DefenseNetsurfage et Protection conue

Question

Bonjour,
Ce matin en allumant mon ordinateur j'ai remarqué ±ue le fond d'é£²an avait changé ¢your privacy is in danger" et il y avait des fenetres qui s'affiché¥³ me damandant de té¬©charger DefenseNetsurfage ou  Protection conue. j'ai norton antivirus pourtant !!!!Donc j'ai cherché ³ur internet defenseNetsurfage et je suis tombé ³ur votre site ou j'ai trouvé µne personne qui avait eu le mê­¥ problè­¥ que moi donc j'ai suivi les é´¡pes : 
j'ai té¬©chargé ³mitfraudfix en suivant les instructions Dieu merci en redé­¡rrant le fond d'é£²an"your privacy is in danger" avait disparu 
ensuite j'ai té¬©chargé ¨ttp://www.bitdefender.com/scan8/ie.html est j'ai encore des fichiers infecté³
Et le problè­¥ a recommencé ¬es fenetres DefenseNetsurfage et Protection conue apparaisent toujours que dois-je faire pour supprimer le problè­¥ mê­¥ en analysant le systè­¥ avec norton et en supprimant les virus.
Merci pour les solutions que vous pouvez apporté   mon problè­¥ !!!!

jlpjlp · Answer

colle un rapport hijackthis 
 
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

manuel :

https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html


Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo. 

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste 

Ensuite avec Explorer créer un dossier c:\hijackthis 
Décompresser Hijackthis dans ce dossier. 
C'est important pour les sauvegardes."



_______________________


lance rogue remover 


pour telecharger :
https://www.01net.com/telecharger/

_______________________


smit fraud fix (colle le rapport)

1/ telecharger :

http://siri.urz.free.fr/Fix/SmitfraudFix.php




2/ double clique sur smitfraudfix. puis sélectionne 1 et appuyer sur entrée afin de créer le rapport des infection présentes. une fois le rapport effectué redémarre en mode sans échec (en appuyant sur F8 ou suppr, ou F5 au démarrage en général) 

3/ puis refaire comme en 2/ mais sélectionne l'option 2 et appuyer sur entrée pour commencer la désinfection. lorsque le programme demande si tu veut nettoyer le registre mets oui en tapant 0 et entrée





 colle le rapport d'un scan en ligne 
avec un des suivants: 


bitdefender en ligne : 
http://www.bitdefender.fr/scan_fr/scan8/ie.html 

Panda en ligne : 
http://pandasoftware.fr

secuser en ligne :
http://www.secuser.com/outils/antivirus.htm

oum-choucha · Answer

Logfile of HijackThis v1.99.1
Scan saved at 18:02:14, on 24/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\WINDOWS\system32egsvr32.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\BitDefender\BitDefender 2008\uiscan.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: (no name) - {749C033F-C489-F3EF-B5C5-00B8C78C4344} - C:\Program Files\xxwmplvt\xlxzvmpw.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CNavExtBho Class - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: MSVPS System - {AC546B33-036A-41DA-B1CC-C1D15659520E} - C:\WINDOWS\movctrlflm.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: The nssfrch - {61AB8A39-FCCB-47CC-BAF3-750D1834E773} - C:\WINDOWS
ssfrch.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe"
O4 - HKLM\..\Run: [vobyxmrk] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\vobyxmrk.dll"
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU "C:\WINDOWS\TEMP\E_S948.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [EPSON Product Rappel concernant l'enregistrement] C:\WINDOWS\Temp\RegModule.exe
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O21 - SSODL: bxsbang - {B2301C26-2587-4AF5-BB45-8CC89D842A3D} - C:\WINDOWS\bxsbang.dll
O21 - SSODL: ocgrep - {8D3EC1C6-7E47-460C-A1F0-3F7168F80186} - C:\WINDOWS\ocgrep.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

oum-choucha · Answer

Mon ordinateur est très lent !!!! il y 3 icones qui apparaissent sur le bureau et dans mes favoris : 
Error Cleaner
Privacy Protector
Spyware&Malware Protection

jlpjlp · Answer

fais la suite: rogue remover, smitfraud fix et scan en ligne

oum-choucha · Answer

SmitFraudFix v2.240

Rapport fait à 18:41:51,67, 24/10/2007
Executé à partir de C:\Documents and Settings\KAOUTAR\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\WINDOWS\system32egsvr32.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\KAOUTAR


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\KAOUTAR\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\KAOUTAR\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="file:///C:\WINDOWS\privacy_danger\index.htm"
"SubscribedURL"=""
"FriendlyName"="Privacy Protection"
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Generic Marvell Yukon Chipset based Ethernet Controller - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{C400098B-E93C-4F05-8D46-5D6222FF9779}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{C400098B-E93C-4F05-8D46-5D6222FF9779}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{C400098B-E93C-4F05-8D46-5D6222FF9779}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

oum-choucha · Answer

SmitFraudFix v2.240

Rapport fait à 18:48:34,03, 24/10/2007
Executé à partir de C:\Documents and Settings\KAOUTAR\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{C400098B-E93C-4F05-8D46-5D6222FF9779}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{C400098B-E93C-4F05-8D46-5D6222FF9779}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{C400098B-E93C-4F05-8D46-5D6222FF9779}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

le_frunkpeur_2007 · Answer

Salut à toi Oum-choucha,

Bizarremment j' ai exactement la même chose que toi.Mais alors pareil moi je l'ai eu hier aussi en allumant l' ordi.Je vois ''vous êtes infecter par des virus et spywares veuillez télécharger defensenetsurfage et protection conue pour les  éliminer et avoir une protection complète''(à un peu de choses près les mots) alors que moi aussi j' ai un anti-virus un anti-spywares etc...D'abord je les avais installer et protection conue m' avait trouver des ''crasses'' mais il ne voulait pas me le enlever il fallait acheter le logiciel pour que ça marche.Je le ai donc désinstaller et donc encore aujourd'hui j' ai eu chaque fois un message qui m'indique que mon ordi est sous la menace de je ne sais plus quel virus et il me donne également à chaque fois une page internet qui ne fonctionne pas ainsi qu' un rond rouge avec une croix blanche dans ma barre de lancement qui ne part pas non plus.Ah oui j' ai également les trois icônes sur mon bureau qui s'affichent et même si je les effacent elles reviennent à chaque démarrage.Donc je ne sais pas quoi faire non-plus je suis comme toi oum-choucha impuissant devant ces fenêtres qui s'ouvrent toutes les 30 secondes et j' ai même refais tout mon scan avec anti-virus etc mais rien à faire.Alors si quelqu'un pouvait nous aider ou bien si il a le même problème qu'il nous en fasse part parce que c'est vraiment chi..t quand on est sur l'ordi et oum-choucha si tu as une solution pour ce problème n'hésite pas à m'en faire part.

Merci et bonne soirée.

jlpjlp · Answer

slt cré ton propre post et colle un rapport hijackthis et smitraud fix svp sinon on se perd

oum-choucha · Answer

BitDefender Online Scanner -Scan Report

BitDefender Online Scanner

Scan report generated at: Wed, Oct 24, 2007 - 19:45:02

Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;

Statistics
Time	00:34:56
Files	188694
Folders	4270
Boot Sectors	4
Archives	7390
Packed Files	12613

Results
Identified Viruses	1
Infected Files	4
Suspect Files	0
Warnings	0
Disinfected	0
Deleted Files	4

Engines Info
Virus Definitions	853538
Engine build	AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins	14
Archive plugins	38
Unpack plugins	7
E-mail plugins	6
System plugins	1

Scan Settings
First Action	Disinfect
Second Action	Delete
Heuristics	Yes
Enable Warnings	Yes
Scanned Extensions	*;
Exclude Extensions
Scan Emails	Yes
Scan Archives	Yes
Scan Packed	Yes
Scan Files	Yes
Scan Boot	Yes

Scanned File	Status
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B0.tmp=>(NSIS o)=>lzma_solid_nsis0000	Infected with: Trojan.Downloader.Zlob.AAVM
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B0.tmp=>(NSIS o)=>lzma_solid_nsis0000	Disinfection failed
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B0.tmp=>(NSIS o)=>lzma_solid_nsis0000	Deleted
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B0.tmp=>(NSIS o)	Update failed
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B0.tmp=>(NSIS o)=>lzma_solid_nsis0004	Infected with: Trojan.Downloader.Zlob.AAVM
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B0.tmp=>(NSIS o)=>lzma_solid_nsis0004	Disinfection failed
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B0.tmp=>(NSIS o)=>lzma_solid_nsis0004	Deleted
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B0.tmp=>(NSIS o)	Update failed
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B9.tmp=>(NSIS o)=>lzma_solid_nsis0000	Infected with: Trojan.Downloader.Zlob.AAVM
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B9.tmp=>(NSIS o)=>lzma_solid_nsis0000	Disinfection failed
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B9.tmp=>(NSIS o)=>lzma_solid_nsis0000	Deleted
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B9.tmp=>(NSIS o)	Update failed
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B9.tmp=>(NSIS o)=>lzma_solid_nsis0004	Infected with: Trojan.Downloader.Zlob.AAVM
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B9.tmp=>(NSIS o)=>lzma_solid_nsis0004	Disinfection failed
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B9.tmp=>(NSIS o)=>lzma_solid_nsis0004	Deleted
C:\Documents and Settings\MOSTAFA\Local Settings\Temp\BIT1B9.tmp=>(NSIS o)	Update failed

message du scan de bitdefender mon ordinateur est encore infecté ! dois supprimer ce que j'ai installé ?

oum-choucha · Answer

BitDefender Online Scanner -Scan Report

BitDefender Online Scanner

Scan report generated at: Wed, Oct 24, 2007 - 19:45:02

Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;

Statistics
Time	00:34:56
Files	188694
Folders	4270
Boot Sectors	4
Archives	7390
Packed Files	12613

Results
Identified Viruses	1
Infected Files	4
Suspect Files	0
Warnings	0
Disinfected	0
Deleted Files	4

Engines Info
Virus Definitions	853538
Engine build	AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins	14
Archive plugins	38
Unpack plugins	7
E-mail plugins	6
System plugins	1

oum-choucha · Answer

BitDefender Online Scanner -Scan Report

BitDefender Online Scanner

Scan report generated at: Wed, Oct 24, 2007 - 19:45:02

Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;

Statistics
Time	00:34:56
Files	188694
Folders	4270
Boot Sectors	4
Archives	7390
Packed Files	12613

Results
Identified Viruses	1
Infected Files	4
Suspect Files	0
Warnings	0
Disinfected	0
Deleted Files	4

Engines Info
Virus Definitions	853538
Engine build	AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins	14
Archive plugins	38
Unpack plugins	7
E-mail plugins	6
System plugins	1

Scan Settings
First Action	Disinfect
Second Action	Delete
Heuristics	Yes
Enable Warnings	Yes
Scanned Extensions	*;
Exclude Extensions
Scan Emails	Yes
Scan Archives	Yes
Scan Packed	Yes
Scan Files	Yes
Scan Boot	Yes

jlpjlp · Answer

je voudrais le rapport avec le nom des virus trouvés, les actions et le lieu des infections svp


recolle un rapport hijackthis

et surtout dis tes pbs

oum-choucha · Answer

j'ai fait le scan avec mon antivirus bitdefender et il a trouvé 3 menaces touchant 9 objets : 

Adware.Zango.AU  :"Echec de la désinfection" Activé 3 infections         je peux le supprimer
Detecté : C:\System volume Information\_restore...21\A0004370.exe=>(NSIS)=>Izma_solid_nsis0004
Detecté : C:\System volume Information\_restore...21\A0004383.exe=>(NSIS)=>Izma_solid_nsis0004
Detecté : C:\System volume Information\_restore...21\A0004396.exe=>(NSIS)=>Izma_solid_nsis0004

Trojan.Downloader.Zlob.AAVM  :"Echec de la désinfection" Activé 4 infections          je ne peux pas le supprimer
Infecté : C:\Documents and settings\MOSTAFA\Lo...Temp\BIT1B0.tmp=>(NSIS o)=>Izma_solid_nsis0000
Infecté : C:\Documents and settings\MOSTAFA\Lo...Temp\BIT1B0.tmp=>(NSIS o)=>Izma_solid_nsis0004
Infecté : C:\Documents and settings\MOSTAFA\Lo...Temp\BIT1B9.tmp=>(NSIS o)=>Izma_solid_nsis0000
Infecté : C:\Documents and settings\MOSTAFA\Lo...Temp\BIT1B9.tmp=>(NSIS o)=>Izma_solid_nsis0004

Trojan.Zlob.BWA :"Echec de la désinfection" Activé 2 infections      je ne peux pas le supprimer
Infecté : C:\Documents and settings\MOSTAFA\Lo...Temp\BIT1B0.tmp=>(NSIS o)=>Izma_solid_nsis0005
Infecté : C:\Documents and settings\MOSTAFA\Lo...Temp\BIT1B9.tmp=>(NSIS o)=>Izma_solid_nsis0005




L'ordinateur est toujours lent surtout pour le net

oum-choucha · Answer

Logfile of HijackThis v1.99.1
Scan saved at 21:10:25, on 24/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\WINDOWS\system32egsvr32.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: (no name) - {749C033F-C489-F3EF-B5C5-00B8C78C4344} - C:\Program Files\xxwmplvt\xlxzvmpw.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CNavExtBho Class - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: MSVPS System - {AC546B33-036A-41DA-B1CC-C1D15659520E} - C:\WINDOWS\movctrlflm.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: The nssfrch - {61AB8A39-FCCB-47CC-BAF3-750D1834E773} - C:\WINDOWS
ssfrch.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe"
O4 - HKLM\..\Run: [vobyxmrk] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\vobyxmrk.dll"
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU "C:\WINDOWS\TEMP\E_S948.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [EPSON Product Rappel concernant l'enregistrement] C:\WINDOWS\Temp\RegModule.exe
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O21 - SSODL: bxsbang - {B2301C26-2587-4AF5-BB45-8CC89D842A3D} - C:\WINDOWS\bxsbang.dll
O21 - SSODL: ocgrep - {8D3EC1C6-7E47-460C-A1F0-3F7168F80186} - C:\WINDOWS\ocgrep.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

jlpjlp · Answer

tu as norton et bitdefender : vire un des deux


___________________


utilise

CCLEANER: (lance un nettoyage et répare 3 fois les erreurs) sans installer la barre yahoo

https://www.01net.com/

___________________


AVG antispyware

https://www.01net.com/

Tuto :
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html


->Relance AVG AS -> "Analyse" ->"Paramètres"

Sous la question "Comment réagir ?" :

-> clique sur "Actions recommandées" et choisis "Quarantaines"
-> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

Si un fichier est infecté en fin d'analyse

->Clique sur "Appliquer toutes les actions "

->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".

->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici 

_______________________

combofix (colle le rapport)

http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

http://mickael.barroux.free.fr/securite/combofix.php
__________________________


Colle le rapport :
Clean permettra de faire du nettoyage et supprimer des fichiers que des anti-virus et anti-spywares n'ont pas pu trouver. Le logiciel est régulièrement mis à jour, vous devrez donc le re-téléchargé pour obtenir une version plus récente.

