers trouvés et clic sur "RENAME" 
Puis valide. 
Réponds oui aux messages d'avertissements et te demandant si tu autorises le reboot du pc. 

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- 

Après le reboot du pc, les fichiers ci-dessous devraient être visible et pouvoir être supprimés sans aucuns soucis. 
: 

C:\Windows\system32\qlgceakfac_nav.dat 
C:\Windows\system32\qlgceakfac_navps.dat 
C:\Windows\system32\qlgceakfac.dat 
C:\Windows\system32\qlgceakfac.exe

seb1248 · Answer

Voici le rapport f-secure. En espérant que ce soit le bon.
Merci . Séb

06/13/07 11:48:03 [Info]: BlackLight Engine 1.0.61 initialized
06/13/07 11:48:03 [Info]: OS: 6.0 build 6000 ()
06/13/07 11:48:03 [Note]: 7019 4
06/13/07 11:48:03 [Note]: 7005 0
06/13/07 11:48:07 [Note]: 7006 0
06/13/07 11:48:08 [Note]: 7027 1
06/13/07 11:48:08 [Note]: 7027 0
06/13/07 11:48:08 [Note]: 7026 0
06/13/07 11:48:08 [Note]: 7026 0
06/13/07 11:48:11 [Note]: FSRAW library version 1.7.1021
06/13/07 11:52:11 [Error]: 6023 5
06/13/07 12:11:13 [Note]: 7007 0

Utilisateur anonyme · Answer

Tu peux jeter blacklight 'est ok.


Rends toi sur se site 
http://www.virustotal.com/en/virustotalx.html 


En haut à droite clic sur "choisir" 
Tu vas dans C:, windows, system32 tu cherches le processus ci-dessous et tu clic sur "ouvrir" 

C:\Windows\system32\ABF5R.DAT 

dès que c'est fait, clic sur "send" 
Tu attends un peu qu'il analyse ton fichier ça peut duré plusieurs minutes et colle le rapport ici une fois qu'il a terminé stp

Fais la même chose avec celui-ci

C:\Windows\system32\acovcnt.exe

seb1248 · Answer

Voila le premier. Ca a l'air clair.

Séb
Complete scanning result of "ABF5R.DAT", received in VirusTotal at 06.13.2007, 13:55:21 (CET).

Antivirus Version Update Result 
AhnLab-V3 2007.6.12.2 06.13.2007  no virus found 
AntiVir 7.4.0.32 06.13.2007  no virus found 
Authentium 4.93.8 06.12.2007  no virus found 
Avast 4.7.997.0 06.12.2007  no virus found 
AVG 7.5.0.467 06.13.2007  no virus found 
BitDefender 7.2 06.13.2007  no virus found 
CAT-QuickHeal 9.00 06.12.2007  no virus found 
ClamAV devel-20070416 06.12.2007  no virus found 
DrWeb 4.33 06.13.2007  no virus found 
eSafe 7.0.15.0 06.12.2007  no virus found 
eTrust-Vet 30.7.3715 06.13.2007  no virus found 
Ewido 4.0 06.13.2007  no virus found 
FileAdvisor 1 06.13.2007  no virus found 
Fortinet 2.85.0.0 06.13.2007  no virus found 
F-Prot 4.3.2.48 06.12.2007  no virus found 
F-Secure 6.70.13030.0 06.13.2007  no virus found 
Ikarus T3.1.1.8 06.13.2007  no virus found 
Kaspersky 4.0.2.24 06.13.2007  no virus found 
McAfee 5051 06.12.2007  no virus found 
Microsoft 1.2503 06.13.2007  no virus found 
NOD32v2 2326 06.13.2007  no virus found 
Norman 5.80.02 06.12.2007  no virus found 
Panda 9.0.0.4 06.13.2007  no virus found 
Prevx1 V2 06.13.2007  no virus found 
Sophos 4.18.0 06.12.2007  no virus found 
Sunbelt 2.2.907.0 06.09.2007  no virus found 
Symantec 10 06.13.2007  no virus found 
TheHacker 6.1.6.132 06.11.2007  no virus found 
VBA32 3.12.0.1 06.12.2007  no virus found 
VirusBuster 4.3.23:9 06.12.2007  no virus found 
Webwasher-Gateway 6.0.1 06.13.2007 no virus found 


Aditional Information

seb1248 · Answer

Et voila le deuxième. Séb.

