Virus pop-up interminable.. Résolu

Question

Bonjour, depuis au moin 2 semaine je narrête pas de recevoir des pop-up tel que driver controler et des ofre danti verus, et plusieur autre. J'ai deja installer: ad-aware, Spybot, CClearer, bitdeffender et comme anti verus jai Avast (et coté anti verus jen ai essayer des tonne et cest lui le meilleur.. selon moi car avec AVG, voila 1 semaine.. jamais encore plusieurs autre probleme..) A oui autre chose, je sais qui va surment faloir que je telecharge HiJackthis, mais je ne reussis point a le faire, il y a une erreur qui survien quand je linstale, merci.

Pour bitdeffender voici le rapport


//-----------------------------------------------------------------
//
//	Product: BitDefender 8 Free Edition
//	Version: 8.0
//
//	Created on:	13/07/2007	07:31:05
//
//-----------------------------------------------------------------


Statistics

Scan path	: C:\WINDOWS\system32\
Folders	: 364
Files	:  8123
Archives	: 13 
Packed files	: 347
Identified viruses	: 3
Infected files	: 33
Warnings	: 0
Suspect files	: 0
Disinfected files	: 0
Deleted files	: 0
Copied files	: 0
Moved files	: 32
Renamed files	: 0
I/O errors	: 12
Scan time	: 00:02:04
Scan speed (files/sec)	: 65

Virus definitions	: 672018
Scan plugins	: 14
Archive plugins	: 38
Unpack plugins	: 6
Mail plugins	: 6
System plugins	: 1

Scan options

Detection
[X] Scan boot sectors
[X] Scan archives
[X] Scan packed files
[X] Scan email

File mask
[ ] Programs
[X] All files
[ ] User defined extensions: 
[ ] Exclude extensions: ;

Action

Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Copy to quarantine
[ ] Move to quarantine
[ ] Rename
[ ] Prompt user

Second action
[ ] Ignore
[ ] Delete
[ ] Copy to quarantine
[X] Move to quarantine
[ ] Rename
[ ] Prompt user

Scan options
[X] Enable warnings
[X] Enable heuristics
[X] Show all files in log
[X] Report file: vscan.log
[ ] Append to existing report

Summary:

C:\WINDOWS\system32\awtsspq.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\awtsspq.dll	Disinfection failed
C:\WINDOWS\system32\awtsspq.dll	Moved
C:\WINDOWS\system32\awtuvss.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\awtuvss.dll	Disinfection failed
C:\WINDOWS\system32\awtuvss.dll	Moved
C:\WINDOWS\system32\byxvvvu.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\byxvvvu.dll	Disinfection failed
C:\WINDOWS\system32\byxvvvu.dll	Moved
C:\WINDOWS\system32\cbxxywt.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\cbxxywt.dll	Disinfection failed
C:\WINDOWS\system32\cbxxywt.dll	Moved
C:\WINDOWS\system32\cbxyyay.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\cbxyyay.dll	Disinfection failed
C:\WINDOWS\system32\cbxyyay.dll	Move failed
C:\WINDOWS\system32\crswvmnt.exe	Infected Trojan.Agent.AAOA
C:\WINDOWS\system32\crswvmnt.exe	Disinfection failed
C:\WINDOWS\system32\crswvmnt.exe	Moved
C:\WINDOWS\system32\ddcbbab.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\ddcbbab.dll	Disinfection failed
C:\WINDOWS\system32\ddcbbab.dll	Moved
C:\WINDOWS\system32\ddcyyxu.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\ddcyyxu.dll	Disinfection failed
C:\WINDOWS\system32\ddcyyxu.dll	Moved
C:\WINDOWS\system32\efdcmmsw.exe	Infected Trojan.Agent.AAOA
C:\WINDOWS\system32\efdcmmsw.exe	Disinfection failed
C:\WINDOWS\system32\efdcmmsw.exe	Moved
C:\WINDOWS\system32\gcdpqvqb.dll	Infected Trojan.JuanSearch.B
C:\WINDOWS\system32\gcdpqvqb.dll	Disinfection failed
C:\WINDOWS\system32\gcdpqvqb.dll	Moved
C:\WINDOWS\system32\gcuxcdsl.exe	Infected Trojan.Agent.AAOA
C:\WINDOWS\system32\gcuxcdsl.exe	Disinfection failed
C:\WINDOWS\system32\gcuxcdsl.exe	Moved
C:\WINDOWS\system32\hggdefc.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\hggdefc.dll	Disinfection failed
C:\WINDOWS\system32\hggdefc.dll	Moved
C:\WINDOWS\system32\hgghihe.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\hgghihe.dll	Disinfection failed
C:\WINDOWS\system32\hgghihe.dll	Moved
C:\WINDOWS\system32\iifdaax.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\iifdaax.dll	Disinfection failed
C:\WINDOWS\system32\iifdaax.dll	Moved
C:\WINDOWS\system32\iifefca.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\iifefca.dll	Disinfection failed
C:\WINDOWS\system32\iifefca.dll	Moved
C:\WINDOWS\system32\iiffcbb.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\iiffcbb.dll	Disinfection failed
C:\WINDOWS\system32\iiffcbb.dll	Moved
C:\WINDOWS\system32\ljjgggg.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\ljjgggg.dll	Disinfection failed
C:\WINDOWS\system32\ljjgggg.dll	Moved
C:\WINDOWS\system32\lqechwlk.exe	Infected Trojan.Agent.AAOA
C:\WINDOWS\system32\lqechwlk.exe	Disinfection failed
C:\WINDOWS\system32\lqechwlk.exe	Moved
C:\WINDOWS\system32
nnmklk.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32
nnmklk.dll	Disinfection failed
C:\WINDOWS\system32
nnmklk.dll	Moved
C:\WINDOWS\system32\opnomjg.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\opnomjg.dll	Disinfection failed
C:\WINDOWS\system32\opnomjg.dll	Moved
C:\WINDOWS\system32\pmnolig.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\pmnolig.dll	Disinfection failed
C:\WINDOWS\system32\pmnolig.dll	Moved
C:\WINDOWS\system32\qomnnmn.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\qomnnmn.dll	Disinfection failed
C:\WINDOWS\system32\qomnnmn.dll	Moved
C:\WINDOWS\system32\ssqqomn.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\ssqqomn.dll	Disinfection failed
C:\WINDOWS\system32\ssqqomn.dll	Moved
C:\WINDOWS\system32\ssqqool.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\ssqqool.dll	Disinfection failed
C:\WINDOWS\system32\ssqqool.dll	Moved
C:\WINDOWS\system32	uvtrrp.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32	uvtrrp.dll	Disinfection failed
C:\WINDOWS\system32	uvtrrp.dll	Moved
C:\WINDOWS\system32	uvtsqn.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32	uvtsqn.dll	Disinfection failed
C:\WINDOWS\system32	uvtsqn.dll	Moved
C:\WINDOWS\system32\urqnnkh.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\urqnnkh.dll	Disinfection failed
C:\WINDOWS\system32\urqnnkh.dll	Moved
C:\WINDOWS\system32\urqopnk.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\urqopnk.dll	Disinfection failed
C:\WINDOWS\system32\urqopnk.dll	Moved
C:\WINDOWS\system32\vtusqpq.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\vtusqpq.dll	Disinfection failed
C:\WINDOWS\system32\vtusqpq.dll	Moved
C:\WINDOWS\system32\vtuuvst.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\vtuuvst.dll	Disinfection failed
C:\WINDOWS\system32\vtuuvst.dll	Moved
C:\WINDOWS\system32\vunnbnvm.dll	Infected Trojan.JuanSearch.B
C:\WINDOWS\system32\vunnbnvm.dll	Disinfection failed
C:\WINDOWS\system32\vunnbnvm.dll	Moved
C:\WINDOWS\system32\wlkfmebp.exe	Infected Trojan.Agent.AAOA
C:\WINDOWS\system32\wlkfmebp.exe	Disinfection failed
C:\WINDOWS\system32\wlkfmebp.exe	Moved
C:\WINDOWS\system32\xxyabaa.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\xxyabaa.dll	Disinfection failed
C:\WINDOWS\system32\xxyabaa.dll	Moved