· Téléchargez clean.zip, décompressez-le sur votre bureau (clic droit / extraire tout), vous obtenez alors un dossier clean
· Démarrez Windows en mode sans échec : Guide pour redémarrer en mode sans échec
· Ouvrez le dossier clean qui se trouve sur ton bureau, et double-cliquez sur clean.cmd, une fenêtre noire va apparaître pendant un instant, laissez la ouverte jusqu'à ce qu'elle se ferme.

manuel:
http://kerio.probb.fr/tuto-Clean-h37.html

_______________________

désactive la restauration système pour purger les virus qui seraient dedans(dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)

redemarre ton ordi
puis
 puis réactive là 
------------------

oum-choucha · Answer

juste une question si je restaure le système avec les cd de restauration est  ce que le problème sera règlé ?

oum-choucha · Answer

je suis entrain de faire l'analyse complète avec avg anti-spyware
les virus sont revenus !!! au secours !!!

jlpjlp · Answer

colle les rapports
on verra

oum-choucha · Answer

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	23:32:48 24/10/2007

 + Résultat de l'analyse:	



C:\Documents and Settings\MOSTAFA\Cookies\mostafa@247realmedia[1].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.108:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.141:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@brightcove.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@cupolaventures.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@karavel.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Aucune action entreprise.
:mozilla.146:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@adrevolver[3].txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.117:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.118:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.119:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.120:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.52:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@www.burstnet[2].txt -> TrackingCookie.Burstnet : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@ad1.clickhype[1].txt -> TrackingCookie.Clickhype : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@dealtime[1].txt -> TrackingCookie.Dealtime : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Aucune action entreprise.
:mozilla.44:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@doubleclick[2].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@enhance[2].txt -> TrackingCookie.Enhance : Aucune action entreprise.
:mozilla.21:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@fastclick[1].txt -> TrackingCookie.Fastclick : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@findwhat[1].txt -> TrackingCookie.Findwhat : Aucune action entreprise.
:mozilla.25:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@ehg-globalgamingleague.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@ehg-veohnetworksinc.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Aucune action entreprise.
:mozilla.50:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Imrworldwide : Aucune action entreprise.
:mozilla.51:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Imrworldwide : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@server.lon.liveperson[1].txt -> TrackingCookie.Liveperson : Aucune action entreprise.
:mozilla.28:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Aucune action entreprise.
:mozilla.31:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@overture[2].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@questionmarket[1].txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@revsci[2].txt -> TrackingCookie.Revsci : Aucune action entreprise.
:mozilla.33:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.34:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.35:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.36:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.37:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.42:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.38:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.39:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.40:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.41:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.113:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Statcounter : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@statcounter[1].txt -> TrackingCookie.Statcounter : Aucune action entreprise.
:mozilla.147:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.148:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.149:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.150:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.11:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.12:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.13:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.14:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.76:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Webtrends : Aucune action entreprise.
:mozilla.77:C:\Documents and Settings\MOSTAFA\Application Data\Mozilla\Firefox\Profiles\3zwvl82s.default\cookies.txt -> TrackingCookie.Webtrends : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@m.webtrends[2].txt -> TrackingCookie.Webtrends : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@yadro[2].txt -> TrackingCookie.Yadro : Aucune action entreprise.
C:\Documents and Settings\MOSTAFA\Cookies\mostafa@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.


Fin du rapport

oum-choucha · Answer

le rapport que je viens d'envoyer c avant la quarantaine je suis entrain de faire une autre analyse et j'enverrai le rapport

oum-choucha · Answer

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	00:07:10 25/10/2007

 + Résultat de l'analyse:	



C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.


Fin du rapport

dois je refaire une autre analyse ???

oum-choucha · Answer

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	09:54:38 25/10/2007

 + Résultat de l'analyse:	



C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@media.adrevolver[1].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\KAOUTAR\Cookies\kaoutar@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.


Fin du rapport

oum-choucha · Answer

je ne sais pas si c'est le rapport combofix ? 
NTI Backup NOW! for Windows 98/ME/NT/2000/XP
With Burner Database File Version 447

Table of Contents
-----------------
A. List of Supported CD-R/RW and DVD+/-R/RW/RAM Drives
B. Emergency Recovery


