Mon pc envoie des spams Résolu

Question

Bonjour,
mon fournisseur d'accès (TELE 2) m'a appelé ce soir pour me dire que mon pc envoie des spams ; il n'y a pas eu d'intervention avec eux car je n'étais pas chez moi. 
Si qq a une idée sur la question, car ils m'ont fixé RDV mais pas avant 2 jours...
J'ai bien remarqué que mon pc est parfois un peu lent à réagir, peut-être y-a-t-il une relation de cause à effet ?

NB : mon pc : Vaio VGN A417M ; Windows XP 2 ; IE 7 ; messagerie Outlook. Antivirus : Bitdefender 9 pro+ et  Spysweeper

D'avance merci à ceux ou celles d'entre vous qui pourront m'apporter un début de solution.

FillPCA · Answer

Bonjour,
Peux-tu éditer un rapport Hijackthis ?

http://pchelpbordeaux.free.fr/logiciels.html

Tutorial
http://pchelpbordeaux.free.fr/tuto.html

Démo en image
http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

Fais un scan et poste l'analyse.

FillPCA

frajophi · Answer

Bonsoir,
oui, voilà :

Logfile of HijackThis v1.99.1
Scan saved at 23:34:11, on 14/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
C:\progra~1\softwin\bitdef~1\bdnagent.exe
C:\progra~1\softwin\bitdef~1\bdswitch.exe
C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\lvcomsx.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Sony\VAIO Launcher\Launcher.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
c:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/?wa=wsignin1.0
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.0.1/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Apoint] "C:\Program Files\Apoint\Apoint.exe"
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [SonyPowerCfg] "C:\Program Files\Sony\VAIO Power Management\SPMgr.exe"
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [BDMCon] c:\progra~1\softwin\bitdef~1\bdmcon.exe
O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "c:\progra~1\softwin\bitdef~1\bdnagent.exe"
O4 - HKLM\..\Run: [VAIO Update 3] "C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe"  /Stationary
O4 - HKLM\..\Run: [LogitechVideo[inspector]] "C:\Program Files\Logitech\Video\InstallHelper.exe" /inspect
O4 - HKLM\..\Run: [Switcher.exe] "C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "c:\progra~1\softwin\bitdef~1\bdswitch.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [PDService.exe] "C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe"
O4 - HKLM\..\Run: [LogitechCameraAssistant] "C:\Program Files\Logitech\Video\CameraAssistant.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: VAIO Launcher.lnk = C:\Program Files\Sony\VAIO Launcher\Launcher.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Transfert par Image Converter 2 - C:\Program Files\Sony\Image Converter 2\menu.htm
O8 - Extra context menu item: Télécharger en utilisant Download &Express - C:\Program Files\Download Express\Add_Url.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/
O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - https://www.zonealarm.com/
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} (VirginMega DownloadManager) - https://www.vm-wl.com/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - https://www.nordnet.com/securite
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - https://safe.tele2.com/inc/accounthelper.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam.asf.fr/AxisCamControl.ocx
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553563000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D28C3640-A6D7-4668-A53C-07A9CF67D157} (CFnacComposantCtrl Object) - http://www.fnacmusic.com/telechargementFnacmusic/FnacComposant.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: VESWinlogon - C:\WINDOWS\SYSTEM32\VESWinlogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Program Files\Sony\VAIO Entertainment\VzTaskScheduler.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing)
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)
O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
O23 - Service: Moteur Webroot Spy Sweeper (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

FillPCA · Answer

RE,

Rien de spécial ici :

1/
    *  Télécharge F-Secure Blacklight : https://europe.f-secure.com/exclude/blacklight/index.shtml
    * Sauvegarde le sur ton Bureau.
    * Double-clique fsbl.exe et accepte la licence ; clique Scan puis Next.
    * Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).
    * Copie et colle le contenu de ce rapport dans ta prochaine réponse.

2/     *  Télécharge GenProc (de Lazzzy et Narco4) sur ton bureau : http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip
    * Dézippe-le sur ton bureau (Clic droit>Extraire ici).
    * Double-clique sur GenProc.bat et édite le rapport généré par le programme.
    * Tu trouveras une aide en images ici : http://www.alt-shift-return.org/Info/GenProc-HowTo.html

FillPCA

frajophi · Answer

Voilà pour le premier point de ta réponse :

08/14/07 23:53:35 [Info]: BlackLight Engine 1.0.64 initialized
08/14/07 23:53:35 [Info]: OS: 5.1 build 2600 (Service Pack 2)
08/14/07 23:53:35 [Note]: 7019 4
08/14/07 23:53:35 [Note]: 7005 0
08/14/07 23:53:39 [Note]: 7006 0
08/14/07 23:53:39 [Note]: 7011 1548
08/14/07 23:53:39 [Note]: 7026 0
08/14/07 23:53:39 [Note]: 7026 0
08/14/07 23:53:42 [Note]: FSRAW library version 1.7.1022
08/14/07 23:57:13 [Note]: 7007 0

frajophi · Answer

et le deuxième point :

[1] Aucune infection caractéristique trouvée !

FillPCA · Answer

Re,

Plutôt encourageant, mais ça n'indique pas où est l'intrus.

1/ Télécharge Ccleaner Basic https://www.ccleaner.com/ccleaner/download

Ouvre Ccleaner, clique sur "lancer le nettoyage".

2/ Télécharge AVGantispyware : https://www.avg.com/en-ww/free-antivirus-download
Tu l'installes.
Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente.

Clique sur le bouton Analyse (de la barre d'outils)
Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas. Ensuite.
Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware. 

Edite ce rapport. Je l'éplucherai plutôt demain car la couette m'appelle.

FillPCA

frajophi · Answer

Voici :
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	09:22:42 15/08/2007

 + Résultat de l'analyse:	



:mozilla.145:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.148:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@divx.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@sevenloadgmbh.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@3.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@4.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@com[1].txt -> TrackingCookie.Com : Nettoyé.
:mozilla.104:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.137:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Masterstats : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@search.msn[2].txt -> TrackingCookie.Msn : Nettoyé.
C:\Documents and Settings\Franck\Cookies\franck@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.156:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.157:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@real[2].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@realguide.real[1].txt -> TrackingCookie.Real : Nettoyé.
:mozilla.105:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.106:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.107:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@specificclick[2].txt -> TrackingCookie.Specificclick : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@php.sales.tfag[1].txt -> TrackingCookie.Tfag : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@sales.tfag[1].txt -> TrackingCookie.Tfag : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.112:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.120:C:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Kcnarf\Cookies\kcnarf@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.


Fin du rapport

FillPCA · Answer

Bonjour,

1/    *  Télécharge DiagHelp.zip sur ton bureau(Merci Malekal): http://www.malekal.com/download/DiagHelp.zip
Tuto : http://www.malekal.com/DiagHelp/DiagHelp.php
    * Ne double-clique pas dessus !! Fais un clic droit sur le fichier et extraire tout.
    * Un nouveau dossier chercher va être créé.
    * Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
    * Une fenêtre va s'ouvrir, choisis l'option 1
    * L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande.
    * A la fin de l'analyse, le programme de dmeande de redémarrer ton PC. Fais-le.
    * Une fenêtre avec le rapport s'ouvre alors. Copie/colle son contenu. (Il se trouve aussi ici : c:\resultat.txt)
    * Double-clique sur ce fichier, Fais CTRL+A puis CTRL+C.
    * Dans ta prochaine réponse, colle le rapport en faisant CTRL+V.

2/     *  Télécharge SREng (de Smallfrogs) : http://www.kztechs.com/eng/download.html
    * Dézippe tout son contenu sur ton bureau (clic droit >Extraire ici).
    * Ouvre le dossier SReng2 et double-clique sur SREng.exe.
    * Clique sur "smart scan".
    * Clique sur le bouton "scan".
    * Quand l'analyse est terminée, clique sur le bouton "save reports".
    * Sauvegarde alors le rapport sur ton bureau.
    * Copie/colle le contenu du rapport  SREnglLOG.log dans ta prochaine réponse.

Je ne pourrai sans doute examiner cela qu'en soirée.