Scanned files

C:\=>Master Boot Record	OK
C:\=>Primary partition 1 (Active)	OK
C:\WINDOWS\system32\	OK
C:\WINDOWS\system32\$winnt$.inf	OK
C:\WINDOWS\system32\1025\	OK
C:\WINDOWS\system32\1028\	OK
C:\WINDOWS\system32\1031\	OK
C:\WINDOWS\system32\1033\	OK
C:\WINDOWS\system32\1033\dwintl.dll	OK
C:\WINDOWS\system32\1036\	OK
C:\WINDOWS\system32\1036\dwintl.dll	OK
C:\WINDOWS\system32\1037\	OK
C:\WINDOWS\system32\1041\	OK
C:\WINDOWS\system32\1042\	OK
C:\WINDOWS\system32\1054\	OK
C:\WINDOWS\system32\12520437.cpx	OK
C:\WINDOWS\system32\12520850.cpx	OK
C:\WINDOWS\system32\2052\	OK
C:\WINDOWS\system32\3076\	OK
C:\WINDOWS\system32\3com_dmi\	OK
C:\WINDOWS\system32\6to4svc.dll	OK
C:\WINDOWS\system32\a3d.dll	OK
C:\WINDOWS\system32\a3d.dll=>:Zone.Identifier	OK
C:\WINDOWS\system32\aaaamon.dll	OK
C:\WINDOWS\system32\access.cpl	OK
C:\WINDOWS\system32\acctres.dll	OK
C:\WINDOWS\system32\accwiz.exe	OK
C:\WINDOWS\system32\acelpdec.ax	OK
C:\WINDOWS\system32\acledit.dll	OK
C:\WINDOWS\system32\aclui.dll	OK
C:\WINDOWS\system32\activeds.dll	OK
C:\WINDOWS\system32\activeds.tlb	OK
C:\WINDOWS\system32\actmovie.exe	OK
C:\WINDOWS\system32\actskin4.ocx	OK
C:\WINDOWS\system32\actxprxy.dll	OK
C:\WINDOWS\system32\admparse.dll	OK
C:\WINDOWS\system32\Adobe\	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\AceLite.dll	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\Agm.dll	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\Bib.dll	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\CoolType.dll	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\NPSVGVw.dll	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\ReadMe.html	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVG Viewer License.txt	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGAbout.svg	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGControl.dll	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGHelp.html	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGRSRC.DLL	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGView.dll	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.dict	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.dict=>(unicode)	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.ini	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/SVGViewer.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/Attr.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/CDATASection.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/CharacterData.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/Comment.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/Document.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/DocumentFragment.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/DocumentType.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/DOMException.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/DOMImplementation.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/Element.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/Entity.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/EntityReference.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/NamedNodeMap.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/Node.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/NodeList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/Notation.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/ProcessingInstruction.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/Text.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/Counter.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSS2Properties.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSCharsetRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSFontFaceRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSImportRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSMediaRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSPageRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSPrimitiveValue.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSRuleList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSStyleDeclaration.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSStyleRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSStyleSheet.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSUnknownRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSValue.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/CSSValueList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/DocumentCSS.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/DOMImplementationCSS.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/ElementCSSInlineStyle.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/Rect.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/RGBColor.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/css/ViewCSS.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/events/DocumentEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/events/Event.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/events/EventException.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/events/EventListener.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/events/EventTarget.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/events/MouseEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/events/UIEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/smil/ElementTimeControl.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/stylesheets/DocumentStyle.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/stylesheets/LinkStyle.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/stylesheets/MediaList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/stylesheets/StyleSheet.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/stylesheets/StyleSheetList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/views/AbstractView.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/views/DocumentView.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/GetSVGDocument.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAltGlyphDefElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAltGlyphElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAltGlyphItemElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAngle.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimateColorElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedAngle.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedBoolean.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedEnumeration.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedInteger.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedLength.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedLengthList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedNumber.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedNumberList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedPathData.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedPoints.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedPreserveAspectRatio.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedRect.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedString.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimatedTransformList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimateElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimateMotionElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimateTransformElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGAnimationElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGCircleElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGClipPathElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGColor.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGColorProfileElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGColorProfileRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGComponentTransferFunctionElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGCSSRule.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGCursorElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGDefinitionSrcElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGDefsElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGDescElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGDocument.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGElementInstance.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGElementInstanceList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGEllipseElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGException.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGExternalResourcesRequired.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEBlendElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEColorMatrixElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEComponentTransferElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFECompositeElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEConvolveMatrixElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEDiffuseLightingElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEDisplacementMapElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEDistantLightElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEFloodElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEFuncAElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEFuncBElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEFuncGElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEFuncRElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEGaussianBlurElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEImageElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEMergeElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEMergeNodeElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEMorphologyElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEOffsetElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFEPointLightElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFESpecularLightingElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFESpotLightElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFETileElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFETurbulenceElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFilterElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFilterPrimitiveStandardAttributes.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFitToViewBox.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFontElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFontFaceElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFontFaceFormatElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFontFaceNameElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFontFaceSrcElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGFontFaceUriElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGForeignObjectElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGGElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGGlyphElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGGlyphRefElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGGradientElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGHKernElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGICCColor.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGImageElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGLangSpace.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGLength.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGLengthList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGLinearGradientElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGLineElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGLocatable.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGMarkerElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGMaskElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGMatrix.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGMetadataElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGMissingGlyphElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGNumber.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGNumberList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPaint.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSeg.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegArcAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegArcRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegClosePath.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegCurvetoCubicAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegCurvetoCubicRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegCurvetoCubicSmoothAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegCurvetoCubicSmoothRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegCurvetoQuadraticAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegCurvetoQuadraticRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegCurvetoQuadraticSmoothAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegCurvetoQuadraticSmoothRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegLinetoAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegLinetoHorizontalAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegLinetoHorizontalRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegLinetoRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegLinetoVerticalAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegLinetoVerticalRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegMovetoAbs.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPathSegMovetoRel.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPatternElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPoint.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPointList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPolygonElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPolylineElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGPreserveAspectRatio.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGRadialGradientElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGRect.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGRectElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGRenderingIntent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGScriptElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGSetElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGStopElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGStringList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGStylable.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGStyleElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGSVGElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGSwitchElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGSymbolElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTests.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTextContentElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTextElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTextPathElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTextPositioningElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTitleElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTransform.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTransformable.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTransformList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTRefElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGTSpanElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGUnitTypes.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGURIReference.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGUseElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGViewElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGViewSpec.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGVKernElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGZoomAndPan.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>org/w3c/dom/svg/SVGZoomEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JAttr.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JCDATASection.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JCharacterData.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JComment.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JDocument.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JDocumentFragment.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JDocumentType.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JDOMException.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JDOMImplementation.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JEntity.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JEntityReference.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JNamedNodeMap.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JNode.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JNodeList.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JNotation.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JProcessingInstruction.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JSVGDocument.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JSVGElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JSVGPoint.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JSVGRect.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JSVGSVGElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JSVGTextContentElement.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/JText.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/css/JCSSStyleDeclaration.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/events/JEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/events/JKeyEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/events/JMouseEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/events/JUIEvent.class	OK
C:\WINDOWS\system32\Adobe\SVG Viewer\SVGViewer.zip=>com/adobe/svg/events/KeyEvent.class	OK
C:\WINDOWS\system32\adptif.dll	OK
C:\WINDOWS\system32\adsldp.dll	OK
C:\WINDOWS\system32\adsldpc.dll	OK
C:\WINDOWS\system32\adsmsext.dll	OK
C:\WINDOWS\system32\adsnds.dll	OK
C:\WINDOWS\system32\adsnt.dll	OK
C:\WINDOWS\system32\adsnw.dll	OK
C:\WINDOWS\system32\advapi32.dll	OK
C:\WINDOWS\system32\advpack.dll	OK
C:\WINDOWS\system32\ahui.exe	OK
C:\WINDOWS\system32\alg.exe	OK
C:\WINDOWS\system32\alrsvc.dll	OK
C:\WINDOWS\system32\amcompat.tlb	OK
C:\WINDOWS\system32\amstream.dll	OK
C:\WINDOWS\system32\ansi.sys	OK
C:\WINDOWS\system32\apcups.dll	OK
C:\WINDOWS\system32\append.exe	OK
C:\WINDOWS\system32\apphelp.dll	OK
C:\WINDOWS\system32\appmgmts.dll	OK
C:\WINDOWS\system32\appmgr.dll	OK
C:\WINDOWS\system32\appwiz.cpl	OK
C:\WINDOWS\system32\arp.exe	OK
C:\WINDOWS\system32\asctrls.ocx	OK
C:\WINDOWS\system32\asferror.dll	OK
C:\WINDOWS\system32\asr_fmt.exe	OK
C:\WINDOWS\system32\asr_ldm.exe	OK
C:\WINDOWS\system32\asr_pfu.exe	OK
C:\WINDOWS\system32\aswBoot.exe	OK
C:\WINDOWS\system32\asycfilt.dll	OK
C:\WINDOWS\system32\at.exe	OK
C:\WINDOWS\system32\atkctrs.dll	OK
C:\WINDOWS\system32\atl.dll	OK
C:\WINDOWS\system32\atmadm.exe	OK
C:\WINDOWS\system32\atmfd.dll	OK
C:\WINDOWS\system32\atmlib.dll	OK
C:\WINDOWS\system32\atmpvcno.dll	OK
C:\WINDOWS\system32\atrace.dll	OK
C:\WINDOWS\system32\attrib.exe	OK
C:\WINDOWS\system32\audiosrv.dll	OK
C:\WINDOWS\system32\auditusr.exe	OK
C:\WINDOWS\system32\authz.dll	OK
C:\WINDOWS\system32\autochk.exe	OK
C:\WINDOWS\system32\autoconv.exe	OK
C:\WINDOWS\system32\autodisc.dll	OK
C:\WINDOWS\system32\AUTOEXEC.NT	OK
C:\WINDOWS\system32\autofmt.exe	OK
C:\WINDOWS\system32\autolfn.exe	OK
C:\WINDOWS\system32\AvastSS.scr	OK
C:\WINDOWS\system32\avicap.dll	OK
C:\WINDOWS\system32\avicap32.dll	OK
C:\WINDOWS\system32\avifil32.dll	OK
C:\WINDOWS\system32\avifile.dll	OK
C:\WINDOWS\system32\avmeter.dll	OK
C:\WINDOWS\system32\avtapi.dll	OK
C:\WINDOWS\system32\avwav.dll	OK
C:\WINDOWS\system32\awtsspq.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\awtsspq.dll	Disinfection failed
C:\WINDOWS\system32\awtsspq.dll	Moved
C:\WINDOWS\system32\awtuvss.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\awtuvss.dll	Disinfection failed
C:\WINDOWS\system32\awtuvss.dll	Moved
C:\WINDOWS\system32\basesrv.dll	OK
C:\WINDOWS\system32\BASSMOD.dll	OK
C:\WINDOWS\system32\batmeter.dll	OK
C:\WINDOWS\system32\batt.dll	OK
C:\WINDOWS\system32\bdco1.dll	OK
C:\WINDOWS\system32\bdco1.dll=>:Zone.Identifier	OK
C:\WINDOWS\system32\bdco1ins.dll	OK
C:\WINDOWS\system32\bdco1ins.dll=>:Zone.Identifier	OK
C:\WINDOWS\system32\bidispl.dll	OK
C:\WINDOWS\system32\bios1.rom	OK
C:\WINDOWS\system32\bios4.rom	OK
C:\WINDOWS\system32\bios4.rom=>REMOVED_NULLS	OK
C:\WINDOWS\system32\bitsprx2.dll	OK
C:\WINDOWS\system32\bitsprx3.dll	OK
C:\WINDOWS\system32\blackbox.dll	OK
C:\WINDOWS\system32\blastcln.exe	OK
C:\WINDOWS\system32\bootcfg.exe	OK
C:\WINDOWS\system32\bootok.exe	OK
C:\WINDOWS\system32\bootvid.dll	OK
C:\WINDOWS\system32\bootvrfy.exe	OK
C:\WINDOWS\system32\bopomofo.uce	OK
C:\WINDOWS\system32\browselc.dll	OK
C:\WINDOWS\system32\browser.dll	OK
C:\WINDOWS\system32\browseui.dll	OK
C:\WINDOWS\system32\browsewm.dll	OK
C:\WINDOWS\system32\bthci.dll	OK
C:\WINDOWS\system32\bthprops.cpl	OK
C:\WINDOWS\system32\bthserv.dll	OK
C:\WINDOWS\system32\btpanui.dll	OK
C:\WINDOWS\system32\byxvvvu.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\byxvvvu.dll	Disinfection failed
C:\WINDOWS\system32\byxvvvu.dll	Moved
C:\WINDOWS\system32\cabinet.dll	OK
C:\WINDOWS\system32\cabview.dll	OK
C:\WINDOWS\system32\cacls.exe	OK
C:\WINDOWS\system32\calc.exe	OK
C:\WINDOWS\system32\camocx.dll	OK
C:\WINDOWS\system32\CapabilityTable.exe	OK
C:\WINDOWS\system32\capesnpn.dll	OK
C:\WINDOWS\system32\cards.dll	OK
C:\WINDOWS\system32\CatRoot\	OK
C:\WINDOWS\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\	OK
C:\WINDOWS\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\codecs10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\DRM10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\FP4.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HPCRDP.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IASNT4.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IMS.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB888111WXPSP2.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MAPIMIG.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mediactr.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MPPRE10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSMSGS.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSTSWEB.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MW770.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
etfx.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5IIS.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NTPRINT.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem0.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem1.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem100.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem101.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem102.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem103.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem104.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem105.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem106.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem107.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem108.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem109.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem110.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem111.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem112.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem113.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem114.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem115.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem116.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem117.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem118.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem119.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem12.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem120.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem121.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem122.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem123.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem124.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem125.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem126.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem127.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem128.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem129.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem13.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem130.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem131.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem132.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem133.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem134.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem135.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem136.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem137.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem138.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem139.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem14.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem140.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem141.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem142.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem143.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem144.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem145.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem146.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem147.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem148.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem149.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem15.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem150.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem151.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem152.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem153.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem154.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem155.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem156.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem157.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem158.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem159.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem16.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem160.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem161.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem162.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem163.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem164.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem165.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem166.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem167.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem168.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem169.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem17.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem170.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem171.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem172.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem173.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem174.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem175.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem176.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem177.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem178.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem179.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem18.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem180.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem181.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem182.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem183.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem184.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem185.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem186.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem187.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem188.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem189.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem19.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem190.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem191.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem192.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem193.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem194.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem195.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem2.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem2.CAT=>:Zone.Identifier	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem20.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem21.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem22.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem23.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem24.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem25.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem26.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem27.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem28.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem29.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem3.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem3.CAT=>:Zone.Identifier	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem30.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem31.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem32.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem33.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem34.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem35.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem36.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem37.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem38.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem39.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT=>:Zone.Identifier	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem40.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem41.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem42.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem43.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem44.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem45.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem46.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem47.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem48.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem49.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT=>:Zone.Identifier	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem50.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem51.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem52.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem53.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem54.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem55.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem56.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem57.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem58.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem59.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem6.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem6.CAT=>:Zone.Identifier	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem60.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem61.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem62.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem63.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem64.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem65.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem66.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem67.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem68.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem69.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem7.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem70.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem71.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem72.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem73.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem74.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem75.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem76.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem77.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem78.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem79.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem80.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem81.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem82.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem83.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem84.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem85.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem87.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem88.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem89.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem9.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem90.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem91.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem92.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem93.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem94.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem95.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem96.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem97.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem98.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem99.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\OEMBIOS.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\SP2.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}	abletpc.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WMDM10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmerrenu.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WMFSDK10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WPD10.CAT	OK
C:\WINDOWS\system32\CatRoot2\	OK
C:\WINDOWS\system32\CatRoot2\dberr.txt	OK
C:\WINDOWS\system32\CatRoot2\edb.chk	OK
C:\WINDOWS\system32\CatRoot2\edb.log	OK
C:\WINDOWS\system32\CatRoot2\edb00018.log	OK
C:\WINDOWS\system32\CatRoot2\edb00019.log	OK
C:\WINDOWS\system32\CatRoot2\edb0001A.log	OK
C:\WINDOWS\system32\CatRoot2\edb0001B.log	OK
C:\WINDOWS\system32\CatRoot2\edb0001C.log	OK
C:\WINDOWS\system32\CatRoot2es1.log	OK
C:\WINDOWS\system32\CatRoot2es2.log	OK
C:\WINDOWS\system32\CatRoot2	mp.edb	OK
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\	OK
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb	OK
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp	OK
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\	OK
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb	OK
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp	OK
C:\WINDOWS\system32\catsrv.dll	OK
C:\WINDOWS\system32\catsrvps.dll	OK
C:\WINDOWS\system32\catsrvut.dll	OK
C:\WINDOWS\system32\cbxxywt.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\cbxxywt.dll	Disinfection failed
C:\WINDOWS\system32\cbxxywt.dll	Moved
C:\WINDOWS\system32\cbxyyay.dll	Detected: Adware.Virtumonde.GFH
C:\WINDOWS\system32\cbxyyay.dll	Disinfection failed
C:\WINDOWS\system32\cbxyyay.dll	Move failed
C:\WINDOWS\system32\ccfgnt.dll	OK
C:\WINDOWS\system32\CDDBControl.dll	OK
C:\WINDOWS\system32\CddbLangDE.dll	OK
C:\WINDOWS\system32\CddbLangES.dll	OK
C:\WINDOWS\system32\CddbLangFR.dll	OK
C:\WINDOWS\system32\CddbLangIT.dll	OK
C:\WINDOWS\system32\CddbLangJA.dll	OK
C:\WINDOWS\system32\CddbLangKO.dll	OK
C:\WINDOWS\system32\CddbLangNL.dll	OK
C:\WINDOWS\system32\CddbLangPT_BR.dll	OK
C:\WINDOWS\system32\CddbLangSV.dll	OK
C:\WINDOWS\system32\CddbLangTH.dll	OK
C:\WINDOWS\system32\CddbLangZH.dll	OK
C:\WINDOWS\system32\CddbLangZT.dll	OK
C:\WINDOWS\system32\CDDBUI.dll	OK
C:\WINDOWS\system32\cdfview.dll	OK
C:\WINDOWS\system32\cdm.dll	OK
C:\WINDOWS\system32\cdmodem.dll	OK
C:\WINDOWS\system32\cdosys.dll	OK
C:\WINDOWS\system32\cdplayer.exe.manifest	OK
C:\WINDOWS\system32\certcli.dll	OK
C:\WINDOWS\system32\certmgr.dll	OK
C:\WINDOWS\system32\certmgr.msc	OK
C:\WINDOWS\system32\cewmdm.dll	OK
C:\WINDOWS\system32\cfgbkend.dll	OK
C:\WINDOWS\system32\cfgmgr32.dll	OK
C:\WINDOWS\system32\charmap.exe	OK
C:\WINDOWS\system32\Chaînes.scf	OK
C:\WINDOWS\system32\chcp.com	OK
C:\WINDOWS\system32\chkdsk.exe	OK
C:\WINDOWS\system32\chkntfs.exe	OK
C:\WINDOWS\system32\ciadmin.dll	OK
C:\WINDOWS\system32\ciadv.msc	OK
C:\WINDOWS\system32\cic.dll	OK
C:\WINDOWS\system32\cidaemon.exe	OK
C:\WINDOWS\system32\ciodm.dll	OK
C:\WINDOWS\system32\cipher.exe	OK
C:\WINDOWS\system32\cisvc.exe	OK
C:\WINDOWS\system32\ckcnv.exe	OK
C:\WINDOWS\system32\clb.dll	OK
C:\WINDOWS\system32\clbcatex.dll	OK
C:\WINDOWS\system32\clbcatq.dll	OK
C:\WINDOWS\system32\cleanmgr.exe	OK
C:\WINDOWS\system32\CleanUp.exe	OK
C:\WINDOWS\system32\cliconf.chm	OK
C:\WINDOWS\system32\cliconf.chm=>/#SYSTEM	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_apple.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_apple.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_ipxspx1.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_ipxspx1.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_ipxspx2.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_ipxspx2.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_multi.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_multi.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_namedpipes.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_namedpipes.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_others.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_others.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_tcpip.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_tcpip.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_vines.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_vines.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_alias.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_alias.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_dblib.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_dblib.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_general.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_general.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_netlib.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_netlib.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_add_(or_edit)_via_library_configuration.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_add_(or_edit)_via_library_configuration.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_appletalk_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_appletalk_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_banyan_vines_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_banyan_vines_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_alias_a_client_to_an_alternate_pipe.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_alias_a_client_to_an_alternate_pipe.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_check_the_library_version_numbers.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_check_the_library_version_numbers.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_use_the_windows_socket

raleuboleu · Answer

salut

rends toi sur ce lien stp pour hijack et installe le en le renomant :

https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html



aussi pour etre sure pour virtumonde :