A. List of Supported CD-R/RW and DVD+/-R/RW/RAM Drives
----------------------------------------------------------------------
001. 1394 (Acer): CD-R/RW 12X8X32.
002. 2.4X2.4X8 (LITE-ON): 121032.
003. 48X24 (AccessTek): COMBO.
004. 52X24 (MSI): CDRW.
005. 52X32 (MSI): CDRW.
006. AccessTek: CD-RW CW0801, CW1601, CW1601A, CW3201, CW4001, CW4002, CW4801, CW4802, CW5201, CW5202, CW5205, CW5207, TCW5201, COMBO DC4801.
007. ACER: CB5224-QA0, CD-RW 52X32-B0, 52X32-L0, 52X32-M0, COMBO 48X24-B0, 48X24-H0, 48X24-L0, 48X24-M0, DVD Du 4X/24X-A0, 4X/24X-B0, 4X/24X-H0, 4X/24X-L0, 4X/24X-M0, 4X/24X-P0, 8X/48X-A0, 8X/48X-B0, 8X/48X-H0, 8X/48X-L0, 8X/48X-M0, 8X/48X-P0, DVD DUAL 4XMax, DVD RW 16XMax, 4XMax, 8XMax, DVD+RW 4X/40X-A0, 4X/40X-B0, 4X/40X-H0, 4X/40X-L0, 4X/40X-M0, 4X/40X-P0, 4XMax, 4XMaxA, 8X/48X-A0, 8X/48X-B0, 8X/48X-H0, 8X/48X-L0, 8X/48X-M0, 8X/48X-P0, 8XMax, DVD-RW 4XMax, 8XMax.
008. ACTIMA: ARW4420, ARW4420S, ARW4424P, ARW4432P, G44A24, G44P24, G44A32, G44P32, DVD+RW ADRW-H00P.
009. AOPEN: 16X48X24X48, 16X52X24X52COMBO, 16X52X32X52COMBO, 16X8 DVD DUAL, 20X10X40 CD-RW, 24X10X40 CD-RW, 24X10X48 CD-RW, 32X12X48 CD-RW, 40X12X48 CD-RW, 40X12X50 CD-RW, 48X12X48 CD-RW, 48X12X50 CD-RW, 48X16X48 CD-RW, 48X24X52 CD-RW, 4X IDE CD-RW, 52X24X52 CD-RW, 52X32CD-RW, 52X32COMBO, 52X32X52 CD-RW, 8X4X32 IDE CD-RW, CDRW5232, COM4824, COM4824/AAH, COM5224, COM5224/AAH, COMBO48X, CQ2440, CQ3248, CQ4048, CQ4848, CQ4852, CQ5252, CQ5252PRO, CRS446U, CRS9420, CRS9624, CRW5232/AAO, CRW5232/BKS, CRW620, CRW622, CRW8432, CRW8832, CRW9420, CRW9420S, CRW9624, CRW9624S, CRW9632, CRW9832, CRW1232, DRW4410, DRW4416, DRW4624, DRW8120, DUW1608/ARR, DUW1616/ARR, DVRW2412PRO, IDE4016CO, IDE4816CO, 12X10X32 CD-RW, A, P, 16X10X32 CD-RW, A, 4X4X20 IDE CD-RW, SCSI CDRW, SLIM CDRW, 4X4X8 241040, 241640, 6X4X24 IDE CD-RW, SCSI CDRW, SLIM CDRW, 8X DVD Dual ABB, ABG, ACC, ACG, 8X8 DVD Dual AAG, AAN, ACC, ACG, APG, APP, CD-RW CRW1232 A, CRW1232PRO, CRW1632, CRW1632 A, CRW2040, CRW2440, CRW2448, CRW3248, CRW4048, CRW4050, CRW4850, CRW4852, CRW5224, CRW5232, CDRW/DVD SB2410E, COM5232/AAH, PRO, COMBO SDW-824, CRW5232/AAO PRO, DVD Du 4X/24X-A0, 8X/48X-A0, DVD DUAL SU4216E, DVD RW Drive, ISU8424E, DVD+RW 4X/40X-A0, 8X/48X-A0, DVD/RW 4X6X4X24.
010. APACHI (AOPEN): CD_1632 DRIVE, CD_2440 DRIVE, CD_4048 DRIVE.
011. ARCHOS: MiniCDRW 161024, XS4424, XS4432, XS8432.
012. ARTEC: 52Z16, BKM-48W16, BKM-52X16, BKM-52Z16, BPN-KM48W16, BPN-KM52X16, BPN-KM52Z16, VOM-12E48X, VRR-4B24R, VRR-8F32W, VRR-12J52Z, WPN-KM52X16, WPN-RR52X, PLUS, WPN-RR52Z, PLUS, II, III, IV, WPN-SM52X, WPN-SM52Z, WPN-SM52ZA, WRA-GA32, WRA-KA40, WRA-OA40, WRA-WA40, WRA-WA48, WRR-4048, WRR-4848, WRR-48W, WRR-52X, PLUS, II, III, IV, V, WRR-52Z, PLUS, II, III, IV, V, WSM-4848, WSM-52X, WSM-52Z, WSM-52ZA, WSM-YG48, WSM-YG52, WSN-52X, RW-161032, RW-201040, RW-241040,     RW-241040, RW-321040, RW-321048, RW-321248, RW-401248, RW-481248, RW-481648, RW-481648M, RW-481650M, RW-481650W, RW-482448, RW-5224, RW-522452, PLUS, II, III, IV, V, RW-522452M, RW-522452W, RW-523252, PLUS, II, III, IV, V, RW-523252M, RW-523252W, COMBO-48W16, COMBO-52X, COMBO-52XP, COMBO-52X16, COMBO-52Z16, COMBO-M48W16, COMBO-M52X16, COMBO-M52Z16, DVD+RW 448, 8812, 121216.
013. ASUS: CRW-1210R, CRW-1610A, CRW-2410A, CRW-2410S, CRW-3212A, CRW-3212U, CRW-4012A, CRW-4816A, CRW-4824A, CRW-4824AH, CRW-4832A, CRW-4832AX, CRW-5224A, CRW-5232A, CRW-5232AS, DRW-0208P, DRW-0402P, DRW-0402P/D, DRW-1604P, DRW-1608P2, DRW-1608P2S-D, SCB-1608, SCB-2408, SCB-2424.
014. ATAPI (AccessTek): CD-RW52XMAX, CRD-BPDV2, CRD-BPDV3, CD-RW 16/12/40X, 12/8/32X, 16/8/40X, 32/12/40X, 40/12/40X, 40/12/48X, 48/12/48X, 48/16/48X, 48/24/48X, 48XMax, 52XMax, 52XMaxx, CW4801, CW5201, CW5202, CW5205, CW5207, TCW5201, CDRW 482448A, 522452A, 523252A, COMBO 48XMax, DC4801, DVD DUAL 4XMax, DVD RW 12XMax, 16XMax, 4XMax, 8XMax, DD0201, DD0203, DD0401, DD0405, DD1203, DD1205, DD1603, TDD0201, DVD+/-R/RW8XMAX, DVD+RW 4XMax, 4XMaxA, 8XMax, DD0202, DD0205, DD0402, DVD-RW 4XMax, 8XMax, DD0204, DD0403, DD0404, DVD/CDRW 48Max.
015. ATAPI (BENQ): CD-R/RW CRW6206A, 2X2X6, CRW6232A, 2X2X32, CRW4232A, 4X2X32, CRW4432A, 4X4X32, 4X2X30, 4X4X30, 2X2X24, 4X4X24, 6X4X30, 6X4X32, 8X4X24, 8X4X30, 8X4X32, CRW8432A, 10X8X32, 12X8X32, 10X4X32, 4X4X6, 4X4X8, 16X10, 20X10, 24X10, 16X10X40, 20X10X40, 24X10X40, 32X10, 32X12, 32X12X40, 40X12, CRW4812A, 48X12, 48X16, 48X20, 50X16, 50X20, CRW5224P, CD-RW 16X10X40, 32X10X40, 32X12X40, 40X12, 48X12, 48X16, 48X20, 48X24, 50X16, 50X20, 52X20, 52X24, 52X32, 52X32X, 56X32, CDRW 48X16, 48X24, 52X24, 52X32, 56X32, CDRW DRIVE 48X16, 48X24, 52X24, 52X32, 56X32, COMBO 16X48X24X, 16X48X32X, 16X52X24X, 16X52X32X, 32X12, 48X24, 48X32, 52X24, 52X32, DVD DD 2X16X4X16, 2X8X4X12, 2X8X4X16, 4X16X4X16, DVD DL 16X4X16, 2X8X4X12, DVD DUAL 16X4X12, 8X4X12, DVD+RW 4X2X12, 4X4X12, 6X4X12, 8X4X12, 8X4X16, WRITER, DVD-RW 4X Max.
016. ATAPI (BTC): 2W24R, CD-Writer.
017. ATARI (LG): DVD-RW-GCA-4020B.
018. ATK (AccessTek): DVD RW DD0201, DD0203, DD0401, DD0405, DD1603, TDD0201, DVD+RW DD0202, DD0205, DD0402, DVD-RW DD0204, DD0403, DD0404.
019. AXTRATEC (BTC): CRD-RW1S, RW5120, AXT 8000.
020. BACKPACK: CD-REWRITER-2A, CD-REWRITER-4A, CD-REWRITER-4B, CD-REWRITER-4D, CD-REWRITER-4E, CD-REWRITER-4F, CD-REWRITER-4G, CD-REWRITER-4H, CD-REWRITER-8A, CD-REWRITER-8B, CD-REWRITER-8C.
021. BENQ: SC248T, DVD DD DW1620, DW1630, DW1640, DW1650, DW880A, DW890A, EW161I, EW161U, EW162I, EW162U, EW163U, EW165U, DVD DL DW1600, DW830A, DVD DUAL DW1610, DW820A, DW822A, DW825A, DW826A, EW161I, EW161U, EW822U, SDVD TW100G, TW200G, TW200Q, TW200T.
022. BTC: BCE242IE, BCE324IE, BCE424IE, BCE5232IB, BCE832IE, BCE840IE, BCE833IE, BCE1032IE, BCE128IE, BCE1610IM, BCE1610IR, BCE2010IR, BCE2408IM, BCE2410IM, BCE2410IR, BCE3212IM, BCE3212IR, BCE4010IM, BCE4012IM, BCE4016IM, BCE4812IM, BCE4816IM, BCE4824IM, BCE4832IM, BCE5216IM, BCE5224IM, BCE5224SO, BCE5224UI, BCE5232IA, BCE5232IM, BCE5232SO, BCO1212IM, BCO1612IM, BCO2408SM, BCO2408SM+, BCO2408SU, BCO4008UI, BCO4012IM, BCO4016IM, BCO4816IM, BCP8000U, BDE5224UI, BDW0810SE, BDW0810SI, CBD620E, DRW1004IM, DRW1008IM, DRW1012IM, DRW1016IM, DRW1104IM, DRW1108IM, DRW1112IM, DRW1116IM, ED5220, RW5120, AXT 8200, 8300, BCE 62IE, BCP 8000, 8000+, 8200, 8300, CD-RW 52X24-B0, 52X32-B0, COMBO 48X24-B0, DRW 1004IB, 1008IB, DVD Du 4X/24X-B0, 8X/48X-B0, DVD+RW 4X/40X-B0, 8X/48X-B0, GEN 8200, 8300.
023. BurnMAX (BTC): PDRW-4D-IN.
024. CalOptic: W1210F, W1210FB.
025. CARAVELL (SANYO): CD-R CDR-N820S.
026. CD-R/RW (CyberDrv): CW078D CD-R/RW, CW079D CD-R/RW, CW088D CD-R/RW, CW089D CD-R/RW, CW098D CD-R/RW, CW099D CD-R/RW, EW058U CD-R/RW, EW068U CD-R/RW, EW078U CD-R/RW, EW088U CD-R/RW.
027. CD-R/RW (PROVIEW): 52X24X52X.
028. CD-RW (BTC): 5232IA, 5232IB, GO-R5232B.
029. CD-RW (LITE-ON): 52X32-L0, CDR-1232DD, CDR-1232M, CDR-1232MC, CDR-1232S, CDR-1640MB, CDR-1640MC, CDR-1640MM, CDR-1640SB, CDR-2040MC, CDR-2040MM, CDR-2040SC, CDR-2440DH, CDR-2440DS, CDR-2440MB, CDR-2440MM, CDR-2440SB, CDR-2440SD, CDR-2840DH, CDR-2840DS, CDR-3240MH, CDR-3240MS, CDR-3240S, CDR-3240WD, CDR-3248MS, CDR-4048S, CDR-4048SD, CDR-4048W, CDR-4848S, CDR-5G48, CDR-5K32, CDR-5K40, CDR-5S32, CDR-5S40, CDR-5S48, CDR-5W32, CDR-5W40, CDR-5W48, CDR-6K40, CDR-6S32, CDR-6S40, CDR-6S48, CDR-6S52, CDR-7K48, CDR-8S48, CDR-8S52, CDR-9S48, CDR-9S52, CDR-9S52S, CDR-9V48, CDR-9V52, CDR-S148S, CDR-S152S, CRX-2440B, CRX-2440S, CXR-1X24, CXR-2X24, CXR-2X32, CXR-2X40, CXR-2440B, CXR-2440S, CXR-3X24, CXR-3X32, CXR-3X40, CXR-3X40B, CXR-3240, CXR-3240A, CXR-3240B, CXR-3240C, CXR-3240S, CXR-4040, CXR-4040A, CXR-4040B, CXR-4040C, JLR-3240H, LTR-24101B, LTR-24101C, LTR-24102B, LTR-24102C, MAR-241040SD, MAR-321040S, MAR-321040SD, MAR-321240WD, MAR-401248S, MAR-401248SD, MAR-401248W, MXR-241040S, MXR-2440B, MXR-321240S, SMART CLONE48, CLONE52.
030. CDRW (BTC): 5232UI.
031. CDRW (LITE-ON): 52X32X, CDR-8S52A.
032. CDWRITER (BTC): 2W24R, BCE5232IM, CD-RW5232IA, CD-RW5232IB, IDE2x2x24, IDE4x4x24, IDE4x4x32, IDE8x4x40, IDE8432, IDE8x4x32, IDE1032, IDE128, IDE1610, IDE1610IR, IDE2410, IDE2010IR, IDE2410IR, IDE3212, IDE4012, IDE 4012, IDE4812, IDE4816, IDE4824, IDE4832, IDE5224, IDE5224 V0012, IDE5224SO, IDE5232, IDE5232SO.
033. CENDYNE: 241040AA, 241040AB, 241040AL, 241040AT, 321240AA, 321240AB, 321240AL, 321240AT, 401248AA, 401248AB, 401248AL, 401248AT, 401248AX, 481248AA, 481248AB, 481248AL, 481248AT, 481648AA, 481648AB, 481648AX, 48244816AX, 482448AL, 482448AX, 522452AA, 522452AL, 522452AU, 522452AX, 523252AL, 523252AU, 523252AX, DVDR1AB, DVDR1AP, DVRW1AA, DVRW1AB, DVRW1AP, DVRW1AR, DVRW1AX.
034. CNBridge (LITE-ON): CBCO1H-48X, CBCO1K-48X, CBRW2B-24X, CBRW3S-32X, CBRW5S-32X, CBRW5S-40X, CBRW6K-40X, CBRW6K-52X, CBRW6S-32X, CBRW6S-40X, CBRW6S-48X, CBRW6S-52X, CBRW7K-48X, CBRW7K-52X, CBRW7S-48X, CBRW7S-52X, CBXRW-24X, CBXRW-40X, CBXRW-40XB.
035. COMBI (LITE-ON): COB-1K4816.
036. COMBI (PHILIPS): RW16x8/DVD, RW16x10/DVD, RW16x12/DVD, RW32/DVD.
037. COMBO (BTC): 2408SU, 4816IA, 4816UI, BCO1612IM, BCO3216IM, BCO4008UI, BCO4016IM, COMBO4816IA, IDE1612CO, IDE2408CO, IDE3216CO, IDE4008UI, IDE4016CO, IDE5216CO, IDE5224CO.
038. COMBO (CyberDrv): CB501D Combo, CB511D Combo, CB521D Combo, CB531D Combo.
039. COMBO (LITE-ON): 52X32X52X, COB-1H4816, COB-1K4012, COB-1K4816, COB-1T4816, COB-1T5216, COB-2H4816, COB-2H5216, COB-2K4816, COB-2K5216, COB-5H4816, COB-5H5216, COB-5K4816, COB-5K5216, COB-6K4816, COB-6K48S, COB-6K5216, COB-6V4816, COB-6V5216, COB-7K4816P, COB-7K4816S, COB-7K5216P, COB-7K5216S, COB-AH4816, COB-AH5216.
040. COMBO (PHILIPS): CDD5351, RW24x8/DVD, RW48/DVD, RW48/DVD16a, RW48/DVDa, RW52/DVD16a.
041. COMPAL (AccessTek): TSD80Y1 DVD RW.
042. COMPAL (TOSHIBA): TSB24H1 DVD/CDRW, TSB24H2 DVD/CDRW.
043. CoWriter (BTC): IDE12x10x40x12, IDE16x10x40x12.
044. CREATIVE: CD-RW ED5220, ED5220-A, ED5221, RW121032E, RW1210E, RW1220E, RW1260E, RW1610E, RW1611E, RW1620E, RW1650E, RW1680S, RW2024E, RW2410E, RW2410E-B, RW2450E, RW3210E, RW3260E, RW4010E, RW4020E, RW4060E, RW4224E, RW4424E, RW4810E, RW4811E, RW4820E, RW4860E, RW5220E, RW5221E, RW5260E, RW52G0E, RW6424E, RW8432E, RW8433E, RW8435E, RW8436E, RW8438E, RW8439E, COMBO CB1210328E, CB7820E, CBA020E, CBA820E, CBD620E, CBF220E, DVDRW DR8420E, DR8820E, MINICDRW RW4426U, STORAGE MC4820E.
045. Cyam (LITE-ON): CLW-224A, CLW-232A, CLW-240A.
046. CyberDrv: CB501D Combo, CB511D Combo, CB521D Combo, CB531D Combo, CW018D CD-R/RW, CW028D CD-R/RW, CW038D CD-R/RW, CW048D CD-R/RW, CW058D CD-R/RW, CW059D CD-R/RW, CW068D CD-R/RW, CW069D CD-R/RW, CW078D CD-R/RW, CW079D CD-R/RW, CW088D CD-R/RW, CW089D CD-R/RW, CW098D CD-R/RW, CW099D CD-R/RW, DX042D DVD+RW, DX081D DVD+RW, DX082D DVD+RW, EW058U CD-R/RW, EW068U CD-R/RW, EW078U CD-R/RW, EW088U CD-R/RW, EX042U DVD+RW, EX081U DVD+RW, EX082U DVD+RW, SX042D DVD+RW, SX082D DVD+RW.
047. DAEWOO (AOPEN): CD-RW RW5224.
048. DELTA: CDE6121, CRW-ES4420, ODE-6121, ODR-6121, OME-W141, OIP-PW2004A, OIP-RW2004/B, OIP-RW2004A.
049. DGMaster (LITE-ON): DGM-241040,DGM-321240, DGM-401248, DGM-481248, DGM-482448.
050. DIAMOND: DATA 40X16X10, 40X20X10, 40X24X10.
051. DIXALL (BTC): IDE5224.
052. DPL: R130, R210, R310, R320, R350, R810.
053. DRW (BTC): IDE1004, IDE1108.
054. DVD (PHILIPS): DVDRW6002.
055. DVD Dual (BTC): GO-W0404A.
056. DVD+RW (CyberDrv): DX042D DVD+RW, DX081D DVD+RW, DX082D DVD+RW, EX042U DVD+RW, EX081U DVD+RW, EX082U DVD+RW, SX042D DVD+RW, SX082D DVD+RW.
057. DVDR/RW (AccessTek): DD1601.
058. DVDRW (BTC): 1004IB, 1004IM, 1008IB, 1008IM, 1012IM, 1016IM, DUALS801E, DUALS801I, IDE1004, IDE1008, IDE1012, IDE1016, IDE1104, IDE1108, IDE1112, IDE1116, IDE H16X, 16X, USB 16X.
059. DVDRW (LITE-ON): 16X16X, DRW-1S40, DRW-1S41, DRW-1S61, DRW-1S65, DRW-1S66, DRW-1S81, DRW-1S85, DRW-2S80, DRW-2S81, DRW-2S83, DRW-2S85, DRW-3S120, DRW-3S121, DRW-3S125, DRW-3S161, DRW-3S163, DRW-3S165, DRW-3S167, DRW-3S169, DRW-3S189, DRW-3S83, DRW-3Y161, DRW-5S161, DRW-5S163, DRW-5S165, DRW-5S16H, DRW-5S16HS, DRW-5S185, DRW-6S160H, DRW-6S160P, DRW-6S160P6S, DRW-6S160S, DXW-5X89, DXW-6X169, S200DX, SOHW-1653S.
060. DYSAN: CRW-1622, CRW-426, CRW-1426, CRW-2216e, CRW-2216, CDRW-2216, CRW-4216, CRW-4216e, CDRW-4216, CDRW-4416, CDRW-2224, CDRW-4424, CDRW-4432, CDRW 4424, CDRW 4432.
061. EMC (PROVIEW): 52X24X52X.
062. EMPREX (BTC): EDW4020, IDE1108.
063. FEDELIA (ARTEC): 9RA-OA40, 9RA-OA48, 9RR-4048, 9RR-4848, 9RR-48W, 9RR-YO48, 9SM-4848, 9SM-52X, 9SM-52Z, 9SM-52ZA, 9SM-YG48, 9SM-YG52.
064. FREECOM (BTC): CDRW52K, DVD+/-RW8K1.
065. FREECOM_ (BTC): Combo48K, DVD+/-RW16B9, DVD+/-RW4K, DVD+/-RW8B.
066. FREECOM_ (NEC): DVD+/-RW16B8.
067. GENERIC (AccessTek): CRD-BPDV2, CRD-BPDV3, CD-RW 48/24/48X, 52/24/52X, 52/24/52X2, 52/32/52X, DVD DUAL 4XMax, DVD RW 12XMax, 16XMax, 4XMax, 8XMax, DVD+RW 4XMax, 4XMaxA, 8XMax, DVD-RW 4XMax, 8XMax, DVD/CDRW 48Max.
068. GENERIC (BTC): GEN 8000.
069. GENERIC (MATSUSHITA): CDRCB03, CDRCB04, CDRCB05, DVD-RAM MLT01, MLT02, MLT03.
070. GENERIC (PHILIPS): FREECOM24B, FREECOM24B USB, FREECOM24D, FREECOM24E, FREECOM32A, FREECOM52I.
071. GENERIC (SANYO): CD-R CRD-R800S (firmware version 1.23 or later), CRD-RW1 (firmware version 1.09 or later), CRD-RW2, CRD-RW800P, CDRCB01, CDRRW03, CDRRW06, CDRRW08, CRD-BP2, CRD-BP3, CRD-BP4, CRD-BP5, CRD-BP6, CRD-BP900P, CRD-BP1300P, CRD-BP1400P, CRD-BP1500P, CRD-BP1600P, CRD-BP1700P.
072. GENERICP (MATSUSHITA): UJ-820P, UJ-820P DVD/CDRW, UJ-822P, UJ-822P DVD/CDRW, UJ-830P, UJ-830P DVD/CDRW, UJ-831P, UJ-831P DVD/CDRW.
073. GIGABYTE (LITE-ON): GO-B5232A, GO-B5232C, GO-R5232A, GO-R5232E, GO-W0804A, GO-W0808A, GO-W1608A, GO-W160A, GO-W160B, GO-W1616A, GO-W161A, GO-W161B, GO-W1623A.
074. Goldstar (LG): CD-RW CED-8041B, CED-8042B, CED-8043B, CED-8045B, CED-8060B, CED-8080B, CED-8081B, CED-8082B, CED-8083B, CED-8120B, CED-8121B, CED-8122B, CED-8123B, CED-8124B, CED-8125B, CED-8160B, CED-8161B, CED-8162B, CED-8163B, CED-8164B, CED-8165B, CEN-8080B, CEN-8081B, CEN-8082B, CEN-8083B, CEN-8084B, CEN-8085B, CCD-8080B, CCD-8081B, CCD-8082B, CCD-8083B, CCD-8120B, CCD-8121B, CCD-8122B, CCD-8123B, CCN-8080B, CCN-8081B, CCN-8082B, CCN-8083B.
075. HI-VAL: H2242, H161040A.
