infecté par plusieurs virus et je suis nulle

Question

bonsoir avast m' a détecté 2 infection nommées win32.agent AWB et agent 32 adaware.gen et spy bot lui m'a détecté un trojan je crois appellé PWS LDpinchIE je suis une grosse bille en pc alors j'ai besoin de vos lumières merci par avance , je poste un log hijackthis 


Logfile of HijackThis v1.99.1
Scan saved at 22:06, on 2007-08-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\FICHIE~1\Stardock\SDMCP.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SAGEM Wi-Fi USB 802.11g\WLANUTL.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\a-squared Free\a2service.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\Program Files\Fichiers communs\NMSAccessU.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [PMCS] C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe -host -clearDebug
O4 - HKLM\..\Run: [PMCRemote] C:\Program Files\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\Steam.exe -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.cg14.fr/sig/mg65ctrl_windows_activex_ie.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\FICHIE~1\Stardock\mcpstub.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\Fichiers communs\NMSAccessU.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

!^^![ME] · Answer

salut,

fait ceci:
http://bloginformatique.blogspot.com/2007/08/protection-necessaire.html
tu lance les scan et tu reviens avec les rapports:
spybot
avg
AD aware
ensuite fait ceci:
http://bloginformatique.blogspot.com/2007/08/tutorial-cc-cleaner.html
et ceci:
http://bloginformatique.blogspot.com/2007/08/f-secure-scan-en-ligne.html
reviens aussi avec le rapport f-secure

chourave12 · Answer

voilà j'ai fais un scan spy bot il ne ma rien détecté voilà les rapports ad aware, avg et f secure


Ad-Aware SE Build 1.06r1
Logfile Created on:2007-08-20 22:39:06
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R187 13.08.2007
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
MRU List(TAC index:0):13 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


2007-08-20 22:39:06 - Scan started. (Full System Scan)

 MRU List Object Recognized!
    Location:          : C:\Documents and Settings\lionel\recent
    Description        : list of recently opened documents


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\direct3d\mostrecentapplication
    Description        : most recent application to use microsoft direct3d


 MRU List Object Recognized!
    Location:          : software\microsoft\direct3d\mostrecentapplication
    Description        : most recent application to use microsoft direct3d


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\direct3d\mostrecentapplication
    Description        : most recent application to use microsoft direct X


 MRU List Object Recognized!
    Location:          : software\microsoft\direct3d\mostrecentapplication
    Description        : most recent application to use microsoft direct X


 MRU List Object Recognized!
    Location:          : software\microsoft\directdraw\mostrecentapplication
    Description        : most recent application to use microsoft directdraw


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\directinput\mostrecentapplication
    Description        : most recent application to use microsoft directinput


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\directinput\mostrecentapplication
    Description        : most recent application to use microsoft directinput


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\search assistant\acmru
    Description        : list of recent search terms used with the search assistant


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
    Description        : list of recent programs opened


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
    Description        : list of recently saved files, stored according to file extension


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\windows\currentversion\explorer\recentdocs
    Description        : list of recent documents opened


 MRU List Object Recognized!
    Location:          : S-1-5-21-1123561945-1383384898-725345543-1005\software\microsoft\windows media\wmsdk\general
    Description        : windows media sdk 


Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
    FilePath           : \SystemRoot\System32\
    ProcessID          : 612
    ThreadCreationTime : 2007-08-20 20:35:49
    BasePriority       : Normal


#:2 [csrss.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 700
    ThreadCreationTime : 2007-08-20 20:35:55
    BasePriority       : Normal


#:3 [winlogon.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 728
    ThreadCreationTime : 2007-08-20 20:36:00
    BasePriority       : High


#:4 [services.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 780
    ThreadCreationTime : 2007-08-20 20:36:00
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Applications Services et Contrôleur
    InternalName       : services.exe
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : services.exe

#:5 [lsass.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 792
    ThreadCreationTime : 2007-08-20 20:36:00
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : LSA Shell (Export Version)
    InternalName       : lsass.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : lsass.exe