FillPCA

frajophi · Answer

Bonjour, je ne sais pas si j'ai bien fait ce que tu me demandais, mais pour le point 1/ je n'ai pas eu a redémarrer mon pc : le résultat ci dessous s'est affiché automatiquement dans un fichier bloc note ; le voici : DiagHelp version v1.1.2 - http://www.malekal.com excute le 15/08/2007 à 12:17:32,25 Liste des derniers fichies modifies/crees dans windir\system32 C:\WINDOWS\System32/drivers\sskbfd.sys -->19/07/2007 22:42:36 C:\WINDOWS\System32/drivers\ssidrv.sys -->19/07/2007 22:42:36 C:\WINDOWS\System32/drivers\sshrmd.sys -->19/07/2007 22:42:36 C:\WINDOWS\System32/drivers\SSFS0BB8.sys -->19/07/2007 22:42:36 C:\WINDOWS\System32/drivers\AvgAsCln.sys -->30/05/2007 14:10:42 C:\WINDOWS\System32/drivers\lvuvc.hs -->29/04/2007 00:16:02 C:\WINDOWS\System32/drivers\update.sys -->23/04/2007 12:32:54 C:\WINDOWS\System32\bdod.bin -->15/08/2007 12:16:31 C:\WINDOWS\System32\wpa.dbl -->15/08/2007 12:04:46 C:\WINDOWS\System32\getfile.dat -->15/08/2007 10:44:26 C:\WINDOWS\System32\MRT.exe -->03/08/2007 06:34:10 C:\WINDOWS\System32\wrlzma.dll -->19/07/2007 22:42:36 C:\WINDOWS\System32\WRLogonNtf.dll -->19/07/2007 22:42:36 C:\WINDOWS\System32\ssiefr.EXE -->19/07/2007 22:42:36 C:\WINDOWS\System32\mshtml.dll -->19/07/2007 08:58:09 C:\WINDOWS\System32 moc3260.dll -->13/07/2007 22:37:32 C:\WINDOWS\System32\pndx5032.dll -->13/07/2007 22:36:57 C:\WINDOWS\System32\pndx5016.dll -->13/07/2007 22:36:57 C:\WINDOWS\System32\pncrt.dll -->13/07/2007 22:36:38 C:\WINDOWS\System32\livesnth.dll -->13/07/2007 22:32:16 C:\WINDOWS\System32\large.bnk -->13/07/2007 22:32:16 C:\WINDOWS\System32\clrviddc.dll -->13/07/2007 22:32:15 C:\WINDOWS\System32\cf_lic.txt -->13/07/2007 22:32:15 C:\WINDOWS\System32\perfh00C.dat -->11/07/2007 08:47:36 C:\WINDOWS\System32\perfh009.dat -->11/07/2007 08:47:36 C:\WINDOWS\System32\perfc00C.dat -->11/07/2007 08:47:36 C:\WINDOWS\System32\perfc009.dat -->11/07/2007 08:47:36 C:\WINDOWS\System32\PerfStringBackup.INI -->11/07/2007 08:47:35 C:\WINDOWS\System32\FNTCACHE.DAT -->10/07/2007 23:56:18 C:\WINDOWS\System32\dsm_fr.qm -->02/07/2007 21:41:16 C:\WINDOWS\System32\divxsm.tlb -->02/07/2007 21:41:16 C:\WINDOWS\System32\DivXsm.exe -->02/07/2007 21:41:16 C:\WINDOWS\QTFont.qfn -->15/08/2007 12:05:11 C:\WINDOWS\WindowsUpdate.log -->15/08/2007 12:01:58 C:\WINDOWS\0.log -->15/08/2007 12:01:32 C:\WINDOWS\wiadebug.log -->15/08/2007 12:00:56 C:\WINDOWS\spupdsvc.log -->15/08/2007 12:00:55 C:\WINDOWS\wiaservc.log -->15/08/2007 12:00:54 C:\WINDOWS\bootstat.dat -->15/08/2007 12:00:31 C:\WINDOWS\SchedLgU.Txt -->15/08/2007 11:59:06 C:\WINDOWS\win.ini -->15/08/2007 10:44:26 C:\WINDOWS soc.log -->15/08/2007 10:04:18 C:\WINDOWS\ocmsn.log -->15/08/2007 10:04:18 C:\WINDOWS\ocgen.log -->15/08/2007 10:04:18 C:\WINDOWS tdtcsetup.log -->15/08/2007 10:04:18 C:\WINDOWS\msgsocm.log -->15/08/2007 10:04:18 C:\WINDOWS\KB936021.log -->15/08/2007 10:04:18 Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\WINDOWS\system 10/09/1999 13:06 4 672 wowpost.exe 1 fichier(s) 4 672 octets 0 Rép(s) 14 971 678 720 octets libres Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\WINDOWS\system32 05/08/2004 14:00 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 14 971 678 720 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\WINDOWS\Downloaded Program Files 11/07/2007 22:26 . 11/07/2007 22:26 .. 31/07/2006 11:52 51 200 Account.dll 31/07/2006 11:51 216 Account.inf 19/02/2007 00:52 181 136 AxisCamControl.ocx 07/01/2004 16:35 1 134 Cult.inf 07/03/2005 16:01 65 desktop.ini 23/03/2007 12:17 1 292 erma.inf 06/09/2004 12:21 110 592 FnacComposant.dll 28/12/2004 17:14 652 736 fscax.dll 16/05/2007 08:22 399 gp.inf 07/10/2006 11:36 1 746 680 ICSScan.dll 07/10/2006 09:14 471 ICSScanner.inf 08/08/2006 12:45 576 kavwebscan.inf 27/10/2004 14:10 111 752 LSSupCtl.dll 27/10/2004 14:03 302 LSSupCtl.inf 20/06/2006 15:44 379 704 MsnPUpld.dll 19/06/2006 14:40 393 MsnPUpld.inf 25/04/2007 09:14 1 461 MusicManager.inf 25/05/2007 13:49 91 728 MusicManagerInstaller.dll 25/05/2007 13:49 501 328 MusicManagerLib.dll 25/05/2007 13:49 263 760 MusicManagerPlaylist.dll 25/05/2007 13:49 1 099 448 MusicManagerPlugin.ocx 25/05/2007 13:49 63 056 MusicManagerUnInstaller.exe 25/05/2007 13:49 63 056 MusicManagerUnInstaller.od2 18/05/2007 12:41 157 264 OD2hpb.dll 29/06/2005 17:17 227 opuc.inf 20/06/2006 15:44 117 560 PURen-us.dll 09/01/2007 08:30 110 592 PURfr-fr.dll 03/06/2002 17:53 144 QTPlugin.inf 08/03/2005 13:26 202 setup.inf 09/11/2006 15:36 5 019 swflash.inf 30 fichier(s) 5 713 493 octets Total des fichiers listés : 30 fichier(s) 5 713 493 octets 2 Rép(s) 14 971 674 624 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Export des clefs sensibles.. Liste des fichiers en exception sur le pare-feu XP SP2 "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Yahoo!\Messenger\YPager.exe"="C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger" "C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server" "C:\Program Files\Fichiers communs\SmartCom\RTEGPRS.exe"="C:\Program Files\Fichiers communs\SmartCom\RTEGPRS.exe:*:Enabled:WellPhone" "C:\Program Files\Sony\VAIO Media 4.0\Vc.exe"="C:\Program Files\Sony\VAIO Media 4.0\Vc.exe:*:Enabled:[VAIO Media] VAIO Media" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:Windows Media Player" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" Export de la clef SharedTaskScheduler [SharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant" Rechercher adresses sensibles dans le fichier HOSTS... catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-08-15 12:20:06 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Keys\00014a276d45] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Keys\080046eafb17] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\00014a276d45] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\080046eafb17] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00014a276d45] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\080046eafb17] scanning hidden registry entries ... [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{17E2BAFE-5B3A-F07C-6B91-870F6B44DFA0}] "iapoclohiddgggacpj"=hex:6b,61,6b,6a,70,70,70,62,70,6c,6c,6a,66,6f,69,66,66,62,6b,67,62,.. "japhgignopkbbnmhkajb"=hex:62,61,6c,6a,00,f8 "japhgignopkbbnmhkafe"=hex:62,61,6c,6a,00,f8 "hafhijcnjlpbgnah"=hex:6b,61,6b,6a,70,70,70,62,6b,6b,6e,6a,65,70,6d,64,62,6b,6c,6b,70,.. scanning hidden files ... scan completed successfully hidden files: 0 KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Process list by traversal of KiWaitListHead 4 - System 240 - VCSW.exe 348 - livesrv.exe 496 - SpySweeper.exe 784 - GoogleToolbarNo 808 - xcommsvr.exe 828 - csrss.exe 856 - winlogon.exe 900 - services.exe 912 - lsass.exe 960 - svchost.exe 1048 - bdoesrv.exe 1072 - svchost.exe 1100 - apdproxy.exe 1144 - svchost.exe 1212 - AppleMobileDevi 1232 - guard.exe 1268 - VzFw.exe 1288 - svchost.exe 1316 - VzCdbSvc.exe 1320 - EvtEng.exe 1404 - GoogleUpdaterSe 1420 - avgas.exe 1568 - sqlservr.exe 1704 - VESMgr.exe 1732 - bdss.exe 1936 - LVPrcSrv.exe 2168 - vsserv.exe 2264 - LVCOMSX.EXE 2392 - pdservice.exe 2600 - alg.exe 2676 - iPodService.exe 2840 - ctfmon.exe 2864 - Apoint.exe 2976 - cmd.exe 3040 - SPMgr.exe 3116 - ISBMgr.exe 3172 - svchost.exe 3304 - bdmcon.exe 3376 - bdnagent.exe 3504 - iexplore.exe 3656 - Launcher.exe 3676 - rundll32.exe 3852 - SpySweeperUI.ex 4052 - explorer.exe Total number of processes = 45 NOTE: Under WinXP, this will not show all processes. KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Driver/Module list by traversal of PsLoadedModuleList 804D7000 - \WINDOWS\system32 tkrnlpa.exe 806CE000 - \WINDOWS\system32\hal.dll F8B25000 - \WINDOWS\system32\KDCOM.DLL F8A35000 - \WINDOWS\system32\BOOTVID.dll F84F5000 - ACPI.sys F8B27000 - \WINDOWS\system32\DRIVERS\WMILIB.SYS F84E4000 - pci.sys F8625000 - isapnp.sys F8635000 - ohci1394.sys F8645000 - \WINDOWS\system32\DRIVERS\1394BUS.SYS F8655000 - SSHRMD.SYS F8665000 - SSFS0BB8.SYS F84B8000 - SSIDRV.SYS F848B000 - \WINDOWS\SYSTEM32\Drivers\NDIS.SYS F88A5000 - \WINDOWS\SYSTEM32\Drivers\TDI.SYS F8A39000 - compbatt.sys F8A3D000 - \WINDOWS\system32\DRIVERS\BATTC.SYS F8BED000 - pciide.sys F88AD000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS F8B29000 - intelide.sys F846D000 - pcmcia.sys F8675000 - MountMgr.sys F844E000 - ftdisk.sys F8A41000 - ACPIEC.sys F8BEE000 - \WINDOWS\system32\DRIVERS\OPRGHDLR.SYS F88B5000 - PartMgr.sys F8685000 - VolSnap.sys F8436000 - atapi.sys F8695000 - disk.sys F86A5000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS F8416000 - fltMgr.sys F8404000 - sr.sys F86B5000 - PxHelp20.sys F83ED000 - KSecDD.sys F8360000 - Ntfs.sys F8345000 - Mup.sys F8785000 - \SystemRoot\system32\DRIVERS\intelppm.sys F81F7000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys F81E3000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS F81BD000 - \SystemRoot\system32\DRIVERS\HDAudBus.sys F8935000 - \SystemRoot\system32\DRIVERS\usbuhci.sys F819A000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS F893D000 - \SystemRoot\system32\DRIVERS\usbehci.sys F8795000 - \SystemRoot\system32\DRIVERS ic1394.sys F8183000 - \SystemRoot\system32\drivers ifmsony.sys F7F68000 - \SystemRoot\system32\DRIVERS\w29n51.sys F7F56000 - \SystemRoot\system32\DRIVERS\Rtlnicxp.sys F87A5000 - \SystemRoot\system32\DRIVERS\i8042prt.sys F87B5000 - \SystemRoot\System32\Drivers\sskbfd.sys F8965000 - \SystemRoot\system32\DRIVERS\kbdclass.sys