076. HL-DT-ST (LG): DVD-RW_GSA-H11N, DVDRAM_GSA-2166D, DVDRAM_GSA-4165B, DVDRAM_GSA-H10N, DVDRAM_GSA-H30L, CD-RW GCE-8121B, GCE-8122B, GCE-8123B, GCE-8124B, GCE-8125B, GCE-8160B, GCE-8161B, GCE-8162B, GCE-8163B, GCE-8164B, GCE-8165B, GCE-8080N, GCE-8081N, GCE-8082N, GCE-8083N, GCE-8084N, GCE-8085N, GCE-8240B, GCE-8320B, GCE-8321B, GCE-8322B, GCE-8400B, GCE-8401B, GCE-8402B, GCE-8403B, GCE-8404B, GCE-8405B, GCE-8480B, GCE-8481B, GCE-8482B, GCE-8483B, GCE-8484B, GCE-8485B, GCE-8520B, GCE-8521B, GCE-8522B, GCE-8523B, GCE-8524B, GCE-8525B, GCE-8526B, GCE-8527B, GCC-8123B, CDRW/DVD GCC4482, Combo 48X24-H0, GCC-4080B, GCC-4080N, GCC-4081B, GCC-4081N, GCC-4082B, GCC-4082N, GCC-4083B, GCC-4120B, GCC-4121B, GCC-4122B, GCC-4123B, GCC-5240P, GCC-5241P, GCC-8080B, GCC-8080N, GCC-8081B, GCC-8081N, GCC-8082B, GCC-8082N, GCC-8083B, GCC-8083N, GCC-8120B, GCC-8121B, GCC-8122B, DVD Du 4X/24X-H0, 8X/48X-H0, DVD+-RW GWA4040N, DVD+RW 4X/40X-H0, 8X/48X-H0, GCA-4040N, DVD-ROM GDR8083N, DVD-RW GCA-4020B, GCA-4080N, GRA-4083B, GRA-4120B, GSA-4080N, GSA-4081B, GSA-4082B, GWA-4040B, GWA-4040N, GWA-4080N, GWA-4082B, GWA-4082N, GWA-4083B, GWA-4084B, GWA-4161B, GWA-4162B, DVDRAM GAS-4040B, GMA-4020B, GMA-4040B, GMA-4080N, GMA-4082N, GSA-2166D, GSA-4040A, GSA-4040B, GSA-4080N, GSA-4081B, GSA-4082B, GSA-4082N, GSA-4083N, GSA-4084N, GSA-4120B, GSA-4160B, GSA-4163B, GSA-4165B, GSA-4167B, GSA-5120D, GSA-H30L DVDRRW GWA-4164B, GWA-4166B, RW/DVD GCC-2240P, GCC-4080N, GCC-4120B, GCC-4121B, GCC-4160N, GCC-4240N, GCC-4241N, GCC-4242N, GCC-4243N, GCC-4244N, GCC-4247N, GCC-4320B, GCC-4321B, GCC-4322B, GCC-4480B, GCC-4481B, GCC-4482B, GCC-4483B, GCC-4484B, GCC-4520B, GCC-4521B, GCC-4522B, GCC-4523B, GCC-4524B, GCC-5240P, GCC-5241P, GCC-8240N, GCC-8241N, GCC-8242N, GCC-8243N, GCC-8244N.
077. HP: dvd-writer, CD Writer 52r, CD-Writer cd12d, cd12n, cd12ri, cd14f, cd16b, cd16c, cd16Ci, cd16e, cd16f, cd16mi, cd16n, cd16r, cd16ri, cd16v, cd24p, cd52e, cd52i, 1610e, CD-Writer+ 7100, 7200, 7500, 8100, 8200, 8200a, 8200F, 8290, M820, 9100, 9100b, 9100c, 9100e, 9100ei, 9200, 9300, 9310, 9400, 9410, 9500, 9500b, 9600, 9700, 9700k, 9900j,     DVD Writer, DVD Writer 100i, 100j, 200e, 200i, 200j, 300c, 300e, 300i, 300n, 400c, 400e, 400i, 420c, 420e, 420i, 420n, 500c, 530i, 530r, 550s, 550Sl, 630C, 630i, 640b, 640c, 740c, 740r.
078. IDE (PHILIPS): R/RW 24x12A, 40x12A, 40x16A, JR/RW24.
079. IDE-CD (PHILIPS): CDRW7352, JR/RW24, ReWritable-2x2x6, R/RW 2x2x24, 4x4x24, 4x4x32, 8x4x32, 12x8x32, 12x8, 12x10, 16x10A, 16x12A, 20x10, 24x10A, 24x12A, 40x12A, 40x16A, 48xA, 48xB, 48xC.
080. IDE-CMB (PHILIPS): CMB6248.
081. IDE-DVD (PHILIPS): DVDRW6001, DVDRW6002, DVDRW6003, DVDRW8301, DVDRW8401, DVDRW8412, DVDRW8421, DVDRW8431, DVDRW8601, DVDRW8631, DVDRW8651, DVDRW8701, DVDRW8801, DVDRW8851, SDVD8431, SDVDRW8041, SDVDRW8042, SDVDRW8311, SDVDRW8422.
082. IMATION: IMW121032IAB, IMW161032IA, IMW241040IAB, IMW241224DV8EA, IMW242424DV8E, IMW321248IA, IMW401248IA, IMW402440EA, IMW4222DV8E, IMW482448DV16IA, IMW482448DV81AC, IMW522452IA, IMW523252DV161, IMW523252E, IMW523252IA, IMW523252IC, IMW8844DL8E, IMWDLRW16DL84E, IMWDVRW16DL84I, IMWDVRW16DLE, IMWDVRW16DLI, IMWDVRW16LI, IMWDVDRW8DE, IMWDVRW8DI, IMWDVRW8I, CD-R IMR080020, CD-RW IMW040420, IMW080220.
083. IOMEGA: CDDVD24128E24-B, CDDVD482416E23-B, CDDVD482416E23-C, CDDVD482416INT-B, CDDVD482416INT-C, CDDVD522416E23-C, CDDVD522416INT-C, CDDVD523216E23-B, CDDVD523216INT-B, CDRW15360INT-B, CDRW15362EXT3-B, CDRW19200INT-A, CDRW19202EXT2-B, CDRW23040INT-B, CDRW23040INT-C, CDRW23042EXT-B, CDRW23042EXT2-B, CDRW23042EXT3-B, CDRW23042EXT3-C, CDRW23042FEXT-B, CDRW27648INT-B, CDRW38402EXT2-B, CDRW55292EXT, CDRW55292EXT3, CDRW55292EXT3-B, CDRW55292EXT3-C, CDRW55292INT-B, CDRW55296EXT3, CDRW55296INT-B, CDRW55296INT-C, CDRW5529DEXT1-B, CDRW5529FEXT1-B, CDRW6400INT, CDRW6400INT-B, CDRW6402EXT-B, CDRW6402EXT-C, CDRW64892EXT3-B, CDRW64892EXT3-C, CDRW64896INT-B, CDRW64896INT-C, CDRW86522EXT3-B, CDRW86522EXT3-C, CDRW86528INT-B, CDRW86528INT-C, CDRW86592EXT3-B, CDRW9600INT-B, CDRW9602EXT-B, CDRW9602EXT3-B, DVDRW12448E2D-B, DVDRW12448IND-B, DVDRW4216IND-A, DVDRW4216INP-A, DVDRW4224E2Q-D, DVDRW4224INQ-D, DVDRW8424E2Q-D, DVDRW8424INQ-D, DVDRW8440E2D-B, DVDRW8440E2X-B, DVDRW8440IND-B, DVDRW8824E2Q-D, DVDRW8824INQ-D, ZIP CD, ZIPCD 4x650, ZIPCD 650, ZIPCD 650 USB, ZIPCD1024EXT, ZIPCD1024INT-A, ZIPCDINT1536, ZIPCDINT 1536, ZIPCD3840INT, ZIPCD3840INT-A, ZIPCD3840INT-E, ZIPCD-DVDROM.
084. JASS (BTC): JAS 5224, 8200, 8300.
085. JCCOM: JCD-62RW, CDRW-622, JCD-64RW, JCD-1622RW, JCD-1642RW.
086. JLMS (LITE-ON): LTC-48161K, XJ-HC401K, XJ-HC481K, XJ-SC241M, XJ-SC242K, XJ-SC242M, XJ-SC242S, COMBO LSC-24081, LSC-24081M, LSC-24081S, LSC-24082M, LSC-24082S.
087. JUMBO (QSI): CDRW/DVD DBW-481, DBW521A, SBW242U, DVDRW DDW-081, DDW-082.
088. JVC: XR-W2080 (firmware version 2.21 or later), XR-W2082, XR-W4080 (firmware version 1.20 or later), XR-W4082, XR-W4424B, XR-W4424.
089. KHYPER (LITE-ON): KDVRWDUA.
090. LACIE: CDBP-12432A, CDBP-12432S, CDBP-121032A, CDBP-121032S, CDBP-161040A, CDBP-161040S, CDBP-241040A, CDBP-241040S, CDBP-321040A, CDBP-321240A, CDBP-401240A, CDBP-401248A, CDRW-8432A, CDRW-12432S, CDRW-BOOSTER, LTR-1240B, CD-RW BOOSTER.
091. LACIE GR: Lacie 1394-CDROM.
092. LEMEL (LITE-ON): LRW-48D16L, LRW-5224L, LRW-5232L.
093. LG: CD-RW CED-8041B, CED-8042B, CED-8043B, CED-8045B, CED-8060B, CED-8080B, CED-8081B, CED-8082B, CED-8083B, CED-8120B, CED-8121B, CED-8122B, CED-8123B, CED-8124B, CED-8125B, CED-8160B, CED-8161B, CED-8162B, CED-8163B, CED-8164B, CED-8165B, CEN-8080B, CEN-8081B, CEN-8082B, CEN-8083B, CEN-8084B, CEN-8085B, CCD-8080B, CCD-8081B, CCD-8082B, CCD-8083B, CCD-8120B, CCD-8121B, CCD-8122B, CCD-8123B, CCN-8080B, CCN-8081B, CCN-8082B, CCN-8083B, GCE-8160B, GCE-8240B, GCE-8320B.
094. Linkage (AOPEN): CDRW2440E, CDRW4048E.
095. LITE-ON: CDR-6S48, CDR-6S52, CXR-3X40B, LTC-40161, LTC-48161H, LTC-48161K, LTC-48161T, LTR-511, LTR-0841, LTR-1240, LTR-1241, LTR-12101B, LTR-12101C, LTR-12102B, LTR-12102C, LTR-16101B, LTR-16101C, LTR-16102, LTR-16102B, LTR-16102C, LTR-24101B, LTR-24101C, LTR-24102B, LTR-24102C, LTR-24102M, LTR-24102S, LTR-24102U, LTR-24103S, LTR-32102H, LTR-32102S, LTR-3248MH, LTR-32103S, LTR-32105S, LTR-32123H, LTR-32123S, LTR-32125K, LTR-32125S, LTR-32125W, LTR-40125K, LTR-40125S, LTR-40125W, LTR-40126H, LTR-40126K, LTR-40126S, LTR-40246S, LTR-48125G, LTR-48125S, LTR-48125W, LTR-48126S, LTR-48166K, LTR-48166S, LTR-48246K, LTR-48246S, LTR-48247S, LTR-48248S, LTR-48327K, LTR-48327S, LTR-48328S, LTR-52246K, LTR-52246S, LTR-52247S, LTR-52248S, LTR-52328S, LTR-52326K, LTR-52326S, LTR-52327K, LTR-52327S, LTR-52328S, LXR-322, LXR-323, LXR-402, LXR-403, LXR-24101A, LXR-24101B, LXR-24102, LXR-24102S, LXR-24102U, LXR-24103, LXR-24163, LXR-32122, LXR-32122A, LXR-32122B, LXR-32122C, LXR-32122S, LXR-32123, LXR-40122, LXR-40122A, LXR-40122B, LXR-40122C, LXR-40123, LXR-40243, WLL-52Z, CD-RW 52X32-L0, SHR-48S1S, SHR-52S1S, SHR-52S9S, SOHR-4828S, SOHR-4838S, SOHR-4839S, SOHR-4839V, SOHR-48A8S, SOHR-48S9S, SOHR-5228S, SOHR-5238S, SOHR-5239S, SOHR-5239V, SOHR-52A8S, COMBO 48X24-L0, LTC-48161H, LTC-48161K, LTC-48162H, LTC-48162K, LTC-52161T, LTC-52162H, LTC-52162K, SHC-48P7K, SHC-48S6K, SHC-48S7K, SHC-52P7K, SHC-52S7K, SHOW-4839S, SOHC-4822K, SOHC-4832K, SOHC-4835H, SOHC-4835K, SOHC-4836K, SOHC-4836V, SOHC-5222K, SOHC-5232K, SOHC-5235H, SOHC-5235K, SOHC-5236K, SOHC-5236V, SOHC-52S6K, SOHW-4839S, SOUC-2481, USC-2481, DVD Du 4X/24X-L0, 8X/40X-L0, 8X/48X-L0, DVD+RW 4X/40X-L0, 8X/48X-L0, LDW-401S, LDW-402S, LDW-461S, LDW-661S, LDW-802S, SOHW-1203, SOHW1603S, SOHW16A3S, SOHW-802S, SOHW-822S, DVDRW DRW-2S81, LDW-1213S, LDW-400D, LDW-401D, LDW-401S, LDW-411S, LDW-412S, LDW-421S, LDW-440D, LDW-451S, LDW-611S, LDW-651S, LDW-802S, LDW-811S, LDW-812S, LDW-812SX, LDW-851S, LDW-851SX, LDW-853S, LXW-1696A, LXW-1696X, LXW-895X, SH-16AH7S, SH-16AL7S, SH-16AP7S, SH-16AS7S, SH-16WP7S, SH-16WS7S, SHM-160H6S, SHM-160P6S, SHM-160S6S, SHM-165H6S, SHM-165L6S, SHM-165P6S, SHM-165PEH, SHM-165S6S, SHM-166H6S, SHM-166P7S, SHM-166PFH, SHM-166S6S SHM-166S7S, SHM-16H5S, SHOW-1635S, SHOW-1673S, SHOW-1693S, SHOW-1893S, SHOW-812S, SHW-160H6S, SHW-160P6S, SHW-160S6S, SHW-1635S, SHW-1635SX, SHW-1655S, SHW-16H5S, SHW-16H5SX, SHW-16S5S, SHW-1855S, SOHW-0833S, SOHW-1210S, SOHW-1213S, SOHW-1253S, SOHW-1613S, SOHW-1613Y, SOHW-1614S, SOHW-1615S, SOHW-1633S, SOHW-1635S, SOHW-1653S, SOHW-1673S, SOHW-1693S, SOHW-16B3S, SOHW-16S5S, SOHW-1893S, SOHW-812S, SOHW-813S, SOHW-832S, SOHW-833S, SOHW-852S, SOHW-853S, SOLW-891, SOXW-1696X, SOHW-822S VPPE.
096. LOGITEC: LCW-T1210BSU, CD-RW DRIVE.
097. M52X1 (ARTEC): VPN-RR4B24R, DVD+RW R448.
098. M52X16 (ARTEC): VPN-RR8F32W, VPN-R12J52Z, DVD+RW R8812, R121216.
099. MAD DOG (NEC): MD-16X2DVD9-8X, MD-16XDVD9, MD-16XDVD9A2, MD-8XDVDRW-PM.
100. MAG (PROVIEW): 52X24X52X.
101. MATSUSHITA (PANASONIC): CDRCB01, CDRRW01, CDRRW02, CDRRW03, CDRRW06, SW-9573, SW-9573D, SW-9583, SW-9583D, SW-9584D, UJ-810, UJ-811, UJ-812, DVD/CDRW, UJ-813, UJ-815A, UJ-816A, UJ-820, DVD/CDRW, UJ-820D, DVD/CDRW, UJ-822, DVD/CDRW, UJ-822D, DVD/CDRW, UJ-825, UJ-825D, UJ-830, DVD/CDRW, UJ-830CEA, UJ-830D, DVD/CDRW, UJ-831D, DVD/CDRW, UJ-835, UJ-835D, UJ-840D, DVD/CDRW, UJ-841D, DVD/CDRW, UJ-845D, DVD/CDRW, UJ-850D, DVD/CDRW, UJDA-750-II, UJDA-750-Il, UJDA-750-ll, UJDA310, UJDA320, UJDA330, UJDA330A, UJDA340, UJDA360, CDRW, UJDD420, UJDA710, UJDA710A, UJDA720, UJDB3100, UJDD410, UJDA750cDVD/CDRW, UJDA750FDVD/CDRW, UJDA750QT-A, UJDA755cDVD/CDRW, UJDA755yDVD/CDRW, UJDA755zDVD/CDRW, UJDA760cDVD/CDRW, UJDA760eDVD/CDRW, UJDA765cDVD/CDRW, BD-MLT SW-5582, CD-R CW-7503, CW-7582, CD-RW CW-7585, CW-7586, CW-7122, CW-7122-B, CW-8121, CW-8122, CW-8123, CW-8124, CW-8221, CW-8571, CW-8572, CW-8572-C, CDRW/DVD UJDA740, DVD-R UJ-815, UJ-815A, UJ-816, UJ-816A, UJ-820, UJ-825, UJ-835, UJ-840, UJ-841, UJ-845, UJ-846, DVD-RAM LF-D521, LF-D621, LF-M721, LF-M760, LF-M821, LF-M860, LF-P567, LF-P667, LF-P767, MLT01, SW-9571, SW-9571A, SW-9572, SW-9573, SW-9573C, SW-9573S, SW-9574, SW-9574A, SW-9574S, SW-9581, SW-9581A, SW-9581N, SW-9582, SW-9582N, SW-9583, SW-9583A, SW-9583C, SW-9583S, SW-9584, SW-9584A, SW-9585, SW-9585A, SW-9585S, SW-9586, SW-9586S, SW-9587, SW-9587A, SW-9587S, UJ-810, UJ-811, UJ-811B, UJ-812, UJ-812B, UJ-813, UJ-815, UJ-815A, UJ-816, UJ-816A, UJ-820, UJ-820A, UJ-820B, UJ-820c, UJ-820S, UJ-822, UJ-822B, UJ-822c, UJ-822S, UJ-825, UJ-825A, UJ-825B, UJ-825S, UJ-830, UJ-830B, UJ-830c, UJ-830cc, UJ-830S, UJ-831S, UJ-832S, UJ-835, UJ-835A, UJ-835S, UJ-840A, UJ-840S, UJ-841A, UJ-841S, UJ-842B, UJ-842S, UJ-845A, UJ-845S, UJ-846, UJ-846A, UJ-846S, UJ-850S, UJDA730 DVD/CDRW, UJDA740 DVD/CDRW, UJDA740AC-A, UJDA745 DVD/CDRW, UJDA747 DVD/CDRW, UJDA750 DVD/CDRW, UJDA755 DVD/CDRW, UJDA757 DVD/CDRW, UJDA760 DVD/CDRW, UJDA765 DVD/CDRW, UJDA767 DVD/CDRW, UJDA770 DVD/CDRW.
102. MAXELL: MCDRW8X4X32, MCD-RW44-20, MCD-RW64-24, MCD-RW84-32, MCD-RW12-1032, MCD-RW16-1040, MCD-RW16-1040-L, MCD-RW24-1040-L, MCD-RW40-1248-L, MCD-RW4012-48, MCD-RW4812-48, MCD-RW4824-48, MCD-RW5224-52, MCD-RW5232-52.
103. MELCO: CRWS-SB1210.
104. MEMOREX: 16X-DDL-IN, 16X-DDL-SM-ILO, 16X-DDL-SM-IN, 24MAXX1040B1, 48MAXX1648AK, CD-RW2224, CD-RW4224, CD-RW4424, CDRW-2216, CDRW-2224, CDRW-4216, CDRW-4416, CDRW-4416S, CDRW-4420, CDRW-4420s, CDRW-4424, CDRW-4432, CDRW4420, CDRW4420S, CRW-1622, CRW-2216, CRW-2216e, CRW-2642, CRW-4216, CRW-4216e, DVD16+/-DL4RWID2, DVD16+/-DL4RWLD2, DVD16+/-DL4RWn16, DVD16+/-DL4RWnD, DVDUR/RWD16816AJ, 24MAXX 1040, 32Maxx 1240AK, 40EMAX 1240AJ, 2440AJ, 40MAXX 1240AJ, 1248AJ, 48MAX 244816AJ, 48MAXX 1248AJ, 2448AJ, 52MAX 245216AJ, 325216AJ, 325216AJ1, 52MAXX 2452AJ, 2452AK, 325216AJ, 3252AJ, 3252AJ1, 3252AJ1v2, 3252AT, CD-R 820S, CD-RW 8220S, 8432, 12432S, CDRW 4424, 4432, CDRW6424, CDRW6424S, CDRW/DVD 6424-4, DVD 16X-DDL-ILO, DVD+/-DLRWL1 F16, DVD+/-DLRWN16 D2, DVD+/-RW Dual-X1, True-8X, True8Xn, DVD+R/-R True8XI, True8Xl, DVD+R/RW 2.4x8AA, 4412AJ, 8412AJ, DVDUR/RW 12812AJ, 8412AJ, 8812AJ, DVDUR/RWD 8812AJ, SixteenMAXX 1040, TwelveMAXX 1032, 1032A, 1032P, Twelve MAXX 1032.
105. MEMUP (BTC): 1004IB, 1008IB, 4816IA, 5232IA, 5232IB, DRW1004IM, IDE1008, IDE4816, IDE5224.
106. Micro Advantage: DVDRW IDE1008.
107. MiniCDRW (ARCHOS): XS4424, XS4432, XS8432.
108. MiniRW (ACER): CD-R/RW 6X4X24, 8X8x24, 16X10, 24X10.
109. MITSUBISHI: CDRW226, CDRW226A, CDRW4420a, CDRW4420.
110. MITSUMI: CR-2600TE, CR-2801TE, CR-4801TE, CR-4802TE, CR-4804TE, CR-485FTE, CR-485GTE, CR-486ETE, CR-487ETE, CR-488ETE, CR-48X5TE, CR-48X8TE, CR-4809TE, CR-48X9TE, CR-48XATE, CR-48XCTE, CR-48XETE, CR-48XFTE, CR-48XGTE, CR-52XETE, CRS5224TE, DR-6800TE, DW-7801TE, DW-7802TE, DW-7872TE, DW-7873TE.
111. MOTOROLA (QSI): OA-X36, OA-X37, SLIM DVD/CD-RW, DVDRW.
112. MSI (AccessTek): CD-R/RW CR-48, CR-52, CD-RW 48XMAX, 52XMAX, 52X32-M0, CR-52, CR52, MS-8332, MS-8340, MS-8340S, MS-8348, MS-8348S, MS-8352M, MS-8416N, COMBO 48X24-M0, DVD Du 4X/24X-M0, 8X/48X-M0, DVD+RW 4X/40X-M0, 8X/48X-M0.
113. MTI: PLAYWRITE 8200.
114. NEC: NR-7900A, CD-RW NR-7500A, NR-7700A, NR-8500A, NR-8400A, NR-7800A, NR-7800B, NR-7900A, NR-9100A, NR-9200A, NR-9300A, DVD_RW ND-1100A, ND-1200A, ND-1300A, ND-1500A, ND-2300A, ND-2500A, ND-2500A2, ND-2510A, ND-3500A, ND-3500AD, ND-3500AG, ND-3520A, ND-3520AW, ND-3530A, ND-3540A, ND-3540B, ND-3550A, ND-3551A, ND-3650A, ND-4550A, ND-4551A, ND-5200A, ND-5300A, ND-5500A, ND-6500A, ND-6550A, ND-6750A, ND-6751A, ND-7550A, ND-7551A, DVD+-RW ND-3450A, ND-3530A, ND-6450A, ND-6500A, DVD+RW ND-1000A, ND-1100A, ND-1500A, ND-2100A, ND-2100AD, ND-3100A, ND-3100AD, ND-5000A, ND-5100A, ND-6050A, ND-6100A, DVD-RW ND-1300M, ND-1500M.
115. Norcent (LITE-ON): RWJ-321S, RWJ-401S, RWJ-481S, RWJ-482S, RWJ-483S.
116. NU (QSI): CDRW/DVD DBW-481, DBW-521, DBW-522, SBW242G, SBW242U, SBW243, UBW-241, CDRWDVD UBW-242, DVD+-RW SDW-082, SDW-082K, SDW-083, SDW-085, UDVD8042, UDW-042, DVD+RW SDW-081, SDW-081G, SDW-081L, UDW-041, DVD-RAM SDW-086, DVDRW DDW-041, DDW-061, DDW-081, DDW-082, DDW-121, DDW-122, DDW-161, DDW-162, SDW-041, SDW-042.
117. OLYMPUS (NEC): S-DVD-100.
118. OPDC (AccessTek): IDE4824CO.
119. OPTI (AccessTek): OPCRW4824, OPCRW5224, OPCRW5232, OPDC4816, DVD DUAL 4XMax, DVD RW 16XMax, 4XMax, 8XMax, DVD+RW 4XMax, 4XMaxA, 8XMax, DVD-RW 4XMax, 8XMax.
120. OPTI (BTC): IDE1612CO, IDE4016CO, IDE5216CO.
121. OPTIMUM (LITE-ON): DVDRWDUA.