#:6 [ati2evxx.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 940
    ThreadCreationTime : 2007-08-20 20:36:01
    BasePriority       : Normal
    FileVersion        : 6.14.10.4174
    ProductVersion     : 6.14.10.4174
    ProductName        : ATI External Event Utility for Windows
    CompanyName        : ATI Technologies Inc.
    FileDescription    : ATI External Event Utility EXE Module
    InternalName       : ATI2EVXX.EXE
    LegalCopyright     : Copyright © 1999-2007 ATI Technologies Inc.
    OriginalFilename   : ATI2EVXX.EXE

#:7 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 952
    ThreadCreationTime : 2007-08-20 20:36:01
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:8 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1036
    ThreadCreationTime : 2007-08-20 20:36:01
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:9 [svchost.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 1128
    ThreadCreationTime : 2007-08-20 20:36:01
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:10 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1184
    ThreadCreationTime : 2007-08-20 20:36:01
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:11 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1232
    ThreadCreationTime : 2007-08-20 20:36:02
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:12 [ati2evxx.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1324
    ThreadCreationTime : 2007-08-20 20:36:02
    BasePriority       : Normal
    FileVersion        : 6.14.10.4174
    ProductVersion     : 6.14.10.4174
    ProductName        : ATI External Event Utility for Windows
    CompanyName        : ATI Technologies Inc.
    FileDescription    : ATI External Event Utility EXE Module
    InternalName       : ATI2EVXX.EXE
    LegalCopyright     : Copyright © 1999-2007 ATI Technologies Inc.
    OriginalFilename   : ATI2EVXX.EXE

#:13 [sdmcp.exe]
    FilePath           : C:\PROGRA~1\FICHIE~1\Stardock\
    ProcessID          : 1452
    ThreadCreationTime : 2007-08-20 20:36:02
    BasePriority       : Normal
    FileVersion        : 0, 0, 5, 11
    ProductVersion     : 0, 0, 5, 11
    ProductName        : Stardock MCP Core Services (System Extensions and Hooks)
    CompanyName        : Stardock
    FileDescription    : MCPServer
    InternalName       : MCP
    LegalCopyright     : Copyright © 2005
    OriginalFilename   : SDMCP.exe

#:14 [aswupdsv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 1596
    ThreadCreationTime : 2007-08-20 20:36:02
    BasePriority       : Normal
    FileVersion        : 4, 7, 1029, 0
    ProductVersion     : 4, 7, 0, 0
    ProductName        : avast! Antivirus 
    CompanyName        : ALWIL Software
    FileDescription    : avast! Antivirus updating service
    InternalName       : aswUpdSv.exe
    LegalCopyright     : Copyright (c) 2007 ALWIL Software
    OriginalFilename   : aswUpdSv.exe

#:15 [ashserv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 1708
    ThreadCreationTime : 2007-08-20 20:36:02
    BasePriority       : High
    FileVersion        : 4, 7, 1029, 0
    ProductVersion     : 4, 7, 0, 0
    ProductName        : avast! Antivirus 
    CompanyName        : ALWIL Software
    FileDescription    : avast! antivirus service
    InternalName       : aswServ
    LegalCopyright     : Copyright (c) 2007 ALWIL Software
    OriginalFilename   : aswServ.exe

#:16 [explorer.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 1716
    ThreadCreationTime : 2007-08-20 20:36:02
    BasePriority       : Normal
    FileVersion        : 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)
    ProductVersion     : 6.00.2900.3156
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Explorateur Windows
    InternalName       : explorer
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : EXPLORER.EXE

#:17 [spoolsv.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1952
    ThreadCreationTime : 2007-08-20 20:36:04
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
    ProductVersion     : 5.1.2600.2696
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Spooler SubSystem App
    InternalName       : spoolsv.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : spoolsv.exe