F7F3F000 - \SystemRoot\system32\DRIVERS\Apfiltr.sys F896D000 - \SystemRoot\system32\DRIVERS\mouclass.sys F8AE5000 - \SystemRoot\system32\DRIVERS\CmBatt.sys F87C5000 - \SystemRoot\system32\DRIVERS\SonyPI.sys F8975000 - \SystemRoot\System32\Drivers\SonyNC.sys F87D5000 - \SystemRoot\system32\DRIVERS\imapi.sys F87E5000 - \SystemRoot\system32\DRIVERS\cdrom.sys F87F5000 - \SystemRoot\system32\DRIVERS edbook.sys F7F1C000 - \SystemRoot\system32\DRIVERS\ks.sys F897D000 - \SystemRoot\System32\Drivers\GEARAspiWDM.sys F8B41000 - \SystemRoot\system32\DRIVERS\ATKACPI.sys F8B47000 - \SystemRoot\system32\DRIVERS\serscan.sys F8D15000 - \SystemRoot\system32\DRIVERS\audstub.sys F8865000 - \SystemRoot\system32\DRIVERS asl2tp.sys F8AF5000 - \SystemRoot\system32\DRIVERS distapi.sys F7C92000 - \SystemRoot\system32\DRIVERS diswan.sys F8875000 - \SystemRoot\system32\DRIVERS aspppoe.sys F8885000 - \SystemRoot\system32\DRIVERS aspptp.sys F7C81000 - \SystemRoot\system32\DRIVERS\psched.sys F8895000 - \SystemRoot\system32\DRIVERS\msgpc.sys F8985000 - \SystemRoot\system32\DRIVERS\ptilink.sys F898D000 - \SystemRoot\system32\DRIVERS aspti.sys F86E5000 - \SystemRoot\system32\DRIVERS ermdd.sys F8B5D000 - \SystemRoot\system32\DRIVERS\swenum.sys F7C00000 - \SystemRoot\system32\DRIVERS\update.sys F8B05000 - \SystemRoot\system32\DRIVERS\mssmbios.sys F8715000 - \SystemRoot\System32\Drivers\NDProxy.SYS EF978000 - \SystemRoot\system32\drivers\RtkHDAud.sys EF956000 - \SystemRoot\system32\drivers\portcls.sys F8735000 - \SystemRoot\system32\drivers\drmk.sys EF92E000 - \SystemRoot\system32\DRIVERS\HSFHWAZL.sys EF82F000 - \SystemRoot\system32\DRIVERS\HSF_DP.sys EF787000 - \SystemRoot\system32\DRIVERS\HSF_CNXT.sys F899D000 - \SystemRoot\System32\Drivers\Modem.SYS F8745000 - \SystemRoot\system32\DRIVERS\usbhub.sys F8B67000 - \SystemRoot\system32\DRIVERS\USBD.SYS F8B71000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS F8D50000 - \SystemRoot\System32\Drivers\Null.SYS F8B73000 - \SystemRoot\System32\Drivers\Beep.SYS F8D53000 - \SystemRoot\System32\DRIVERS\AvgAsCln.sys F89CD000 - \SystemRoot\System32\drivers\vga.sys F8B75000 - \SystemRoot\System32\Drivers\mnmdd.SYS F8B77000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys F89D5000 - \SystemRoot\System32\Drivers\Msfs.SYS F89DD000 - \SystemRoot\System32\Drivers\Npfs.SYS F8AC5000 - \SystemRoot\system32\DRIVERS asacd.sys EF68C000 - \SystemRoot\system32\DRIVERS\ipsec.sys EF634000 - \SystemRoot\system32\DRIVERS cpip.sys EF60C000 - \SystemRoot\system32\DRIVERS etbt.sys EF5EA000 - \SystemRoot\System32\drivers\afd.sys F8765000 - \SystemRoot\system32\DRIVERS etbios.sys EF5BF000 - \SystemRoot\system32\DRIVERS dbss.sys F8775000 - \SystemRoot\System32\Drivers\PrivateDiskM.sys EF528000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys F7D39000 - \SystemRoot\System32\Drivers\Fips.SYS EF507000 - \SystemRoot\system32\DRIVERS\ipnat.sys F7D29000 - \SystemRoot\system32\DRIVERS\wanarp.sys F7D19000 - \SystemRoot\system32\DRIVERS\arp1394.sys F8D5F000 - \SystemRoot\system32\DRIVERS\DMICall.sys F8D63000 - \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys F7C71000 - \SystemRoot\system32\DRIVERS\hidusb.sys F7CF9000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS F89ED000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS F7C69000 - \SystemRoot\system32\DRIVERS\mouhid.sys F7CD9000 - \SystemRoot\System32\Drivers\Cdfs.SYS EF4AB000 - \SystemRoot\System32\Drivers\dump_atapi.sys F8B93000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS BF800000 - \SystemRoot\System32\win32k.sys EF773000 - \SystemRoot\System32\drivers\Dxapi.sys F8A05000 - \SystemRoot\System32\watchdog.sys BF9C3000 - \SystemRoot\System32\drivers\dxg.sys F8CD4000 - \SystemRoot\System32\drivers\dxgthk.sys BF9D5000 - \SystemRoot\System32\ati2dvag.dll BFA11000 - \SystemRoot\System32\ati2cqag.dll BFA43000 - \SystemRoot\System32\atikvmag.dll BFA75000 - \SystemRoot\System32\ati3duag.dll BFCA6000 - \SystemRoot\System32\ativvaxx.dll F891D000 - \SystemRoot\system32\DRIVERS\AegisP.sys ED38F000 - \SystemRoot\system32\DRIVERS\s24trans.sys ED3BF000 - \SystemRoot\system32\DRIVERS disuio.sys ED01E000 - \SystemRoot\system32\DRIVERS\mrxdav.sys ED13F000 - \SystemRoot\System32\Drivers\Aspi32.SYS ED077000 - \SystemRoot\system32\DRIVERS\mdmxsdk.sys ECEDC000 - \SystemRoot\system32\DRIVERS\srv.sys ECCE7000 - \SystemRoot\system32\drivers\wdmaud.sys ECE2C000 - \SystemRoot\system32\drivers\sysaudio.sys F8A1D000 - \??\C:\WINDOWS\system32\drivers\LVPrcMon.sys F8B87000 - \??\C:\Program Files\Softwin\BitDefender9\bdfdll.sys ECB11000 - \??\C:\Program Files\Softwin\BitDefender9\bdfsdrv.sys EC971000 - \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys EC299000 - \SystemRoot\System32\Drivers\HTTP.sys BFFA0000 - \SystemRoot\System32\ATMFD.DLL F8D17000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys Total number of drivers = 143 Liste des programmes installes Acrobat Elements 6.0 - Français Adobe Flash Player ActiveX Adobe Photoshop Elements 3.0 Adobe Premiere Standard Adobe Reader 7.0.5 Language Support Adobe Reader 7.0.8 - Français Adobe Reader 7.0.9 - Français Adobe Shockwave Player Adobe SVG Viewer 3.0 Adobe® Photoshop® Album Edition Découverte 3.0 Apple Mobile Device Support Apple Software Update ATI - Utilitaire de désinstallation du logiciel ATI Control Panel ATI Display Driver ATK0100 ACPI UTILITY AutoUpdate AVG Anti-Spyware 7.5 BitDefender 9 Professional Plus CCleaner (remove only) CEI EVO plugin pack Click to DVD 2.0.03 Menu Data Click to DVD 2.4.12 Click to DVD 2.4.12 Click to DVD 2.5.32 DivX Codec DivX Content Uploader DivX Converter DivX Player DivX Web Player DVgate Plus Enquête sur les produits VAIO FBX SDK 2005.12a G-Force Google Earth Google Toolbar for Firefox Google Toolbar for Internet Explorer HDAUDIO SoftV92 Data Fax Modem with SmartCP HijackThis 1.99.1 Hijackthis Version Française Image Converter 2 Inscription en ligne VAIO (Français) InterVideo WinDVD for VAIO InterVideo WinDVDX iTunes J2SE Runtime Environment 5.0 Update 1 J2SE Runtime Environment 5.0 Update 6 Lecteur Windows Media 11 Logiciel Intel(R) PROSet/Wireless Logiciel QuickCam de Logitech Macromedia Flash Player mCore mDriver MediaBar Memory Stick Formatter MetaProducts Download Express Microsoft Money Microsoft Office Standard Edition 2003 Microsoft SQL Server Desktop Engine (VAIO_VEDB) Microsoft Works Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127) Mise à jour de sécurité pour Windows XP (KB921503) Mise à jour de sécurité pour Windows XP (KB936021) Mise à jour de sécurité pour Windows XP (KB938829) Mise à jour pour Windows XP (KB938828) mMHouse MoodLogic Mozilla Firefox (2.0.0.1) mPfMgr mProSafe MSN MSXML 4.0 SP2 (KB925672) MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) mWlsSafe mXML My Club VAIO OpenMG AAC Add-on Module 1.0.00 OpenMG AAC Add-on Module 1.0.00 OpenMG Limited Patch 4.5-06-05-12-01 OpenMG Secure Module 4.5.01 OpenMG Secure Module 4.5.01 Outil de mise à jour Google Outil VAIO Media Registration 4.0 PictureGear Studio 2.0 Programme de gestion Camera de Logitech Quick Zip 4.60.017b QuickTime RealPlayer Realtek High Definition Audio Driver SafeGuard® PrivateDisk 1.00.6 - Try and Buy Version Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Setting Utility Series Skype 3.2 Skype Plugin Manager Sonic RecordNow! SonicStage 4.0 SonicStage Mastering Studio 1.4 SonicStage Mastering Studio Audio Filter SonicStage Mastering Studio Audio Filter Custom Preset SonicStage Mastering Studio Plugins Sony MP4 Shared Library Sony USB Mouse Sony Utilities DLL Sony Video Shared Library SpeedUpMyPC Spelling Dictionaries For Adobe Reader Package Spy Sweeper TomTom HOME Uniblue Registry Booster Uninstall Tool VAIO Control Center VAIO Edit Components VAIO Entertainment Platform VAIO Event Service VAIO Fluid Wallpaper VAIO Launcher VAIO Light Flo Wallpaper VAIO Media 4.0 VAIO Media AC3 Decoder 1.0 VAIO Media Integrated Server 4.1 VAIO Media Redistribution 4.0 VAIO Original Screen Saver VAIO Motion HD Normal Contents VAIO Original Screen Saver VAIO Motion HD Wide Contents VAIO Original Screen Saver VAIO Motion SD Normal Contents VAIO Original Screen Saver VAIO Motion SD Wide Contents VAIO Original Screen Saver VAIO Scene HD Normal Contents VAIO Original Screen Saver VAIO Scene HD Wide Contents VAIO Original Screen Saver VAIO Scene SD Normal Contents VAIO Original Screen Saver VAIO Scene SD Wide Contents VAIO Original Screen Saver ver.1.1.01 VAIO Power Management VAIO Update 3 VAIO Zone VirginMega DownloadManager VOR VPS WebFldrs XP Windows Genuine Advantage Notifications (KB905474) Windows Live Messenger Windows Live Sign-in Assistant Windows Media Format 11 runtime Wireless LAN Starter Wireless Switch Setting Utility Xvid 1.1.2 final uninstall Yahoo! Install Manager Yahoo! Messenger Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\Program Files 15/08/2007 00:17 . 15/08/2007 00:17 .. 