Télécharge VirtumundoBegone sur le bureau:
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Double clique ensuite sur VirtumundoBeGone.exe et suis les instructions.
Une fois terminé, redémarre et poste le rapport VBG.TXT créé sur le bureau dans ta prochaine réponse avec un nouveau rapport HijackThis.
Ne t'inquiète pas si tu vois un message Ecran bleu "Erreur fatale", c'est normal et attendu

bizz

Wizario · Answer

Voici le scan de HiJackThis (merci du tuto ^^) 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:23:51, on 2007-07-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Documents and Settings\Utilisateur\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: 74.59.247.50 L2authd.lineage2.com
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Grey Default] C:\DOCUME~1\UTILIS~1\APPLIC~1\DOWNLO~1\Dartcompbeep.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\gmcamdpo.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

Wizario · Answer

Ece possible de l'aranger?

raleuboleu · Answer

salut

désinstalle hijack et reinstalle le en le renomant stp ! viaa le site de Claude ^^:

https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html


ensuite je vois trop d'antivirus moi lol qu'as tu exactement en antivirus et parefeu ? (conflits )

bizoux

Wizario · Answer

Ok je lai refait, ;) et jai installer la version, enfait javais.. plus qun antivirus, javais aussi mcafee. La presentement, quand jai fait le scan j'ai avast, ad-aware, spy-bot, CCleaner et je crois que cest tout, javais deja installer les barre yahoo et AVG avant.

Logfile of HijackThis v1.99.1
Scan saved at 17:40:39, on 2007-07-14
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: 66.130.197.84 L2authd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Grey Default] C:\DOCUME~1\UTILIS~1\APPLIC~1\DOWNLO~1\Dartcompbeep.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\gmcamdpo.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)

Wizario · Answer

et puis?

raleuboleu · Answer

raaaaaaaaaaaaaaaa

désolée ccm bug chez moi , ta pas recu mon post je vois !!!! grrrr c relou bon jre ds 5mn

Wizario · Answer

ok pas de prob ^^

raleuboleu · Answer

re

    Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
    Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
    • Redémarre ton ordinateur
    • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
    • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
    • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
    • Choisis ton compte.
    Déroule la liste des instructions ci-dessous :
    • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le scrïpt.
    • Appuie sur Y pour commencer le processus de nettoyage.
    • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
    • Appuie sur une touche pour redémarrer le PC.
    • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
    • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
    • Appuie sur une touche pour finir l'exécution du scrïpt et charger les icônes de ton Bureau.
    • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
    • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !




bizoux

Wizario · Answer

Voila le report de SD fix


SDFix: Version 1.91

Run by Utilisateur on 2007-07-15 at 18:29

Microsoft Windows XP [version 5.1.2600]

Running From: C:\DOCUME~1\UTILIS~1\Bureau\SdFix\SDFix

Safe Mode:
Checking Services: 


Restoring Windows Registry Values
Restoring Windows Default Hosts File 
Restoring Missing Security Center Service 
Restoring Missing SharedAccess Service 

Rebooting...


Normal Mode:
Checking Files: 

Trojan Files Found:

C:\Documents and Settings\LocalService\Local Settings\Temp\stdrun10.exe - Deleted
C:\Documents and Settings\LocalService\Local Settings\Temp\stdrun15.exe - Deleted



Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found. 

C:\WINDOWS\system32
No streams found. 

C:\WINDOWS\system32\svchost.exe
No streams found.
 
C:\WINDOWS\system32
toskrnl.exe
No streams found.
 


                                 Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\Warcraft III\Frozen Throne.exe"="C:\Program Files\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - The Frozen Throne"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\World of Warcraft\Repair.exe"="C:\Program Files\World of Warcraft\Repair.exe:*:Enabled:Blizzard Repair Utility"
"C:\Documents and Settings\Utilisateur\Bureau\utorrent.exe"="C:\Documents and Settings\Utilisateur\Bureau\utorrent.exe:*:Enabled:æTorrent"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Documents and Settings\Utilisateur\Local Settings\Temp\Rar$EX00.656\WoW-BC_Downloader.exe"="C:\Documents and Settings\Utilisateur\Local Settings\Temp\Rar$EX00.656\WoW-BC_Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\WINDOWS\system32\gmcamdpo.exe"="C:\WINDOWS\system32\gmc"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Assistance … distance - Windows Messenger et voix"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
---------------

Backups Folder: - C:\DOCUME~1\UTILIS~1\Bureau\SdFix\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\whitedeviltiger64@hotmail.com\Sharing Folders\missredish@msn.com\Thumbs.db

                                 Finished 


et celui de HijackThis

Logfile of HijackThis v1.99.1
Scan saved at 18:36:49, on 2007-07-15
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Grey Default] C:\DOCUME~1\UTILIS~1\APPLIC~1\DOWNLO~1\Dartcompbeep.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\gmcamdpo.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)

raleuboleu · Answer

grrrrrrrrrrrrrrrrrrr passs vundo ici:

    Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
    http://www.atribune.org/ccount/click.php?id=4
    Double-clique VundoFix.exe afin de le lancer.

    Clique sur le bouton Scan for Vundo.
    Lorsque le scan est complété, clique sur le bouton Remove Vundo.
    Une invite te demandera si tu veux supprimer les fichiers, clique YES
    Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
    Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown") ; clique OK
    Démarre ton PC à nouveau. 

toen zo courant !!! bizz

Wizario · Answer

Il y a rien >.< le logiciel a rien trouver

Wizario · Answer

alors que dois-je faire :S.. >.<

raleuboleu · Answer

dormir mdr

jme penche sur ...............ton k.....................taleur 

bizoux

Wizario · Answer

ok merci ^^ (dsl je suis qubecois chez moi yer pas.. si tard que cela :P) merci de ton aide ^^ t'es vrmt sympa! :D

Wizario · Answer

mais, ca srais tu mieu que je formate >.<??

raleuboleu · Answer

salut

désolée j'étais pas connectée ya toujours moyen de regler tes soucis sans passer par le formatage , que veux tu faire ? 

bizoux

Wizario · Answer

et bien je sais pas trop >.< je sais juste pas quoi faire presentement :s.. si tu peux me conseiller cela serrait tres aprecier

raleuboleu · Answer

re

Va sur ce lien et télécharge Blacklight(de F-Secure) :
< https://www.f-secure.com/en > et sauvegarde le sur ton Bureau
Consulte le tuto de Malekal_morte ici :
< https://www.malekal.com/tutorial-f-secure-blacklight/ >
Tu suis le tuto pour la phase 1 (scan) et tu postes le rapport de blacklight dans ta réponse.

bizz

Wizario · Answer

hum.. ok ca dit quil ni a rien O.o >.< cela veut dire que jai plus rien ou? 

07/16/07 13:28:07 [Info]: BlackLight Engine 1.0.64 initialized
07/16/07 13:28:07 [Info]: OS: 5.1 build 2600 (Service Pack 2)
07/16/07 13:28:07 [Note]: 7019 4
07/16/07 13:28:07 [Note]: 7005 0
07/16/07 13:28:11 [Note]: 7006 0
07/16/07 13:28:11 [Note]: 7011 1648
07/16/07 13:28:11 [Note]: 7026 0
07/16/07 13:28:11 [Note]: 7026 0
07/16/07 13:28:13 [Note]: FSRAW library version 1.7.1022
07/16/07 13:30:37 [Note]: 7007 0

Wizario · Answer

jai refait un hijackthis voici le rapport 

Logfile of HijackThis v1.99.1
Scan saved at 13:32:17, on 2007-07-16
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

O1 - Hosts: 66.130.197.84 L2authd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Grey Default] C:\DOCUME~1\UTILIS~1\APPLIC~1\DOWNLO~1\Dartcompbeep.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\gmcamdpo.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)

raleuboleu · Answer

re

relance hijack stp et coche ceci :

-O4 - HKCU\..\Run: [Grey Default] C:\DOCUME~1\UTILIS~1\APPLIC~1\DOWNLO~1\Dartcompbeep.exe
-O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\gmcamdpo.exe (file missing)

puis clic sur fixer

ensuite rend toi sur ce site afin de désinstaller et réinstaller correctement hijack, c'est impératif pour la suite pour que je te dise de lancer 1 programme 

le lien :
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

reposte 1 hijack afinb de voir si hijack se trouve bien a la racine de c:\

bizoux

Wizario · Answer

tien >.< jai tout fait comme tu as dit

Logfile of HijackThis v1.99.1
Scan saved at 14:06:35, on 2007-07-16
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\HiJackThis\Hijackthis Version Française\hijackthis vf.exe

O1 - Hosts: 66.130.197.84 L2authd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)

raleuboleu · Answer

re

bravo lol


1/Télécharge LSPfix ici :
http://www.cexx.org/LSPFix.exe

Lance LSPfix et agrandis la fenêtre qui, par défaut, est trop petite et fait apparaître les ascenseurs horizontaux et verticaux, masquant un bouton.
Déconnecte toi d'Internet et ferme toutes les instances (fenêtres) Internet Explorer.
Coche la case "I know what I'm doing" ("Je sais ce que je fais" ).
Sélectionne toutes les instances de la dll suivantes :

nvappfilter.dll(présente en 010)

et fais les glisser du panneau de gauche, appelé "keep" au panneau de droite, appelé "Remove".

Clique sur le bouton [Finish].

Redémarre l'ordinateur. Remet un log Hijack pour vérifier si la ligne 010 à disparue.



2/ par précaution Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
http://www.atribune.org/ccount/click.php?id=4

* Double-clique VundoFix.exe afin de le lancer.
* Lorsque l'outil se lance à nouveau, clique sur le bouton Scan for Vundo
* Clique sur le bouton Scan for Vundo.
* Lorsque le scan est complété, clique sur le bouton Remove Vundo
* Une invite te demandera si tu veux supprimer les fichiers, clique YES
* Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
* Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK
* Démarre ton PC à nouveau.
* Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse.

Note Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".

3/ poste 1 nouveau rapport hijack stp

bizoux

Wizario · Answer

heu.. la javais fait une mauvaise action.. javais effacer mes protocole.. (se qui a fait.. que mon internet fonctionnais plus du tout du tout >.<..) jai du faire une restauration du systeme, (en date dhier) dision que la premier etape je lai mal comprit :S.. pourrais-tu repeter je ten prit :S

raleuboleu · Answer

lool

remet 1 hijack ke je vois stp

bizoux

Wizario · Answer

Tien, jai suivie les etape avant celle que tu ma envoyer avant (la derniere ds le font dans lautre message :P)

Logfile of HijackThis v1.99.1
Scan saved at 21:51:03, on 2007-07-16
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Hijackthis Version Française\hijackthis vf.exe

O1 - Hosts: 66.130.197.84 L2authd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
vappfilter.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)

Wizario · Answer

OH okkk jai suivie tes etapes et jai trouver :O ^^ merciii ca la bien marcher en fin du compte ^^ c moi.. qui etais trop presser la ca donne ceci (yavais bien de quoi ak vundo)

la ca donne ceci:

Logfile of HijackThis v1.99.1
Scan saved at 23:48:33, on 2007-07-16
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Hijackthis Version Française\hijackthis vf.exe

O1 - Hosts: 66.130.197.84 L2authd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)

raleuboleu · Answer

salut

"""Tien, jai suivie les etape avant celle que tu ma envoyer avant (la derniere ds le font dans lautre message :P)"""

==> tu veux me rendre tarée loooool

je matte ton log désolée je viens seulement de me connecter

bizoux

Wizario · Answer

dsl :P non je veux pas :P^^ ya pas de probleme :)

raleuboleu · Answer

mdr

euh spyware doctor c'est bof tu veux vraiment le garder ???? 