122. OPTORITE (AccessTek): CRD-BPDV2, CRD-BPDV3, DD0202, CD-RW CW1601, CW3201, CW4001, CW4002, CW4801, CW4802, CW5201, CW5202, CW5205, CW5207, TCW5201, COMBO DC4801, DVD RW DD0201, DD0203, DD0401, DD0405, DD1203, DD1205, DD1601, DD1603, TDD0201, DVD+RW DD0202, DD0205, DD0402, DVD-RW DD0204, DD0403, DD0404.
123. OTI-975 (BTC): SOCRATES, SOCRATES    1.00.
124. PATRIOT: LTR-12101B, LTR-16101B, LTR-16102B, LTR-16102C.
125. PHILIPS: 241040 CDRW, 241240 CDRW, 321240 CDRW, 401240 CDRW, 401248 CDRW, 482448 CDRW, 4424 CDRW, BDD1001, CDD3610, CDD3801, CDD4201 CD-R/RW, CDD4401 CD-R/RW, CDD4801 CD-R/RW, CDD4851 CD-R/RW, CDD4911, CDD5101, CDD5251S, CDD5301, CDD5351, CDD5411, CDD5451, CDD6611, CDD6811, CDD6911, CDD6941, CDD7048, CDD7248, CDD7052, CDD7251, CDD7252, CDD7352, CDD7448, CDRW1610A, CDRW1612A, CDRW2010, CDRW2410A, CDRW2412A, CDRW3210S, CDRW4012A, CDRW4012P, CDRW4016A, CDRW4824, CDRW4832, CDRW48A, CDRW48P, CDRW5224, CDRW5232, CDRW5232L, CDRW5232P1, CDRW52P, CDRWDVD1610, CDRWDVD1612, CDRWDVD2010, CDRWDVD3210, CDRWDVD3210S, CDRWDVD3212, CDRWDVD4816, CDRWDVD4816a, CDRWDVD4816L, CDRWDVD4832, CDRWDVD52, CMB6148, CMB6248, COMB6048, COMB6248, DVD6001, DVD6002, DVD6003, DVD8301, DVD8351, DVD8401, DVD8412, DVD8421, DVD8431, DVD8601, DVD8631, DVD8651, DVD8701, DVD8731, DVD8801, DVD8900, DVD+RW-D01, DVD+RW-D28, DVD+RW-D38, DVD+RW-D48, DVD+RW-S44, DVD8851, DVDR1628P1, DVDR1640P, DVDR1648P, DVDR1648P1, DVDR1660P1, DVDR1668P1, DVDR16LS, DVDR824DP, DVDR824P, DVDR885P, DVDRW1208, DVDRW228, DVDRW248, DVDRW416, DVDRW416N, DVDRW424, DVDRW424R, DVDRW428, DVDRW448, DVDRW8301, DVDRW832, DVDRW8900, ED16DVDS, ED8DVDRW, ES8DVDRW, ES8DVDRX, JR24CDRW, JR32RWDV, JR48RWDV, JR4DVDRW, JR52CDRW, JR52RWDV, JR/RW24, PBCO4824L, PBDV1601P, PBDV1628P1, PBDV1640P, PBDV1648P, PBDV1660P1, PBDV416P, PBDV824DP, PBDV824P, PBDV885P, PBRW4824, PBRW5224, PBRW5232, PBRW5232L, PBRW5232P, PBRWDVD4816L, PCA382RW IDE, PCRW1208, PCRW1208JR, PCRW1208MR, PCRW1208UE, PCRW404, PCRW406, PCRW5232, PCRW5232P, PCRW804, RW48/DVD16a, RW52/DVD16a, RWDV4824L, RWDV5216P1, RWDV5216P2, SDVD6004, SDVD8041, SDVD8042, SDVD8311, SDVD8312, SDVD8421, SPD1400P1, SPD2300L1, SPD2400L1, SPD3000L1, SPD3200L1, SPD4000L1, SPD6000L1, SPD8003L1, SPD8004P1, BD-RE BDD1001, CD-R/RW RW7200A, CDRW/DVD CDD5211, CDD5260, CDD5262, CDD5263, COM6248, SCB5264, SCB5265, UCB5211, UCB5221, CDRWDVD UCB5231, DVD Du 4X/24X-P0, 8X/48X-P0, DVD+-RW DVD8701, SDVD8042, SDVD8431, SDVD8441, SDVD8811, SDVD8820, DVD+/-RW DVD8701, DVD8801, DVD+RW 4X/40X-P0, 8X/48X-P0, DVD8601, SDVD8041, SDVD8411, SDVD8421, SDVD8422, SDVD8423, UDVD8041, DVD-RAM SDVD8821, R/RW 48xA.
126. PIKA ONE (BTC): RIP4000P-C, RIP 8000, 8200, 8300.
127. PINE (AOPEN): 32X12X48 CDR-RW, 40X12X48 CD-RW, 40X12X48 CDR-RW.
128. PIONEER: DVD RW DVR-107D, DVR-A07D, DVD-RW DVR-103, DVR-104, DVR-105, DVR-106D, DVR-106RD, DVR-107D, DVR-107RD, DVR-108, DVR-108D, DVR-108RD, DVR-109, DVR-109D, DVR-109RD, DVR-110, DVR-110D, DVR-110RD, DVR-111, DVR-111D, DVR-111RD, DVR-111RF, DVR-A03, DVR-A04, DVR-A05, DVR-A06D, DVR-A06RD, DVR-A07D, DVR-A07RD, DVR-A08, DVR-A08D, DVR-A08RD, DVR-A09, DVR-A09D, DVR-A09RD, DVR-A10, DVR-A10D, DVR-A10RD, DVR-A11, DVR-A11D, DVR-A11RD, DVR-K04L, DVR-K04RA, DVR-K05, DVR-K05RA, DVR-K06RS, DVR-K11, DVR-K12D, DVR-K12RA, DVR-K13, DVR-K13D, DVR-K13RA, DVR-K14, DVR-K14D, DVR-K14L, DVR-K14RA, DVR-K15, DVR-K15RA, DVR-K16, DVR-K16RA, DVR-K16RF, DVR-K16RS, DVR-SK12D, DVR-SK13D, DVR-SK14D, DVD/CDRW DCR-111.
129. PLEXTOR: PX-504A DVD+R/RW, PX-S2410TU, CD-R PREMIUM, PX-320A, PX-R412C, PX-R820T, PX-S2410TU, PX-S88T, PX-W1210A, PX-W1210S, PX-W124TS, PX-W1610A, PX-W1610S, PX-W2410A, PX-W4012A, PX-W4012S, PX-W4220T, PX-W4824A, PX-W5224A, PX-W8220T, PX-W8432T, DVDR PX-504A, PX-708A, PX-708A2, PX-708UF, PX-708UF2, PX-712A, PX-712SA, PX-716A, PX-716AL, PX-740A.
130. POLAROID: 24X CD-RW DRIVE, 32X CD-RW DRIVE, 40X CD-RW DRIVE, 48X CD-RW DRIVE, BurnMax16, BURNMAX16 CB, BurnMax16EX, BURNMAX16EX CB, BURNMAX32 COMBO, BURNMAX32EX COMBO, BurnMax40, BURNMAX40 CB, BurnMax40EX, BURNMAX40EX CB, BurnMax40PX, BURNMAX48, BURNMAX48 CB, BurnMAX48CO, BURNMAX48EX, BURNMAX48EX CB, BurnMAX52, BurnMAX52CB, BurnMAX52SO, BurnMAX52EX, BurnMAX52EX SO, PROBT 5224.
131. Portable (ACER): CD-R/RW 4X4X24, CD-R/RW 6X4X24, CD-R/RW 4X4X6.
132. PROVIEW: CD-R/RW 52X24X52.
133. Q-lity (QSI): CD-R/RW ECW-043.
134. QPS: CD-W54E, CD-W58E, CD-W512EB, CD-W516EB, CD-W524E, CR-48XATE, CRD-BP1400P, CRD-BP1500P, CRD-BP1500U, CRD-BP1600P, CRD-BP1700P, CRD-BP4, LTR-16101B, LTR-20101B, LTR-24101B, RW-241040, CD-R PX-W1610A, PX-W1210A, PX-W8432T, PX-W1610S, PX-W1210S, PX-W124TS, PX-W2410A, CD-R/RW SW-408B, SW-208B, 16X10, 20X10, 24X10.
135. QSI: 12X DVDRW DRIVE, 16X DVDRW DRIVE, 24X CDRW/DVD S, US, 4X DVDRW DRIVE S, 52X CDRW/DVD, A, 8X DVDRW DRIVE, S, CD-R/RW SCW-081, CD-RW SCW-081, 8x8x24x, CDRW/DVD DBW-481, DBW-521, DBW-522, SBW-161, SBW-241, SBW-242, SBW242B, SBW242C, SBW242G, SBW242U, SBW243, SWB242U, UBW-241, UBW241G, CDRWDVD UBW-242, Combo DBW521S, UBW241SE, DDW-161 DVD Dual, DVD+-RW SDW-082, SDW-082G, SDW-082K, SDW-082S, SDW-083, SDW-085, UDW-042, DVD+RW SDW-081, SDW-081G, SDW-081L, SDW-081S, UDW-041, DVD-RAM SDW-086, DVD/CDRW SBW-081, SBW-161, SBW-242, DVDRW DDW-041, DDW-061, DDW-081, DDW-082, DDW-121, DDW-122, DDW-161, DDW-162, SDW-041, SDW-042.
136. RICOH: DM-828, CD-R/RW MC104S, MP6200S, MP6201S, MP6200A, MP7040A, MP7040S, MP7060A, MP7060S, MP7063A, MP7080A, MP7080S, MP7083A, MP7120A, MP7120S, MP7125A, MP7125AP, MP7163A, MP7200A, MP7240A, MP7400A, MP8040A, MP8080A, MP9060, MP9120, MP9200, RW7040A, RW7040S, RW7060A, RW7060S, RW8040A, RW9060, RW104S, RW7080S, RW7080A, RW7063A, RW7120A, RW7120S, RW7083A, RW9120, RW7125A, RW8080A, RW7200A, RW9200, RW7163A, RW7400A, CD-RW MP7320A, MP7400A, MP7480A, MP7520A, RW7400A, RW7480A, RW7520A, DVD+RW MP5120, MP5125, MP5240, MP5240A, MP5240A24, MP5308, MP5308D, MP5308DB, MP5312DB, MP5316DA, MP5316DAD, MP5316DAG, MP5316DB, MP8160, MP8165, RW5120, RW5125, RW5240, RW5308, RW5308D, RW5308DB, RW5312DB, RW5316DA, RW5316DAD, RW5316DAG, RW5316DB, RW8160, RW8165.
137. RIDATA (AccessTek): DVD DUAL 4XMax, DVD RW 16XMax, 4XMax, 8XMax, DVD+RW 4XMax, 4XMaxA, 8XMax, DVD-RW 4XMax, 8XMax, DVDRW RDA-12042.
138. RM (BTC): CD-RW BCE5224IM, BCE5232IM, COMBO BCO5216IM.
139. RWD (JVC): RW2224, RW4224, XR-RW4424.
140. SAF: CD-R6024, CD-RW4416S, CD-R6024, CD-RW2224, CD-RW4224A, CD-R8020, CD-RW8220, CD-RW8432, CD-RW12432, CD-RW6424S, CD-RW6424A.
141. SAMSUNG: CD-R/RW SCW-230, SN-208B, SW-204B, SW-204F, SW-206, SW-207F, SW-208B, SW-208F, SW-212B, SW-216B, SW-216F, SW-220B, SW-224B, SW-224F, SW-232B, SW-240B, SW-248B, SW-248F, SW-252B, SW-252F, SW-252S, SW-252T, SW-408B, SWE-240B, CDRW/DVD SM-308B, SM-308N, SM-312B, SM316B, SM-332B, SM-352B, SM-352F, SM-352N, SM-352S, SM-408B, SN-308B, SN-324B, SN-324F, SN-324S, SN-W08B, SU-408B, COMBO SM-304B, SM-304F, DVD-MULTI SRT03B, SRT04B, SRT08B, DVD+RW SH-W08A, SH-W12A.
142. SANYO: CD-R CRD-R800S (firmware version 1.23 or later), CRD-RW1 (firmware version 1.09 or later), CRD-RW800P, CRD-RW2, CRD-BP2, CRD-BP900P, CRD-BP3, CRD-BP1300P, CRD-BP4, CRD-BP1400P, CRD-BP5, CRD-BP1500P, CRD-BP1600P, CRD-BP6, CRD-BP1700P, CRD-BP1800P.
143. SATA (BENQ): DVD DD 4X16X4X16.
144. SATA-BD (PHILIPS): BDRE1001.
145. SCSI-CD (PHILIPS): ReWritable-2x2x6.
146. SCSI-ID (PHILIPS): ReWritable-2x2x6.
147. SHARK (BTC): CDRW1610IM, CDRW2410IM, CDRW3212IM.
148. Shecom: ikebana.
149. Slimtype (LITE-ON): LSC-24081MX, LSC-24081X, LSC-24082KX, LSC-24083K, XJ-SC241, XJ-SC241M, XJ-SC242K, XJ-SC242M, XJ-SC242S, COMBI LSC-24081, LSC-24081S, LSC-24101, LSC-24101S, LSC-24121, LSC-24121S, COMBO LSC-24081, LSC-24081M, LSC-24081S, LSC-24082K, LSC-24082M, LSC-24082S, LSC-24101, LSC-24101S, LSC-24121, LSC-24121S, LSC-2485K, SOLC-2481K, SOSC-2483K, SOSW-2483K, SSC-2481K, SSC-2485K, DVD+RW SDW-421S, SOSW-822S, SOSW-842S, SOSW-862S, SOSW-872S, SOUW-861Y, DVDRW SDW-200D, SDW-421S, SDW-431S, SDW-431Z, SDW-452S, SLW-831S, SLW-831SX, SOLW-831S, SOLW-891S, SOSW-452S, SOSW-813S, SOSW-832S, SOSW-833S, SOSW-833SX, SOSW-852S, SOUW-871Y, SSM-8515S, SSM-85H5S, SSW-8015S, SSW-8515S.
150. SONY: PCGA-DVRW1, iLINK DRIVE, CD-R CDU928E, CRX110E, CD-RW CRX-850E, CRX0811, CRX0821, CRX100E, CRX10U, CRX120E, CRX140E, CRX140S, CRX145E, CRX145S, CRX155E, CRX160E, CRX160S, CRX1611, CRX1611E, CRX1621, CRX1650L, CRX168B, CRX170E, CRX1750MU, CRX1750U, CRX175A, CRX175A1, CRX175A2, CRX175E, CRX175E1, CRX175E2, CRX175M, CRX185A1, CRX185E1, CRX185E2, CRX185E3, CRX195A1, CRX195E, CRX195E1, CRX195E4, CRX205E1, CRX20MU, CRX210A1, CRX210E1, CRX215E1, CRX215E4, CRX215E5, CRX216E, CRX217E, CRX217ED, CRX217SD, CRX218E, CRX220A1, CRX220E1, CRX220E2, CRX225A, CRX225A1, CRX225AU, CRX225E, CRX225E1, CRX230E, CRX230E1, CRX230E2, CRX230E3, CRX230E4, CRX230E5, CRX230ED, CRX230EE, CRX230SD, CRX2411, CRX300E, CRX300E1, CRX305E, CRX310E, CRX310ED, CRX315E, CRX320AE, CRX320E, CRX320ED, CRX320EE, CRX331E, CRX400E, CRX500E, CRX510E, CRX700E, CRX75A, CRX75L, CRX800E, CRX810E, CRX820E, CRX821E, CRX830E, CRX835E, CRX841E, CRX85A, CRX85MA, CRX85U, CRX950E, CRXP-90MU, CRXP90MU, DRU110A, DRU120A, DRX120L, MPDAP20U, MPD-AP20U, CDRW/DVD CRX330E, CRX830E, CRX835E, CDRWDVD CRX850E, DVD RW DRU-500A, DRU-500AX, DRU-510A, DRU-530A, DRU-540A, DRU-700A, DRU-710A, DRU-720A, DRU-800A, DRX-5100L, DRX-510UL, DRX-530UL, DW-D18A, DW-D22A, DW-D23A, DW-D26A, DW-D56A, DW-D56AG, DW-D58A, DW-D76A, DW-G120A, DW-G120S, DW-G121A, DW-G121S, DW-G160A, DW-G160S, DW-G161A, DW-G161S, DW-G520A, DW-G521A, DW-M10A, DW-P10A, DW-Q120A, DW-Q120S, DW-Q121A, DW-Q121S, DW-Q160A, DW-Q160S, DW-Q26A, DW-Q28A, DW-Q30A, DW-Q31A, DW-Q58A, DW-Q76A, DW-Q78A, DW-S32A, DW-U10A, DW-U12A, DW-U14A, DW-U18A, DW-U20A, DW-U50A, DW-U56A, DW-U56AG, DW-U76A, DRU 500A, 510A, DW U10A, U12A, U14A, U50A, U54A, DVD+-RW DW-D56A, DW-Q58A, DVD+/-RW DW-U18A, DVD+RW DRU-120A, DRU120A, DW-P18A, DW-P50A, DW-P56A, DW-R56A, RW5120, DW P50A, P54A.
151. SUPER (LITE-ON): DSA-6S165S, DSA-6S166H, DSM-6S165H.
152. SUPERA (LITE-ON): DSM-6S165P.
153. SUPERM (LITE-ON): DSM-6S165H, DSM-6S165L, DSM-6S165P, DSM-6S165S, DSM-7S166P, DSM-7S166S, DSM-FH166P.
154. TDK: CDRW121032, CDRW121032A, CDRW161032, CDRW161040, CDRW161040X, CDRW161040XA, CDRW241040B, CDRW241040X, CDRW241040UEX, CDRW241224UPBC, CDRW321040B, CDRW321040X, CDRW321240B, CDRW321240X, CDRW401240, CDRW401240AIN, CDRW401240B, CDRW401240X, CDRW401248B, CDRW401248UEX, CDRW4800B, CDRW4800D, CDRW4800X, CDRW481248B, CDRW481648UED, CDRW48244816B, CDRW482448AID, CDRW482448B, CDRW482448BC, CDRW5200B, CDRW5201B, CDRW5210UEB, CDRW522432UED, CDRW522448UED, CDRW523252B, CDRW8432, DVDRW0404N, DVDRW1280B, DVDRW1616EX, DVDRW1616N, DVDRW1682B, DVDRW420N, DVDRW800, DVDRW840, DVDRW840G, DVDRW880B, DVDRW880N, CDRW 401240UPB.
155. TEAC: CD-224E, CD-R56S, CD-R56S4, CD-R58S, CD-W216E, CD-W224E, CD-W224EA, CD-W24E, CD-W28E, CD-W512E, CD-W512EB, CD-W512SB, CD-W516EB, CD-W516EC, CD-W524E, CD-W532E, CD-W540E, CD-W548E, CD-W54E, CD-W552E, CD-W552EL, CD-W552G, CD-W552G-A, CD-W58E, DV-W227PU, DV-W22E, DV-W22E-93, DV-W24E, DV-W24ES, DV-W24SL, DV-W50D, DV-W50E, DV-W512G, DV-W516G, DV-W516GD, DV-W58G, DV-W58G-A, DV-W58GA, DW-216E, DW-224E, DW-224E-A, DW-224E-AA, DW-224E-AA82, DW-224E-B, DW-28E, DW-548DL, DW-552G, DVD+RW DV-W58E.
156. Thats w (AOPEN): fastX24, fastX40.
157. TORiSAN: CD-RW CDW-U4424.
158. TOSHIBA: GSA-4080N, IPC5025A, SD-R2512TAX, CD-R/RW SR-C8002, SR-C8102, SR-M8102, CD/DVDW SD-R5372, SD-R6472, SD-W4072, CDRW/DVD SDR1312, SDR1412, SDR1512, SDR1612, SDR2102, SDR2212, SDR2312, SDR2412, SDR2512, SDR2612, SDR2712, SDR5112, SDR6012, SDR6112, SDR6252, SDR9012, SDR9112, CDW/DVD SD-R1612, SD-R2612, DVD-ROM SA-R2102, SD-R1002, SD-R1102, SD-R1202, SD-R1312, SD-R1412, SD-R1512, SD-R1612, SD-R2002, SD-R2102, SD-R2212, SD-R2312, SD-R2412, SD-R2512, SD-R2612, SD-R2712, SD-R5002, SD-R5112, SD-R6012, SD-R6112, SD-R6252, SD-R9012, SD-R9112, DVDW/HD TS-L802A, ODD-DVD SD-R5272, SD-R5372, SD-R6252, SD-R6372, SD-R6472, SD-R6572, SD-W3002, SD-W4072, SDR5372D, SDR6112F, SDR6472D.
159. TRAXDATA: CDRW-2410E, CDRW-4012E, CDRW-4812E, CDRW-4816E, CDRW-4824E, CDRW-5212E, CDRW-5216E, CDRW-5224E, CDRW-5224E SO, CDRW12-12-32plus, CDRW121032+, CDRW2260+, CDRW2224 PLUS, CDRW4424 PLUS, CDRW4432 PLUS, CDRW522452plus, CRW2260 PRO.
160. TSSTcorp (TOSHIBA): CD-R/RW TS-H292A, TS-H292B, TS-H292C, TS-H292D, CD-RW TS-H292B, CD/DVDW ST-H552A, ST-H552B, ST-H553B, TS-H542A, TS-H552C, TS-H552D, TS-H552F, TS-H552L, TS-H552U, TS-H553A, TS-H652A, TS-L532A, TS-L532B, TS-L532C, TS-L532L, TS-L532M, TS-L532R, TS-L532U, TS-L533C, TS-L632A, TS-L632B, TS-L632C, TS-L632D, TS-L632L, TS-L802A, TS-U522A, TS-U612A, TS-U632A, CDW/DVD TS-H492A, TS-H492B, TS-H492C, TS-H492D, TS-H493A, TS-L462A, TS-L462B, TS-L462C, TS-L462D, TS-U462A, TS-U462B, CDRW/DVD TSL462C, DVDW/CD ST-H552A, ST-H552B, ST-H553B, TS-H552C, TS-H552D, TS-H552F, TS-H542A, TS-H552L, TS-H552U, TS-H553A, TS-H652A, TS-L532A, TS-L532B, TS-L532C, TS-L532L, TS-L532M, TS-L532R, TS-L532U, TS-L533C, TS-L632A, TS-L632B, TS-L632C, TS-L632D, TS-L802A, TS-L632L, TS-U522A, TS-U612A, TS-U632A.
161. ULTIMA (ARTEC): WRA-GA32, WRA-KA40, WRA-OA40, WRA-WA40.
162. USB (ACER): CD-R/RW 4X4X6, 6X4X6, 8X8X8.
163. USB (BTC): USB4816, USB5232, USB 5224.
164. USB-CD (PHILIPS): CDD5451, CDD7251.
165. USB-DVD (PHILIPS): DVD8351.
166. VERBATIM: 241040AA, 241040AB, 241040AL, 241040AT, 321240AA, 321240AB, 321240AL, 321240AT, 401248AA, 401248AB, 401248AL, 401248AT, 401248AX, 481248AA, 481248AB, 481248AL, 481248AT, 481648AA, 481648AB, 481648AX, 48244816AX, 482448AL, 482448AX, 522452AA, 522452AL, 522452AU, 522452AX, 523252AL, 523252AU, 523252AX, DVDR1AB, DVDR1AP, DVRW1AA, DVRW1AB, DVRW1AP, DVRW1AR, DVRW1AX, VBT241040A, VBT321040A.
167. WAITEC: ALADAR, ALADAR/1, CD-R WT2082, WT3284, CELERUS, FRISBY, FRISBYII, MEGALUS/1, RAPTOR, RAPTOR RED, SAURUS, SFINX16, SHUTTLE, STORM24, STORM32, STORM40, STORM24/1, STORM32/1, STORM40/1, STORM48/1, STORM52/1, STORM52/2, STORM 52/3, T-REX, TITAN, WT624, WT824, WT2422EI, WT2444EI, WT3244EI.
168. WPI: CDRW-622, CDRW-642e, CDRW-1622e, CDRW-1622, CDRW-1688, CDRW-2422, CDRW-4424, CDRW-4432, CDRW-8432, CDRW-8432i, CDRW-12832.
169. YAMAHA: CDR200, CDR400, CRW2260, CRW4260, CDR401, CRW4001, CRW2261, CRW4261, CRW2216S, CRW2216E, CRW4216S, CRW4416S, CRW4216E, CRW4416E, CRW6416S, CRW8424S, CRW8424E, CRW8824S, CRW8824E, CRW2100E, CRW2100IX, CRW2100S, CRW2200E, CRW2200IX, CRW2200S, CRW-70, CRW3200E, CRW3200S, CRW-F1E, CRW-F1S.