08/07/2007 01:01 Adobe 01/12/2006 15:24 Alwil Software 07/03/2005 16:56 Apoint 24/04/2007 00:15 Apple Software Update 07/03/2005 17:00 ATI Technologies 06/11/2006 00:42 Autodesk 14/12/2006 23:07 CCleaner 05/11/2006 13:24 CEI 07/03/2005 16:00 ComPlus Applications 07/03/2005 16:21 CONEXANT 12/07/2007 00:16 DivX 08/07/2007 01:03 Download Express 13/07/2007 22:38 Fichiers communs 28/10/2006 23:13 5 711 904 Firefox Setup 2.0.exe 27/04/2007 20:26 FlashPlayer 10/03/2007 00:41 Fnacmusic 08/07/2007 22:50 Google 15/08/2007 00:17 Grisoft 14/08/2007 23:36 Hijackthis Version Française 07/03/2005 17:36 Intel 15/08/2007 10:00 Internet Explorer 08/03/2005 11:44 InterVideo 08/07/2007 12:50 iPod 08/03/2005 11:42 ISP 08/07/2007 12:51 iTunes 29/09/2006 01:31 Java 10/04/2007 23:23 Juice 23/10/2006 22:14 LIUtilities 19/10/2006 12:02 Logitech 07/03/2005 17:11 Messenger 22/05/2007 15:19 Microsoft CAPICOM 2.1.0.2 07/03/2005 16:02 microsoft frontpage 28/09/2006 13:21 Microsoft Money 2005 22/12/2006 04:49 Microsoft Office 23/09/2006 16:30 Microsoft SQL Server 23/09/2006 16:37 Microsoft Works 26/09/2006 22:01 MoodLogic 23/09/2006 16:29 Moodlogic HTML 07/03/2005 16:00 Movie Maker 13/08/2007 23:23 Mozilla Firefox 29/09/2006 23:57 MSN 07/03/2005 15:59 MSN Gaming Zone 31/03/2007 15:53 MSN Messenger 14/10/2006 23:19 MSXML 4.0 07/03/2005 16:00 NetMeeting 24/09/2006 23:40 OfficeUpdate11 07/03/2005 15:59 Online Services 13/06/2007 00:20 Outlook Express 04/05/2007 22:44 QuickTime 16/12/2006 01:44 QuickZip4 24/04/2007 00:08 Raccourcis de programmes 29/09/2006 01:20 Real 07/03/2005 17:07 Realtek 29/09/2006 01:20 774 144 RngInterstitial.dll 07/03/2005 16:00 Services en ligne 29/06/2007 19:34 Skype 26/09/2006 14:00 SmartCom 30/11/2006 21:49 Softwin 23/09/2006 16:26 Sonic 22/02/2007 16:38 Sony 17/11/2006 23:04 SoundSpectrum 18/06/2007 23:44 Spybot - Search & Destroy 18/06/2007 19:56 TomTom HOME 06/11/2006 00:47 Totally Hip Products 27/02/2007 16:33 Uniblue 30/06/2007 10:24 Uninstall Tool 08/03/2005 11:50 Utimaco 04/03/2007 03:00 VirginMega 02/02/2007 15:19 VisualRoute 18/12/2006 23:58 Wanadoo 26/09/2006 22:36 Webroot 04/06/2007 00:26 Windows Live Toolbar 08/12/2006 02:33 Windows Media Connect 2 08/12/2006 02:33 Windows Media Player 07/03/2005 15:59 Windows NT 22/12/2006 00:05 WinZip 07/03/2005 16:02 xerox 16/02/2007 00:13 Xvid 08/03/2005 11:50 Yahoo HTML 19/04/2007 00:31 Yahoo! 08/03/2005 11:50 YahooMFU 2 fichier(s) 6 486 048 octets 81 Rép(s) 14 971 400 192 octets libres Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\Program Files\fichiers communs 13/07/2007 22:38 . 13/07/2007 22:38 .. 09/07/2007 23:21 Adobe 08/07/2007 11:43 Apple 23/09/2006 16:40 DESIGNER 08/03/2005 11:43 InstallShield 08/03/2005 11:40 Java 19/10/2006 12:32 Logitech 16/02/2007 21:54 Microsoft Shared 07/03/2005 16:00 MSSoap 10/04/2007 23:03 Nikon 07/03/2005 16:54 ODBC 29/06/2007 19:40 Real 07/03/2005 16:00 Services 29/06/2007 19:34 Skype 30/11/2006 21:49 Softwin 23/09/2006 16:31 Sony Shared 07/03/2005 16:54 SpeechEngines 24/09/2006 21:15 SWF Studio 30/11/2006 22:06 Symantec Shared 13/06/2007 00:20 System 22/12/2006 00:54 Wise Installation Wizard 13/07/2007 22:38 xing shared 0 fichier(s) 0 octets 23 Rép(s) 14 971 400 192 octets libres Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 23/09/2006 16:40 . 23/09/2006 16:40 .. 23/09/2006 16:40 1033 23/09/2006 16:40 1036 11/07/2003 10:15 1 292 872 MSONSEXT.DLL 15/07/2003 06:52 35 896 MSOSV.DLL 03/06/1999 13:09 122 937 MSOWS409.DLL 07/03/2001 08:00 127 033 MSOWS40c.DLL 11/07/2003 02:25 80 448 PKMWS.DLL 5 fichier(s) 1 659 186 octets 4 Rép(s) 14 971 404 288 octets libres Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\ 12/05/2007 18:22 68 096 diff.exe 12/05/2007 18:22 103 424 grep.exe 2 fichier(s) 171 520 octets 0 Rép(s) 14 971 400 192 octets libres c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.3.0.54\iTunesSetupAdmin.exe c:\Documents and Settings\All Users\Application Data\Google Updater\cache\installers_ci_ar_fr_8.1.0.137_setup_2007.06.04_14.04.24.exe c:\Documents and Settings\All Users\Application Data\Google Updater\cache\installers_ci_earth_en_4.0.2416.0_setup_2006.11.10_17.38.36.exe c:\Documents and Settings\All Users\Application Data\Google Updater\cache\installers_ci_earth_en_4.1.8000.0_setup_2007.06.19_16.26.06.exe c:\Documents and Settings\All Users\Application Data\Google Updater\cache\installers_ci_tb_fr_4.0.1020.6156_setup_2006.12.04_11.11.09.exe c:\Documents and Settings\All Users\Application Data\Sony Corporation\Click to DVD\2.0\HDDisc\SonyMpeg2tsSplitterInst\setup.exe c:\Documents and Settings\Franck\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_fr_FR.exe c:\Documents and Settings\Franck\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\ARPPRODUCTICON.exe c:\Documents and Settings\Franck\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe c:\Documents and Settings\Franck\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe c:\Documents and Settings\Franck\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\UNINST_Uninstall_G_3DE5E7D47B88403CA3FD2017A8240C5B.exe c:\Documents and Settings\Franck\Application Data\Microsoft\Installer\{88488F91-2C98-4B0B-90E9-44272B5C0168}\_2cd672ae.exe c:\Documents and Settings\Franck\Application Data\MSNInstaller\msnauins.exe c:\Documents and Settings\Franck\Application Data\sony\myclubvaio\sections\software\shows is.exe c:\Documents and Settings\Franck\Application Data\sony\myclubvaio\sections\software\shows pm.exe c:\Documents and Settings\Franck\Application Data\sony\myclubvaio\sections\software\shows\psp.exe c:\Documents and Settings\Franck\Application Data\sony\myclubvaio\sections\software\shows\YahooDE.exe c:\Documents and Settings\Franck\Application Data\sony\myclubvaio\sections\software\shows\YahooFR.exe c:\Documents and Settings\Franck\Application Data\sony\myclubvaio\sections\software\shows\YahooIT.exe c:\Documents and Settings\Franck\Application Data\sony\myclubvaio\sections\software\shows\YahooUK.exe c:\Documents and Settings\Franck\Application Data\U3 emp\cleanup.exe c:\Documents and Settings\Franck\Bureau\fsbl.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\catchme.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\diff.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\dumphive.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\find2.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\Fport.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\grep.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\KProcCheck.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\LFiles.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\LISTDLLS.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\pslist.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\streams.exe c:\Documents and Settings\Franck\Bureau\DiagHelp\swreg.exe c:\Documents and Settings\Franck\Bureau\GenProc\outil\swreg.exe c:\Documents and Settings\Franck\Local Settings\Temp\Div6A.tmp\DivXInstaller.exe c:\Documents and Settings\Franck\Local Settings\Temp\DivD4.tmp\PatchInstaller.exe c:\Documents and Settings\Franck\Local Settings\Temporary Internet Files\Content.IE5\OK1EI8T0\avgas-setup-7.5.1.43[1].exe c:\Documents and Settings\Kcnarf\Application Data\Real\RealPlayer\setup.exe c:\Documents and Settings\Kcnarf\Application Data\sony\myclubvaio\sections\software\shows is.exe c:\Documents and Settings\Kcnarf\Application Data\sony\myclubvaio\sections\software\shows pm.exe c:\Documents and Settings\Kcnarf\Application Data\sony\myclubvaio\sections\software\shows\psp.exe c:\Documents and Settings\Kcnarf\Application Data\sony\myclubvaio\sections\software\shows\YahooDE.exe c:\Documents and Settings\Kcnarf\Application Data\sony\myclubvaio\sections\software\shows\YahooFR.exe c:\Documents and Settings\Kcnarf\Application Data\sony\myclubvaio\sections\software\shows\YahooIT.exe c:\Documents and Settings\Kcnarf\Application Data\sony\myclubvaio\sections\software\shows\YahooUK.exe c:\Documents and Settings\Kcnarf\Application Data\U3 emp\cleanup.exe c:\Documents and Settings\Kcnarf\Local Settings\Temp\aax10.tmp.exe c:\Documents and Settings\Kcnarf\Local Settings\Temp\vso_image_resizer_setup.exe c:\Documents and Settings\Kcnarf\Local Settings\Temp\Div283.tmp\DivXInstaller.exe c:\Documents and Settings\Kcnarf\Local Settings\Temporary Internet Files\Content.IE5\38CWH0MB\vso_image_resizer_setup[1].exe c:\Documents and Settings\LocalService\Application Data\sony\myclubvaio\sections\software\shows is.exe c:\Documents and Settings\LocalService\Application Data\sony\myclubvaio\sections\software\shows pm.exe c:\Documents and Settings\LocalService\Application Data\sony\myclubvaio\sections\software\shows\psp.exe c:\Documents and Settings\LocalService\Application Data\sony\myclubvaio\sections\software\shows\YahooDE.exe c:\Documents and Settings\LocalService\Application Data\sony\myclubvaio\sections\software\shows\YahooFR.exe c:\Documents and Settings\LocalService\Application Data\sony\myclubvaio\sections\software\shows\YahooIT.exe c:\Documents and Settings\LocalService\Application Data\sony\myclubvaio\sections\software\shows\YahooUK.exe c:\Documents and Settings\All Users\Application Data\Grisoft\AVG Anti-Spyware 7.5\Downloads\help.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\Franck\Application Data\Mozilla\Firefox\Profiles\kijx4y8i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll c:\Documents and Settings\Franck\Application Data\Mozilla\Firefox\Profiles\kijx4y8i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll c:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll c:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll c:\Documents and Settings\Kcnarf\Application Data\Mozilla\Firefox\Profiles\fihs10f3.default\extensions\{D249FD00-4DF9-11D9-9FDC-0080481ADA61}\components\mpint.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll ****** Fin du rapport DiagHelp A plus tard pour le point 2/ ; merci, Frajophi.