#:18 [ashdisp.exe]
    FilePath           : C:\PROGRA~1\ALWILS~1\Avast4\
    ProcessID          : 416
    ThreadCreationTime : 2007-08-20 20:36:05
    BasePriority       : Normal
    FileVersion        : 4, 7, 1029, 0
    ProductVersion     : 4, 7, 0, 0
    ProductName        : avast! Antivirus 
    CompanyName        : ALWIL Software
    FileDescription    : avast! service GUI component
    InternalName       : aswDisp
    LegalCopyright     : Copyright (c) 2007 ALWIL Software
    OriginalFilename   : aswDisp.exe

#:19 [hpztsb09.exe]
    FilePath           : C:\WINDOWS\system32\spool\drivers\w32x86\3\
    ProcessID          : 456
    ThreadCreationTime : 2007-08-20 20:36:06
    BasePriority       : Normal
    FileVersion        : 2.245.1.0
    ProductVersion     : 2.245.1.0
    ProductName        : HP DeskJet
    CompanyName        : HP
    LegalCopyright     : Copyright (c) Hewlett-Packard Company 1999-2003

#:20 [hpcmpmgr.exe]
    FilePath           : C:\Program Files\HP\hpcoretech\
    ProcessID          : 476
    ThreadCreationTime : 2007-08-20 20:36:06
    BasePriority       : Normal
    FileVersion        : 2.1.1.0
    ProductVersion     : 2.1.4
    ProductName        : hp coretech  (COmponent REuse TECHnology)
    CompanyName        : Hewlett-Packard Company
    FileDescription    : HP Framework Component Manager Service
    InternalName       : HPComponentManagerService module
    LegalCopyright     : Copyright (C) Hewlett-Packard. 2002-2003
    OriginalFilename   : HpCmpMgr.exe

#:21 [hphmon05.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 484
    ThreadCreationTime : 2007-08-20 20:36:06
    BasePriority       : Normal
    FileVersion        : 5,3,5
    ProductVersion     : 5,3,5
    ProductName        : HP Photosmart
    CompanyName        : Hewlett-Packard
    FileDescription    : HPHmon05
    InternalName       : HPHmon05
    LegalCopyright     : Copyright (C) 2003
    OriginalFilename   : HPHmon05.exe

#:22 [pmc.service.main.exe]
    FilePath           : C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\
    ProcessID          : 508
    ThreadCreationTime : 2007-08-20 20:36:06
    BasePriority       : Normal


#:23 [remoterm.exe]
    FilePath           : C:\Program Files\Pinnacle\Shared Files\Programs\Remote\
    ProcessID          : 520
    ThreadCreationTime : 2007-08-20 20:36:06
    BasePriority       : Normal
    FileVersion        : 2.5.0.87
    ProductVersion     : 2, 0, 0, 0
    ProductName        : Pinnacle Media Center
    CompanyName        : Pinnacle Systems
    FileDescription    : Remote Control Application
    InternalName       : remoterm
    LegalCopyright     : Copyright © 2002-2004 Pinnacle Systems
    OriginalFilename   : remoterm.exe

#:24 [hpwuschd2.exe]
    FilePath           : C:\Program Files\Hewlett-Packard\HP Software Update\
    ProcessID          : 536
    ThreadCreationTime : 2007-08-20 20:36:06
    BasePriority       : Normal
    FileVersion        : 50.0.146.000
    ProductVersion     : 050.000.146.000
    ProductName        : hp digital imaging - hp all-in-one series
    CompanyName        : Hewlett-Packard Co.
    FileDescription    : Hewlett-Packard Product Assistant
    InternalName       : hpwuSchd2
    LegalCopyright     : Copyright (C) Hewlett-Packard Co. 1995-2004
    OriginalFilename   : hpwuSchd2.exe
    Comments           : Hewlett-Packard Product Assistant

#:25 [soundman.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 572
    ThreadCreationTime : 2007-08-20 20:36:06
    BasePriority       : Normal
    FileVersion        : 5.1.0.39
    ProductVersion     : 5.1.0.39
    ProductName        : Realtek Sound Manager
    CompanyName        : Realtek Semiconductor Corp.
    FileDescription    : Realtek Sound Manager
    InternalName       : ALSMTray
    LegalCopyright     : Copyright (c) 2001-2004 Realtek Semiconductor Corp.
    OriginalFilename   : ALSMTray.exe
    Comments           : Realtek AC97 Audio Sound Manager