Complete scanning result of "acovcnt.exe", received in VirusTotal at 06.13.2007, 14:03:27 (CET).

Antivirus Version Update Result 
AhnLab-V3 2007.6.12.2 06.13.2007  no virus found 
AntiVir 7.4.0.32 06.13.2007  no virus found 
Authentium 4.93.8 06.12.2007  no virus found 
Avast 4.7.997.0 06.12.2007  no virus found 
AVG 7.5.0.467 06.13.2007  no virus found 
BitDefender 7.2 06.13.2007  no virus found 
CAT-QuickHeal 9.00 06.12.2007  no virus found 
ClamAV devel-20070416 06.12.2007  no virus found 
DrWeb 4.33 06.13.2007  no virus found 
eSafe 7.0.15.0 06.12.2007  no virus found 
eTrust-Vet 30.7.3715 06.13.2007  no virus found 
Ewido 4.0 06.13.2007  no virus found 
FileAdvisor 1 06.13.2007  No threat detected 
Fortinet 2.85.0.0 06.13.2007  no virus found 
F-Prot 4.3.2.48 06.12.2007  no virus found 
F-Secure 6.70.13030.0 06.13.2007  no virus found 
Ikarus T3.1.1.8 06.13.2007  no virus found 
Kaspersky 4.0.2.24 06.13.2007  no virus found 
McAfee 5051 06.12.2007  no virus found 
Microsoft 1.2503 06.13.2007  no virus found 
NOD32v2 2326 06.13.2007  no virus found 
Norman 5.80.02 06.12.2007  no virus found 
Panda 9.0.0.4 06.13.2007  no virus found 
Prevx1 V2 06.13.2007  no virus found 
Sophos 4.18.0 06.12.2007  no virus found 
Sunbelt 2.2.907.0 06.09.2007  no virus found 
Symantec 10 06.13.2007  no virus found 
TheHacker 6.1.6.132 06.11.2007  no virus found 
VBA32 3.12.0.1 06.12.2007  no virus found 
VirusBuster 4.3.23:9 06.12.2007  no virus found 
Webwasher-Gateway 6.0.1 06.13.2007 no virus found 


Aditional Information 
File size: 45056 bytes 
MD5: 6bcaf46e2b7fa9ace92b4d39f3037c5c 
SHA1: 6d5a81e3cf59832d73f28d6e87f51d073c3e4095 
Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=6bcaf46e2b7fa9ace92b4d39f3037c5c

seb1248 · Answer

Je reste coincé avec ces fenêtres qui s'ouvrent de manière intempestive....
J'ai fait des premiers scans avec l'aide de boulepate62.
Mais cela ne suffit pas. Please HELP.
Séb

seb1248 · Answer

SVP, conseillez moi. Merci....

Utilisateur anonyme · Answer

Bonjour

Peux tu remettre un rapport comboscan stp.
Recommence aussi blacklight pour vérifier