B. Emergency Recovery - by Using Recovery CD (Bootable CD) or Diskette
----------------------------------------------------------------------

Limitation and Usage of the command-line RESTORE program:

1) The command-line RESTORE program (RESTORE.EXE) only restores Drive-Image backup files. File-level backup files are not supported in this command-line RESTORE program. Please use the restore function inside NTI Backup NOW! (the Windows application) to restore File-level backup files.

Usage of the RESTORE program (RESTORE.EXE):

1) If you are restoring from a Recovery CD (Bootable CD), then you must follow one of the following:

For IDE Drives: Set your CD-ROM drive to come first in the boot sequence (e.g. "CD-ROM, A, C") in your BIOS settings.  

For SCSI Drives: If you have a SCSI drive, in the adapter settings, select "Enable bootable CD" option if your adapter supports it, and set SCSI to come first in the boot sequence (e.g. "SCSI, A, C") in your BIOS settings.
	
2) Insert the Recovery floppy disk (Startup Disk), or the Recovery CD (Bootable CD), Reboot your computer.

3) When the command line prompt appears, type "restore" and the backup file filename at the DOS prompt with a space in between "restore" and the filename, and press Enter. This backup file is the one that contains the Drive-Image backup of your Windows NT or Windows 2000 (e.g. your C: drive).

4) After the restore is done. Remove the Recovery floppy disk (Startup Disk), or the Recovery CD (Bootable CD), Reboot your computer.

jlpjlp · Answer

non c'est pas ca!


regarde la pour voir ce que cela donne:

infection secure window vundo#0

oum-choucha · Answer

rapport clean
 2007-10-25 a 10:30:48.15 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
C:\WINDOWS\system32\bdod.bin FOUND 
 
*** Recherche des fichiers dans C:\Program Files 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport !

oum-choucha · Answer

j'ai pas compris ce que vous m'avez demandé de faire : infection secure window vundo #0
dois je désactiver la restauration du système ?

jlpjlp · Answer

c'est pour que tu vois ce que ca donne quand on colle un rapport combofix que je t'ai donné ce lien

