Comment détruire W32Agent.BEPW
Bonjour,
Qui aurait une solution facile pour détruire ce virus W32Agent.BEPW? merci de votre aide
Qui aurait une solution facile pour détruire ce virus W32Agent.BEPW? merci de votre aide
Configuration: Windows XP Internet Explorer 7.0
4 réponses
-
Contributeur sécuritébonsoir,
* Télécharge HijackThis et poste le rapport stp
hijackthis
lance un scan "do a system scan & save a logfile"
poste le rapport généré ici ensuite
-
Bonjour,
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:40:33, on 11/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\dmadmin.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/abonnes.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe
O1 - Hosts: 212.58.240.33 sandbox.norman.no
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Chercher avec Copernic - file://C:\Program Files\Copernic 2000\Search Extension.htm
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.tele2.fr/startpage/dialup/fr/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} (IsHere Class) - http://barremagique.aliceadsl.fr/download/BarreMagique.cab
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - https://www.f-secure.com/en/home/support
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/71365/kavwebscan_unicode.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) - http://arcaonline.arcabit.com/ArcaOnline.cab
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/filesharingctrl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {74F6B963-B89B-44D4-AAD0-8EEDC4973314} (IsHere Class) - http://barremagique.tiscali.fr/download/TiscaliBarreMagique.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - https://www.zonealarm.com/
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.oziol-motos.com/axis/AxisCamControl.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game08.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C68F9105-04FD-4B48-B6CC-2A076F711C35} (HpodPCFileCtrl2 Class) - file://D:\MEMDISC\ALBUM_A\VIEW\PLUGIN\HPODPCFC.CAB
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} - http://ww11.commandondemand.com/eval/cod/cabs/cssweb.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp07.photoprintit.de/microsite/9358/defaults/activex/IPSUploader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: bw+0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw+0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw-0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw-0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw00 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw00s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw10 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw10s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw20 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw20s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw30 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw30s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw40 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw40s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw50 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw50s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw60 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw60s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw70 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw70s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw80 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw80s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw90 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw90s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwa0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwa0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwb0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwb0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwc0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwc0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwd0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwd0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwe0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwe0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwf0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwf0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)
O18 - Protocol: bwg0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwg0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwh0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwh0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwi0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwi0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwj0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwj0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwk0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwk0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwl0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwl0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwm0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwm0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwn0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwn0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwo0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwo0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwp0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwp0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwq0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwq0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwr0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwr0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bws0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bws0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwt0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwt0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwu0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwu0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwv0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwv0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bww0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bww0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwx0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwx0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwy0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwy0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwz0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwz0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: offline-8876480 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
-
Bonjour,
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:40:33, on 11/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\dmadmin.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/abonnes.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe
O1 - Hosts: 212.58.240.33 sandbox.norman.no
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Chercher avec Copernic - file://C:\Program Files\Copernic 2000\Search Extension.htm
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.tele2.fr/startpage/dialup/fr/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} (IsHere Class) - http://barremagique.aliceadsl.fr/download/BarreMagique.cab
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - https://www.f-secure.com/en/home/support
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/71365/kavwebscan_unicode.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) - http://arcaonline.arcabit.com/ArcaOnline.cab
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/filesharingctrl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {74F6B963-B89B-44D4-AAD0-8EEDC4973314} (IsHere Class) - http://barremagique.tiscali.fr/download/TiscaliBarreMagique.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - https://www.zonealarm.com/
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.oziol-motos.com/axis/AxisCamControl.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game08.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C68F9105-04FD-4B48-B6CC-2A076F711C35} (HpodPCFileCtrl2 Class) - file://D:\MEMDISC\ALBUM_A\VIEW\PLUGIN\HPODPCFC.CAB
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} - http://ww11.commandondemand.com/eval/cod/cabs/cssweb.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp07.photoprintit.de/microsite/9358/defaults/activex/IPSUploader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: bw+0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw+0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw-0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw-0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw00 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw00s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw10 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw10s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw20 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw20s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw30 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw30s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw40 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw40s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw50 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw50s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw60 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw60s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw70 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw70s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw80 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw80s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw90 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw90s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwa0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwa0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwb0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwb0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwc0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwc0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwd0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwd0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwe0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwe0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwf0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwf0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)
O18 - Protocol: bwg0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwg0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwh0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwh0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwi0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwi0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwj0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwj0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwk0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwk0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwl0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwl0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwm0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwm0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwn0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwn0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwo0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwo0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwp0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwp0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwq0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwq0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwr0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwr0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bws0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bws0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwt0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwt0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwu0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwu0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwv0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwv0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bww0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bww0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwx0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwx0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwy0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwy0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwz0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwz0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: offline-8876480 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
-
-
et après que faire ?