seb1248 · Answer

Bonsoir, voici le rapport de dss, je suppose que c'est la même chose, je n'ai pas trouvé comboscan Deckard's System Scanner v20070611.50 Run by User on 2007-06-14 at 20:54:35 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as User.exe) ------------------------------------------------ Logfile of HijackThis v1.99.1 Scan saved at 20:54:56, on 14/06/2007 Platform: Unknown Windows (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16473) Running processes: C:\Windows\system32 askeng.exe C:\Windows\system32\Dwm.exe C:\Program Files\ASUS\ASUS Live Update\ALU.exe C:\Windows\system32 askeng.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe C:\Program Files\ASUS\ATK Media\DMedia.exe C:\Windows\System32\ASUSTPE.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\ASScrPro.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Windows\System32\qlgceakfac.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\ASUS\Net4Switch\Net4Switch.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\System32\mobsync.exe C:\Program Files\Internet Explorer\ieuser.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3JGD1Y8O\dss[1].exe C:\Windows\system32\SearchFilterHost.exe C:\PROGRA~1\HIJACK~1\User.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.asus.com/fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE O4 - HKLM\..\Run: [ASUSTPE] C:\Windows\system32\ASUSTPE.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [qlgceakfac] c:\windows\system32\qlgceakfac.exe qlgceakfac O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O10 - Unknown file in Winsock LSP: c:\windows\system32 laapi.dll O10 - Unknown file in Winsock LSP: c:\windows\system32 apinsp.dll O11 - Options group: [INTERNATIONAL] International* O13 - Gopher Prefix: O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} - http://cdn.scan.onecare.live.com/resource/download/scanner/fr-FR/wlscctrl2.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing) O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing) -- Files created between 2007-05-14 and 2007-06-14 ----------------------------- 2007-06-14 15:40:43 298104 --a------ C:\Windows\system32\imon.dll 2007-06-03 23:36:38 0 d-------- C:\Windows\pss 2007-06-01 11:07:59 49152 --a------ C:\Windows\system32\Lexunst1.exe 2007-06-01 11:07:58 190464 --a------ C:\Windows\system32\LXBOlmpm.dll 2007-06-01 11:07:58 102400 --a------ C:\Windows\system32\lxbobce.dll 2007-06-01 11:06:13 298496 --a------ C:\Windows\unin040c.exe 2007-06-01 11:05:56 0 -rahs---- C:\MSDOS.SYS 2007-06-01 11:05:56 0 -rahs---- C:\IO.SYS 2007-06-01 11:03:27 33792 --a------ C:\Windows\system32\LXBOUSCI.EXE 2007-06-01 11:03:27 4672 --a------ C:\Windows\system32\LXBOUSCI.DLL 2007-05-30 20:54:34 0 d-------- C:\Program Files\Navilog1 2007-05-30 16:18:20 0 d-------- C:\Program Files\Spyware Doctor 2007-05-29 23:32:57 0 d-------- C:\Program Files\Windows Live Safety Center 2007-05-29 23:16:18 0 d-------- C:\Program Files\RegCure 2007-05-29 22:07:26 0 d-------- C:\Program Files\Lavasoft 2007-05-29 22:06:01 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-05-27 21:12:00 0 d-------- C:\Sierra 2007-05-27 15:43:38 0 d-------- C:\Program Files\XnView 2007-05-26 17:30:22 0 d--h----- C:\Program Files\BSX view 2007-05-24 23:24:12 259113 --a------ C:\Windows\system32\qlgceakfac_nav.dat 2007-05-24 23:23:41 332 --a------ C:\Windows\system32\qlgceakfac_navps.dat 2007-05-24 23:23:36 4531 --a------ C:\Windows\system32\qlgceakfac.dat 2007-05-24 23:23:34 361472 --a------ C:\Windows\system32\qlgceakfac.exe 2007-05-22 23:21:34 0 dr------- C:\Users\Sibille\Searches 2007-05-22 23:21:17 0 dr------- C:\Users\Sibille\Contacts 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Voisinage réseau 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Voisinage d'impression 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\SendTo 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Recent 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Modèles 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Mes documents 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Menu Démarrer 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Local Settings 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Cookies 2007-05-22 23:19:50 0 d--hs---- C:\Users\Sibille\Application Data 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Videos 