#:26 [jusched.exe]
    FilePath           : C:\Program Files\Java\jre1.6.0_02\bin\
    ProcessID          : 596
    ThreadCreationTime : 2007-08-20 20:36:06
    BasePriority       : Normal


#:27 [avgas.exe]
    FilePath           : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\
    ProcessID          : 640
    ThreadCreationTime : 2007-08-20 20:36:07
    BasePriority       : Normal
    FileVersion        : 7, 5, 1, 43
    ProductVersion     : 7, 5, 1, 43
    ProductName        : AVG Anti-Spyware
    CompanyName        : GRISOFT s.r.o.
    FileDescription    : AVG Anti-Spyware
    InternalName       : AVG Anti-Spyware
    LegalCopyright     : Copyright © 2007 GRISOFT s.r.o.
    OriginalFilename   : avgas.exe

#:28 [msmsgs.exe]
    FilePath           : C:\Program Files\Messenger\
    ProcessID          : 656
    ThreadCreationTime : 2007-08-20 20:36:07
    BasePriority       : Normal
    FileVersion        : 4.7.3001
    ProductVersion     : Version 4.7.3001
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Windows Messenger
    InternalName       : msmsgs
    LegalCopyright     : Copyright (c) Microsoft Corporation 2004
    LegalTrademarks    : Microsoft(R) is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
    OriginalFilename   : msmsgs.exe

#:29 [ctfmon.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 704
    ThreadCreationTime : 2007-08-20 20:36:07
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : CTF Loader
    InternalName       : CTFMON
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : CTFMON.EXE

#:30 [em_exec.exe]
    FilePath           : C:\Program Files\Logitech\MouseWare\system\
    ProcessID          : 1012
    ThreadCreationTime : 2007-08-20 20:36:08
    BasePriority       : Normal
    FileVersion        : 9.80.019
    ProductVersion     : 9.80.019
    ProductName        : MouseWare
    CompanyName        : Logitech Inc.
    FileDescription    : Logitech Events Handler Application
    InternalName       : Em_Exec
    LegalCopyright     : (C) 1987-2004 Logitech. All rights reserved.
    LegalTrademarks    : Logitech® and MouseWare® are registered trademarks of Logitech Inc.
    OriginalFilename   : Em_Exec.exe
    Comments           : Created by the MouseWare team

#:31 [wlanutl.exe]
    FilePath           : C:\Program Files\SAGEM Wi-Fi USB 802.11g\
    ProcessID          : 1180
    ThreadCreationTime : 2007-08-20 20:36:09
    BasePriority       : Normal
    FileVersion        : 2, 0, 7, 8
    ProductVersion     : 2, 0, 7, 8
    ProductName        : SAGEM Wi-Fi 11g USB ADPATER LAN Utility
    FileDescription    : SAGEM Wi-Fi 11g USB adapter LAN Utility
    InternalName       : WLANUTL
    LegalCopyright     : Copyright (c) 2005, Inc
    OriginalFilename   : WLANUTL.EXE

#:32 [objectdock.exe]
    FilePath           : C:\Program Files\Stardock\ObjectDock\
    ProcessID          : 1196
    ThreadCreationTime : 2007-08-20 20:36:09
    BasePriority       : Normal
    FileVersion        : v1.20.520u
    ProductVersion     : v1.20.520u
    ProductName        : Stardock ObjectDock Plus
    CompanyName        : Stardock
    FileDescription    : ObjectDock Plus
    InternalName       : ObjectDock Plus
    LegalCopyright     : Copyright © 1999-2005 Jeff Bargmann, ©2002-2005 Stardock
    OriginalFilename   : ObjectDock.exe