frajophi · Answer

Bonsoir, voici les résultats suite au point 2. A noter : en lançant SREngPS, une fenêtre est apparu avec un msg d'alerte, que j'ai retrouvé plus tard : "Warning ! the AppInit_DLLs value in Registry has changed to a abnormalvalue (Default value is blank). Please check virus in your computer. " et voici la copie du rapport : [CODE] 2007-08-15,21:51:27 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Home Edition Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Publisher] [] <"C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1> [N/A] <"C:\Program Files\Logitech\Video\ManifestEngine.exe" boot> [N/A] [(Verified)Google Inc] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Apoint\Apoint.exe"> [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <"C:\Program Files\Sony\VAIO Power Management\SPMgr.exe"> [Sony Corporation] <"C:\Program Files\Sony\ISB Utility\ISBMgr.exe"> [Sony Corporation] [SOFTWIN S.R.L.] <"C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"> [SOFTWIN SRL] <"c:\progra~1\softwin\bitdef~1\bdnagent.exe"> [SOFTWIN S.R.L] <"C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe" /Stationary> [(Verified)Sony Corporation] <"C:\Program Files\Logitech\Video\InstallHelper.exe" /inspect> [Logitech Inc.] <"C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe"> [Sony Corporation] <"c:\progra~1\softwin\bitdef~1\bdswitch.exe"> [] <"C:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Inc.] <"C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"> [Adobe Systems Incorporated] <"C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe"> [Utimaco Safeware AG] <"C:\Program Files\Logitech\Video\CameraAssistant.exe"> [Logitech Inc.] [N/A] <"C:\Program Files\iTunes\iTunesHelper.exe"> [(Verified)"Apple Computer, Inc."] <"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [(Verified)GRISOFT LTD] <"C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray> [(Verified)"Webroot Software, Inc."] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon] [Sony Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WRNotifier] [(Verified)"Webroot Software, Inc."] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] ================================== Startup Folders [Adobe Gamma Loader] C:\PROGRA~1\FICHIE~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]> [Lancement rapide d'Adobe Reader] C:\PROGRA~1\Adobe\ACROBA~2.0\Reader\READER~1.EXE [Adobe Systems Incorporated]> [Outil de mise à jour Google] C:\PROGRA~1\Google\GOOGLE~3\GOOGLE~1.EXE [Google]> [VAIO Launcher] C:\PROGRA~1\Sony\VAIOLA~1\Launcher.exe [Sony Corporation]> ================================== Services [Adobe Active File Monitor / AdobeActiveFileMonitor][Stopped/Manual Start] [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [Gestion d'applications / AppMgmt][Stopped/Manual Start] %SystemRoot%\System32\appmgmts.dll> [Ati HotKey Poller / Ati HotKey Poller][Stopped/Disabled] [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start] [BitDefender Scan Server / bdss][Running/Auto Start] <"C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service> [Intel(R) PROSet/Wireless Event Log / EvtEng][Running/Auto Start] [Google Updater Service / gusvc][Running/Auto Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [InstallDriver Table Manager / IDriverT][Stopped/Disabled] <"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe"> [Image Converter video recording monitor for VAIO Entertainment / Image Converter video recording monitor for VAIO Entertainment][Stopped/Manual Start] [Service de l'iPod / iPod Service][Running/Manual Start] <"C:\Program Files\iPod\bin\iPodService.exe"> [BitDefender Desktop Update Service / LIVESRV][Running/Auto Start] <"C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service> [Logitech Process Monitor / LVPrcSrv][Running/Auto Start] [MSCSPTISRV / MSCSPTISRV][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe"> [MSSQL$VAIO_VEDB / MSSQL$VAIO_VEDB][Running/Auto Start] [MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start] [PACSPTISVR / PACSPTISVR][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe"> [Intel(R) PROSet/Wireless Registry Service / RegSrvc][Running/Auto Start] [Intel(R) PROSet/Wireless Service / S24EventMonitor][Running/Auto Start] [Sony SPTI Service / SPTISRV][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe"> [SQLAgent$VAIO_VEDB / SQLAgent$VAIO_VEDB][Stopped/Manual Start] [SonicStage SCSI Service / SSScsiSV][Stopped/Manual Start] [VAIO Entertainment Aggregation and Control Service / VAIO Entertainment Aggregation and Control Service][Running/Manual Start] <"C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe"> [VAIO Entertainment Task Scheduler / VAIO Entertainment Task Scheduler][Stopped/Manual Start] <"C:\Program Files\Sony\VAIO Entertainment\VzTaskScheduler.exe"> [VAIO Entertainment TV Device Arbitration Service / VAIO Entertainment TV Device Arbitration Service][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe"> [VAIO Event Service / VAIO Event Service][Running/Auto Start] [VAIO Media Integrated Server / VAIOMediaPlatform-IntegratedServer-AppServer][Stopped/Manual Start] [VAIO Media Integrated Server (HTTP) / VAIOMediaPlatform-IntegratedServer-HTTP][Stopped/Manual Start] <"C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP"> [VAIO Media Integrated Server (UPnP) / VAIOMediaPlatform-IntegratedServer-UPnP][Stopped/Manual Start] [VAIO Media Gateway Server / VAIOMediaPlatform-Mobile-Gateway][Stopped/Manual Start] <"C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server"> [VAIO Cooporated Initialisation / VCI][Stopped/Auto Start] [VAIO Entertainment UPnP Client Adapter / Vcsw][Running/Manual Start] [BitDefender Virus Shield / VSSERV][Running/Auto Start] <"C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service> [VAIO Entertainment Database Service / VzCdbSvc][Running/Auto Start] <"C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe"> [VAIO Entertainment File Import Service / VzFw][Running/Auto Start] [Moteur Webroot Spy Sweeper / WebrootSpySweeperService][Running/Auto Start] [BitDefender Communicator / XCOMM][Running/Auto Start] <"C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service> ================================== Drivers [AEGIS Protocol (IEEE 802.1x) v3.5.3.0 / AegisP][Running/Auto Start] [Alps Pointing-device Filter Driver / ApfiltrService][Running/Manual Start] [ati2mtag / ati2mtag][Running/Manual Start] [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start] <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys> [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start] [bdfdll / bdfdll][Running/Manual Start] <\??\C:\Program Files\Softwin\BitDefender9\bdfdll.sys> [BDFsDrv / BDFsDrv][Running/Manual Start] <\??\C:\Program Files\Softwin\BitDefender9\bdfsdrv.sys> [BDRsDrv / BDRsDrv][Running/Manual Start] <\??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys> [Sony DMI Call service / DMICall][Running/System Start] [FILESpy / FILESpy][Stopped/Auto Start] <\??\C:\Program Files\Softwin\BitDefender9\filespy.sys> [UVC Filter Service / FilterService][Stopped/Manual Start] [GEARAspiWDM / GEARAspiWDM][Running/Manual Start] [Pilote de bus Microsoft UAA pour High Definition Audio / HDAudBus][Running/Manual Start] [HSFHWAZL / HSFHWAZL][Running/Manual Start] [HSF_DP / HSF_DP][Running/Manual Start] [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] [Logitech Kernel Audio Processing Filter Driver / Lvckap][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\Lvckap.sys><> [Logitech Machine Vision Engine Loader / lvmvdrv][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\lvmvdrv.sys><> [Logitech LVPrcMon Driver / LVPrcMon][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\LVPrcMon.sys><> [Logitech USB Monitor Filter / LVUSBSta][Stopped/Manual Start] [Logitech QuickCam Pro 5000(UVC) / LVUVC][Stopped/Manual Start] [mdmxsdk / mdmxsdk][Running/Auto Start] [ATK0100 ACPI UTILITY / MTsensor][Running/Manual Start] <> [PCAMPR5 NDIS Protocol Driver / PCAMPR5][Stopped/Manual Start] <\??\C:\WINDOWS\system32\PCAMPR5.SYS> [PCANDIS5 NDIS Protocol Driver / PCANDIS5][Stopped/Manual Start] <\??\C:\WINDOWS\system32\PCANDIS5.SYS> [Mouse Suite Driver / pelmouse][Stopped/Manual Start] [USB Mouse Low Filter Driver / pelusblf][Stopped/Manual Start] [PrivateDisk / PrivateDisk][Running/System Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [REGSpy / REGSpy][Stopped/Auto Start] <\??\C:\Program Files\Softwin\BitDefender9 egspy.sys> [Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver / RTL8023xp][Running/Manual Start] [WLAN Transport / s24trans][Running/Auto Start] [Secdrv / Secdrv][Stopped/Manual Start] [Sony Notebook Control Device / SNC][Running/Manual Start] [Sony MPEG RR-Engine / SONYTVC][Stopped/Manual Start] [Sony Programmable I/O Control Device / SPI][Running/Manual Start] [Spy Sweeper File System Filer Driver: 0BB8 / SSFS0BB8][Running/Boot Start] <\SystemRoot\SYSTEM32\Drivers\SSFS0BB8.SYS> [Spy Sweeper Hookrack MiniDriver / SSHRMD][Running/Boot Start] <\SystemRoot\SYSTEM32\Drivers\SSHRMD.SYS> [Spy Sweeper Interdiction Driver / SSIDRV][Running/Boot Start] <\SystemRoot\SYSTEM32\Drivers\SSIDRV.SYS> [Webroot Spy Sweeper Keylogger Shield Keyboard Filter / SSKBFD][Running/Manual Start] [tifmsony / tifmsony][Running/Manual Start] [Pilote de carte de connexion réseau Intel(R) PRO/Wireless 2200BG pour Windows XP / w29n51][Running/Manual Start] [winachsf / winachsf][Running/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] ================================== Browser Add-ons [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Windows Live Sign-in Helper] {9030D464-4C02-4ABF-8ECC-5164760863C6} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Java Plug-in] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} [&Rechercher] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [] {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} [QuickTime Object] {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} [CKAVWebScan Object] {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} <, N/A> [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [LSSupCtl Class] {1F2F4C9E-6F09-47BC-970D-3C54734667FE} <, N/A> [YInstStarter Class] {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} [Cult3D ActiveX Player] {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} [Office Update Installation Engine] {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} [ICSScanner Class] {7F8C8173-AD80-4807-AA75-5672F22B4582} [VirginMega DownloadManager] {87AF076E-D86D-4E87-ADDD-F05804E1F150} <, N/A> [Java Plug-in] {8AD9C840-044E-11D1-B3E9-00805F499D93} [F-Secure Online Scanner] {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} [AccountHelper Class] {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} [CamImage Class] {917623D1-D8E5-11D2-BE8B-00104B06BDE3} [MediaBar] {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} [Java Plug-in] {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} [Java Plug-in] {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} [Java Plug-in 1.5.0_06] {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [CFnacComposantCtrl Object] {D28C3640-A6D7-4668-A53C-07A9CF67D157} [Microsoft Outlook 8.0 Object Library] {0006F033-0000-0000-C000-000000000046} <, N/A> [Microsoft Office Outlook] {0006F03A-0000-0000-C000-000000000046} <, N/A> [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [Microsoft Office Template and Media Control] {02BCC737-B171-4746-94C9-0D8A0B2C0089} [QuickTime Object] {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} [Adobe PDF Reader Link Helper] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [CKAVWebScan Object] {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} <, N/A> [PeerDraw Class] {10072CEC-8CC1-11D1-986E-00A0C955B42E} <%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll, N/A> [CEnroll Class] {127698E4-E730-4E5C-A2B1-21490A70C8A1} [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [Shockwave ActiveX Control] {233C1507-6A77-46A4-9443-F871F945D258} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [Microsoft HTML Document 6.0] {25336921-03F9-11CF-8FD0-00AA00686F13} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, N/A> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} [HtmlDlgSafeHelper Class] {3050F819-98B5-11CF-BB82-00AA00BDCE0B} [SVG Document] {377B5106-3B4E-4A2D-8520-8767590CAC86} [IETag Factory] {38481807-CA0E-42D2-BF39-B33AF135CC4D} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [Microsoft Office Control] {4453D895-F2A1-4A38-A285-1EF9BD3F6D5D} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [] {4F07F79F-087F-42CF-8B36-7A88D06088E9} [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} [VUAX Control] {56BF7CE6-90BB-4092-A7EF-477CA32EC4F5} [VirginMega DMInfo] {57F21085-E529-402D-86E2-E0D7C48F83EF} <, N/A> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [DivXBrowserPlugin Object] {67DABFBF-D0AB-41FA-9C46-CC0F21721616} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [MUWebControl Class] {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A> [Windows Media Services DRM Storage object] {760C4B83-E211-11D2-BF3E-00805FBE84A6} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [VirginMega DownloadManager] {87AF076E-D86D-4E87-ADDD-F05804E1F150} <, N/A> [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [Java Plug-in] {8AD9C840-044E-11D1-B3E9-00805F499D93} [Installer Object] {8B7BCA60-B318-471A-90B6-30418B0A8BC8} [F-Secure Online Scanner] {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} [Windows Live Sign-in Helper] {9030D464-4C02-4ABF-8ECC-5164760863C6} [CamImage Class] {917623D1-D8E5-11D2-BE8B-00104B06BDE3} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [MediaBar] {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} [Adobe PDF Reader] {CA8A9780-280D-11CF-A24D-444553540000} [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [CFnacComposantCtrl Object] {D28C3640-A6D7-4668-A53C-07A9CF67D157} [GetInfo Class] {D5184A39-CBDF-4A4F-AC1A-7A45A852C883} [Google Updater Class] {D6A5A215-FBF3-45E5-ABF8-22FF50916184} [iTunesDetector Class] {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} [QuickTimeCheck Class] {DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} [] {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} [NameCtrl Class] {E18FEC31-2EA1-49A2-A7A6-902DC0D1FF05} [WebViewFolderIcon Class] {E5DF9D10-3B52-11D1-83E8-00A0C90DC849} [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A> [] {F06608C7-1874-4EEA-B3B2-DF99EBB144B8} [XML DOM Document 3.0] {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A> [XML HTTP 3.0] {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A> [XML DOM Document] {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A> [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A> [IERPCtl Class] {FDC7A535-4070-4B92-A0EA-D9994BCC0DC5} [E&xporter vers Microsoft Excel] [Transfert par Image Converter 2] <, N/A> [Télécharger en utilisant Download &Express] ================================== Running Processes [PID: 744 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 828 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 856 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2505 (xpsp.040806-1825)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4114] [C:\WINDOWS\system32\VESWinlogon.dll] [Sony Corporation, 2.1.00.13200] [C:\WINDOWS\system32\WRLogonNTF.dll] [Webroot Software, Inc., 3,5,6,56] [PID: 900 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 912 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1072 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1144 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1288 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1320 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] [Intel Corporation, 10.5.0.20 ] [C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll] [Intel Corporation, 10.5.0.2 ] [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] [Intel Corporation, 10.5.0.1 ] [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] [Intel Corporation, 10.5.0.4 ] [C:\Program Files\Intel\Wireless\Bin\DbEngine.dll] [Intel