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Saved Games 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Pictures 2007-05-22 23:19:47 1048576 --ahs---- C:\Users\Sibille\NTUSER.DAT 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Music 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Links 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Favorites 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Downloads 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Documents 2007-05-22 23:19:47 0 dr------- C:\Users\Sibille\Desktop 2007-05-22 23:19:47 0 d--h----- C:\Users\Sibille\AppData 2007-05-22 20:34:48 0 d-------- C:\Users\User\SEB 2007-05-22 20:32:06 0 d-------- C:\Program Files\eMule 2007-05-22 19:01:36 0 d-------- C:\Program Files\Google 2007-05-22 16:13:56 0 d-------- C:\Program Files\OpenOffice.org 2.2 2007-05-22 16:10:12 0 d-------- C:\Windows\PCHEALTH 2007-05-22 16:10:12 0 d-------- C:\Program Files\MSN Messenger 2007-05-22 16:07:57 0 d-------- C:\Program Files\DivX 2007-05-22 15:45:27 0 d-------- C:\Program Files\Common Files\LightScribe 2007-05-22 15:39:19 0 d-------- C:\Program Files\Nero 2007-05-22 15:39:19 0 d-------- C:\Program Files\Common Files\Ahead 2007-05-22 15:26:32 0 d-------- C:\Program Files\Alwil Software 2007-05-22 15:19:25 546 --a------ C:\Windows\system32\ABF5R.DAT 2007-05-22 15:07:09 0 dr------- C:\Users\User\Searches 2007-05-22 15:06:56 0 dr------- C:\Users\User\Contacts 2007-05-22 15:05:59 45056 --a------ C:\Windows\system32\acovcnt.exe 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Voisinage réseau 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Voisinage d'impression 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\SendTo 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Recent 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Modèles 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Mes documents 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Menu Démarrer 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Local Settings 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Cookies 2007-05-22 15:05:46 0 d--hs---- C:\Users\User\Application Data 2007-05-22 15:05:45 0 dr------- C:\Users\User\Videos 2007-05-22 15:05:45 0 dr------- C:\Users\User\Saved Games 2007-05-22 15:05:45 0 dr------- C:\Users\User\Pictures 2007-05-22 15:05:45 2097152 --ahs---- C:\Users\User\NTUSER.DAT 2007-05-22 15:05:45 0 dr------- C:\Users\User\Music 2007-05-22 15:05:45 0 dr------- C:\Users\User\Links 2007-05-22 15:05:45 0 dr------- C:\Users\User\Favorites 2007-05-22 15:05:45 0 dr------- C:\Users\User\Downloads 2007-05-22 15:05:45 0 dr------- C:\Users\User\Documents 2007-05-22 15:05:45 0 dr------- C:\Users\User\Desktop 2007-05-22 15:05:45 0 d--h----- C:\Users\User\AppData -- Find3M Report --------------------------------------------------------------- 2007-06-14 15:41:54 12 --a------ C:\Windows\bthservsdp.dat 2007-06-14 10:56:28 690832 --a------ C:\Windows\system32\perfh00C.dat 2007-06-14 10:56:28 117572 --a------ C:\Windows\system32\perfc00C.dat 2007-06-13 23:45:03 0 d-------- C:\Users\User\AppData\Roaming\OpenOffice.org2 2007-06-13 16:43:54 0 d-------- C:\Program Files\Windows Mail 2007-06-01 10:56:48 0 d-------- C:\Users\User\AppData\Roaming\U3 2007-05-31 17:01:25 0 d-------- C:\Program Files\PowerForPhone 2007-05-31 13:48:50 0 d--h----- C:\Program Files\InstallShield Installation Information 2007-05-29 22:12:19 0 d-------- C:\Users\User\AppData\Roaming\Lavasoft 2007-05-27 15:51:29 0 d-------- C:\Users\User\AppData\Roaming\XnView 2007-05-25 13:06:22 0 d-------- C:\Users\User\AppData\Roaming\AdobeUM 2007-05-24 19:51:11 0 d-------- C:\Users\User\AppData\Roaming\DivX 2007-05-22 19:08:36 0 d-------- C:\Users\User\AppData\Roaming\Adobe 2007-05-22 19:03:35 0 d-------- C:\Users\User\AppData\Roaming\Google 2007-05-22 15:49:00 0 d-------- C:\Program Files\Windows Defender 2007-05-22 15:42:40 0 d-------- C:\Users\User\AppData\Roaming\Ahead 2007-05-22 15:18:18 0 d-------- C:\Program Files\Common Files\Symantec Shared 2007-05-22 15:09:03 0 d-------- C:\Users\User\AppData\Roaming\ATI 2007-05-22 15:08:07 0 d-------- C:\Users\User\AppData\Roaming\Macromedia 2007-05-22 15:06:59 0 d-------- C:\Users\User\AppData\Roaming\Identities 2007-05-22 15:05:57 0 d-------- C:\Users\User\AppData\Roaming\InstallShield 2007-05-11 