#:33 [a2service.exe]
    FilePath           : C:\Program Files\a-squared Free\
    ProcessID          : 1532
    ThreadCreationTime : 2007-08-20 20:36:11
    BasePriority       : Normal
    FileVersion        : 3.0.0.345
    ProductVersion     : 3.0.0.0
    ProductName        : a-squared
    CompanyName        : Emsi Software GmbH
    FileDescription    : a-squared Service
    InternalName       : a2service
    LegalCopyright     : (C) 2003-2007 Emsi Software GmbH
    OriginalFilename   : a2service.exe

#:34 [guard.exe]
    FilePath           : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\
    ProcessID          : 1620
    ThreadCreationTime : 2007-08-20 20:36:11
    BasePriority       : Normal
    FileVersion        : 7, 5, 1, 22
    ProductVersion     : 7, 5, 1, 22
    ProductName        : AVG Anti-Spyware
    CompanyName        : GRISOFT s.r.o.
    FileDescription    : AVG Anti-Spyware guard
    InternalName       : AVG Anti-Spyware guard
    LegalCopyright     : Copyright © 2007 GRISOFT s.r.o.
    OriginalFilename   : guard.exe

#:35 [cdac11ba.exe]
    FilePath           : C:\WINDOWS\system32\drivers\
    ProcessID          : 1920
    ThreadCreationTime : 2007-08-20 20:36:13
    BasePriority       : Normal
    FileVersion        : 4.20.0
    ProductVersion     : 4.20.0 Windows NT 2002/07/15
    ProductName        : SafeCast Windows NT
    CompanyName        : Macrovision
    FileDescription    : Macrovision RTS Service
    InternalName       : CDANTSRV
    LegalCopyright     : Copyright (c) 1998-2002 Macrovision Corp.
    OriginalFilename   : CDANTSRV.EXE
    Comments           : StringFileInfo: U.S. English

#:36 [sqlservr.exe]
    FilePath           : C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\
    ProcessID          : 2092
    ThreadCreationTime : 2007-08-20 20:36:14
    BasePriority       : Normal
    FileVersion        : 2000.080.0760.00
    ProductVersion     : 8.00.760
    ProductName        : Microsoft SQL Server
    CompanyName        : Microsoft Corporation
    FileDescription    : SQL Server Windows NT
    InternalName       : SQLSERVR
    LegalCopyright     : © 1988-2003 Microsoft Corp. All rights reserved.
    LegalTrademarks    : Microsoft® is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation
    OriginalFilename   : SQLSERVR.EXE
    Comments           : NT INTEL X86

#:37 [nmsaccessu.exe]
    FilePath           : C:\Program Files\Fichiers communs\
    ProcessID          : 2168
    ThreadCreationTime : 2007-08-20 20:36:18
    BasePriority       : Normal


#:38 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 2344
    ThreadCreationTime : 2007-08-20 20:36:24
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:39 [pmshost.exe]
    FilePath           : c:\program files\pinnacle\shared files\programs\mediaserver\
    ProcessID          : 2604
    ThreadCreationTime : 2007-08-20 20:36:30
    BasePriority       : Normal


#:40 [ashwebsv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 3060
    ThreadCreationTime : 2007-08-20 20:36:53
    BasePriority       : Normal


#:41 [ashmaisv.exe]
    FilePath           : C:\Program Files\Alwil Software\Avast4\
    ProcessID          : 3144
    ThreadCreationTime : 2007-08-20 20:36:54
    BasePriority       : Normal


#:42 [hpzipm12.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 3308
    ThreadCreationTime : 2007-08-20 20:36:56
    BasePriority       : Normal
    FileVersion        : 8, 0, 0, 0
    ProductVersion     : 8, 0, 0, 0
    ProductName        : HP PML
    CompanyName        : HP
    FileDescription    : PML Driver
    InternalName       : PmlDrv
    LegalCopyright     : Copyright © 1998, 1999 Hewlett-Packard Company
    OriginalFilename   : PmlDrv.exe

#:43 [wmiprvse.exe]
    FilePath           : C:\WINDOWS\system32\wbem\
    ProcessID          : 3432
    ThreadCreationTime : 2007-08-20 20:36:58
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : WMI
    InternalName       : Wmiprvse.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : Wmiprvse.exe