bizoux

Wizario · Answer

justement, je le veux pasd >.< mais yer encore ds mon ordi >.< si tu peux me dire comment lauter lol (ya plein de pop-up de ca >.<)

raleuboleu · Answer

as tu déja été dans panneau de config? surement mais bon jdemande quand meme

Wizario · Answer

Oui, et il nest pas dedans :S

raleuboleu · Answer

regarde ici :

https://www.pcastuces.com/logitheque/utilitaires.asp


merci a salwa5 ^^ ==> bizoux miss

telecharge le logiciel et essaie

Wizario · Answer

Cela semble etre un bon program, mais.. il n'est point dedans :S.. >.< jai chercher, et regarder les fichier un par un et.. sans resultat, il nest pas la :s

raleuboleu · Answer

bon on tente via hijack alors 

coche ces 2 lignes stp fixes les et reposte 1 hijack please :

-O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
-O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)

Wizario · Answer

Logfile of HijackThis v1.99.1
Scan saved at 15:24:39, on 2007-07-17
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Hijackthis Version Française\hijackthis vf.exe

O1 - Hosts: 66.130.197.84 L2authd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)




ca la pas marcher :S

raleuboleu · Answer

grrrrrrrrrrrrrrrrrr

tente en mode sans echec pour voir 

raaaaaaaaaa collant lui 

bizoux

Wizario · Answer

ca la pas reussi :s :P en mode sans echec :S

raleuboleu · Answer

ralallalalala Va sur ce lien et télécharge Blacklight(de F-Secure) : < https://www.f-secure.com/en > et sauvegarde le sur ton Bureau Consulte le tuto de Malekal_morte ici : < https://www.malekal.com/tutorial-f-secure-blacklight/ > Tu suis le tuto pour la phase 1 (scan) et tu postes le rapport de blacklight dans ta réponse. bizoux

Wizario · Answer

tien 

07/17/07 16:44:09 [Info]: BlackLight Engine 1.0.64 initialized
07/17/07 16:44:09 [Info]: OS: 5.1 build 2600 (Service Pack 2)
07/17/07 16:44:09 [Note]: 7019 4
07/17/07 16:44:09 [Note]: 7005 0
07/17/07 16:44:11 [Note]: 7006 0
07/17/07 16:44:11 [Note]: 7011 1648
07/17/07 16:44:11 [Note]: 7026 0
07/17/07 16:44:11 [Note]: 7026 0
07/17/07 16:44:12 [Note]: FSRAW library version 1.7.1022
07/17/07 16:45:47 [Note]: 7007 0

Wizario · Answer

et puis :S

raleuboleu · Answer

salut


ok tout d'abord desactive le service de spyware doctor

demarrer/executer tapes : services.msc

double cliques sur le service : PC Tools Spyware Doctor (SDhelper),dans type de demarrage choisi desactiver puis clique sur arreter puis sur appliqué / ok





ouvre hijack coches ces lignes puis clic sur fix checked



-O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
-O23 - Service: Spyware Doctor Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)



redemare en mode sans echec (redemarrage + tapotte sans arret sur la touche F8 desque l'ordi s'allume)

cherches et supprime le dossiers en gras :

C:\Program Files\Spyware Doctor


redemare en mode normal

supprime les fichiers inutiles (fichiers temporaire , cookies .. ) avec ceci:

Ccleaner
https://www.malekal.com/tutoriel-ccleaner/ 

biz

Wizario · Answer

Tien, ^^ mercii tout a fonctionner :P meci enormement  voila ce que ca donne:

Logfile of HijackThis v1.99.1
Scan saved at 12:47:40, on 2007-07-18
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Hijackthis Version Française\hijackthis vf.exe

O1 - Hosts: 66.130.197.84 L2authd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)



si tu voix quelque chose dautre fait moi signe :) merci pour toutt bizz ;) 

a oui ds mes processus mon ami ma dit que jai 2 fichier qui srais des "verus" ou trojan tk jaimerais savoir si c vrai: rundll32.exe et jusched.exe

raleuboleu · Answer

re

moi meme j'ai ces processus mais lance ceci pour voir 1 truc 

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le scrïpt.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du scrïpt et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

bizoux

Wizario · Answer

ok ^^ mici tien


Run by Utilisateur on 2007-07-18 at 15:34

Microsoft Windows XP [version 5.1.2600]

Running From: C:\DOCUME~1\UTILIS~1\Bureau\SdFix\SDFix

Safe Mode:
Checking Services: 


Restoring Windows Registry Values
Restoring Windows Default Hosts File 

Rebooting...


Normal Mode:
Checking Files: 

No Trojan Files Found




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found. 

C:\WINDOWS\system32
No streams found. 

C:\WINDOWS\system32\svchost.exe
No streams found.
 
C:\WINDOWS\system32
toskrnl.exe
No streams found.
 


                                 Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\Warcraft III\Frozen Throne.exe"="C:\Program Files\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - The Frozen Throne"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\World of Warcraft\Repair.exe"="C:\Program Files\World of Warcraft\Repair.exe:*:Enabled:Blizzard Repair Utility"
"C:\Documents and Settings\Utilisateur\Bureau\utorrent.exe"="C:\Documents and Settings\Utilisateur\Bureau\utorrent.exe:*:Enabled:æTorrent"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Documents and Settings\Utilisateur\Local Settings\Temp\Rar$EX00.656\WoW-BC_Downloader.exe"="C:\Documents and Settings\Utilisateur\Local Settings\Temp\Rar$EX00.656\WoW-BC_Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\WINDOWS\system32\gmcamdpo.exe"="C:\WINDOWS\system32\gmc"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Assistance … distance - Windows Messenger et voix"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
---------------


Files with Hidden Attributes:

C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\whitedeviltiger64@hotmail.com\Sharing Folders\heelflipcool@hotmail.com\Thumbs.db
C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\whitedeviltiger64@hotmail.com\Sharing Folders\missredish@msn.com\Thumbs.db

                                 Finished 

et HijackThis

Logfile of HijackThis v1.99.1
Scan saved at 15:41:49, on 2007-07-18
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Hijackthis Version Française\hijackthis vf.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)

raleuboleu · Answer

re

quel souci rencontre tu a ce mom?

bizoux

Wizario · Answer

hey hey >.<¸je comprend pas pouquoi, mais bon, mon anti verus (avast) a encore trouver des trojans quand que je ne fait presque juste jouer a des jeux video (WoW, warcraft, lineage, bref des jeux rpg) et sur des site de jeux et pour finir sur msn je comprend pas vrmt pk il peut encore en trouver >.< jai fait un scan avec ad-awre, spy-bot, vundfix,fsbl , sdfix, cclenear et la presentement je fesais un scan (un nouveau pour voir) avec mon antiverus. Si tu peux y reter un oeil et me dire c quoi quil se passe cela serais tres aprecier, merci de ton aide encore pour tout ce que tu as fait bizou -Raport sdfx SDFix: Version 1.91 Run by Utilisateur on 2007-07-25 at 20:18 Microsoft Windows XP [version 5.1.2600] Running From: C:\DOCUME~1\UTILIS~1\Bureau\SdFix\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting... Normal Mode: Checking Files: No Trojan Files Found Removing Temp Files... ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32 toskrnl.exe No streams found. Final Check: Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server" "C:\Program Files\Warcraft III\Frozen Throne.exe"="C:\Program Files\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - The Frozen Throne" "C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III" "C:\Program Files\World of Warcraft\Repair.exe"="C:\Program Files\World of Warcraft\Repair.exe:*:Enabled:Blizzard Repair Utility" "C:\Documents and Settings\Utilisateur\Bureau\utorrent.exe"="C:\Documents and Settings\Utilisateur\Bureau\utorrent.exe:*:Enabled:æTorrent" "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule" "C:\Documents and Settings\Utilisateur\Local Settings\Temp\Rar$EX00.656\WoW-BC_Downloader.exe"="C:\Documents and Settings\Utilisateur\Local Settings\Temp\Rar$EX00.656\WoW-BC_Downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\WINDOWS\system32\gmcamdpo.exe"="C:\WINDOWS\system32\gmc" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" "C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary" "C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Assistance … distance - Windows Messenger et voix" "C:\WINDOWS\system32\LEXPPS.EXE"="C:\WINDOWS\system32\LEXPPS.EXE:*:Enabled:LEXPPS.EXE" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" Remaining Files: --------------- Files with Hidden Attributes: C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\whitedeviltiger64@hotmail.com\Sharing Folders\heelflipcool@hotmail.com\Thumbs.db C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\whitedeviltiger64@hotmail.com\Sharing Folders\missredish@msn.com\Thumbs.db Finished -Raport HiJackThis: Logfile of HijackThis v1.99.1 Scan saved at 20:34:58, on 2007-07-25 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin SvcLog.exe C:\WINDOWS\system32 vsvc32.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin SvcAppFlt.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin SvcIp.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32 otepad.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\Logitech\G-series Software\LGDCore.exe C:\Program Files\Logitech\G-series Software\LCDMon.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Alwil Software\Avast4\ashSimpl.exe C:\Hijackthis Version Française\hijackthis vf.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin SvcAppFlt.exe O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing) O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing) O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin SvcIp.exe O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin SvcLog.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32 vsvc32.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap pcapd.exe" -d -f "%ProgramFiles%\WinPcap pcapd.ini (file missing) Rapport CClearer NETTOYAGE COMPLET - (2,611 secs) ------------------------------------------------------------------------------------------ 3,56MB supprimés. ------------------------------------------------------------------------------------------ Détails des fichiers effacés ------------------------------------------------------------------------------------------ Fichiers Temporaires d'Internet Explorer (fichiers 203) 1,51MB Cookie:utilisateur@atdmt.com/(&H100001) 94 bytes Cookie:utilisateur@www.commentcamarche.net/(&H100001) 114 bytes Cookie:utilisateur@xiti.com/(&H100001) 99 bytes Cookie:utilisateur@sdv.fr/(&H100001) 76 bytes Cookie:utilisateur@bluestreak.com/(&H100001) 176 bytes C:\Documents and Settings\Utilisateur\Cookies\utilisateur@h.msn[1].txt 68 bytes C:\Documents and Settings\Utilisateur\Cookies\utilisateur@hotmail.msn[1].txt 71 bytes C:\Documents and Settings\Utilisateur\Cookies\utilisateur@live[1].txt 333 bytes C:\Documents and Settings\Utilisateur\Cookies\utilisateur@login.live[1].txt 268 bytes C:\Documents and Settings\Utilisateur\Cookies\utilisateur@messenger.msn[1].txt 93 bytes C:\Documents and Settings\Utilisateur\Cookies\utilisateur@msn[2].txt 332 bytes C:\Documents and Settings\Utilisateur\Cookies\utilisateur@rad.msn[2].txt 670 bytes Marqué pour l'effacement: C:\Documents and Settings\Utilisateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat Marqué pour l'effacement: C:\Documents and Settings\Utilisateur\Cookies\index.dat Poubelle vidée (1 fichiers) 0,51MB C:\WINDOWS\MiniDump\Mini072507-01.dmp 88,00KB C:\WINDOWS\system32\wbem\Logs\wbemess.log 22,95KB C:\WINDOWS\system32\wbem\Logs\wmiprov.log 134 bytes C:\WINDOWS\0.log 0 bytes C:\WINDOWS\setupapi.log 533 bytes C:\WINDOWS tbtlog.txt 0,10MB C:\WINDOWS\Debug\UserMode\userenv.log 5,74KB Cache Internet de Firefox/Mozilla (23 fichiers) 1,28MB C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\profiles\et8m6oo4.default\history.dat 27,45KB C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\profiles\et8m6oo4.default\downloads.rdf 1,77KB Cookie supprimé: google.fr Cookie supprimé: qcdndl2.4rumer.com Cookie supprimé: google.ca Cookie supprimé: google.com Cookie supprimé: yahoo.com Cookie supprimé: 2o7.net Cookie supprimé: clubic.com Cookie supprimé: xiti.com Cookie supprimé: smartadserver.com Cookie supprimé: clubic.com Cookie supprimé: doubleclick.net Cookie supprimé: www.clubic.com Cookie supprimé: bluestreak.com Cookie supprimé: smartadserver.com Cookie supprimé: www.01net.com Cookie supprimé: weborama.fr Cookie supprimé: atdmt.com Cookie supprimé: com.com Cookie supprimé: download.com Cookie supprimé: www.download.com Cookie supprimé: element5.com Cookie supprimé: revsci.net Cookie supprimé: download.com Cookie supprimé: revsci.net Cookie supprimé: www.download.com Cookie supprimé: revsci.net Cookie supprimé: download.com Cookie supprimé: zedo.com Cookie supprimé: blizzard.com Cookie supprimé: www.blizzard.com Cookie supprimé: blizzard.com C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\profiles\et8m6oo4.default\formhistory.dat 991 bytes C:\Documents and Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 348 bytes ------------------------------------------------------------------------------------------ -Et pour finir Avast: pour avast c plus dure.. ca copi cole pas mais c ds c\system volume information\_restor (ak plein de letre et chifre , un fichier exe ca dit infection Wn32 bgucated-BFL (TJR) (etdes BFM a place de BFL) tk je sais pas si tu comprend sinon je tenverai mon e-mail >.<

raleuboleu · Answer

salut

trojan ^^ , avg l'a mis en quarantaine certainenement

bon ben on va commencer par ça :


1/    Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
    http://www.atribune.org/ccount/click.php?id=4
    Double-clique VundoFix.exe afin de le lancer.

    Clique sur le bouton Scan for Vundo.
    Lorsque le scan est complété, clique sur le bouton Remove Vundo.
    Une invite te demandera si tu veux supprimer les fichiers, clique YES
    Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
    Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown") ; clique OK
    Démarre ton PC à nouveau. 