06:37:15 802816 --a------ C:\Windows\system32\divx_xx11.dll 2007-05-11 06:37:15 823296 --a------ C:\Windows\system32\divx_xx0c.dll 2007-05-11 06:37:15 823296 --a------ C:\Windows\system32\divx_xx07.dll 2007-05-11 06:37:15 740442 --a------ C:\Windows\system32\DivX.dll 2007-04-28 07:15:30 0 d-------- C:\Program Files\ATI Technologies 2007-04-28 07:13:08 0 d-------- C:\Program Files\ATI 2007-04-28 06:55:26 0 d-------- C:\Program Files\Common Files\Adobe 2007-04-28 06:46:51 0 d-------- C:\Program Files\ASUS 2007-04-28 06:45:53 0 d-------- C:\Program Files\P4G 2007-04-28 06:45:14 4499453 --a------ C:\Windows\ASUS Camera ScreenSaver.exe 2007-04-28 06:45:13 503808 --a------ C:\Windows\Asus_Camera_ScreenSaver.scr 2007-04-28 06:45:12 12288 --a------ C:\Windows\impborl.dll 2007-04-28 06:45:12 606848 --a------ C:\Windows\flashax.exe 2007-04-28 06:42:47 0 d-------- C:\Program Files\Synaptics 2007-04-28 06:37:34 0 d-------- C:\Program Files\Common Files\InstallShield 2007-04-28 06:37:01 0 d-------- C:\Program Files\Wireless Console 2 2007-04-28 06:35:48 0 d-------- C:\Program Files\Motorola 2007-04-28 06:34:05 0 d-------- C:\Program Files\Realtek 2007-04-28 06:33:36 0 d-------- C:\Program Files\Attansic 2007-04-28 06:33:09 0 d-------- C:\Program Files\ATKOSD2 2007-04-28 06:32:39 0 d-------- C:\Program Files\ATK Hotkey 2007-04-23 02:15:29 3596288 --a------ C:\Windows\system32\qt-dx331.dll 2007-04-23 02:02:34 196608 --a------ C:\Windows\system32\dtu100.dll 2007-04-23 02:02:34 73728 --a------ C:\Windows\system32\dpl100.dll 2007-04-23 02:01:47 12288 --a------ C:\Windows\system32\DivXWMPExtType.dll -- Registry Dump --------------------------------------------------------------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll {53707962-6F74-2D53-2644-206D7942484F} C:\PROGRA~1\SPYBOT~1\SDHelper.dll {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un] "Windows Defender"=hex(2):25,50,72,6f,67,72,61,6d,46,69,6c,65,73,25,5c,57,69,\ "RtHDVCpl"="RtHDVCpl.exe" "SMSERIAL"="C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" "ATKMEDIA"="C:\Program Files\ASUS\ATK Media\DMEDIA.EXE" "ASUSTPE"="C:\Windows\system32\ASUSTPE.exe" "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "ASUS Camera ScreenSaver"="C:\Windows\ASScrProlog.exe" "ASUS Screen Saver Protector"="C:\Windows\ASScrPro.exe" "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" "qlgceakfac"="c:\windows\system32\qlgceakfac.exe qlgceakfac" "MSConfig"="\"C:\Windows\system32\msconfig.exe\" /auto" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" @="" "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"=dword:00000002 "ConsentPromptBehaviorUser"=dword:00000001 "EnableInstallerDetection"=dword:00000001 "EnableLUA"=dword:00000001 "EnableSecureUIAPaths"=dword:00000001 "EnableVirtualization"=dword:00000001 "PromptOnSecureDesktop"=dword:00000001 "ValidateAdminCodeSignatures"=dword:00000000 "scforceoption"=dword:00000000 "FilterAdministratorToken"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\UIPI] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\UIPI\Clipboard] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\UIPI\Clipboard\ExceptionFormats] "CF_TEXT"=dword:00000001 "CF_BITMAP"=dword:00000002 "CF_OEMTEXT"=dword:00000007 "CF_DIB"=dword:00000008 "CF_PALETTE"=dword:00000009 "CF_UNICODETEXT"=dword:0000000d "CF_DIBV5"=dword:00000011 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="credssp.dll" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Notification Packages REG_MULTI_SZ scecli\0\0 Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0tspkg\0\0 Authentication Packages REG_MULTI_SZ msv1_0\0\0 HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AppInfo HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\KeyIso HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\NTDS HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\ProfSvc HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sacsvr HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\SWPRV HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\TabletInputService HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\TBS HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\TrustedInstaller HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\volmgr.sys HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\volmgrx.sys HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F} HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7} HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6} [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] "path"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk" "backup"="C:\Windows\pss\Adobe Reader Speed Launch.lnk.CommonStartup" "location"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup" "backupExtension"=".CommonStartup" "command"="C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE " "item"="Adobe Reader Speed Launch" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Outil de mise à jour Google.lnk] "path"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Outil de mise à jour Google.lnk" "backup"="C:\Windows\pss\Outil de mise à jour Google.lnk.CommonStartup" "location"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup" "backupExtension"=".CommonStartup" "command"="C:\PROGRA~1\Google\GOOGLE~1\GOOGLE~1.EXE -systray -startup" "item"="Outil de mise à jour Google" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 2.2.lnk] "path"="C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 2.2.lnk" "backup"="C:\Windows\pss\OpenOffice.org 2.2.lnk.Startup" "location"="C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup" "backupExtension"=".Startup" "command"="C:\PROGRA~1\OPENOF~1.2\program\QUICKS~1.EXE " "item"="OpenOffice.org 2.2" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X84-X85 Button Manager] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="Lexmark X84-X85 Button Manager" "hkey"="HKLM" "command"="C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X84-X85.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X84-X85 Button Monitor] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="Lexmark X84-X85 Button Monitor" "hkey"="HKLM" "command"="C:\PROGRA~1\LEXMAR~1\ACMonitor_X84-X85.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="NeroFilterCheck" "hkey"="HKLM" "command"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrinTray] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="PrinTray" "hkey"="HKLM" "command"="C:\Windows\system32\spool\DRIVERS\W32X86\3\printray.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] "key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "item"="swg" "hkey"="HKCU" "command"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "inimapping"="0" "YEAR"=dword:000007d7 "MONTH"=dword:00000006 "DAY"=dword:00000003 "HOUR"=dword:00000017 "MINUTE"=dword:00000024 "SECOND"=dword:00000026 [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ nsi\0lltdsvc\0SSDPSRV\0upnphost\0SCardSvr\0w32time\0EventSystem\0RemoteRegistry\0WinHttpAutoProxySvc\0lanmanworkstation\0TBS\0SLUINotify\0THREADORDER\0fdrespub\0netprofm\0fdphost\0wcncsvc\0QWAVE\0Mcx2Svc\0WebClient\0\0 LocalSystemNetworkRestricted REG_MULTI_SZ hidserv\0UxSms\0WdiSystemHost\0Netman\0trkwks\0AudioEndpointBuilder\0WUDFSvc\0irmon\0sysmain\0IPBusEnum\0dot3svc\0PcaSvc\0EMDMgmt\0TabletInputService\0wlansvc\0WPDBusEnum\0\0 NetworkServiceNetworkRestricted REG_MULTI_SZ PolicyAgent\0\0 LocalServiceNoNetwork REG_MULTI_SZ PLA\0DPS\0BFE\0mpssvc\0ehstart\0\0 NetworkService REG_MULTI_SZ CryptSvc\0DHCP\0TermService\0KtmRm\0DNSCache\0NapAgent\0nlasvc\0WinRM\0WECSVC\0Tapisrv\0\0 termsvcs REG_MULTI_SZ TermService\0\0 WerSvcGroup REG_MULTI_SZ wersvc\0\0 swprv REG_MULTI_SZ swprv\0\0 LocalServiceNetworkRestricted REG_MULTI_SZ DHCP\0eventlog\0AudioSrv\0LmHosts\0wscsvc\0p2pimsvc\0PNRPSvc\0p2psvc\0WPCSvc\0PnrpAutoReg\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 regsvc REG_MULTI_SZ RemoteRegistry\0\0 wcssvc REG_MULTI_SZ WcsPlugInService\0\0 DcomLaunch REG_MULTI_SZ PlugPlay\0DcomLaunch\0\0 wdisvc REG_MULTI_SZ WdiServiceHost\0\0 sdrsvc REG_MULTI_SZ sdrsvc\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 secsvcs REG_MULTI_SZ WinDefend\0\0 bthsvcs REG_MULTI_SZ BthServ\0\0 hklm\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs* AeLookupSvc wercplsupport CertPropSvc SCPolicySvc gpsvc IKEEXT LogonHours PCAudit iphlpsvc AppInfo msiscsi MMCSS ProfSvc EapHost SessionEnv hkmsvc [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8944ad7e-100a-11dc-a60f-001bfc3dd75d}] shell\AutoRun\command H:\LaunchU3.exe -a *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum oot\LEGACY_NOD32DRV -- End of Deckard's System Scanner: finished at 2007-06-14 at 20:55:18 ---------