#:44 [alg.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 3840
    ThreadCreationTime : 2007-08-20 20:37:03
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Application Layer Gateway Service
    InternalName       : ALG.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : ALG.exe

#:45 [wuauclt.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 2364
    ThreadCreationTime : 2007-08-20 20:37:20
    BasePriority       : Normal


#:46 [firefox.exe]
    FilePath           : C:\Program Files\Mozilla Firefox\
    ProcessID          : 2804
    ThreadCreationTime : 2007-08-20 20:37:48
    BasePriority       : Normal


#:47 [ad-aware.exe]
    FilePath           : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
    ProcessID          : 3612
    ThreadCreationTime : 2007-08-20 20:38:28
    BasePriority       : Normal
    FileVersion        : 6.2.0.236
    ProductVersion     : SE 106
    ProductName        : Lavasoft Ad-Aware SE
    CompanyName        : Lavasoft Sweden
    FileDescription    : Ad-Aware SE Core application
    InternalName       : Ad-Aware.exe
    LegalCopyright     : Copyright © Lavasoft AB Sweden
    OriginalFilename   : Ad-Aware.exe
    Comments           : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 13


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 13


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 13


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 13



Deep scanning and examining files (C:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for C:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 13


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
1 entries scanned.
New critical objects:0
Objects found so far: 13




Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 13

22:49:10 Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:10:04.15
Objects scanned:167021
Objects identified:0
Objects ignored:0
New critical objects:0

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	20:41 2007-08-20

 + Résultat de l'analyse:	



	Rien à signaler.



Fin du rapport

Scanning Report
Monday, August 20, 2007 23:40:45 - 00:23:48

Computer name: LIONEL-03BFC10D
Scanning type: Scan system for viruses, rootkits, spyware
Target: C:\
Result: 2 malware found
NetworkWorm.VO (virus)

    * C:\DOCUMENTS AND SETTINGS\LIONEL\MES DOCUMENTS\T&#65533;L&#65533;CHARGEMENT\ASWCLNR.EXE (Submitted) 

Trojan.Win32.StartPage.apr (virus)

    * C:\PROGRAM FILES\HIJACKTHIS VERSION FRAN&#65533;AISE\BACKUPS\BACKUP-20070718-102453-766-DEM.EXE (Renamed & Submitted) 

Statistics
Scanned:

    * Files: 34759
    * System: 4677
    * Not scanned: 4 

Actions:

    * Disinfected: 0
    * Renamed: 1
    * Deleted: 0
    * None: 1
    * Submitted: 2 

Files not scanned:

    * C:\PAGEFILE.SYS
    * C:\WINDOWS\SYSTEM32\DRIVERS\SPTD.SYS
    * C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
    * C:\WINDOWS\SOFTWAREDISTRIBUTION\EVENTCACHE\{5C644991-0A0E-4EFF-8BF1-B9630A1DB700}.BIN 

Options
Scanning engines:

    * F-Secure Libra: 2.4.2, 2007-08-16
    * F-Secure AVP: 7.0.171, 2007-08-17
    * F-Secure Orion: 1.2.37, 2007-08-20
    * F-Secure Blacklight: 1.0.64
    * F-Secure Draco: 1.0.35, 0260-23-12
    * F-Secure Pegasus: 1.19.0, 2007-07-13 

Scanning options:

    * Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB BAT LNK ANI AVB CEO CMD LSP MAP MHT MIF PDF PHP POT WMF NWS TAR TGZ WSF ZL? {* ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
    * Use Advanced heuristics

!^^![ME] · Answer

est ce que ton pc est encore lent?
si oui a quels moments?--
Un hacker sachant hacker sans infections est pour moi un bon hacker

!^^![ME] · Answer

pour moi RAS si ton pc n'est plus lent...et que tu n'a plus de probleme alors...RESOLU stp

!^^![ME] · Answer

je pense que tu a bien fait mais pourquoi tu ne l'a pas mit en quarantaine?

Infecté par plusieurs virus et je suis nulle

5 réponses

Discussions similaires

Newsletters