2/ Télécharge VirtumundoBegone sur le bureau:
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Double clique ensuite sur VirtumundoBeGone.exe et suis les instructions.
Une fois terminé, redémarre et poste le rapport VBG.TXT créé sur le bureau dans ta prochaine réponse avec un nouveau rapport HijackThis.
Ne t'inquiète pas si tu vois un message Ecran bleu "Erreur fatale", c'est normal et attendu



postes tous rapports stp

bizoux

Wizario · Answer

[07/26/2007, 12:32:26] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Utilisateur\Bureau\VirtumundoBeGone.exe" )
[07/26/2007, 12:32:28] - Detected System Information:
[07/26/2007, 12:32:28] -  Windows Version: 5.1.2600, Service Pack 2
[07/26/2007, 12:32:28] -  Current Username: Utilisateur (Admin)
[07/26/2007, 12:32:28] -  Windows is in NORMAL mode.
[07/26/2007, 12:32:28] - Searching for Browser Helper Objects:
[07/26/2007, 12:32:28] -  BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[07/26/2007, 12:32:28] -  BHO 2: {53707962-6F74-2D53-2644-206D7942484F} ()
[07/26/2007, 12:32:28] - WARNING: BHO has no default name. Checking for Winlogon reference.
[07/26/2007, 12:32:28] -  Checking for HKLM\...\Winlogon\Notify\SDHelper
[07/26/2007, 12:32:28] -  Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
[07/26/2007, 12:32:28] -  BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[07/26/2007, 12:32:28] -  BHO 4: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[07/26/2007, 12:32:28] - WARNING: BHO has no default name. Checking for Winlogon reference.
[07/26/2007, 12:32:28] -  No filename found. Continuing.
[07/26/2007, 12:32:28] - Finished Searching Browser Helper Objects
[07/26/2007, 12:32:28] - Finishing up...
[07/26/2007, 12:32:28] - Nothing found! Exiting...


juste ca? :S et ca pas redemarer rien du tout >.< a oui et moi jai avast en passant :P ^^ avg pour moi je trouve que c.. dla... "shit" sorry :S

raleuboleu · Answer

looool 

et spybot ca te va? mdr

bizoux

Wizario · Answer

Spybot trouve tlt 4 "trojan" bluestreak , doubleclick, fastclick et hitbox en tk >.<

raleuboleu · Answer

grrrrrrrrrrrrrrrr 


passe combofix 

1 lien interressant:

http://mickael.barroux.free.fr/securite/combofix.php


kiss

Wizario · Answer

Tien, le resultat >.< "Utilisateur" - 2007-07-26 23:21:14 - ComboFix 07-07-23.6 - Service Pack 2 NTFS ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\DOCUME~1\LOCALS~1\APPLIC~1\Install.dat C:\DOCUME~1\NETWOR~1\APPLIC~1\Install.dat C:\WINDOWS\ecurit~1 C:\WINDOWS\fnts~1 C:\WINDOWS\system32\umljsgqr.exe C:\WINDOWS\wnsxs~1 ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) -------\LEGACY_DOMAINSERVICE -------\DomainService ((((((((((((((((((((((((( Files Created from 2007-06-27 to 2007-07-27 ))))))))))))))))))))))))))))))) 2007-07-26 23:20 51,200 --a------ C:\WINDOWS ircmd.exe 2007-07-26 14:31 d-------- C:\Program Files\World of Warcraft 2007-07-26 09:38 d-------- C:\Program Files\World of Warcraft(2) 2007-07-26 00:33 d-------- C:\Program Files\No-IP 2007-07-25 21:11 d-------- C:\wamp 2007-07-25 18:24 d-------- C:\Program Files\Lavasoft 2007-07-25 18:24 d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Lavasoft 2007-07-17 15:06 d-------- C:\Program Files\splus 2007-07-16 17:45 d-------- C:\Hijackthis Version Fran‡aise 2007-07-15 22:04 5,410,816 --a------ C:\DOCUME~1\UTILIS~1 tuser.dat 2007-07-15 22:04 1,110,016 --a------ C:\DOCUME~1\LOCALS~1.AUT tuser.dat 2007-07-15 18:54 d-------- C:\VundoFix Backups 2007-07-15 18:29 d-------- C:\WINDOWS\ERUNT 2007-07-14 19:03 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll 2007-07-14 19:03 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll 2007-07-14 19:03 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll 2007-07-14 19:03 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll 2007-07-14 19:03 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe 2007-07-14 19:03 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-07-14 19:03 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll 2007-07-14 19:03 d-------- C:\Program Files\Ahead 2007-07-14 18:10 d-------- C:\Program Files\StepMania 2007-07-14 17:29 d-------- C:\WINDOWS\system32\appmgmt 2007-07-14 11:21 d-------- C:\Program Files\Fichiers communs\3DO Shared 2007-07-14 11:21 d-------- C:\Program Files\3DO 2007-07-13 19:44 d-------- C:\Program Files\iTunes 2007-07-13 19:44 d-------- C:\Program Files\iPod 2007-07-13 19:43 d-------- C:\Program Files\Fichiers communs\Apple 2007-07-13 19:43 d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple 2007-07-13 19:41 d-------- C:\Program Files\QuickTime 2007-07-13 18:28 14 --a------ C:\DOCUME~1\UTILIS~1\getfile.dat 2007-07-13 07:41 14 --a------ C:\WINDOWS\system32\getfile.dat 2007-07-13 07:27 d---s---- C:\DOCUME~1\UTILIS~1\UserData 2007-07-13 07:27 d-------- C:\WINDOWS\BDOSCAN8 2007-07-09 20:25 d-------- C:\DOCUME~1\UTILIS~1\APPLIC~1\AdobeUM 2007-07-09 16:45 d-------- C:\DOCUME~1\UTILIS~1\APPLIC~1\CyberLink 2007-07-09 16:45 d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\CyberLink 2007-07-08 23:33 95,872 --a------ C:\WINDOWS\system32\AvastSS.scr 2007-07-08 23:33 94,552 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-07-08 23:33 85,952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-07-08 23:33 745,600 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-07-08 23:33 43,176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-07-08 23:33 26,888 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-07-08 23:33 23,416 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-07-08 23:33 d-------- C:\Program Files\Alwil Software 2007-07-08 12:48 1,352,355 ---hs---- C:\WINDOWS\system32\ststv.bak2 2007-07-06 13:37 266,336 --a------ C:\WINDOWS\system32\vtsts.dll.vir 2007-07-06 13:37 1,245,081 ---hs---- C:\WINDOWS\system32\ststv.bak1 2007-07-04 21:43 679,936 --a------ C:\WINDOWS\system32\D3DX81ab.dll 2007-07-04 21:40 d-------- C:\Program Files\WinPcap 2007-07-04 21:40 d-------- C:\Program Files\WC3Banlist 2007-07-03 00:01 d-------- C:\WINDOWS\cache 2007-07-02 09:57 d-------- C:\Program Files\Common Files 2007-06-30 09:34 1,254,934 ---hs---- C:\WINDOWS\system32 qstv.bak2 2007-06-29 18:12 d-------- C:\Program Files\DOWNLOADEXITBOLT 2007-06-28 14:44 1,246,638 ---hs---- C:\WINDOWS\system32 qstv.bak1 2007-06-28 13:39 d-------- C:\Program Files\Windows Live 2007-06-28 13:39 d-------- C:\Program Files\Adverts 2007-06-28 13:38 d-------- C:\Program Files\MSN Messenger 2007-06-28 12:36 31,254 --a------ C:\WINDOWS\system32\cbxyyay.dll.vir (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-07-26 15:28:43 -------- d-----w C:\Program Files\Warcraft III 2007-07-26 13:39:35 -------- d-----w C:\Program Files\Fichiers communs\Blizzard Entertainment 2007-07-25 22:23:45 -------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2007-07-25 22:18:01 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\Lavasoft 2007-07-25 18:30:45 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1 eamspeak2 2007-07-19 01:38:22 -------- d-----w C:\Program Files\eMule 2007-07-15 23:02:26 -------- d-----w C:\Program Files\Lexmark X1100 Series 2007-07-14 23:02:59 -------- d-----w C:\Program Files\CyberLink DVD Solution 2007-07-14 21:34:17 -------- d-----w C:\Program Files\Network Associates 2007-07-14 15:25:58 28,400 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-07-11 22:23:27 -------- d-----w C:\Program Files\Lineage II 2007-07-02 03:06:07 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\DOWNLOADEXITBOLT 2007-06-29 20:02:09 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\uTorrent 2007-06-28 17:39:26 -------- d-----w C:\Program Files\Messenger Plus! Live 2007-06-28 17:33:32 -------- d-----w C:\Program Files\Creative 2007-06-23 01:43:28 -------- d-----w C:\Program Files\CCleaner 2007-06-23 01:12:29 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\Skype 2007-06-22 20:38:38 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\PC Tools 2007-06-21 20:06:36 0 ----a-w C:\WINDOWS\mozver.dat 2007-06-18 19:32:53 -------- d-----w C:\Program Files\Teamspeak2_RC2 2007-06-18 17:38:52 -------- d-----w C:\Program Files\MySQL 2007-06-18 16:47:28 -------- d-----w C:\Program Files\RegCleaner 2007-06-18 16:12:55 -------- d-----w C:\Program Files\PremiumSoft 2007-06-15 22:36:00 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\Creative 2007-06-15 22:12:50 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-06-15 02:49:11 -------- d-----w C:\Program Files\Lavalys 2007-06-14 12:26:49 -------- d-----w C:\Program Files\Skype 2007-06-14 12:26:46 -------- d-----w C:\Program Files\Fichiers communs\Skype 2007-06-13 19:50:45 -------- d-----w C:\Program Files\InterActual 2007-06-13 17:03:09 -------- d-----w C:\Program Files\Apple Software Update 2007-06-13 12:34:17 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\InterTrust 2007-06-13 12:29:41 -------- d-----w C:\Program Files\VirtualDJ 2007-06-13 12:26:21 -------- d-----w C:\Program Files\DivX 2007-06-13 12:11:20 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\Apple Computer 2007-06-13 12:10:15 -------- d-----w C:\Program Files\QuickZip4 2007-06-12 19:34:39 79,794 ----a-w C:\WINDOWS\War3Unin.dat 2007-06-12 19:22:07 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\Teleca 2007-06-12 19:17:45 2,829 ----a-w C:\WINDOWS\War3Unin.pif 2007-06-12 19:17:45 139,264 ----a-w C:\WINDOWS\War3Unin.exe 2007-06-12 18:26:34 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\Leadertech 2007-06-12 18:26:33 -------- d-----w C:\Program Files\viewsonic 2007-06-12 18:24:01 -------- d-----w C:\Program Files\Disc2Phone 2007-06-12 18:21:33 63,614 ----a-w C:\WINDOWS\system32\perfc00C.dat 2007-06-12 18:21:33 445,016 ----a-w C:\WINDOWS\system32\perfh00C.dat 2007-06-12 18:17:25 -------- d-----w C:\Program Files\Fichiers communs\Teleca Shared 2007-06-12 18:17:14 -------- d-----w C:\Program Files\Sony Ericsson 2007-06-12 15:47:31 -------- d-----w C:\DOCUME~1\UTILIS~1\APPLIC~1\WinRAR 2007-06-12 13:25:43 1,187 ----a-w C:\WINDOWS\checkip.dat 2007-06-12 01:57:52 -------- d-----w C:\Program Files\TGTSoft 2007-06-08 00:39:39 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll 2007-06-08 00:26:26 -------- d-----w C:\Program Files\Winamp 2007-06-08 00:18:59 0 ----a-w C:\WINDOWS sreg.dat 2007-06-08 00:04:32 -------- d-----w C:\Program Files\ABBYY FineReader 5.0 Sprint 2007-06-07 16:37:17 -------- d-----w C:\Program Files\Microsoft Works 2007-06-07 16:19:51 93,952 ----a-w C:\WINDOWS\system32\drivers\aeaudio.sys 2007-06-07 16:19:51 65,536 ----a-w C:\WINDOWS\system32\a3d.dll 2007-06-07 16:19:51 392,960 ----a-w C:\WINDOWS\system32\drivers\senfilt.sys 2007-06-07 16:19:51 293,888 ----a-w C:\WINDOWS\system32\drivers\ADIHdAud.sys 2007-06-07 16:19:51 28,160 ----a-w C:\WINDOWS\system32\PostProc.dll 2007-06-07 16:17:33 363,008 ----a-w C:\WINDOWS\system32\idecoiins.dll 2007-06-07 16:17:33 363,008 ----a-w C:\WINDOWS\system32\idecoi.dll 2007-06-07 16:17:33 35,840 ----a-w C:\WINDOWS\system32\NVCOI.DLL 2007-06-07 16:17:33 208,896 ------w C:\WINDOWS\system32 vuide.exe 2007-06-07 16:17:33 105,344 ----a-w C:\WINDOWS\system32\drivers vata.sys 2007-06-07 16:17:31 261,632 ----a-w C:\WINDOWS\system32\drivers vsnpu.sys 2007-06-07 16:17:31 19,968 ----a-w C:\WINDOWS\system32\drivers vnetbus.sys 2007-06-07 16:17:31 110,592 ----a-w C:\WINDOWS\system32\drivers vtcp.sys 2007-06-07 16:17:31 1,428 ----a-w C:\WINDOWS\system32\drivers vphy.bin 2007-06-07 16:17:31 1,161,088 ----a-w C:\WINDOWS\system32\drivers vnrm.sys 2007-06-07 16:17:30 57,856 ----a-w C:\WINDOWS\system32\drivers\NVENETFD.sys 2007-06-07 16:17:30 35,840 ----a-w C:\WINDOWS\system32 vconrm.dll 2007-06-07 16:17:29 201,728 ----a-w C:\WINDOWS\system32\fdco1.dll 2007-06-07 16:17:29 11,264 ----a-w C:\WINDOWS\system32\bdco1ins.dll 2007-06-07 16:17:29 11,264 ----a-w C:\WINDOWS\system32\bdco1.dll 2007-06-07 15:11:51 21,892 ----a-w C:\WINDOWS\system32\emptyregdb.dat 2007-06-07 15:11:18 -------- d-----w C:\Program Files\Messenger 2007-06-06 18:01:00 -------- d-----w C:\Program Files\lg_fwupdate 2007-06-02 03:17:43 -------- d-----w C:\Program Files\Infogrames Interactive 2007-06-01 21:43:20 -------- d-----w C:\Program Files\Microsoft IntelliType Pro 2007-06-01 21:42:00 -------- d-----w C:\Program Files\Microsoft IntelliPoint 2007-05-31 18:35:50 -------- d-----w C:\Program Files\Logitech 2007-05-31 18:21:43 -------- d-----w C:\Program Files\Fichiers communs\InstallShield 2007-05-31 07:59:15 -------- d-----w C:\Program Files\microsoft frontpage 2007-05-31 07:58:56 0 --sha-r C:\MSDOS.SYS 2007-05-31 07:58:56 0 --sha-r C:\IO.SYS 2007-05-31 07:58:56 0 ----a-w C:\CONFIG.SYS 2007-05-31 07:58:56 0 ----a-w C:\AUTOEXEC.BAT 2007-05-31 07:57:56 -------- d--h--w C:\Program Files\WindowsUpdate 2007-05-31 07:57:53 -------- d-----w C:\Program Files\Services en ligne 2007-05-31 07:57:08 -------- d-----w C:\Program Files\Fichiers communs\MSSoap 2007-05-31 07:56:59 -------- d-----w C:\Program Files\Movie Maker 2007-05-31 07:55:57 -------- d-----w C:\Program Files\Online Services 2007-05-31 07:55:48 -------- d-----w C:\Program Files\MSN Gaming Zone 2007-05-31 07:55:40 -------- d-----w C:\Program Files\Windows NT 2007-05-31 03:48:55 -------- d-----w C:\Program Files\Fichiers communs\ODBC 2007-05-31 03:48:52 -------- d-----w C:\Program Files\Fichiers communs\SpeechEngines 2007-05-30 20:38:59 -------- d-----w C:\Program Files\Fichiers communs\Ahead 2007-05-30 20:34:01 -------- d-----w C:\Program Files\Microsoft.NET 2007-05-30 20:29:41 -------- d-----w C:\Program Files\Fichiers communs\Cisco Systems 2007-05-30 20:27:40 -------- d-----w C:\Program Files\AMD ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nwiz"="nwiz.exe" [2007-04-20 06:05 C:\WINDOWS\system32 wiz.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43] "Launch LGDCore"="C:\Program Files\Logitech\G-series Software\LGDCore.exe" [2006-03-06 11:31] "Launch LCDMon"="C:\Program Files\Logitech\G-series Software\LCDMon.exe" [2006-03-06 11:14] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 11:42] "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-07-10 09:18] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-04-20 06:05] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 01:07] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdauxservice] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdcoreservice] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Utilisateur^Menu Démarrer^Programmes^Démarrage^PowerReg Scheduler.exe] path=C:\Documents and Settings\Utilisateur\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler.exe backup=C:\WINDOWS\pss\PowerReg Scheduler.exeStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt] "C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lessgridlinkanti] C:\Documents and Settings\All Users.WINDOWS\Application Data\forkbagslessgrid\atomnurb.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe R1 mnmdd;mnmdd;C:\WINDOWS\system32\drivers\mnmdd.sys R1 Npfs;Npfs;C:\WINDOWS\system32\drivers\Npfs.sys R1 NVTCP;NVIDIA TCP/IP Protocol Driver;C:\WINDOWS\system32\DRIVERS\NVTcp.sys R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM);C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin SvcAppFlt.exe R2 lanmanserver;Serveur;C:\WINDOWS\system32\svchost.exe -k netsvcs R2 lanmanworkstation;Station de travail;C:\WINDOWS\system32\svchost.exe -k netsvcs R2 winmgmt;Infrastructure de gestion Windows;C:\WINDOWS\system32\svchost.exe -k netsvcs R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service;C:\WINDOWS\system32\drivers\ADIHdAud.sys R3 AmdTools;AMD Special Tools Driver;C:\WINDOWS\system32\DRIVERS\AmdTools.sys R3 P0630VID;Creative WebCam Live!;C:\WINDOWS\system32\DRIVERS\P0630Vid.sys R3 SenFiltService;SenFilt Service;C:\WINDOWS\system32\drivers\Senfilt.sys R3 wdmaud;Pilote WINMM de compatibilit‚ audio WDM Microsoft;C:\WINDOWS\system32\drivers\wdmaud.sys S3 IKFileFlt;File Filter Driver;C:\WINDOWS\system32\drivers\ikfileflt.sys S3 IKFileSec;File Security Driver;C:\WINDOWS\system32\drivers\ikfilesec.sys S3 IkSysFlt;System Filter Driver;C:\WINDOWS\system32\drivers\iksysflt.sys S3 IKSysSec;System Security Driver;C:\WINDOWS\system32\drivers\iksyssec.sys S3 mnmsrvc;Partage de Bureau … distance NetMeeting;C:\WINDOWS\system32\mnmsrvc.exe S3 nm;Pilote du Moniteur r‚seau;C:\WINDOWS\system32\DRIVERS\NMnt.sys S3 NPF;NetGroup Packet Filter Driver;C:\WINDOWS\system32\drivers pf.sys S3 NPPTNT2;NPPTNT2;\??\C:\WINDOWS\system32 pptNT2.sys S3 w300bus;Sony Ericsson W300 Driver driver (WDM);C:\WINDOWS\system32\DRIVERS\w300bus.sys S3 w300mdfl;Sony Ericsson W300 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\w300mdfl.sys S3 w300mdm;Sony Ericsson W300 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\w300mdm.sys S3 w300mgmt;Sony Ericsson W300 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\w300mgmt.sys S3 w300obex;Sony Ericsson W300 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\w300obex.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D] AutoRun\command- D:\autoplay.exe Contents of the 'Scheduled Tasks' folder 2007-07-26 18:00:00 C:\WINDOWS asks\A244CC6391974B53.job 2007-07-20 23:40:00 C:\WINDOWS asks\AppleSoftwareUpdate.job ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-07-26 23:24:36 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\MySQL] "ImagePath"="\"C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt\" --defaults-file=\"C:\Program Files\MySQL\MySQL Server 5.0\my.ini\" MySQL" Completion time: 2007-07-26 23:25:26 - machine was rebooted C:\ComboFix-quarantined-files.txt ... 2007-07-26 23:25 --- E O F ---