-
Contributeur sécuritére
je vais regarder ton rapport, pendant ce temps tu peux faire ceci stp
* Télécharge CCleaner.
https://www.pcastuces.com/logitheque/ccleaner.htm
Installe le dans un répertoire dédié.
Décoche pendant l'installation
--- les deux cases "Ajouter l'option ... "
--- Contrôler les mises à jour
--- Ajouter la Barre d'Outils Yahoo! CCleaner
* Lance Ccleaner pour un nettoyage complet.
------
* télécharge AVG Anti-Spyware (ewido)
https://www.avg.com/en-ww/free-antivirus-download
* tu l'installes
* lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente
puis
Lance AVG Anti-Spyware
Clique sur le bouton Analyse (de la barre d'outils)
puis fait dans l'ordre stp. Tu sauvegardes le rapport APRES avoir mis les actions.
Puis sur l'onglet Paramètres,
sous : "Comment réagir "clique sur Actions recommandées. Sélectionne Quarantaine.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option 3
"Appliquer toutes les actions " en bas.
Clique sur "Enregistrer le rapport".
Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
Poste le. -
Contributeur sécuritétu n'es pas à jour pour JAVA
c'est ici :
https://www.oracle.com/java/technologies/javase-downloads.html
4éme liens...Java Runtime Environnement--->JRE:6u3--->Windows offline
puis
* lance hijackthis puis coche ces lignes :
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} (IsHere Class) - http://barremagique.aliceadsl.fr/download/BarreMagique.cab
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/71365/kavwebscan_unicode.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) - http://arcaonline.arcabit.com/ArcaOnline.cab
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/...
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class)
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://eu-housecall.trendmicro-europe.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/...
O16 - DPF: {74F6B963-B89B-44D4-AAD0-8EEDC4973314} (IsHere Class) - http://barremagique.tiscali.fr/download/TiscaliBarreMagique.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner371050.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.oziol-motos.com/axis/AxisCamControl.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game08.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C68F9105-04FD-4B48-B6CC-2A076F711C35} (HpodPCFileCtrl2 Class) - file://D:\MEMDISC\ALBUM_A\VIEW\PLUGIN\HPODPCFC.CAB
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} - http://ww11.commandondemand.com/eval/cod/cabs/cssweb.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp07.photoprintit.de/microsite/9358/defaults/activex/IPSUploader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: bw+0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw+0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw-0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw-0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw00 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw00s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw10 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw10s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw20 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw20s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw30 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw30s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw40 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw40s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw50 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw50s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw60 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw60s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw70 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw70s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw80 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw80s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw90 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bw90s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwa0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwa0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwb0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwb0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwc0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwc0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwd0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwd0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwe0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwe0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwf0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwf0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)
O18 - Protocol: bwg0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwg0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwh0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwh0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwi0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwi0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwj0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwj0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwk0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwk0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwl0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwl0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwm0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwm0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwn0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwn0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwo0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwo0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwp0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwp0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwq0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwq0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwr0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwr0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bws0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bws0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwt0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwt0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwu0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwu0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwv0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwv0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bww0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bww0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwx0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwx0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwy0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwy0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwz0 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: bwz0s - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
O18 - Protocol: offline-8876480 - {22D0B66D-3648-4B9E-AA6D-162ECAB4ED85} - (no file)
* toutes applications fermées et HORS CONNEXION, clique sur "fix checked"
puis
supprime via ajout et suppression de programme si tu le trouves
eoRezo
SweetIM
et supprime :
C:\Program Files\eoRezo---le dossier
C:\Program Files\Macrogaming\Sweetim------le dossier