Corporation, 10.5.0.2 ] [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll] [The OpenSSL Project, https://www.openssl.org/ 0.9.8] [C:\Program Files\Intel\Wireless\Bin\IntStngs.dll] [, 10.5.0.2 ] [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll] [Intel Corporation, 10.5.0.6] [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll] [Intel Corporation, 10.5.0.1 ] [PID: 1456 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe] [Intel Corporation , 10.5.0.34 ] [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] [Intel Corporation, 10.5.0.1 ] [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] [Intel Corporation, 10.5.0.4 ] [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll] [The OpenSSL Project, https://www.openssl.org/ 0.9.8] [C:\Program Files\Intel\Wireless\Bin\IntStngs.dll] [, 10.5.0.2 ] [C:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL] [N/A, ] [PID: 1520 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1936 / SYSTEM][c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe] [Logitech Inc., 9.0.2.1076] [PID: 960 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1212 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 12, 0, 0] [PID: 1260 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1404 / SYSTEM][C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe] [Google, 2.2.824.5515.beta] [PID: 1568 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe] [Microsoft Corporation, 2000.080.0760.00] [C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\OPENDS60.DLL] [Microsoft Corporation, 2000.080.0194.00] [C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\UMS.DLL] [Microsoft Corporation, 2000.080.0760.00] [C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\SQLSORT.DLL] [Microsoft Corporation, 2000.080.0760.00] [C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\Resources\1036\sqlevn70.RLL] [Microsoft Corporation, 2000.080.0760.00] [C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\SSNETLIB.dll] [Microsoft Corporation, 2000.080.0766.00] [C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\SSNMPN70.dll] [Microsoft Corporation, 2000.080.0534.00] [C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\SSmsLPCn.dll] [Microsoft Corporation, 2000.080.0760.00] [PID: 1764 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe] [Intel Corporation, 10.5.0.4 ] [PID: 1640 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1704 / SYSTEM][C:\Program Files\Sony\VAIO Event Service\VESMgr.exe] [Sony Corporation, 2.3.00.04130] [C:\Program Files\Sony\VAIO Event Service\MSVCR70.dll] [Microsoft Corporation, 7.00.9466.0] [C:\Program Files\Sony\VAIO Event Service\VESSuEvent.dll] [Sony Corporation, 2.3.00.02240] [C:\Program Files\Sony\VAIO Event Service\VESBasePS.dll] [N/A, ] [C:\Program Files\Fichiers communs\Sony Shared\Sony Utilities\SnyUtils.dll] [Sony Corporation, 6.4.00.06290] [C:\Program Files\Fichiers communs\Sony Shared\SXBIOS\sxbios.dll] [Sony Corporation, 4.02.8170] [C:\WINDOWS\system32\Atipdlxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2493] [C:\Program Files\Sony\VAIO Event Service\VESWndMsg.dll] [Sony Corporation, 2.3.00.03190] [C:\Program Files\Sony\VAIO Event Service\VESTransform.dll] [Sony Corporation, 2.3.00.03190] [C:\Program Files\Sony\VAIO Event Service\MSVCP70.dll] [Microsoft Corporation, 7.00.9466.0] [C:\Program Files\Sony\VAIO Event Service\VESWndMsgHook.dll] [Sony Corporation, 2.2.00.05200] [C:\Program Files\Sony\VAIO Event Service\VESAutoDimmer.dll] [Sony Corporation, 2.3.00.03190] [C:\Program Files\Sony\VAIO Event Service\VESHardwareMixer.dll] [Sony Corporation, 2.3.00.04270] [C:\Program Files\Sony\VAIO Power Management\VESPowerMgr.dll] [Sony Corporation, 2.0.00.10290] [C:\Program Files\Sony\VAIO Event Service\VESSemiPnP.dll] [Sony Corporation, 2.3.00.05310] [C:\Program Files\Sony\VAIO Event Service\VESSuPerform.dll] [Sony Corporation, 2.3.00.04270] [C:\Program Files\Sony\VAIO Event Service\VESVideo.dll] [Sony Corporation, 2.3.00.03300] [C:\Program Files\Sony\VAIO Event Service\VESPerform.dll] [Sony Corporation, 2.3.00.04270] [C:\Program Files\Sony\VAIO Event Service\VESFnLock.dll] [Sony Corporation, 2.3.00.03190] [C:\Program Files\Sony\VAIO Event Service\VESHKWndCommon.dll] [Sony Corporation, 2.3.00.05300] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRsPS.dll] [Sony Corporation, 1.4.00.14090] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [PID: 240 / SYSTEM][C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe] [Sony Corporation, 1.3.00.13260] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\sonyuppc.dll] [Sony Corporation, 7.0.00.11040] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\UPnPCtrl.dll] [Sony Corporation, 2, 0, 1, 10010] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSWEXEps.dll] [Sony Corporation, 1.3.00.13260] [PID: 496 / SYSTEM][C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe] [Webroot Software, Inc., 3,5,6,56] [C:\Program Files\Webroot\Spy Sweeper\pcre.dll] [RenatoMancuso.com, 6.1.0.0] [C:\Program Files\Webroot\Spy Sweeper\ztvunrar3.dll] [N/A, ] [C:\Program Files\Webroot\Spy Sweeper\MailShld.DLL] [N/A, ] [PID: 808 / SYSTEM][C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe] [Softwin, 1, 8, 11, 0] [PID: 1316 / SYSTEM][C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe] [Sony Corporation, 1.3.00.13260] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbVcds.dll] [Sony Corporation, 1.3.00.12210] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSsDB.dll] [Sony Corporation, 1.3.00.13260] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbLocalDB.dll] [Sony Corporation, 1.3.00.14080] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSWEXEps.dll] [Sony Corporation, 1.3.00.13260] [C:\Program Files\Fichiers communs\Sony Shared\AVLib\Metallic.dll] [Sony Corporation, 2.8.00.12140] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvcPS.dll] [Sony Corporation, 1.3.00.12220] [C:\WINDOWS\system32\DBmsLPCn.dll] [Microsoft Corporation, 2000.080.0760.00] [PID: 1268 / SYSTEM][C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe] [Sony Corporation, 1.3.00.13260] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFwImport.dll] [Sony Corporation, 1.3.00.14020] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdb.dll] [Sony Corporation, 1.3.00.13281] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvcPS.dll] [Sony Corporation, 1.3.00.12220] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCs.dll] [Sony Corporation, 1.4.00.14080] [PID: 2232 / SYSTEM][C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe] [Sony Corporation, 1.4.00.14090] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\System.dll] [Sony Corporation, 1.4.00.14090] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRsPS.dll] [Sony Corporation, 1.4.00.14090] [PID: 2600 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\sockspy.dll] [N/A, ] [PID: 4052 / Franck][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\PROGRA~1\Sony\IMAGEC~1\CtxMenu.dll] [ , 1, 3, 0, 11260] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\PROGRA~1\Webroot\SPYSWE~1\SSCtxMnu.dll] [Webroot Software, Inc., 5,5,7,48] [C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdshell.dll] [Utimaco Safeware AG, 1.00.6.7] [C:\Program Files\Utimaco\SafeGuard PrivateDisk\PDLib.dll] [Utimaco Safeware AG, 1.00.6.7] [C:\Program Files\Utimaco\SafeGuard PrivateDisk\PDLib040c.dll] [Utimaco Safeware AG, 1.00.6.7] [C:\Program Files\Utimaco\SafeGuard PrivateDisk\PDShell040c.dll] [Utimaco Safeware AG, 1.00.2.1] [C:\Program Files\Softwin\BitDefender9\bdshelxt.dll] [, 1, 0, 0, 3] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [PID: 2864 / Franck][C:\Program Files\Apoint\Apoint.exe] [Alps Electric Co., Ltd., 5.5.7.136] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\WINDOWS\system32\VXDIF.DLL] [Alps Electric Co., Ltd., 6.0.2.65] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Apoint\ApWheel.dll] [ALPS ELECTRIC CO., LTD., 4.2.0.9] [C:\Program Files\Apoint\Apoint.DLL] [Alps Electric Co., Ltd., 5.5.6.177] [C:\Program Files\Apoint\ApRes.dll] [Alps Electric Co., Ltd., 5.5.6.17] [C:\Program Files\Apoint\EzAuto.dll] [Alps Electric Co., Ltd., 4.5.1.83] [C:\Program Files\Apoint\EzLaunch.DLL] [Alps Electric Co., Ltd., 5.5.1.59] [PID: 2988 / Franck][C:\WINDOWS\system32\ICO.EXE] [Primax Electronics Ltd., 1, 0, 0, 8] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [PID: 3040 / Franck][C:\Program Files\Sony\VAIO Power Management\SPMgr.exe] [Sony Corporation, 1, 6, 1, 13140] [C:\Program Files\Sony\VAIO Power Management\MFC70U.DLL] [Microsoft Corporation, 7.00.9466.0] [C:\Program Files\Sony\VAIO Power Management\MSVCR70.dll] [Microsoft Corporation, 7.00.9466.0] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Sony\VAIO Power Management\SPMDAM.dll] [Sony Corporation, 1.0.00.08250] [C:\Program Files\Sony\VAIO Power Management\MSVCP70.dll] [Microsoft Corporation, 7.00.9466.0] [C:\Program Files\Sony\VAIO Power Management\SPMRes.dll] [Sony Corporation, 1.6.01.13270] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Sony\VAIO Power Management\SPMDrv.dll] [Sony Corporation, 1.6.01.14010] [C:\Program Files\Fichiers communs\Sony Shared\Sony Utilities\SnyUtils.dll] [Sony Corporation, 6.4.00.06290] [C:\Program Files\Fichiers communs\Sony Shared\SXBIOS\sxbios.dll] [Sony Corporation, 4.02.8170] [C:\WINDOWS\system32\Atipdlxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2493] [PID: 3116 / Franck][C:\Program Files\Sony\ISB Utility\ISBMgr.exe] [Sony Corporation, 1, 0, 0, 2180] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Fichiers communs\Sony Shared\Sony Utilities\SnyUtils.dll] [Sony Corporation, 6.4.00.06290] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9466.0] [C:\Program Files\Fichiers communs\Sony Shared\SXBIOS\sxbios.dll] [Sony Corporation, 4.02.8170] [C:\WINDOWS\system32\Atipdlxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2493] [C:\Program Files\Sony\ISB Utility\ISBRes.dll] [Sony Corporation, 1, 0, 1, 9290] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [PID: 3172 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\sockspy.dll] [N/A, ] [PID: 1048 / Franck][C:\Program Files\Softwin\BitDefender9\bdoesrv.exe] [SOFTWIN SRL, 8, 1, 0, 0] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [PID: 3376 / Franck][C:\progra~1\softwin\bitdef~1\bdnagent.exe] [SOFTWIN S.R.L, 1, 0, 0, 1] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [PID: 3820 / Franck][C:\progra~1\softwin\bitdef~1\bdswitch.exe] [N/A, ] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [PID: 2392 / Franck][C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe] [Utimaco Safeware AG, 1.00.6.7] [C:\Program Files\Utimaco\SafeGuard PrivateDisk\PDLib.dll] [Utimaco Safeware AG, 1.00.6.7] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Utimaco\SafeGuard PrivateDisk\PDLib040c.dll] [Utimaco Safeware AG, 1.00.6.7] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice040c.dll] [Utimaco Safeware AG, 1.00.3.1] [PID: 2524 / Franck][C:\Program Files\Logitech\Video\CameraAssistant.exe] [Logitech Inc., 9.0.2.1077] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Logitech\Video\VLib.dll] [Logitech Inc., 9.0.2.1077] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Logitech\Video\VxLib.dll] [Logitech Inc., 9.0.2.1077] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Logitech\Video\VxLibRes.dll] [Logitech Inc., 9.0.2.1077] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Logitech\Video\CameraAssistantRes.dll] [Logitech Inc., 9.0.2.1077] [C:\WINDOWS\system32\lvmaenum.dll] [Logitech Inc., 9.0.2.1076] [C:\WINDOWS\system32\lvcomcx.dll] [Logitech Inc., 9.0.2.1076] [PID: 2912 / Franck][C:\Program Files\iTunes\iTunesHelper.exe] [Apple Inc., 7.3.0.54] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.DLL] [Apple Inc., 7.3.0.39] [C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL] [Apple Inc., 7.3.0.54] [C:\Program Files\QuickTime\QTSystem\QuickTime.qts] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\CoreVideo.qtx] [Apple Computer, Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.qtx] [Apple Computer, Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeH264.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeImage.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.qtx] [Apple Inc., 7.1.6] [C:\Program Files\QuickTime\QTSystem\QuickTimeVR.qtx] [Apple Inc., 7.1.6] [C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll] [Apple Inc., 7, 3, 85, 0] [PID: 2952 / Franck][C:\Program Files\Apoint\Apntex.exe] [Alps Electric Co., Ltd., 5.0.1.15] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\WINDOWS\system32\VXDIF.DLL] [Alps Electric Co., Ltd., 6.0.2.65] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [PID: 2264 / Franck][C:\WINDOWS\system32\lvcomsx.exe] [Logitech Inc., 9.0.2.1076] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\WINDOWS\system32\lvmaenum.dll] [Logitech Inc., 9.0.2.1076] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\WINDOWS\system32\lvcomcx.dll] [Logitech Inc., 9.0.2.1076] [PID: 1420 / Franck][C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe] [GRISOFT s.r.o., 7, 5, 1, 43] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\engine.dll] [GRISOFT s.r.o., 4, 2, 0, 19] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [PID: 2840 / Franck][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [PID: 2888 / Franck][C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe] [, 4.0.00.05080] [C:\PROGRA~1\Sony\SONICS~1\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\PROGRA~1\Sony\SONICS~1\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [PID: 3676 / Franck][C:\WINDOWS\system32 undll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [PID: 784 / Franck][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\gtn.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [PID: 3652 / Franck][C:\Program Files\Google\Google Updater\GoogleUpdater.exe] [Google, 2.2.940.34809.beta] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Google\Google Updater\2.2.940.34809\ci.dll] [Google, 2.2.940.34809.beta] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [PID: 2676 / SYSTEM][C:\Program Files\iPod\bin\iPodService.exe] [Apple Inc., 7.3.0.54] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\iPod\bin\iPodService.Resources\fr.lproj\iPodServiceLocalized.DLL] [Apple Inc., 7.3.0.39] [C:\Program Files\iPod\bin\iPodService.Resources\iPodService.DLL] [Apple Inc., 7.3.0.54] [PID: 7308 / SYSTEM][C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\HTTPGETF.dll] [N/A, ] [C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\zlib.dll] [, 1.1.3] [C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\getfile.dll] [N/A, ] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\bdch.dll] [SOFTWIN, 1, 0, 0, 266] [C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\bdsubmit.dll] [SOFTWIN, 1, 0, 0, 143] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [PID: 5284 / SYSTEM][C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe] [N/A, ] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdcore.dll] [SOFTWIN SRL, 7, 0, 0, 2412] [C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdsubmit.dll] [SOFTWIN, 1, 0, 0, 143] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\libfn.dll] [N/A, ] [C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\avxdisk.dll] [N/A, ] [PID: 6268 / SYSTEM][C:\Program Files\Softwin\BitDefender9\vsserv.exe] [SOFTWIN S.R.L., 9, 0, 0, 17] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Softwin\BitDefender9\procinf.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\mimeinf.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\bdch.dll] [SOFTWIN, 1, 0, 0, 266] [C:\Program Files\Softwin\BitDefender9\bdsubmit.dll] [SOFTWIN, 1, 0, 0, 143] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Softwin\BitDefender9\librtvr.dll] [Softwin SRL, 1, 3, 0, 0] [C:\Program Files\Softwin\BitDefender9\bdfdll_x86.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\quarcore.dll] [SOFTWIN S.R.L., 9, 0, 0, 4] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\as2core.dll] [SOFTWIN S.R.L., 2, 1, 200, 0]