raleuboleu · Answer

salut

peux tu me remettre 1 hijack stp mais avant fais ceci:

rend toi sur ce lien :
http://www.gmer.net

tu pourras y telecharger Gmer et tout est expliqué comme il faut et en images 

bizoux

Wizario · Answer

salut, >.< jai quelque probleme de mon coté presentement je suis chez lun de mes amis, jai fait.. sauter ma carte mère sans vrmt le vouloir alors.. cela va me prendre 1 semaine pour que je retrouve mon ordinateur, merci de ton aide, (comment je lai fait sauter, c en essayant dinstaller une nouvelle fan sur mes carte ram.. mais comme un "con" :P jai pas fermer lordi et... cour circuit >.< "vive les garanties XD :)") mici bcp biz! t la meilleure :P ^^

raleuboleu · Answer

re

ah bah bravo lol ^^ te dis bon courrage alors 

la meilleure euhhhhhhhhhhhhhhhhh nan pourtant mais je suis pas contre les compliments lol

a bientot alors 

bizoux a toi

Wizario · Answer

Salut salut ^^, la je suis chez ma couzine, et elle a un probleme avec son ordi, elle est slow comme tout, (avant  lancien proprietaire telechargais plein de chose inutilement , comme des anti-verus en pop-up -.- (le con)) tk, jvousllais savoir si tu pourrais maider a aranger cela, jai fait un scan avec hijackthis, jai installer dessus comme sur la mienne ad-aware, avast et spybot. Jai essayer deja de faire un petit menage, mais defois cetais sans succès si tu peut cela serais tres aprecier, en tk merci si tu peux, et sinon c pas grave :P ca reste toi la meilleure  :D:P ^^

biz

Logfile of HijackThis v1.99.1
Scan saved at 11:14:35, on 2007-07-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\ASSIST~1\SMARTB~1\MotiveSB.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Accélérateur du service de base Sympatico\slipaccel.exe
C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Motive\Common\MOTIVE~1.EXE
C:\Program Files\Assistant Internet\bin\mad.exe
C:\Program Files\Assistant Internet\bin\mpbtn.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\iTunesSetup.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\MsiExec.exe
C:\Hijackthis Version Française\hijackthis vf.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?setlang=fr-CA&FORM=LTHP&mkt=en-ca&toHttps=1&redig=D6D8D433A98846CB9E77BF900682D2BE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [OM_Monitor] C:\Documents and Settings\Compaq_Propriétaire\Mes documents\FirstStart.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ASSIST~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [MotiveReportAgent] "C:\Program Files\Fichiers communs\Motive\McciBootStrapper.exe" /url="-url=file://C:\Program Files\Fichiers communs\Motive\ReportAgent.html" /browsertype=CustomMSIE /browserpath="C:\Program Files\Common Files\Motive\motivebrowser.exe" /hidden
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [OM_Monitor] C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Monitor.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Accélérateur du service de base.lnk = ?
O4 - Global Startup: Assistant Internet.lnk = C:\Program Files\Assistant Internet\bin\matcli.exe
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: ISSvc (ISSVC) - Unknown owner - c:\Program Files\Norton Internet Security\ISSVC.exe (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Unknown owner - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe (file missing)

Wizario · Answer

jai refait un scan de hijackthis et jai sais un sd fix p-e cela pourrait etre plus utile :s mais durent le sdfix il y avait un probleme avec symantec (nortun -.- )je sais pas pk yavais sa sur lordi .. c tlm pas bon :S tk... jai essayer de mon mieu pour le desinstaller mais je crois quil reste encore quelque fichier >

bizz


SDFix: Version 1.94

Run by Compaq_Propri‚taire on 2007-07-28 at 20:15

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services: 


Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Missing Security Center Service 
Restoring Missing SharedAccess Service 

Rebooting...


Normal Mode:
Checking Files: 

No Trojan Files Found




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found. 

C:\WINDOWS\system32
No streams found. 

C:\WINDOWS\system32\svchost.exe
No streams found.
 
C:\WINDOWS\system32
toskrnl.exe
No streams found.
 


                                 Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files:
---------------


Files with Hidden Attributes:


                                 Finished 


Logfile of HijackThis v1.99.1
Scan saved at 20:27:28, on 2007-07-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32
otepad.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\ASSIST~1\SMARTB~1\MotiveSB.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
C:\Program Files\Assistant Internet\bin\mpbtn.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?setlang=fr-CA&FORM=LTHP&mkt=en-ca&toHttps=1&redig=D6D8D433A98846CB9E77BF900682D2BE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [OM_Monitor] C:\Documents and Settings\Compaq_Propriétaire\Mes documents\FirstStart.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ASSIST~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [MotiveReportAgent] "C:\Program Files\Fichiers communs\Motive\McciBootStrapper.exe" /url="-url=file://C:\Program Files\Fichiers communs\Motive\ReportAgent.html" /browsertype=CustomMSIE /browserpath="C:\Program Files\Common Files\Motive\motivebrowser.exe" /hidden
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [OM_Monitor] C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Monitor.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Accélérateur du service de base.lnk = ?
O4 - Global Startup: Assistant Internet.lnk = C:\Program Files\Assistant Internet\bin\matcli.exe
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Unknown owner - c:\Program Files\Norton Internet Security\ISSVC.exe (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Unknown owner - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe (file missing)

Wizario · Answer

a oui et le.. scan de fsbl 

07/28/07 23:53:06 [Info]: BlackLight Engine 1.0.64 initialized
07/28/07 23:53:06 [Info]: OS: 5.1 build 2600 (Service Pack 2)
07/28/07 23:53:07 [Note]: 7019 4
07/28/07 23:53:07 [Note]: 7005 0
07/28/07 23:53:10 [Note]: 7006 0
07/28/07 23:53:11 [Note]: 7011 1456
07/28/07 23:53:11 [Note]: 7026 0
07/28/07 23:53:11 [Note]: 7026 0
07/28/07 23:53:18 [Note]: FSRAW library version 1.7.1022
07/28/07 23:57:39 [Note]: 2000 1012
07/28/07 23:59:46 [Note]: 7007 0

raleuboleu · Answer

salut

je matte tout ca!!

pour norton regarde ce site :
supprimer desinstaller norton antivirus norton internet security


bizoux

Wizario · Answer

Voici ce que les document donnais :S mais ds hijackthis ils sont encore la :s 

Docier mis:

PRODUCT(S)
Norton Internet Security 2000 1.0
Norton Personal Firewall 2000 2.0
Norton Internet Security 2000 2.0
Norton Internet Security Family Edition 2000 2.0
Norton Personal Firewall 2001 2.5
Norton Internet Security 2001 2.5
Norton Internet Security Family Edition 2001 2.5
Norton Personal Firewall 2001 3.0
Norton Internet Security 2001 3.0
Norton Internet Security Family Edition 2001 3.0
Norton Personal Firewall 2002 4.0
Norton Internet Security 2002 4.0
Norton Internet Security Professional 2002 4.5
Norton Personal Firewall 2003 6.0
Norton Internet Security 2003 6.0
Norton Internet Security Professional 2003 6.0

INSTALLED DIRECTORY


ACTIVE SERVICES/PROCESSES
Stopping SymPxSvc
Stopping NISSERV
Stopping NISUM
Stopping ccEvtMgr
Stopping ccPwdSvc
Stopping ccPxySvc