oum-choucha · Answer

ComboFix 07-10-23.2 - KAOUTAR 2007-10-25 12:26:21.3 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.533 [GMT 2:00] Running from: C:\Documents and Settings\KAOUTAR\Bureau\ComboFix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\Documents and Settings\All Users\Application Data.\salesmonitor C:\Documents and Settings\All Users\Application Data.\vobyxmrk.dll C:\Documents and Settings\KAOUTAR\Bureau\Error Cleaner.url C:\Documents and Settings\KAOUTAR\Bureau\Privacy Protector.url C:\Documents and Settings\KAOUTAR\Bureau\Spyware&Malware Protection.url C:\Documents and Settings\KAOUTAR\Favoris\Error Cleaner.url C:\Documents and Settings\KAOUTAR\Favoris\Privacy Protector.url C:\Documents and Settings\KAOUTAR\Favoris\Spyware&Malware Protection.url C:\Documents and Settings\KAOUTAR\ResErrors.log C:\Documents and Settings\MOSTAFA\Bureau\Error Cleaner.url C:\Documents and Settings\MOSTAFA\Bureau\Privacy Protector.url C:\Documents and Settings\MOSTAFA\Bureau\Spyware&Malware Protection.url C:\Documents and Settings\MOSTAFA\Favoris\Error Cleaner.url C:\Documents and Settings\MOSTAFA\Favoris\Privacy Protector.url C:\Documents and Settings\MOSTAFA\Favoris\Spyware&Malware Protection.url . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\LEGACY_FMTR ((((((((((((((((((((((((((((( Fichiers créés 2007-09-25 to 2007-10-25 )))))))))))))))))))))))))))))))))))) . 2007-10-25 11:51 d-------- C:\Documents and Settings\KAOUTAR\Application Data\CyberLink 2007-10-25 09:58 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-10-24 22:58 d-------- C:\Documents and Settings\KAOUTAR\Application Data\Grisoft 2007-10-24 22:58 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-10-24 22:36 d-------- C:\Program Files\CCleaner 2007-10-24 18:35 d-------- C:\Program Files\RogueRemover FREE 2007-10-24 18:00 d-------- C:\Program Files\Hijackthis Version Fran‡aise 2007-10-24 17:30 d-------- C:\Documents and Settings\KAOUTAR\Application Data\BitDefender 2007-10-24 15:09 d-------- C:\Documents and Settings\LocalService\Menu D‚marrer 2007-10-24 15:01 d-------- C:\Documents and Settings\MOSTAFA\Application Data\Bitdefender 2007-10-24 15:01 81,984 --a------ C:\WINDOWS\system32\bdod.bin 2007-10-24 15:00 d-------- C:\Program Files\BitDefender 2007-10-24 14:58 d-------- C:\Program Files\Fichiers communs\BitDefender 2007-10-24 14:46 d---s---- C:\Documents and Settings\MOSTAFA\UserData 2007-10-24 12:28 d-------- C:\Program Files\Trend Micro 2007-10-24 00:16 d-------- C:\Documents and Settings\MOSTAFA\Application Data\Motive 2007-10-23 23:47 d-------- C:\Program Files\Audacity 2007-10-23 23:36 d-------- C:\Documents and Settings\MOSTAFA\Application Data\MSNInstaller 2007-10-23 21:55 d-------- C:\Documents and Settings\MOSTAFA\Application Data\AdobeUM 2007-10-23 14:58 d-------- C:\Program Files\ABBYY FineReader 6.0 Sprint 2007-10-23 14:53 71,168 --a------ C:\WINDOWS\system32\E_FLBBEE.DLL 2007-10-23 14:53 62,976 --a------ C:\WINDOWS\system32\E_FD4BBEE.DLL 2007-10-23 14:53 49,152 --a------ C:\WINDOWS\system32\E_DCINST.DLL 2007-10-23 14:53 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-10-23 14:53 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys 2007-10-23 14:53 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-10-23 14:53 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys 2007-10-23 14:48 d-------- C:\Program Files\epson 2007-10-23 14:48 46,080 --a------ C:\WINDOWS\system32\escimgd.dll 2007-10-23 14:48 29,696 --a------ C:\WINDOWS\system32\escwiad.dll 2007-10-23 14:48 22,016 --a------ C:\WINDOWS\system32\esccmd.dll 2007-10-23 12:45 d-------- C:\WINDOWS\BDOSCAN8 2007-10-23 11:50 4,120 --a------ C:\WINDOWS\system32 mp.reg 2007-10-23 11:15 d-------- C:\Documents and Settings\KAOUTAR\Application Data\Motive 2007-10-23 09:38 d-------- C:\Documents and Settings\KAOUTAR\Application Data\ProtectionConue 2007-10-23 09:38 24,064 --a------ C:\WINDOWS\system32\msxml3a.dll 2007-10-23 09:36 d-------- C:\Documents and Settings\KAOUTAR\Application Data\Zango 2007-10-23 01:12 d-------- C:\Program Files\xxwmplvt 2007-10-23 01:06 322,560 --a------ C:\WINDOWS\ocgrep.dll 2007-10-23 01:06 282,624 --a------ C:\WINDOWS\movctrlflm.dll 2007-10-23 01:06 108,544 --a------ C:\WINDOWS\kthemup.exe 2007-10-23 01:06 79,872 --a------ C:\WINDOWS ssfrch.dll 2007-10-22 16:45 2,948 --a------ C:\WINDOWS\mozver.dat 2007-10-22 16:45 0 --a------ C:\WINDOWS sreg.dat 2007-10-21 15:52 271,224 --a------ C:\WINDOWS\system32\mucltui.dll 2007-10-21 15:52 207,736 --a------ C:\WINDOWS\system32\muweb.dll 2007-10-21 12:14 188 --a------ C:\WINDOWS\system32\eDataSecurity.dat 2007-10-21 12:09 d-------- C:\Documents and Settings\KAOUTAR\Application Data\MSNInstaller 2007-10-21 12:01 d---s---- C:\Documents and Settings\KAOUTAR\UserData 2007-10-21 12:00 d-------- C:\Documents and Settings\KAOUTAR\Application Data\Windows Desktop Search 2007-10-21 03:27 882,048 --a------ C:\WINDOWS\system32\drivers\HVR1110.sys 2007-10-21 03:27 245,816 --a------ C:\WINDOWS\system32\hcwpnp32.dll 2007-10-21 03:27 98,360 --a------ C:\WINDOWS\system32\hcwi2c32.dll 2007-10-21 03:27 36,921 --a------ C:\WINDOWS\system32\hcwutl32.dll 2007-10-21 03:27 3,072 --a------ C:\WINDOWS\system32\HCW34Co.dll 2007-10-21 02:49 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2 2007-10-21 00:08 23,040 --------- C:\WINDOWS\kb913800.exe 2007-10-20 23:24 d--h----- C:\Documents and Settings\AYOUB\Voisinage r‚seau 2007-10-20 23:24 d--h----- C:\Documents and Settings\AYOUB\Voisinage d'impression 2007-10-20 23:24 d--h----- C:\Documents and Settings\AYOUB\ModŠles 2007-10-20 23:24 dr------- C:\Documents and Settings\AYOUB\Mes documents 2007-10-20 23:24 dr------- C:\Documents and Settings\AYOUB\Menu D‚marrer 2007-10-20 23:24 dr------- C:\Documents and Settings\AYOUB\Favoris 2007-10-20 23:24 d-------- C:\Documents and Settings\AYOUB\Bureau 2007-10-20 23:24 d-------- C:\Documents and Settings\AYOUB\Application Data\Windows Desktop Search 2007-10-20 23:16 dr------- C:\Documents and Settings\MOSTAFA\Mes documents 2007-10-20 23:16 dr------- C:\Documents and Settings\MOSTAFA\Menu D‚marrer 2007-10-20 23:16 dr------- C:\Documents and Settings\MOSTAFA\Favoris 2007-10-20 23:16 d-------- C:\Documents and Settings\MOSTAFA\Bureau 2007-10-20 23:16 d-------- C:\Documents and Settings\MOSTAFA\Application Data\Windows Desktop Search 2007-10-20 23:15 d--h----- C:\Documents and Settings\MOSTAFA\Voisinage r‚seau 2007-10-20 23:15 d--h----- C:\Documents and Settings\MOSTAFA\Voisinage d'impression 2007-10-20 23:15 d--h----- C:\Documents and Settings\MOSTAFA\ModŠles 2007-10-20 21:30 d-------- C:\Documents and Settings\KAOUTAR\Contacts 2007-10-20 20:50 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-10-20 20:49 d-------- C:\Program Files\Microsoft SQL Server Compact Edition 2007-10-20 20:48 d-------- C:\WINDOWS\system32\fr-FR 2007-10-20 20:48 d-------- C:\Program Files\Windows Desktop Search 2007-10-20 20:47 d-------- C:\Program Files\Windows Live Toolbar 2007-10-20 20:43 d-------- C:\Program Files\Windows Live 2007-10-20 19:36 69,632 --a------ C:\WINDOWS\system32\MCCDevice.dll 2007-10-20 19:36 6,048 --a------ C:\WINDOWS\system32\MCC16.dll 2007-10-20 19:29 81,920 --a------ C:\WINDOWS\system32\W32n50.dll 2007-10-20 19:29 17,162 --a------ C:\WINDOWS\system32\Pcandis5.sys 2007-10-20 19:29 16,848 --a------ C:\WINDOWS\system32\Pcandis4.sys 2007-10-20 19:28 d-------- C:\WINDOWS\Motive 2007-10-20 19:28 d-------- C:\Program Files\Motive 2007-10-20 19:28 d-------- C:\Program Files\Fichiers communs\Motive 2007-10-20 19:28 d-------- C:\Program Files\Common Files 2007-10-20 19:24 d-------- C:\Program Files\BroadJump 2007-10-20 19:21 d-------- C:\Program Files\Club-Internet 2007-10-20 18:45 d-------- C:\WINDOWS\system32\Hauppauge 2007-10-20 18:45 d-------- C:\Program Files\WinTV 2007-10-20 18:43 d-------- C:\Program Files\Yahoo! 2007-10-20 18:42 1,168,896 --a------ C:\WINDOWS\system32\ERUpdateHidden.EXE 2007-10-20 18:42 258,048 --a------ C:\WINDOWS\system32\Uninstall_eRecovery.exe 2007-10-20 18:42 258,048 --a------ C:\WINDOWS\system32\CheckD2DSystem.exe 2007-10-20 18:42 159,744 --a------ C:\WINDOWS\system32\CloseProcessWindow.dll 2007-10-20 18:42 114,688 --a------ C:\WINDOWS\PowerOption.exe 2007-10-20 18:42 16,384 --a------ C:\WINDOWS\system32\ClearEvent.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-24 19:13 --------- d-----w C:\Program Files\Hijackthis Version Française 2007-10-24 12:41 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-10-23 13:09 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2007-10-21 01:24 --------- d-----w C:\Program Files\Windows Plus 2007-10-21 01:24 --------- d-----w C:\Program Files\Services en ligne 2007-10-21 01:24 --------- d-----w C:\Program Files\Realtek 2007-10-21 01:24 --------- d-----w C:\Program Files\Oca History Tool 2007-10-21 01:23 --------- d-----w C:\Program Files\NewTech Infosystems 2007-10-21 01:23 --------- d-----w C:\Program Files\microsoft frontpage 2007-10-21 01:23 --------- d-----w C:\Program Files\GemMasterFrench 2007-10-21 01:23 --------- d-----w C:\Program Files\FrenchOtto 2007-10-21 01:23 --------- d-----w C:\Program Files\Fichiers communs\SpeechEngines 2007-10-21 01:23 --------- d-----w C:\Program Files\Fichiers communs\ODBC 2007-10-21 01:23 --------- d-----w C:\Program Files\Fichiers communs\NewTech Infosystems 2007-10-21 01:23 --------- d-----w C:\Program Files\Fichiers communs\muvee Technologies 2007-10-21 01:23 --------- d-----w C:\Program Files\Fichiers communs\MSSoap 2007-10-21 01:23 --------- d-----w C:\Program Files\Fichiers communs\LightScribe 2007-10-21 01:23 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2007-10-21 01:23 --------- d-----w C:\Program Files\DIFX 2007-10-21 01:23 --------- d-----w C:\Program Files\CyberLink 2007-10-21 01:23 --------- d-----w C:\Program Files\commercial 2007-10-21 01:23 --------- d-----w C:\Program Files\Acer WLAN 11g USB Dongle 2007-08-21 06:17 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll 2007-08-16 14:17 51,568 ----a-w C:\WINDOWS\system32\sirenacm.dll 2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll 2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll 2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe 2007-07-30 17:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll 2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll 2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll 2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll 2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{749C033F-C489-F3EF-B5C5-00B8C78C4344}] 2007-10-23 01:12 122880 --a------ C:\Program Files\xxwmplvt\xlxzvmpw.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AC546B33-036A-41DA-B1CC-C1D15659520E}] 2007-10-22 19:02 282624 --a------ C:\WINDOWS\movctrlflm.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{61AB8A39-FCCB-47CC-BAF3-750D1834E773}"= C:\WINDOWS ssfrch.dll [2007-10-22 19:02 79872] "{381FFDE8-2394-4f90-B10D-FC6124A40F8C}"= C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll [2007-10-24 15:08 91432] [HKEY_CLASSES_ROOT\CLSID\{61AB8A39-FCCB-47CC-BAF3-750D1834E773}] [HKEY_CLASSES_ROOT ssfrch.ToolBar.1] [HKEY_CLASSES_ROOT\TypeLib\{84C94803-B5EC-4491-B2BE-7B113E013B77}] [HKEY_CLASSES_ROOT ssfrch.ToolBar] [HKEY_CLASSES_ROOT\CLSID\{381FFDE8-2394-4f90-B10D-FC6124A40F8C}] [HKEY_CLASSES_ROOT\BitDefender Toolbar] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LaunchApp"="Alaunch" [] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-07-12 00:19] "RTHDCPL"="RTHDCPL.EXE" [2006-06-01 02:48 C:\WINDOWS\RTHDCPL.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 04:04 C:\WINDOWS\SkyTel.exe] "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-10 22:00] "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-10 22:00] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-07-12 00:19] "StandardInstall"="" [] "BitDefender Antiphishing Helper"="C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe" [2007-08-27 15:24] "BDAgent"="C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe" [2007-10-24 15:08] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25] "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 14:01] "nwiz"="nwiz.exe" [2006-07-12 00:19 C:\WINDOWS\system32 wiz.exe] "ntiMUI"="c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7 tiMUI.exe" [2005-05-11 17:15] "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-10 22:00] "IMEKRMIG6.1"="C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [2004-08-10 22:00] "MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-10 22:00] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] "Acer Empowering Technology Monitor"="C:\WINDOWS\system32\SysMonitor.exe" [2006-04-18 19:54] "eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2006-03-17 15:00] "eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 14:40] "BJCFD"="C:\Program Files\BroadJump\Client Foundation\CFD.exe" [2003-01-27 17:16] "Motive SmartBridge"="C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe" [2006-04-21 15:41] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 22:00] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-08-16 16:19] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 15:39 294400] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "bxsbang"= {B2301C26-2587-4AF5-BB45-8CC89D842A3D} - C:\WINDOWS\bxsbang.dll [ ] "ocgrep"= {8D3EC1C6-7E47-460C-A1F0-3F7168F80186} - C:\WINDOWS\ocgrep.dll [2007-10-22 19:02 322560] R0 UBHelper;UBHelper;C:\WINDOWS\system32\drivers\UBHelper.sys R1 bdftdif;bdftdif;\??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys R3 bdfsfltr;bdfsfltr;C:\WINDOWS\system32\DRIVERS\bdfsfltr.sys R3 BDSelfPr;BDSelfPr;\??\C:\Program Files\BitDefender\BitDefender 2008\bdselfpr.sys R3 Hauppauge WinTV-HVR-1110;Hauppauge WinTV-HVR-1110 PCI Card;C:\WINDOWS\system32\DRIVERS\HVR1110.sys R3 int15.sys;int15.sys;\??\C:\Acer\Empowering Technology\eRecovery\int15.sys R3 psdfilter;psdfilter;\??\C:\WINDOWS\system32\Drivers\psdfilter.sys R3 psdvdisk;psdvdisk;\??\C:\WINDOWS\system32\Drivers\psdvdisk.sys R3 scan;BitDefender Threat Scanner;C:\WINDOWS\System32\svchost.exe -kbdx S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS);C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bdx scan . ************************************************************************** catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-10-25 12:27:33 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\bdfsfltr] "ImagePath"=hex:73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\ . Completion time: 2007-10-25 12:28:03 . --- E O F ---

jlpjlp · Answer

Colle le rapport :
Clean permettra de faire du nettoyage et supprimer des fichiers que des anti-virus et anti-spywares n'ont pas pu trouver. Le logiciel est régulièrement mis à jour, vous devrez donc le re-téléchargé pour obtenir une version plus récente.

· Téléchargez clean.zip, décompressez-le sur votre bureau (clic droit / extraire tout), vous obtenez alors un dossier clean
· Démarrez Windows en mode sans échec : Guide pour redémarrer en mode sans échec
· Ouvrez le dossier clean qui se trouve sur ton bureau, et double-cliquez sur clean.cmd, une fenêtre noire va apparaître pendant un instant, laissez la ouverte jusqu'à ce qu'elle se ferme.

manuel:
http://kerio.probb.fr/tuto-Clean-h37.html

_______________________

désactive la restauration système pour purger les virus qui seraient dedans(dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)

redemarre ton ordi
puis
puis réactive là
------------------




refait un scan avec bitdefender que tu as pour voir et donne le resultat

recolle hijackthis

et surtout dis tes problemes

oum-choucha · Answer

Rapport clean

 25/10/2007 a 12:57:35,73 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
C:\WINDOWS\system32\bdod.bin FOUND 
 
*** Recherche des fichiers dans C:\Program Files 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport ! 

Script execute en mode sans echec 
Rapport clean par Malekal_morte - http://www.malekal.com 
Script execute en mode sans echec 25/10/2007 a 13:00:28,98 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression des fichiers dans C: 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
tentative de suppression de C:\WINDOWS\system32\bdod.bin 
 
*** Suppression des fichiers dans C:\Program Files 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport !

oum-choucha · Answer

Fichier journal de BitDefender
Produit : BitDefender Antivirus 2008 
Version : BitDefender UIScanner V.11 
Date du journal : 13:51:46 25/10/2007 
Chemin du journal : C:\Documents and Settings\All Users\Application Data\BitDefender\Desktop\Profiles\Logs\deep_scan\1193313106_1_02.xml 

Analyse des chemins :Chemin0000: C:\ 
Chemin0001: D:\ 


Options d’analyse :Analyse contre les virus : Oui 
Détecter les adwares : Oui 
Analyse contre les spywares : Oui 
Analyse des applications : Oui 
Détecter les numéroteurs : Oui 
Analyse contre les Rootkits : Oui 


Options de sélection de cible :Analyse les clés du registre : Non 
Analyse des cookies : Oui 
Analyser le secteur de boot : Non 
Analyse des processus mémoire : Oui 
Analyser les archives : Non 
Analyser les fichiers enpaquetés : Non 
Analyser les emails : Non 
Analyser tous les fichiers : Non 
Analyse heuristique : Non 
Extensions analysées : (null) 
Extensions exclues  :  


Traitement cibleAction par défaut pour les objets infectés : Désinfecter 
Action par défaut pour les objets suspects : Aucun 
Action par défaut pour les objets camouflés : Aucun 


Résumé de l'analyseNombre de signatures de virus : 0 
Plugins archives : 0 
Plug-ins messagerie : 0 
Plugins d'analyse : 0 
Plugins archives : 0 
Plug-ins système : 0 
Plug-ins décompression : 0 