frajophi · Answer

(reprise du rapport car trop long pour un seul message ! =) [PID: 6268 / SYSTEM][C:\Program Files\Softwin\BitDefender9\vsserv.exe] [SOFTWIN S.R.L., 9, 0, 0, 17] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Program Files\Softwin\BitDefender9\procinf.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\mimeinf.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\bdch.dll] [SOFTWIN, 1, 0, 0, 266] [C:\Program Files\Softwin\BitDefender9\bdsubmit.dll] [SOFTWIN, 1, 0, 0, 143] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Softwin\BitDefender9\librtvr.dll] [Softwin SRL, 1, 3, 0, 0] [C:\Program Files\Softwin\BitDefender9\bdfdll_x86.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\quarcore.dll] [SOFTWIN S.R.L., 9, 0, 0, 4] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\as2core.dll] [SOFTWIN S.R.L., 2, 1, 200, 0] [C:\Program Files\Softwin\BitDefender9\asemlbr.mdl] [N/A, ] [C:\Program Files\Softwin\BitDefender9\asemldsp.mdl] [N/A, ] [C:\Program Files\Softwin\BitDefender9\asemlf.mdl] [N/A, ] [C:\Program Files\Softwin\BitDefender9\asemlimg.mdl] [N/A, ] [C:\Program Files\Softwin\BitDefender9\asemlnn.mdl] [N/A, ] [C:\Program Files\Softwin\BitDefender9\mimepack.dll] [N/A, ] [C:\WINDOWS\system32\XRegLib.dll] [N/A, ] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9466.0] [C:\WINDOWS\system32\MSVCP70.dll] [Microsoft Corporation, 7.00.9466.0] [C:\Program Files\Softwin\BitDefender9\iconv.dll] [Free Software Foundation, 1.9] [C:\Program Files\Softwin\BitDefender9\asregex.dll] [N/A, ] [C:\Program Files\Softwin\BitDefender9\bdpop3p.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\Program Files\Softwin\BitDefender9\bdsmtpp.dll] [N/A, ] [PID: 6456 / Franck][c:\progra~1\softwin\bitdef~1\bdmcon.exe] [SOFTWIN S.R.L., 9, 0, 0, 7] [c:\progra~1\softwin\bitdef~1\bdch.dll] [SOFTWIN, 1, 0, 0, 266] [c:\progra~1\softwin\bitdef~1\bdsubmit.dll] [SOFTWIN, 1, 0, 0, 143] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [c:\progra~1\softwin\bitdef~1\procinf.dll] [N/A, ] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [c:\progra~1\softwin\bitdef~1\TxTools.dll] [SOFTWIN S.R.L, 9, 0, 0, 0] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [c:\progra~1\softwin\bitdef~1\NAG.dll] [TODO: , 9.0.0.3] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [c:\progra~1\softwin\bitdef~1\popup.dll] [SOFTWIN S.R.L., 9, 0, 0, 5] [c:\progra~1\softwin\bitdef~1\agentreg.dll] [TODO: , 9.0.0.3] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [c:\progra~1\softwin\bitdef~1\main.dll] [SOFTWIN S.R.L., 9.0.0.3] [c:\progra~1\softwin\bitdef~1\antivirus.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [c:\progra~1\softwin\bitdef~1\antispam.dll] [SOFTWIN S.R.L, 9.0.0.2] [c:\progra~1\softwin\bitdef~1\firewall.dll] [SOFTWIN S.R.L., 9, 0, 0, 26] [c:\progra~1\softwin\bitdef~1\Wizards.dll] [SOFTWIN S.R.L., 9, 0, 0, 4] [c:\progra~1\softwin\bitdef~1\live.dll] [SOFTWIN S.R.L., 9.0.0.4] [c:\progra~1\softwin\bitdef~1\vshield.dll] [SOFTWIN S.R.L., 9, 0, 0, 4] [c:\progra~1\softwin\bitdef~1\vscan.dll] [SOFTWIN S.R.L., 9, 0, 0, 17] [c:\progra~1\softwin\bitdef~1\schface.dll] [SOFTWIN S.R.L., 9, 0, 0, 48] [c:\progra~1\softwin\bitdef~1\schcore.dll] [SOFTWIN S.R.L., 9, 0, 0, 18] [c:\progra~1\softwin\bitdef~1\quar.dll] [SOFTWIN S.R.L., 9, 0, 0, 23] [c:\progra~1\softwin\bitdef~1\report.dll] [SOFTWIN S.R.L., 9, 0, 0, 22] [c:\progra~1\softwin\bitdef~1\quarcore.dll] [SOFTWIN S.R.L., 9, 0, 0, 4] [c:\progra~1\softwin\bitdef~1\bwlist.dll] [SOFTWIN S.R.L., 9.0.0.0] [PID: 7524 / Franck][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 7.00.6000.16512 (vista_gdr.070625-1522)] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [c:\program files\google\googletoolbar2.dll] [Google Inc., 4, 0, 1601, 4978] [C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll] [Sun Microsystems, Inc., 5.0.60.5] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0] [PID: 7568 / Franck][C:\Documents and Settings\Franck\Bureau\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\WINDOWS\system32\sockspy.dll] [N/A, ] [C:\Program Files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll] [Logitech Inc., 9.0.2.1076] [C:\Program Files\Softwin\BitDefender9\bdoe.dll] [SOFTWIN S.R.L., 9, 0, 0, 0] [C:\WINDOWS\system32\XCOMM.dll] [Softwin, 1, 8, 11, 0] [C:\Documents and Settings\Franck\Bureau\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== File Associations .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG Error. [] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS Error. [] .JS Error. [] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock Provider N/A ================================== Autorun.Inf N/A ================================== HOSTS File 127.0.0.1 localhost ================================== Process Privileges Scan Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1456, C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24EVMON.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1212, C:\PROGRAM FILES\FICHIERS COMMUNS\APPLE\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1704, C:\PROGRAM FILES\SONY\VAIO EVENT SERVICE\VESMGR.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1316, C:\PROGRAM FILES\FICHIERS COMMUNS\SONY SHARED\VAIO ENTERTAINMENT PLATFORM\VZCDB\VZCDBSVC.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3040, C:\PROGRAM FILES\SONY\VAIO POWER MANAGEMENT\SPMGR.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3116, C:\PROGRAM FILES\SONY\ISB UTILITY\ISBMGR.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1048, C:\PROGRAM FILES\SOFTWIN\BITDEFENDER9\BDOESRV.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3376, C:\PROGRA~1\SOFTWIN\BITDEF~1\BDNAGENT.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3820, C:\PROGRA~1\SOFTWIN\BITDEF~1\BDSWITCH.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2392, C:\PROGRAM FILES\UTIMACO\SAFEGUARD PRIVATEDISK\PDSERVICE.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2524, C:\PROGRAM FILES\LOGITECH\VIDEO\CAMERAASSISTANT.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2264, C:\WINDOWS\SYSTEM32\LVCOMSX.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2888, C:\PROGRA~1\SONY\SONICS~1\SSAAD.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 6268, C:\PROGRAM FILES\SOFTWIN\BITDEFENDER9\VSSERV.EXE] Special Privilege Enabled: SeLoadDriverPrivilege [PID = 6456, C:\PROGRA~1\SOFTWIN\BITDEF~1\BDMCON.EXE] ================================== API HOOK Entrypoint Error: LoadLibraryA (Dangerous Level: High, Hooked by Module: C:\WINDOWS\system32\sockspy.dll) ================================== Hidden Process N/A ================================== [/CODE]

FillPCA · Answer

RE,
RAS.

    *  Fais un scan en ligne en cliquant ici : http://assiste.com.free.fr/...
    * Choisis Panda
    * Tu dois réaliser le scan en utilisant Internet explorer. Une information apparait en haut, près de la barre d'état. Tu dois accepter et installer l'activeX proposé. La mise à jour de l'antivirus se lance.
    * Réalise un scan complet du système.
    * Sauvegarde le rapport en mode texte à l'issue du scan.

Edite ce rapport Panda.

FillPCA

frajophi · Answer

Ah bon ! le msg "Entrypoint Error: LoadLibraryA (Dangerous Level: High, Hooked by Module: C:\WINDOWS\system32\sockspy.dll) " n 'est pas inquiétant alors ?
Sur la fenêtre de SREngPS, dans Boot Items, onglet Registry, la ligne AppInit_DLLs apparait en rouge ...

Bon je m'occupe de Panda...
F.

FillPCA · Answer

Re,

Non, c'est un module de bit defender qui équipe ta machine.

FillPCA

frajophi · Answer

Voici le résultat de Panda :

Incident                                                                        Status                        Location                                                                                                                                                                                                                                                        

Spyware:Cookie/Xiti                                                             Not disinfected               C:\Documents and Settings\Franck\Cookies\franck@xiti[1].txt                                                                                                                                                                                                     
Spyware:Cookie/Xiti                                                             Not disinfected               C:\Documents and Settings\Franck\Cookies\franck@xiti[2].txt                                                                                                                                                                                                     
Spyware:Cookie/fe.lea.lycos                                                     Not disinfected               C:\Documents and Settings\Kcnarf\Cookies\kcnarf@fe.lea.lycos[1].txt                                                                                                                                                                                             
Spyware:Cookie/Com.com                                                          Not disinfected               C:\Documents and Settings\Kcnarf\Cookies\kcnarf@ig.com[2].txt                                                                                                                                                                                                   
Spyware:Cookie/Xiti                                                             Not disinfected               C:\Documents and Settings\Kcnarf\Cookies\kcnarf@xiti[1].txt

FillPCA · Answer

Bonjour,
Un peu surprenant. Il n'y a rien. Ton FAI t'a-t-il donné des précisions au téléphone ?
Les différentes analyses réalisées ne montrent rien.

1/     *  Télécharge F-Secure Blacklight : https://europe.f-secure.com/exclude/blacklight/index.shtml
    * Sauvegarde le sur ton Bureau.
    * Double-clique fsbl.exe et accepte la licence ; clique Scan puis Next.
    * Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).
    * Copie et colle le contenu de ce rapport dans ta prochaine réponse.

2/     *  Télécharge GenProc (de Lazzzy et Narco4) sur ton bureau : http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip
    * Dézippe-le sur ton bureau (Clic droit>Extraire ici).
    * Double-clique sur GenProc.bat et édite le rapport généré par le programme.
    * Tu trouveras une aide en images ici : http://www.alt-shift-return.org/Info/GenProc-HowTo.html

Edite ces deux rapports.

FillPCA

frajophi · Answer

Bonjour,
je vais faire cela tout à l'heure ; je pensais à une chose : est-ce que le pb pourrait venir d'un fichier (ce ne sont que des photos pour l'essentiel) de ma clé USB ?
F.

frajophi · Answer

Ah, mais F-Secure Black Light et Gen proc, on l'a déjà fait (c'est ton premier msg de cette discussion) !
F.

FillPCA · Answer

Re,
Désolé pour la procédure. J'avais oublié.
Pour la clé USB, il faut en effet examiner son contenu avec un antivirus.

Essaie de la brancher puis tente de tenter scanner son contenu si tu peux avec Panda.

1/
    *  Télécharge PCA (d'Evosla) : http://ww25.evosla.com/pca_cpt.php?agr=pca_securite
    * Dézippe-le dans un répertoire dédié comme c:\PCA au moyen d'un clic droit (Extraire...),
    * Clique sur l'onglet  "diagnostic du PC" puis "analyser".
    * Laisse l'analyse se dérouler. Cela ne prend que quelques secondes.
    * Clique sur "enregistrer le rapport" en bas à droite et sauvegarde-le sur le bureau.
    * Edite le contenu de ce rapport dans ta prochaine réponse. Il se nomme PCA_LOG.txt

2/     *  Clique sur l'onglet "analyse antivirus",
    * Clique sur "scanner",
    * Quand l'analyse est terminée, clique sur "enregistrer le rapport" et sauvegarde-le sur le bureau. Il se nomme PCA_SCAN_LOG.txt



FillPCA

frajophi · Answer

(Panda n'a rien donné)

voilà pour le point 1/ :


# PCA Sécurité V 1.0.1, (fichier LOG).
# Rapport du  :16/08/2007 08:46:58
Microsoft Windows XP  Service Pack 2
 
==>> Processus <==
\SystemRoot\System32\smss.exe
\??\C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
C:\progra~1\softwin\bitdef~1\bdnagent.exe
C:\progra~1\softwin\bitdef~1\bdswitch.exe
C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\system32\lvcomsx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
c:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Documents and Settings\Franck\Application Data\U3\0981156121C278E1\LaunchPad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Pca\pca.exe
 