WINDOWS INSTALLER INFORMATION
Remove Windows Installer Information for Norton Internet Security 1.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\0A35461EDEA33D11FA74000680117C50
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E16453A0-3AED-11D3-AF47-00600811C705}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\0A35461EDEA33D11FA74000680117C50
Delete HKCU\Software\Microsoft\Installer\Products\0A35461EDEA33D11FA74000680117C50
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\0A35461EDEA33D11FA74000680117C50
Delete HKCU\Software\Microsoft\Installer\Features\0A35461EDEA33D11FA74000680117C50
Delete HKLM\Software\Classes\Installer\Products\0A35461EDEA33D11FA74000680117C50
Delete HKCU\Software\Classes\Installer\Products\0A35461EDEA33D11FA74000680117C50
Delete HKLM\Software\Classes\Installer\Features\0A35461EDEA33D11FA74000680117C50
Delete HKCU\Software\Classes\Installer\Features\0A35461EDEA33D11FA74000680117C50
Total references deleted = 0

Remove Windows Installer Information for Norton Personal Firewall 2.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\B078B62C6E80A244AA3EA652C0FC9EE4
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C26B870B-08E6-442A-AAE3-6A250CCFE94E}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\B078B62C6E80A244AA3EA652C0FC9EE4
Delete HKCU\Software\Microsoft\Installer\Products\B078B62C6E80A244AA3EA652C0FC9EE4
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\B078B62C6E80A244AA3EA652C0FC9EE4
Delete HKCU\Software\Microsoft\Installer\Features\B078B62C6E80A244AA3EA652C0FC9EE4
Delete HKLM\Software\Classes\Installer\Products\B078B62C6E80A244AA3EA652C0FC9EE4
Delete HKCU\Software\Classes\Installer\Products\B078B62C6E80A244AA3EA652C0FC9EE4
Delete HKLM\Software\Classes\Installer\Features\B078B62C6E80A244AA3EA652C0FC9EE4
Delete HKCU\Software\Classes\Installer\Features\B078B62C6E80A244AA3EA652C0FC9EE4
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security 2.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\E8F7A1C72663C0B45A376C080C348EE0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7C1A7F8E-3662-4B0C-A573-C680C043E80E}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\E8F7A1C72663C0B45A376C080C348EE0
Delete HKCU\Software\Microsoft\Installer\Products\E8F7A1C72663C0B45A376C080C348EE0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\E8F7A1C72663C0B45A376C080C348EE0
Delete HKCU\Software\Microsoft\Installer\Features\E8F7A1C72663C0B45A376C080C348EE0
Delete HKLM\Software\Classes\Installer\Products\E8F7A1C72663C0B45A376C080C348EE0
Delete HKCU\Software\Classes\Installer\Products\E8F7A1C72663C0B45A376C080C348EE0
Delete HKLM\Software\Classes\Installer\Features\E8F7A1C72663C0B45A376C080C348EE0
Delete HKCU\Software\Classes\Installer\Features\E8F7A1C72663C0B45A376C080C348EE0
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security Family Edition 2.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\3D29D4DE4ED7FA94B8C1ACB1B729472D
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ED4D92D3-7DE4-49AF-8B1C-CA1B7B9274D2}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\3D29D4DE4ED7FA94B8C1ACB1B729472D
Delete HKCU\Software\Microsoft\Installer\Products\3D29D4DE4ED7FA94B8C1ACB1B729472D
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\3D29D4DE4ED7FA94B8C1ACB1B729472D
Delete HKCU\Software\Microsoft\Installer\Features\3D29D4DE4ED7FA94B8C1ACB1B729472D
Delete HKLM\Software\Classes\Installer\Products\3D29D4DE4ED7FA94B8C1ACB1B729472D
Delete HKCU\Software\Classes\Installer\Products\3D29D4DE4ED7FA94B8C1ACB1B729472D
Delete HKLM\Software\Classes\Installer\Features\3D29D4DE4ED7FA94B8C1ACB1B729472D
Delete HKCU\Software\Classes\Installer\Features\3D29D4DE4ED7FA94B8C1ACB1B729472D
Total references deleted = 0

Remove Windows Installer Information for Norton Personal Firewall 2.5
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\556EF8FF3DAC17E4CA0841A0F748C23B
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FF8FE655-CAD3-4E71-AC80-140A7F842CB3}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\556EF8FF3DAC17E4CA0841A0F748C23B
Delete HKCU\Software\Microsoft\Installer\Products\556EF8FF3DAC17E4CA0841A0F748C23B
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\556EF8FF3DAC17E4CA0841A0F748C23B
Delete HKCU\Software\Microsoft\Installer\Features\556EF8FF3DAC17E4CA0841A0F748C23B
Delete HKLM\Software\Classes\Installer\Products\556EF8FF3DAC17E4CA0841A0F748C23B
Delete HKCU\Software\Classes\Installer\Products\556EF8FF3DAC17E4CA0841A0F748C23B
Delete HKLM\Software\Classes\Installer\Features\556EF8FF3DAC17E4CA0841A0F748C23B
Delete HKCU\Software\Classes\Installer\Features\556EF8FF3DAC17E4CA0841A0F748C23B
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security 2.5
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\1E88320C3E0CE264DB8CE7D1658DCAD4
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C02388E1-C0E3-462E-BDC8-7E1D56D8AC4D}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\1E88320C3E0CE264DB8CE7D1658DCAD4
Delete HKCU\Software\Microsoft\Installer\Products\1E88320C3E0CE264DB8CE7D1658DCAD4
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\1E88320C3E0CE264DB8CE7D1658DCAD4
Delete HKCU\Software\Microsoft\Installer\Features\1E88320C3E0CE264DB8CE7D1658DCAD4
Delete HKLM\Software\Classes\Installer\Products\1E88320C3E0CE264DB8CE7D1658DCAD4
Delete HKCU\Software\Classes\Installer\Products\1E88320C3E0CE264DB8CE7D1658DCAD4
Delete HKLM\Software\Classes\Installer\Features\1E88320C3E0CE264DB8CE7D1658DCAD4
Delete HKCU\Software\Classes\Installer\Features\1E88320C3E0CE264DB8CE7D1658DCAD4
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security Family Edition 2.5
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\F5169029E67260446870FDB2C3F9F043
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9209615F-276E-4406-8607-DF2B3C9F0F34}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\F5169029E67260446870FDB2C3F9F043
Delete HKCU\Software\Microsoft\Installer\Products\F5169029E67260446870FDB2C3F9F043
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\F5169029E67260446870FDB2C3F9F043
Delete HKCU\Software\Microsoft\Installer\Features\F5169029E67260446870FDB2C3F9F043
Delete HKLM\Software\Classes\Installer\Products\F5169029E67260446870FDB2C3F9F043
Delete HKCU\Software\Classes\Installer\Products\F5169029E67260446870FDB2C3F9F043
Delete HKLM\Software\Classes\Installer\Features\F5169029E67260446870FDB2C3F9F043
Delete HKCU\Software\Classes\Installer\Features\F5169029E67260446870FDB2C3F9F043
Total references deleted = 0

Remove Windows Installer Information for Norton Personal Firewall 3.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\FE85EACCC1157D44182F3D82670AE4AE
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CCAE58EF-511C-44D7-81F2-D32876A04EEA}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\FE85EACCC1157D44182F3D82670AE4AE
Delete HKCU\Software\Microsoft\Installer\Products\FE85EACCC1157D44182F3D82670AE4AE
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\FE85EACCC1157D44182F3D82670AE4AE
Delete HKCU\Software\Microsoft\Installer\Features\FE85EACCC1157D44182F3D82670AE4AE
Delete HKLM\Software\Classes\Installer\Products\FE85EACCC1157D44182F3D82670AE4AE
Delete HKCU\Software\Classes\Installer\Products\FE85EACCC1157D44182F3D82670AE4AE
Delete HKLM\Software\Classes\Installer\Features\FE85EACCC1157D44182F3D82670AE4AE
Delete HKCU\Software\Classes\Installer\Features\FE85EACCC1157D44182F3D82670AE4AE
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security 3.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\0AE19EA04D389B94DA7F7B967F0D194A
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0AE91EA0-83D4-49B9-ADF7-B769F7D091A4}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\0AE19EA04D389B94DA7F7B967F0D194A
Delete HKCU\Software\Microsoft\Installer\Products\0AE19EA04D389B94DA7F7B967F0D194A
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\0AE19EA04D389B94DA7F7B967F0D194A
Delete HKCU\Software\Microsoft\Installer\Features\0AE19EA04D389B94DA7F7B967F0D194A
Delete HKLM\Software\Classes\Installer\Products\0AE19EA04D389B94DA7F7B967F0D194A
Delete HKCU\Software\Classes\Installer\Products\0AE19EA04D389B94DA7F7B967F0D194A
Delete HKLM\Software\Classes\Installer\Features\0AE19EA04D389B94DA7F7B967F0D194A
Delete HKCU\Software\Classes\Installer\Features\0AE19EA04D389B94DA7F7B967F0D194A
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security Family Edition 3.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\3F1CC71D52CF6B14F9F98692B5E471B7
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D17CC1F3-FC25-41B6-9F9F-68295B4E177B}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\3F1CC71D52CF6B14F9F98692B5E471B7
Delete HKCU\Software\Microsoft\Installer\Products\3F1CC71D52CF6B14F9F98692B5E471B7
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\3F1CC71D52CF6B14F9F98692B5E471B7
Delete HKCU\Software\Microsoft\Installer\Features\3F1CC71D52CF6B14F9F98692B5E471B7
Delete HKLM\Software\Classes\Installer\Products\3F1CC71D52CF6B14F9F98692B5E471B7
Delete HKCU\Software\Classes\Installer\Products\3F1CC71D52CF6B14F9F98692B5E471B7
Delete HKLM\Software\Classes\Installer\Features\3F1CC71D52CF6B14F9F98692B5E471B7
Delete HKCU\Software\Classes\Installer\Features\3F1CC71D52CF6B14F9F98692B5E471B7
Total references deleted = 0

Remove Windows Installer Information for Norton Personal Firewall 4.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\CADB45D1263C94845BF2183491FC0575
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D54BDAC-C362-4849-B52F-814319CF5057}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\CADB45D1263C94845BF2183491FC0575
Delete HKCU\Software\Microsoft\Installer\Products\CADB45D1263C94845BF2183491FC0575
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\CADB45D1263C94845BF2183491FC0575
Delete HKCU\Software\Microsoft\Installer\Features\CADB45D1263C94845BF2183491FC0575
Delete HKLM\Software\Classes\Installer\Products\CADB45D1263C94845BF2183491FC0575
Delete HKCU\Software\Classes\Installer\Products\CADB45D1263C94845BF2183491FC0575
Delete HKLM\Software\Classes\Installer\Features\CADB45D1263C94845BF2183491FC0575
Delete HKCU\Software\Classes\Installer\Features\CADB45D1263C94845BF2183491FC0575
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security 4.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\3DD30D179D6C30541ACCBF5A676FFC3E
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{71D03DD3-C6D9-4503-A1CC-FBA576F6CFE3}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\3DD30D179D6C30541ACCBF5A676FFC3E
Delete HKCU\Software\Microsoft\Installer\Products\3DD30D179D6C30541ACCBF5A676FFC3E
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\3DD30D179D6C30541ACCBF5A676FFC3E
Delete HKCU\Software\Microsoft\Installer\Features\3DD30D179D6C30541ACCBF5A676FFC3E
Delete HKLM\Software\Classes\Installer\Products\3DD30D179D6C30541ACCBF5A676FFC3E
Delete HKCU\Software\Classes\Installer\Products\3DD30D179D6C30541ACCBF5A676FFC3E
Delete HKLM\Software\Classes\Installer\Features\3DD30D179D6C30541ACCBF5A676FFC3E
Delete HKCU\Software\Classes\Installer\Features\3DD30D179D6C30541ACCBF5A676FFC3E
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security Professional 4.5
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\648FAA2753C319344995CCB7E67C0EA7
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{72AAF846-3C35-4391-9459-CC7B6EC7E07A}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\648FAA2753C319344995CCB7E67C0EA7
Delete HKCU\Software\Microsoft\Installer\Products\648FAA2753C319344995CCB7E67C0EA7
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\648FAA2753C319344995CCB7E67C0EA7
Delete HKCU\Software\Microsoft\Installer\Features\648FAA2753C319344995CCB7E67C0EA7
Delete HKLM\Software\Classes\Installer\Products\648FAA2753C319344995CCB7E67C0EA7
Delete HKCU\Software\Classes\Installer\Products\648FAA2753C319344995CCB7E67C0EA7
Delete HKLM\Software\Classes\Installer\Features\648FAA2753C319344995CCB7E67C0EA7
Delete HKCU\Software\Classes\Installer\Features\648FAA2753C319344995CCB7E67C0EA7
Total references deleted = 0

Remove Windows Installer Information for Norton Personal Firewall 6.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\8ECEFB51001A16849BB2E1FF6786C332
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{15BFECE8-A100-4861-B92B-1EFF76683C23}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\8ECEFB51001A16849BB2E1FF6786C332
Delete HKCU\Software\Microsoft\Installer\Products\8ECEFB51001A16849BB2E1FF6786C332
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\8ECEFB51001A16849BB2E1FF6786C332
Delete HKCU\Software\Microsoft\Installer\Features\8ECEFB51001A16849BB2E1FF6786C332
Delete HKLM\Software\Classes\Installer\Products\8ECEFB51001A16849BB2E1FF6786C332
Delete HKCU\Software\Classes\Installer\Products\8ECEFB51001A16849BB2E1FF6786C332
Delete HKLM\Software\Classes\Installer\Features\8ECEFB51001A16849BB2E1FF6786C332
Delete HKCU\Software\Classes\Installer\Features\8ECEFB51001A16849BB2E1FF6786C332
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security 6.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\5B5C2DFA87FB6B7459965745840C0DEE
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AFD2C5B5-BF78-47B6-9569-755448C0D0EE}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\5B5C2DFA87FB6B7459965745840C0DEE
Delete HKCU\Software\Microsoft\Installer\Products\5B5C2DFA87FB6B7459965745840C0DEE
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\5B5C2DFA87FB6B7459965745840C0DEE
Delete HKCU\Software\Microsoft\Installer\Features\5B5C2DFA87FB6B7459965745840C0DEE
Delete HKLM\Software\Classes\Installer\Products\5B5C2DFA87FB6B7459965745840C0DEE
Delete HKCU\Software\Classes\Installer\Products\5B5C2DFA87FB6B7459965745840C0DEE
Delete HKLM\Software\Classes\Installer\Features\5B5C2DFA87FB6B7459965745840C0DEE
Delete HKCU\Software\Classes\Installer\Features\5B5C2DFA87FB6B7459965745840C0DEE
Total references deleted = 0