Résumé de l'analyse généraleEléments analysés : 0 
Eléments infectés  : 0 
Eléments suspects : 0 
Eléments résolus : 0 
Virus individuels trouvés : 0 
Répertoires analysés : 0 
Secteur de boot analysés : 0 
Archives analysés : 0 
Erreurs I/O : 0 
Temps d'analyse : 00:00:00:01 
Fichiers par seconde : 0 


Résumé des processus analysésAnalysé(s) : 0 
Infecté(s) : 0 


Résumé des clés de registre analyséesAnalysé(s) : 0 
Infecté(s) : 0 


Résumé des cookies analysésAnalysé(s) : 0 
Infecté(s) : 0 


Problèmes non résolus :Nom de l'objet Nom de la menace Etat final 
C:\Documents and Settings\KAOUTAR\Local Settings\Temp\BIT21D.tmp=]archstored:ac8zt2/main_uninstaller.exe Trojan.Agent.ABSG Echec de la désinfection 
C:\Documents and Settings\KAOUTAR\Local Settings\Temp\BIT21D.tmp=]archstored:ac8zt2/edi.exe Trojan.Agent.BHO.N Echec de la désinfection 
C:\Documents and Settings\KAOUTAR\Local Settings\Temp\BIT21D.tmp=]archstored:ac8zt2/install.bat Trojan.Agent.BHO.N Echec de la désinfection 


Problèmes résolusNom de l'objet Nom de la menace Etat final 

Je dois effacer ces fichiers ?

oum-choucha · Answer

Logfile of HijackThis v1.99.1
Scan saved at 13:54:05, on 25/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\BitDefender\BitDefender 2008\uiscan.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {749C033F-C489-F3EF-B5C5-00B8C78C4344} - C:\Program Files\xxwmplvt\xlxzvmpw.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: MSVPS System - {AC546B33-036A-41DA-B1CC-C1D15659520E} - C:\WINDOWS\movctrlflm.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: The nssfrch - {61AB8A39-FCCB-47CC-BAF3-750D1834E773} - C:\WINDOWS
ssfrch.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O21 - SSODL: bxsbang - {B2301C26-2587-4AF5-BB45-8CC89D842A3D} - C:\WINDOWS\bxsbang.dll (file missing)
O21 - SSODL: ocgrep - {8D3EC1C6-7E47-460C-A1F0-3F7168F80186} - C:\WINDOWS\ocgrep.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

jlpjlp · Answer

oui tu peux les virer

puis utilise ccleaner en mode sans echec et supprime bien les fichiers temporaires


puis
recolle hijackthis

et surtout dis tes problemes

oum-choucha · Answer

pour l'instant il n'y a plus de problème ! dois - je supprimer tous ce que j'ai installé ?

jlpjlp · Answer

FIX ces lignes avec hiajckthis (fix cheked) apres les avoir cochées sur la gauche:



O2 - BHO: (no name) - {749C033F-C489-F3EF-B5C5-00B8C78C4344} - C:\Program Files\xxwmplvt\xlxzvmpw.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: MSVPS System - {AC546B33-036A-41DA-B1CC-C1D15659520E} - C:\WINDOWS\movctrlflm.dll

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)


O21 - SSODL: bxsbang - {B2301C26-2587-4AF5-BB45-8CC89D842A3D} - C:\WINDOWS\bxsbang.dll (file missing)
O21 - SSODL: ocgrep - {8D3EC1C6-7E47-460C-A1F0-3F7168F80186} - C:\WINDOWS\ocgrep.dll





___________________________


télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau. 
double-clique sur OTMoveIt.exe pour le lancer. 
copie la liste qui se trouve en citation ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved. 

Citation : 


C:\WINDOWS\movctrlflm.dll
C:\WINDOWS\ocgrep.dll
C:\Program Files\xxwmplvt\xlxzvmpw.dll


clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes. 



__________________



recolle un rapport hijackthis

oum-choucha · Answer

j'ai fais ccleaner 
les fichiers infectés qui ont été analysé par bitdefender ne peuvent pas etre supprimé : aucune action n'est possible

Logfile of HijackThis v1.99.1
Scan saved at 14:11:36, on 25/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {749C033F-C489-F3EF-B5C5-00B8C78C4344} - C:\Program Files\xxwmplvt\xlxzvmpw.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: MSVPS System - {AC546B33-036A-41DA-B1CC-C1D15659520E} - C:\WINDOWS\movctrlflm.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: The nssfrch - {61AB8A39-FCCB-47CC-BAF3-750D1834E773} - C:\WINDOWS
ssfrch.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O21 - SSODL: bxsbang - {B2301C26-2587-4AF5-BB45-8CC89D842A3D} - C:\WINDOWS\bxsbang.dll (file missing)
O21 - SSODL: ocgrep - {8D3EC1C6-7E47-460C-A1F0-3F7168F80186} - C:\WINDOWS\ocgrep.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

jlpjlp · Answer

ok
ccleaner a du nettoyer 

fais mon precedent message

oum-choucha · Answer

HijackThis en cochant les éléments 
Logfile of HijackThis v1.99.1
Scan saved at 14:16:48, on 25/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: The nssfrch - {61AB8A39-FCCB-47CC-BAF3-750D1834E773} - C:\WINDOWS
ssfrch.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O21 - SSODL: ocgrep - {A62159D2-396D-4A97-9AB6-6A81EE875B80} - C:\WINDOWS\ocgrep.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

oum-choucha · Answer

File/Folder C:\WINDOWS\movctrlflm.dll not found.
DllUnregisterServer procedure not found in C:\WINDOWS\ocgrep.dll
C:\WINDOWS\ocgrep.dll NOT unregistered.
C:\WINDOWS\ocgrep.dll moved successfully.
File/Folder C:\Program Files\xxwmplvt\xlxzvmpw.dll not found.
 
Created on 10/25/2007 14:19:16


File/Folder C:\WINDOWS\movctrlflm.dll not found.
File/Folder C:\WINDOWS\ocgrep.dll not found.
File/Folder C:\Program Files\xxwmplvt\xlxzvmpw.dll not found.
 
Created on 10/25/2007 14:19:45

oum-choucha · Answer

Logfile of HijackThis v1.99.1
Scan saved at 14:21:59, on 25/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: The nssfrch - {61AB8A39-FCCB-47CC-BAF3-750D1834E773} - C:\WINDOWS
ssfrch.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O21 - SSODL: ocgrep - {A62159D2-396D-4A97-9AB6-6A81EE875B80} - C:\WINDOWS\ocgrep.dll (file missing)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

jlpjlp · Answer

fix ces lignes avec hijackthis:


O3 - Toolbar: The nssfrch - {61AB8A39-FCCB-47CC-BAF3-750D1834E773} - C:\WINDOWS
ssfrch.dll 

O21 - SSODL: ocgrep - {A62159D2-396D-4A97-9AB6-6A81EE875B80} - C:\WINDOWS\ocgrep.dll (file missing) 

__________



télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

Citation :


C:\WINDOWS
ssfrch.dll 

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

____________________

normalement c'est bon!!!

recolle hijackthis et dis tes pbs

oum-choucha · Answer

Logfile of HijackThis v1.99.1
Scan saved at 16:42:20, on 25/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

oum-choucha · Answer

C:\WINDOWS
ssfrch.dll NOT unregistered.
C:\WINDOWS
ssfrch.dll moved successfully.
 
Created on 10/25/2007 16:43:58

oum-choucha · Answer

Logfile of HijackThis v1.99.1
Scan saved at 16:45:32, on 25/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O21 - SSODL: ocgrep - {18372432-FD71-4C7C-A5AE-FA8203776D09} - C:\WINDOWS\ocgrep.dll (file missing)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

jlpjlp · Answer

ton rapport est clean!
tu peux garder avg antispyware free en plus de bitdefender et ccleaner



si pbs tu dis

oum-choucha · Answer

Merci beaucoup pour l'aide que vous m'avez apporté !

fifillouka · Answer

bonjour,
je constate que je ne suis pas seul a avoir des problèmes avec defensenet et peut-être avec d'autres car mon pc est trés lent à ouvrir IE et de maniere generale il m'indique un blème avec IE qu'il me ferme et apparait le message defensenet que vous connaissez
j'ai appliqué smitfraud,trendsecure,cleaner,adaware2007,bitdefender,housecall etc et cet hijackthis dont je vais essayé de vous envoyer le rapport sans me tromper(je n'ai pas l'habitude des forums excusez les erreurs)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:10:41, on 19/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
E:\Program Files\Alwil Software\Avast4\ashServ.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
E:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
E:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
E:\Program Files\Bonjour\mDNSResponder.exe
E:\WINDOWS\system32\drivers\RMC.exe
E:\WINDOWS\system32\rundll32.exe
E:\WINDOWS\system32\oodtray.exe
j'espere que vous y comprendrez plus que moi et si vous avez une solutin a appliquer merci d'avance pour votre reponse
fifillouka@free.fr

fifillouka · Answer

je viens de rendre compte qu'il en manque une grande partie;voici le totale
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:10:41, on 19/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
E:\Program Files\Alwil Software\Avast4\ashServ.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
E:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
E:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
E:\Program Files\Bonjour\mDNSResponder.exe
E:\WINDOWS\system32\drivers\RMC.exe
E:\WINDOWS\system32undll32.exe
E:\WINDOWS\system32\oodtray.exe
E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
E:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
E:\Program Files\Picasa2\PicasaMediaDetector.exe
E:\Program Files\HP\HP Software Update\HPWuSchd2.exe
E:\Program Files\HP Wireless Adapter\HPWLAN.exe
E:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
E:\Program Files\Skype\Phone\Skype.exe
E:\WINDOWS\eHome\ehRecvr.exe
E:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
E:\WINDOWS\eHome\ehSched.exe
E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
E:\Program Files\Microsoft ActiveSync\Wcescomm.exe
E:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
E:\Program Files\MSN Messenger\MsnMsgr.Exe
E:\PROGRA~1\MI3AA1~1apimgr.exe
E:\WINDOWS\system32\oodag.exe
E:\Program Files\Larousse Multimédia\LCAD\bin\hiAksMultiling.exe
E:\PROGRA~1\LAROUS~1\Shared\bin\hisrv.exe
E:\WINDOWS\system32\PSIService.exe
E:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
E:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\HP Wireless Printer Adapter\ConnectMgr.exe
E:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
E:\Program Files\Skype\Plugin Manager\skypePM.exe
E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
E:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
E:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
E:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
E:\Program Files\MSN Messenger\usnsvc.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\Program Files\Windows Live Toolbar\msn_sl.exe
E:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://accountservices.passport.net/reg.srf?xpwiz=true&lc=1036&fid=RegXPWizCredOnly
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - E:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: MSVPS System - {3ADCBC16-19FA-4C59-9C22-E17C71B5FD7A} - E:\WINDOWS\bndsrdkq.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - E:\Program Files\eoRezo\EoAdv\EoRezobho.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - E:\WINDOWS\system32\mscoree.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: The netadv - {ABF529BE-6245-465A-BBD4-238C4EAB0F0A} - E:\WINDOWS
etadv.dll
O4 - HKLM\..\Run: [PCSuiteTrayApplication] E:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RMC] E:\WINDOWS\system32\drivers\RMC.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [OODefragTray] E:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] E:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
O4 - HKLM\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [HP Software Update] E:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HPWireless] "E:\Program Files\HP Wireless Adapter\HPWLAN.exe"
O4 - HKLM\..\Run: [AAWTray] E:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "E:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "E:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ISUSPM] "E:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [H/PC Connection Agent] "E:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Ask Larousse Chambers.lnk = ?
O4 - Global Startup: BlueSoleil.lnk = E:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = E:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Redémarrer le gestionnaire de connexion.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://E:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://E:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?faef0aadb9784e2c8cfbc810467b5c34
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://E:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?faef0aadb9784e2c8cfbc810467b5c34
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - E:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - E:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - E:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - E:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - E:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - E:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - E:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - E:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - E:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: O&O Defrag - O&O Software GmbH - E:\WINDOWS\system32\oodag.exe
O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - E:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - E:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe

jlpjlp · Answer

slt


cré ton propre post svp car sinon on va mal t'aider

mais t'inquiete pas tu remets ce que tu m'a mis et on t'aidera surement

fifillouka · Answer

slt 
au risque de paraitre sot ,comment crée-t-on un post?

jlpjlp · Answer

tu vas dans virus/securite

puis tu fais    poster un nouveau messagen dans le forum

fisso2233 · Answer

salut a tous

voila moi aussi g un problem ac ce defense..... et j aimerais bien que vous maidiez

donc chak seconde ya une fenetre ki apparait (et c souvent des fenetres mal saines) mais aussi des fenetres m disant ke mon pc est infecté ,et comme ya toute ma famille sur mon pc ........ca crain

alors svp AIDEZ MOI le plus vite possible mercid avance

josemaceso · Answer

bonjour  moi aussi jai le probleme 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:54:24, on 04/03/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\RAIDaid_tool.exe
C:\WINDOWS\System32\VTTimer.exe
C:\WINDOWS\System32\S3trayp.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Eset
od32kui.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Eset
od32krn.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Everest Poker\Everest Poker.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.shareazaweb.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.shareazaweb.com/fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: Shareaza MediaBar - {196C3A46-4758-433D-A600-802C804AF39C} - C:\Program Files\Shareaza Applications\Shareaza MediaBar\ShareazaMediaBar.dll
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAIDaid_tool.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Outpost Firewall] "C:\Program Files\Agnitum\Outpost Firewall\outpost.exe" /waitservice
O4 - HKLM\..\Run: [OutpostFeedBack] C:\Program Files\Agnitum\Outpost Firewall\feedback.exe /dump:os_startup
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset
od32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [BMd3776509] Rundll32.exe "C:\WINDOWS\System32\jmhdweuy.dll",s
O4 - HKLM\..\Run: [d0445695] rundll32.exe "C:\WINDOWS\System32
deooxry.dll",b
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\CreativesFiles\Shareaza.exe" -tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?5345e524941b479e8d8be163810ed19b
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?5345e524941b479e8d8be163810ed19b
O8 - Extra context menu item: SYSTRAN: &Effacer le cache de traduction - C:\Program Files\Systran\Premium\menuClearCache.html
O8 - Extra context menu item: SYSTRAN: &Options - C:\Program Files\Systran\Premium\menuConfigure.html
O8 - Extra context menu item: SYSTRAN: &Traduire - C:\Program Files\Systran\Premium\menuTranslate.html
O8 - Extra context menu item: SYSTRAN: En&registrement - C:\Program Files\Systran\Premium\menuRegister.html
O8 - Extra context menu item: SYSTRAN: Rechercher les &mises à jour - C:\Program Files\Systran\Premium\menuUpdate.html
O8 - Extra context menu item: SYSTRAN: Traduire les &cadres - C:\Program Files\Systran\Premium\menuTranslateAll.html
O9 - Extra button: Réglage rapide de Outpost Firewall Pro - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Agnitum\Outpost Firewall\Plugins\BrowserBar\ie_bar.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: @sysiecom.dll,-2100 - {703436F1-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuTranslate.html
O9 - Extra 'Tools' menuitem: @sysiecom.dll,-2102 - {703436F1-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuTranslate.html
O9 - Extra button: @sysiecom.dll,-2103 - {703436F2-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuTranslateAll.html
O9 - Extra 'Tools' menuitem: @sysiecom.dll,-2105 - {703436F2-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuTranslateAll.html
O9 - Extra button: @sysiecom.dll,-2115 - {703436F3-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuConfigure.html
O9 - Extra 'Tools' menuitem: @sysiecom.dll,-2117 - {703436F3-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuConfigure.html
O9 - Extra button: (no name) - {703436F4-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuClearCache.html
O9 - Extra 'Tools' menuitem: @sysiecom.dll,-2108 - {703436F4-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuClearCache.html
O9 - Extra button: (no name) - {703436F5-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuRegister.html
O9 - Extra 'Tools' menuitem: @sysiecom.dll,-2111 - {703436F5-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuRegister.html
O9 - Extra button: (no name) - {703436F6-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuUpdates.html (file missing)
O9 - Extra 'Tools' menuitem: @sysiecom.dll,-2114 - {703436F6-3E1F-11d3-8F6B-00105A2A1D59} - C:\Program Files\Systran\Premium\MenuUpdates.html (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset
od32krn.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exe

jlpjlp · Answer

slt,

Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "defense". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 
Sauvegarde le sur ton bureau et pas ailleurs ! 

Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic 

Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider. 
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.


_____________
Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, le fix s'exécutera automatiquement. 
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). 

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 

Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

DefenseNetsurfage et Protection conue

54 réponses

Discussions similaires

Newsletters