Utilisateur anonyme · Answer

Les bestioles sont encore là, tu es sûr d'avoir fait renommé avec blackligt et ensuite supprimé les fichiers ? !

C:\Windows\system32\qlgceakfac_nav.dat 
C:\Windows\system32\qlgceakfac_navps.dat 
C:\Windows\system32\qlgceakfac.dat 
C:\Windows\system32\qlgceakfac.exe

seb1248 · Answer

et le rapport de blacklight. Séb.

06/14/07 21:00:21 [Info]: BlackLight Engine 1.0.61 initialized
06/14/07 21:00:21 [Info]: OS: 6.0 build 6000 ()
06/14/07 21:00:21 [Note]: 7019 4
06/14/07 21:00:21 [Note]: 7005 0
06/14/07 21:00:22 [Note]: 7006 0
06/14/07 21:00:22 [Note]: 7027 1
06/14/07 21:00:22 [Note]: 7027 0
06/14/07 21:00:23 [Note]: 7026 0
06/14/07 21:00:23 [Note]: 7026 0
06/14/07 21:00:28 [Note]: FSRAW library version 1.7.1021
06/14/07 21:04:30 [Error]: 6023 5
06/14/07 21:04:30 [Note]: 7007 0

seb1248 · Answer

Bonsoir,
J'ai réellement besoin de votre aide. Ces fenêtres deviennent invivables.
En fait lorsque je surfe, une page avec pour première adresse
em-pc-on-internet apparait et me réorient vers d'autrs sites.
Merci. Séb

Utilisateur anonyme · Answer

Je t'ai répondu au message <15> que les bestioles étaient encore dans le PC

seb1248 · Answer

Bonsoir 
En fait j'ai de nuveau scanné avec blacklight mais il ne détecte rien.
merci. Séb

Utilisateur anonyme · Answer

Tu as regardé après les fichiers dans ton PC ? les as-tu supprimés ?

seb1248 · Answer

Bonjour, 
j'ai cherché dans la racine les fichiers indiqués et je ne les trouve pas.
C:\Windows\system32\qlgceakfac_nav.dat 
C:\Windows\system32\qlgceakfac_navps.dat 
C:\Windows\system32\qlgceakfac.dat 
C:\Windows\system32\qlgceakfac.exe 
Séb

seb1248 · Answer

Bonjour à tous,
Alors que je cherchais la correspondance de em.pc on internet ( la source de mon infection ) je viens d'être renvoyé sur un site - à mes risques et périls vous me direz- qui vous désinstalle ce logiciel de "publicité contextuelle".
Extrait : "Vous avez décidé de désinstaller le composant de publicité contextuelle de Favorit que vous aviez téléchargé en même temps que le logiciel sur votre ordinateur.

Soucieux de la satisfaction de notre clientèle et de la qualité de nos produits, nous souhaitons vous remercier de votre confiance et mettons tout en œuvre pour faciliter la désinstallation du composant, puisque tel est votre choix. Le logiciel que vous aviez téléchargé était intégralement gratuit car financé par de la publicité. Ainsi, son utilisation a pu parfois entraîner l’affichage de pop-ups publicitaires par le composant de publicité contextuelle de Favorit en fonction des sites Internet sur lesquels vous étiez en train de naviguer. "
Bon et bien je l'ai fait....et ça marche.
Merci à boulepate pour ces conseils et j'espère que le conseil que je vous donne n'est pas empoisonné.
Séb.

Utilisateur anonyme · Answer

Hello Seb tant mieux, en espérant que ça n'a pas laissé de saloperie dans ton registre ;-)

seb1248 · Answer

oui tu l'as dit, en espérant....
on va rester vigilant, mais pour l'insant tout semble clair.
En tous cas, encore merci pout tout.
Séb.

Infection fenêtres publicitaires

23 réponses

Votre réponse

Discussions similaires

Newsletters