//pages de démarrage et de recherche d'Internet Explorer
RO - HKLM\Software\Microsoft\Internet Explorer\Main\Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
RO - HKLM\Software\Microsoft\Internet Explorer\Main\Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
RO - HKCU\Software\Microsoft\Internet Explorer\Main\Start Page = http://fr.msn.com/?wa=wsignin1.0
RO - HKCU\Software\Microsoft\Internet Explorer\Toolbar\LinksFolderName = Liens
R1 - HKLM\Software\Microsoft\Internet Explorer\Main\Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main\Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main\Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Search\CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Search\SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{sub_rfc1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Search\SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard\ShellNext = http://192.168.0.1/
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - 
//applications lancées depuis system.ini,win.ini 
//03 - Browser Helper Objects (BHOs)
02 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
02 - BHO:  - {7E853D72-626A-48EC-A868-BA8D5E23E045} - 
02 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
02 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar : &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
//04 - applications chargées automatiquement
04 - HKLM\..\RUN: [Apoint] - "C:\Program Files\Apoint\Apoint.exe"
04 - HKLM\..\RUN: [Mouse Suite 98 Daemon] - ICO.EXE
04 - HKLM\..\RUN: [SonyPowerCfg] - "C:\Program Files\Sony\VAIO Power Management\SPMgr.exe"
04 - HKLM\..\RUN: [ISBMgr.exe] - "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
04 - HKLM\..\RUN: [BDMCon] - c:\progra~1\softwin\bitdef~1\bdmcon.exe
04 - HKLM\..\RUN: [BDOESRV] - "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
04 - HKLM\..\RUN: [BDNewsAgent] - "c:\progra~1\softwin\bitdef~1\bdnagent.exe"
04 - HKLM\..\RUN: [VAIO Update 3] - "C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe"  /Stationary
04 - HKLM\..\RUN: [LogitechVideo[inspector]] - "C:\Program Files\Logitech\Video\InstallHelper.exe" /inspect
04 - HKLM\..\RUN: [Switcher.exe] - "C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe"
04 - HKLM\..\RUN: [BDSwitchAgent] - "c:\progra~1\softwin\bitdef~1\bdswitch.exe"
04 - HKLM\..\RUN: [QuickTime Task] - "C:\Program Files\QuickTime\qttask.exe" -atboottime
04 - HKLM\..\RUN: [Adobe Photo Downloader] - "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
04 - HKLM\..\RUN: [PDService.exe] - "C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe"
04 - HKLM\..\RUN: [LogitechCameraAssistant] - "C:\Program Files\Logitech\Video\CameraAssistant.exe"
04 - HKLM\..\RUN: [KernelFaultCheck] - C:\WINDOWS\system32\dumprep 0 -k
04 - HKLM\..\RUN: [iTunesHelper] - "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\RUN: [!AVG Anti-Spyware] - "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
04 - HKLM\..\RUN: [SpySweeper] - C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
04 - HKLU\..\RUN: [CTFMON.EXE] - C:\WINDOWS\system32\ctfmon.exe
04 - HKLU\..\RUN: [SsAAD.exe] - C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
04 - HKLU\..\RUN: [updateMgr] - "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
04 - HKLU\..\RUN: [LogitechSoftwareUpdate] - "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
04 - HKLU\..\RUN: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
04 - HKUS\S-1-5-18\..\RUN: [CTFMON.EXE] - "C:\Program Files\Apoint\Apoint.exe"
04 - HKUS\S-1-5-19\..\RUN: [CTFMON.EXE] - "C:\Program Files\Apoint\Apoint.exe"
04 - HKUS\S-1-5-20\..\RUN: [CTFMON.EXE] - "C:\Program Files\Apoint\Apoint.exe"
04 - HKUS\S-1-5-21-2989984913-1276355387-2457511822-1006\..\RUN: [CTFMON.EXE] - "C:\Program Files\Apoint\Apoint.exe"
04 - HKUS\S-1-5-21-2989984913-1276355387-2457511822-1006\..\RUN: [SsAAD.exe] - ICO.EXE
04 - HKUS\S-1-5-21-2989984913-1276355387-2457511822-1006\..\RUN: [updateMgr] - "C:\Program Files\Sony\VAIO Power Management\SPMgr.exe"
04 - HKUS\S-1-5-21-2989984913-1276355387-2457511822-1006\..\RUN: [LogitechSoftwareUpdate] - "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
04 - HKUS\S-1-5-21-2989984913-1276355387-2457511822-1006\..\RUN: [swg] - c:\progra~1\softwin\bitdef~1\bdmcon.exe
04 - Global Startup: Adobe Gamma Loader.lnk= C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.lnk
04 - Global Startup: Lancement rapide d'Adobe Reader.lnk= C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
04 - Global Startup: Outil de mise à jour Google.lnk= C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk
04 - Startup: VAIO Launcher.lnk= C:\Documents and Settings\Franck\Menu Démarrer\Programmes\Démarrage\VAIO Launcher.lnk
//05 - Accès au panneau de contrôle d'Internet Explorer (control.ini) 
//06-  interdiction à l' accès au options (Internet Explorer) 
//07 -  blocage de l'exécution de Regedit 
//08 - lignes supplémentaires dans le menu contextuel d'Internet Explorer
08 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
08 - Extra context menu item: Transfert par Image Converter 2 - C:\Program Files\Sony\Image Converter 2\menu.htm
08 - Extra context menu item: Télécharger en utilisant Download &Express - C:\Program Files\Download Express\Add_Url.htm
//09 - boutons situés sur la barre d'outils principale d'Internet Explorer
09 - Extra button:  - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
09 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
09 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - 
09 - Extra 'Tools' menuitem:  - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - 
09 - Extra button:  - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
09 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
09 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
09 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
//O10 - Pirates de Winsock
O10 - fichier inconnu - winsock lsp : Espace de noms Bluetooth - %SystemRoot%\system32\wshbth.dll
//O11 - Onglet supplémentaire dans les options avancées d'Internet Explorer) 
O11 - Options group: [INTERNATIONAL] - International*
//O12 - IE plugins
//013 : DefaultPrefix 
//014 - Option : (Rétablir les paramètres Web) 
//015 - Zone de confiance d'Internet Explorer
15 - trusted zone: * . sony-europe.com
15 - trusted zone: * . sonystyle-europe.com
15 - trusted zone: * . vaio-link.com
//O16 - Objets ActiveX
O16 - DPF :  QuickTime Object - {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - C:\Program Files\QuickTime\QTPlugin.ocx
O16 - DPF :  CKAVWebScan Object - {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - 
O16 - DPF :  Shockwave ActiveX Control - {166B1BCA-3F9C-11CF-8075-444553540000} - C:\WINDOWS\system32\macromed\Director\SwDir.dll
O16 - DPF :  LSSupCtl Class - {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - 
O16 - DPF :  YInstStarter Class - {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
O16 - DPF :  Cult3D ActiveX Player - {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} - C:\WINDOWS\system32\Cult3D\IECult.dll
O16 - DPF :  Office Update Installation Engine - {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - C:\WINDOWS\opuc.dll
O16 - DPF :  MSN Photo Upload Tool - {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll
O16 - DPF :  ICSScanner Class - {7F8C8173-AD80-4807-AA75-5672F22B4582} - C:\WINDOWS\Downloaded Program Files\ICSScan.dll
O16 - DPF :  VirginMega DownloadManager - {87AF076E-D86D-4E87-ADDD-F05804E1F150} - 
O16 - DPF :  F-Secure Online Scanner - {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} - C:\WINDOWS\Downloaded Program Files\fscax.dll
O16 - DPF :  AccountHelper Class - {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} - C:\WINDOWS\Downloaded Program Files\Account.dll
O16 - DPF :   - {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - 
O16 - DPF :  CamImage Class - {917623D1-D8E5-11D2-BE8B-00104B06BDE3} - C:\WINDOWS\Downloaded Program Files\AxisCamControl.ocx
O16 - DPF :  ActiveScan Installer Class - {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} - C:\WINDOWS\Downloaded Program Files\asinst.dll
O16 - DPF :  MediaBar - {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} - C:\WINDOWS\Downloaded Program Files\MusicManagerPlugin.ocx
O16 - DPF :   - {D27CDB6E-AE6D-11CF-96B8-444553563000} - 
O16 - DPF :  CFnacComposantCtrl Object - {D28C3640-A6D7-4668-A53C-07A9CF67D157} - C:\WINDOWS\Downloaded Program Files\FnacComposant.dll
//O17 - piratage de domaine Lop.com
//O18 - protocoles additionnels
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - 
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
//O19 - feuille de style de l'utilisateur
//O20 - valeur de Registre AppInit_DLLs et les sous-clés Winlogon Notify
O20 - AppInit_DLLs : sockspy.dll
//O21 - ShellServiceObjectDelayLoad
O21 - SSODL: Objet PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - 
O21 - SSODL: Dossier du Bureau pour l'écriture de CD - {fbeb8a05-beee-4442-804e-409d6c4515e9} - 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - 
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj Class - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
//O22 - SharedTaskScheduler
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - %SystemRoot%\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll
//O23 - services de XP,NT, 2000, et 2003
O23 - Service: [ALG] - (Service de la passerelle de la couche Application) -- %SystemRoot%\System32\alg.exe
O23 - Service: [Apple Mobile Device] - (Apple Mobile Device) -- "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
O23 - Service: [AudioSrv] - (Audio Windows) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [AVG Anti-Spyware Guard] - (AVG Anti-Spyware Guard) -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: [bdss] - (BitDefender Scan Server) -- "C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service
O23 - Service: [BthServ] - (Bluetooth Support Service) -- %SystemRoot%\system32\svchost.exe -k bthsvcs
O23 - Service: [CryptSvc] - (Services de cryptographie) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [DcomLaunch] - (Lanceur de processus serveur DCOM) -- %SystemRoot%\system32\svchost -k DcomLaunch
O23 - Service: [Dhcp] - (Client DHCP) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [Dnscache] - (Client DNS) -- %SystemRoot%\system32\svchost.exe -k NetworkService
O23 - Service: [ERSvc] - (Service de rapport d'erreurs) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [Eventlog] - (Journal des événements) -- %SystemRoot%\system32\services.exe
O23 - Service: [EventSystem] - (Système d'événements de COM+) -- C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: [EvtEng] - (Intel(R) PROSet/Wireless Event Log) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: [FastUserSwitchingCompatibility] - (Compatibilité avec le Changement rapide d'utilisateur) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [gusvc] - (Google Updater Service) -- "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
O23 - Service: [helpsvc] - (Aide et support) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [HidServ] - (HID Input Service) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [HTTPFilter] - (HTTP SSL) -- %SystemRoot%\System32\svchost.exe -k HTTPFilter
O23 - Service: [iPod Service] - (Service de l'iPod) -- "C:\Program Files\iPod\bin\iPodService.exe"
O23 - Service: [lanmanserver] - (Serveur) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [lanmanworkstation] - (Station de travail) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [LIVESRV] - (BitDefender Desktop Update Service) -- "C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service
O23 - Service: [LVPrcSrv] - (Logitech Process Monitor) -- c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: [MSSQL$VAIO_VEDB] - (MSSQL$VAIO_VEDB) -- C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB
O23 - Service: [Netman] - (Connexions réseau) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [Nla] - (NLA (Network Location Awareness)) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [PlugPlay] - (Plug-and-Play) -- %SystemRoot%\system32\services.exe
O23 - Service: [PolicyAgent] - (Services IPSEC) -- %SystemRoot%\system32\lsass.exe
O23 - Service: [ProtectedStorage] - (Emplacement protégé) -- %SystemRoot%\system32\lsass.exe
O23 - Service: [RasMan] - (Gestionnaire de connexions d'accès distant) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [RegSrvc] - (Intel(R) PROSet/Wireless Registry Service) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: [RpcSs] - (Appel de procédure distante (RPC)) -- %SystemRoot%\system32\svchost -k rpcss
O23 - Service: [S24EventMonitor] - (Intel(R) PROSet/Wireless Service) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: [SamSs] - (Gestionnaire de comptes de sécurité) -- %SystemRoot%\system32\lsass.exe
O23 - Service: [Schedule] - (Planificateur de tâches) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [seclogon] - (Connexion secondaire) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [SENS] - (Notification d'événement système) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [SharedAccess] - (Pare-feu Windows / Partage de connexion Internet) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [ShellHWDetection] - (Détection matériel noyau) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [srservice] - (Service de restauration système) -- %SystemRoot%\system32\svchost.exe -k netsvcs
O23 - Service: [SSDPSRV] - (Service de découvertes SSDP) -- %SystemRoot%\system32\svchost.exe -k LocalService
O23 - Service: [stisvc] - (Acquisition d'image Windows (WIA)) -- %SystemRoot%\system32\svchost.exe -k imgsvc
O23 - Service: [TapiSrv] - (Téléphonie) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [TermService] - (Services Terminal Server) -- %SystemRoot%\System32\svchost -k DComLaunch
O23 - Service: [Themes] - (Thèmes) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [VAIO Entertainment Aggregation and Control Service] - (VAIO Entertainment Aggregation and Control Service) -- "C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe"
O23 - Service: [VAIO Event Service] - (VAIO Event Service) -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: [Vcsw] - (VAIO Entertainment UPnP Client Adapter) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe -RunBySCM
O23 - Service: [VSSERV] - (BitDefender Virus Shield) -- "C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service
O23 - Service: [VzCdbSvc] - (VAIO Entertainment Database Service) -- "C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe"
O23 - Service: [VzFw] - (VAIO Entertainment File Import Service) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
O23 - Service: [W32Time] - (Horloge Windows) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [WebClient] - (WebClient) -- %SystemRoot%\system32\svchost.exe -k LocalService
O23 - Service: [WebrootSpySweeperService] - (Moteur Webroot Spy Sweeper) -- 
O23 - Service: [winmgmt] - (Infrastructure de gestion Windows) -- %systemroot%\system32\svchost.exe -k netsvcs
O23 - Service: [wscsvc] - (Centre de sécurité) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [wuauserv] - (Mises à jour automatiques) -- %systemroot%\system32\svchost.exe -k netsvcs
O23 - Service: [WZCSVC] - (Configuration automatique sans fil) -- %SystemRoot%\System32\svchost.exe -k netsvcs
O23 - Service: [XCOMM] - (BitDefender Communicator) -- "C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service

frajophi · Answer

et le point 2/ : # PCA Sécurité V 1.0.1, (fichier LOG Antivirus). # Analyse Antivirus du :16/08/2007 08:49:44 Microsoft Windows XP Service Pack 2 Objets reconnus : 000 Processus reconnus :000 - - - - - - - - - - - - - - [16/08/2007 08:49:23] - ==>>> Scan des Processus <<<== [16/08/2007 08:49:24] - ==>>> Scan de la base de registre <<<== [16/08/2007 08:49:25] - ==>>> Scan de : c:\ [16/08/2007 08:49:25] - ==>>> Scan de : d:\ [16/08/2007 08:49:25] - ==>>> Scan de : h:\ [16/08/2007 08:49:27] - ==>>> Scan de : C:\WINDOWS [16/08/2007 08:49:27] - ==>>> Scan de : C:\WINDOWS\SYSTEM\ [16/08/2007 08:49:27] - ==>>> Scan de : C:\WINDOWS\system32 [16/08/2007 08:49:39] - ==>>> Scan de : C:\Documents and Settings\Franck [16/08/2007 08:49:39] - ==>>> Scan de : C:\Documents and Settings\Franck\Menu Démarrer [16/08/2007 08:49:39] - ==>>> Scan de : C:\Documents and Settings\Franck\Menu Démarrer\Programmes\Démarrage [16/08/2007 08:49:39] - ==>>> Scan de : C:\Documents and Settings\All Users\Menu Démarrer [16/08/2007 08:49:39] - ==>>> Scan de : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage [16/08/2007 08:49:39] - ==>>> Scan de : C:\Documents and Settings\Franck\Bureau [16/08/2007 08:49:39] - ==>>> Scan de : C:\Documents and Settings\Franck\Bureau [16/08/2007 08:49:39] - ==>>> Scan de : C:\Documents and Settings\All Users\Bureau [16/08/2007 08:49:39] - ==>>> Scan de : C:\Program Files [16/08/2007 08:49:40] - ==>>> Scan de : C:\Documents and Settings\Franck\Application Data [16/08/2007 08:49:40] - ==>>> Scan de : C:\Documents and Settings\Franck\Local Settings\Application Data

FillPCA · Answer

Re,
Pour moi, il n'y a rien.

FillPCA

frajophi · Answer

Merci, en tout cas, pour ta patience ; je viens d'avoir Télé 2 et leur ai fait part de ce que nous avons fait pendant ces 2 jours ; ils vont approfondir (! vaudrait mieux !) ; ils n'ont pas d'info précise à me communiquer...

Bonne journée,
Frajophi.

FillPCA · Answer

Re,

OK. Tu peux me tenir au courant ? La suite m'intéresse...

FillPCA

Mon pc envoie des spams

24 réponses

Newsletters