Remove Windows Installer Information for Norton Internet Security Professional 6.0
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\LocalPackages\ABB5FD392992F2841BD11920E78CCAD7
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{93DF5BBA-2992-482F-B11D-91027EC8AC7D}
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\ABB5FD392992F2841BD11920E78CCAD7
Delete HKCU\Software\Microsoft\Installer\Products\ABB5FD392992F2841BD11920E78CCAD7
Delete HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\ABB5FD392992F2841BD11920E78CCAD7
Delete HKCU\Software\Microsoft\Installer\Features\ABB5FD392992F2841BD11920E78CCAD7
Delete HKLM\Software\Classes\Installer\Products\ABB5FD392992F2841BD11920E78CCAD7
Delete HKCU\Software\Classes\Installer\Products\ABB5FD392992F2841BD11920E78CCAD7
Delete HKLM\Software\Classes\Installer\Features\ABB5FD392992F2841BD11920E78CCAD7
Delete HKCU\Software\Classes\Installer\Features\ABB5FD392992F2841BD11920E78CCAD7
Total references deleted = 0


LIVEUPDATE
Unregister {8BBAA23E-A16C-4899-B3BD-CA5FE6A07011}  with LiveUpdate
Unregister {A0B7DE31-6FB5-4e1f-8F82-F1E5E9F968EB}  with LiveUpdate
Unregister {BAAFC3EB-C2A9-4572-983A-54D1FFC75B18}  with LiveUpdate
Unregister {C0DA9CA0-758C-11d3-9778-005004D12CC3}  with LiveUpdate
Unregister {C0DA9CA1-758C-11d3-9778-005004D12CC3}  with LiveUpdate
Unregister {C0DA9CA2-758C-11d3-9778-005004D12CC3}  with LiveUpdate
Unregister {C0DA9CA3-758C-11d3-9778-005004D12CC3}  with LiveUpdate
Unregister {2A4E728E-ECD1-4ec8-A451-2D719C7EEF10}  with LiveUpdate
Unregister {5911B56B-54AA-4678-9933-9413CB93B23C}  with LiveUpdate
Unregister {6E34DCC1-B194-11d2-A11E-00409500AD7D}  with LiveUpdate
Unregister {DC4CC242-AB75-4bfe-A51E-4CE500ADD552}  with LiveUpdate
Unregister {94014D45-7F26-48ca-9CE5-79E39A01A6A6}  with LiveUpdate

LIVESUBSCRIBE
Failed to Unload LiveReg on Uninstall
Unregister B211DA60-6B70-11d3-9775-005004D12CC3 with LiveSubscribe

SERVICE DEPENDENCIES
Removing SymEvent IDs
SymEvent ID not found: SymNetDrv

SERVICES

REGISTRY KEYS
Delete Software\Symantec\IAM
Delete Software\Symantec\IAM.tmp
Delete Software\Symantec\IAM.old
Delete Software\Symantec\SymReg
Delete Software\Symantec\ccReg
Delete Software\Symantec\CommonClient

COM SERVERS AND FILE EXTENSIONS

SHORTCUTS
File doesn't exist: C:\Documents and Settings\All Users\Bureau\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Bureau\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\ASPNET\Bureau\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Bureau\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\HelpAssistant\Bureau\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\Invit‚\Bureau\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Bureau\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Bureau\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\ASPNET\Menu Démarrer\Programmes\Démarrage\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Menu Démarrer\Programmes\Démarrage\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\HelpAssistant\Menu Démarrer\Programmes\Démarrage\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\Invit‚\Menu Démarrer\Programmes\Démarrage\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Menu Démarrer\Programmes\Démarrage\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Menu Démarrer\Programmes\Démarrage\Norton Internet Security.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Norton Internet Security
File doesn't exist: C:\Documents and Settings\ASPNET\Menu Démarrer\Programmes\Norton Internet Security
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Menu Démarrer\Programmes\Norton Internet Security
File doesn't exist: C:\Documents and Settings\HelpAssistant\Menu Démarrer\Programmes\Norton Internet Security
File doesn't exist: C:\Documents and Settings\Invit‚\Menu Démarrer\Programmes\Norton Internet Security
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Menu Démarrer\Programmes\Norton Internet Security
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Menu Démarrer\Programmes\Norton Internet Security
File doesn't exist: C:\Documents and Settings\All Users\Bureau\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Bureau\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\ASPNET\Bureau\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Bureau\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\HelpAssistant\Bureau\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\Invit‚\Bureau\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Bureau\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Bureau\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\ASPNET\Menu Démarrer\Programmes\Démarrage\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Menu Démarrer\Programmes\Démarrage\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\HelpAssistant\Menu Démarrer\Programmes\Démarrage\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\Invit‚\Menu Démarrer\Programmes\Démarrage\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Menu Démarrer\Programmes\Démarrage\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Menu Démarrer\Programmes\Démarrage\Norton Personal Firewall.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Norton Personal Firewall
File doesn't exist: C:\Documents and Settings\ASPNET\Menu Démarrer\Programmes\Norton Personal Firewall
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Menu Démarrer\Programmes\Norton Personal Firewall
File doesn't exist: C:\Documents and Settings\HelpAssistant\Menu Démarrer\Programmes\Norton Personal Firewall
File doesn't exist: C:\Documents and Settings\Invit‚\Menu Démarrer\Programmes\Norton Personal Firewall
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Menu Démarrer\Programmes\Norton Personal Firewall
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Menu Démarrer\Programmes\Norton Personal Firewall
File doesn't exist: C:\Documents and Settings\All Users\Bureau\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Bureau\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\ASPNET\Bureau\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Bureau\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\HelpAssistant\Bureau\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\Invit‚\Bureau\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Bureau\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Bureau\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\ASPNET\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\HelpAssistant\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\Invit‚\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Family Edition.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Norton Internet Security Family Edition
File doesn't exist: C:\Documents and Settings\ASPNET\Menu Démarrer\Programmes\Norton Internet Security Family Edition
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Menu Démarrer\Programmes\Norton Internet Security Family Edition
File doesn't exist: C:\Documents and Settings\HelpAssistant\Menu Démarrer\Programmes\Norton Internet Security Family Edition
File doesn't exist: C:\Documents and Settings\Invit‚\Menu Démarrer\Programmes\Norton Internet Security Family Edition
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Menu Démarrer\Programmes\Norton Internet Security Family Edition
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Menu Démarrer\Programmes\Norton Internet Security Family Edition
File doesn't exist: C:\Documents and Settings\All Users\Bureau\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Bureau\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\ASPNET\Bureau\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Bureau\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\HelpAssistant\Bureau\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\Invit‚\Bureau\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Bureau\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Bureau\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\ASPNET\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\HelpAssistant\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\Invit‚\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Menu Démarrer\Programmes\Démarrage\Norton Internet Security Professional.lnk
File doesn't exist: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Norton Internet Security Professional
File doesn't exist: C:\Documents and Settings\ASPNET\Menu Démarrer\Programmes\Norton Internet Security Professional
File doesn't exist: C:\Documents and Settings\Compaq_Propri‚taire\Menu Démarrer\Programmes\Norton Internet Security Professional
File doesn't exist: C:\Documents and Settings\HelpAssistant\Menu Démarrer\Programmes\Norton Internet Security Professional
File doesn't exist: C:\Documents and Settings\Invit‚\Menu Démarrer\Programmes\Norton Internet Security Professional
File doesn't exist: C:\Documents and Settings\SUPPORT_388945a0\Menu Démarrer\Programmes\Norton Internet Security Professional
File doesn't exist: C:\Documents and Settings\SUPPORT_fddfa904\Menu Démarrer\Programmes\Norton Internet Security Professional

FILES AND DIRECTORIES
File doesn't exist: C:\WINDOWS\system32\SYMNDIS.sys
File doesn't exist: C:\WINDOWS\system32\SYMFW.sys
File doesn't exist: C:\WINDOWS\system32\NDISFILT.sys
File doesn't exist: C:\WINDOWS\system32\FWFILT.sys
File doesn't exist: C:\WINDOWS\system32\DNSFILT.sys
File doesn't exist: C:\WINDOWS\system32\HTTPFILT.sys
File doesn't exist: C:\WINDOWS\system32\drivers\NDISFILT.sys
File doesn't exist: C:\WINDOWS\system32\drivers\FWFILT.sys
File doesn't exist: C:\WINDOWS\system32\drivers\DNSFILT.sys
File doesn't exist: C:\WINDOWS\system32\drivers\HTTPFILT.sys
File doesn't exist: C:\WINDOWS\system32\drivers\SymIDSCo.sys
File doesn't exist: C:\WINDOWS\system32\sr.dat
File doesn't exist: C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\deleteme.bat
File doesn't exist: C:\WINDOWS	emp\deleteme.bat
File doesn't exist: C:\WINDOWS\system32\SYMTDI.sys
File doesn't exist: C:\WINDOWS\system32\SYMDNS.sys
File doesn't exist: C:\WINDOWS\system32\drivers\SYMDNS.sys
File doesn't exist: C:\WINDOWS\system32\drivers\SYMFW.sys
File doesn't exist: C:\WINDOWS\system32\drivers\SymIDS.sys
File doesn't exist: C:\WINDOWS\system32\drivers\SYMNDIS.sys
File doesn't exist: C:\WINDOWS\system32\drivers\SYMREDIR.INF
File doesn't exist: C:\WINDOWS\system32\drivers\SYMREDIR.CAT
File doesn't exist: C:\WINDOWS\system32\drivers\SYMREDRV.SYS
File doesn't exist: C:\WINDOWS\system32\drivers\SYMREDIR.DLL
File doesn't exist: C:\WINDOWS\system32\drivers\SYMTDI.sys
File doesn't exist: C:\WINDOWS\system32\sr2.dat
File doesn't exist: C:\WINDOWS\system32\SymNeti.dll
File doesn't exist: C:\WINDOWS\system32\SYMREDIR.DLL
File doesn't exist: C:\WINDOWS\system32\SYMREDIR.DLL
File doesn't exist: C:\WINDOWS\system32\SymTdiRg.exe
File doesn't exist: %SYMC_SRD%\Default.rul
File doesn't exist: %SYMC_SRD%\Persist.dat
File doesn't exist: C:\WINDOWS\system32\ccTrust.dll
File doesn't exist: C:\WINDOWS\system32\ccPasswd.dll
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient
File doesn't exist: CommonClient

Donssier mav_log:

NAV AGENT
Stop CCApp
Stop CCEvtMgr

SERVICES

 Removing CC SERVICES

Deleted Uninstall key

Remove Norton AntiVirus Help

NORTON RESCUE (Win9x only)

Uninstall virusdefs

SYMEVENT
Symevent: no parameter in uninstall command

LIVEUPDATE
Unregister NAV with LiveUpdate
Unregister NAV with LiveUpdate

LiveReg

OFFICE PLUG-IN

SHELL EXTENSIONS (NAV 2002 only)

NAV REGISTRY KEYS
Delete HKLM\Software\Symantec\Norton AntiVirus
Delete HKLM\Software\Symantec\Norton AntiVirus NT

COM SERVERS AND FILE EXTENSIONS

SHORTCUTS
Decrementing shared dlls for CC 

CC FILES and REGISTRY KEYS
Delete HKLM\Software\Symantec\CommonClient
Delete HKLM\Software\Symantec\ccReg
Delete CC files in Symantec SharedDelete CC files in system directory.

HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 18:29:36, on 2007-07-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\ASSIST~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Accélérateur du service de base Sympatico\slipaccel.exe
C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?setlang=fr-CA&FORM=LTHP&mkt=en-ca&toHttps=1&redig=D6D8D433A98846CB9E77BF900682D2BE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [OM_Monitor] C:\Documents and Settings\Compaq_Propriétaire\Mes documents\FirstStart.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ASSIST~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [MotiveReportAgent] "C:\Program Files\Fichiers communs\Motive\McciBootStrapper.exe" /url="-url=file://C:\Program Files\Fichiers communs\Motive\ReportAgent.html" /browsertype=CustomMSIE /browserpath="C:\Program Files\Common Files\Motive\motivebrowser.exe" /hidden
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [OM_Monitor] C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Monitor.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Accélérateur du service de base.lnk = ?
O4 - Global Startup: Assistant Internet.lnk = C:\Program Files\Assistant Internet\bin\matcli.exe
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Unknown owner - c:\Program Files\Norton Internet Security\ISSVC.exe (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Unknown owner - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe (file missing)

raleuboleu · Answer

salut toi

je demande a 1 amie le bon moyen de désinstaller norton , je l'ai dans 1 truc mais le trouve pas grrrrrrrrrrrrrrrrr   

sinan utilise firefox pour surfer (ne pas virer internet explo surtout OKKKKKKKKKKKKKKKKKKKKKKKKK)

bizoux

Virus pop-up interminable..

64 réponses

Discussions similaires

Newsletters