Pub CID sur vista
Résolu
Utilisateur anonyme
-
swifer94 -
swifer94 -
Bonjour,
J' ai besoin d' aide pour maider a suprimer les publicités CID
Je croit comprendre que chaque cas est different
J' ai désinstaller le sponsor de messanger plus et desinstaller aussi Help CID
J' ai cru comprendre qu' il fallait un rapport HijackThis que je vous remet :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:22:24, on 07/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Packard Bell\FIJI\ABoard.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\Philips\SPC220NC\Monitor.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\Kiwee Toolbar2\1.3.118\kwtbaim.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.3.118\KiweeIEToolbar.dll
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.3.118\KiweeIEToolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.3.118\KiweeIEToolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\aboard.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\Windows\Philips\SPC220NC\Monitor.exe
O4 - HKLM\..\Run: [Save Dupe] "C:\ProgramData\sixth sect sect.ilrjji7"
O4 - HKLM\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\Sixth Body Help.z6rat"
O4 - HKLM\..\Run: [orahssStartup] "C:\Program Files\OrangeHSS\Launcher\Launcher.exe" -appid connectivityapp
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar2\1.3.118\kwtbaim.exe"
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin220.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\Windows\system32\pr2ah4nc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
J' ai besoin d' aide pour maider a suprimer les publicités CID
Je croit comprendre que chaque cas est different
J' ai désinstaller le sponsor de messanger plus et desinstaller aussi Help CID
J' ai cru comprendre qu' il fallait un rapport HijackThis que je vous remet :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:22:24, on 07/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Packard Bell\FIJI\ABoard.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\Philips\SPC220NC\Monitor.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\Kiwee Toolbar2\1.3.118\kwtbaim.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.3.118\KiweeIEToolbar.dll
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.3.118\KiweeIEToolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.3.118\KiweeIEToolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\aboard.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\Windows\Philips\SPC220NC\Monitor.exe
O4 - HKLM\..\Run: [Save Dupe] "C:\ProgramData\sixth sect sect.ilrjji7"
O4 - HKLM\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\Sixth Body Help.z6rat"
O4 - HKLM\..\Run: [orahssStartup] "C:\Program Files\OrangeHSS\Launcher\Launcher.exe" -appid connectivityapp
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar2\1.3.118\kwtbaim.exe"
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin220.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\Windows\system32\pr2ah4nc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
A voir également:
- Pub CID sur vista
- Supprimer pub youtube - Accueil - Streaming
- Stop pub gratuit - Télécharger - Divers Utilitaires
- Windows vista - Télécharger - Divers Utilitaires
- Supprimer la pub - Guide
- Clé windows vista - Guide
31 réponses
calibra59
oui tu va sur menu demarere apres ajouter suprimer a pres ta la liste de tes tes autre chose ke ta sur le bureaux et tu va voir cid lener et tu clike desu et tu desinstal voila
louis
>
calibra59
slt je nai pa dan mes programma cid laner comen je fai merci
calibra59
>
louis
normalement dans ajouter suprimer tu doit voie cid tu desinstalle moi jai fait come sa et sa fonctioner
Salut
Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
* Démarrer en mode sans echec
* Double cliquer combofix.exe.
* Appuyer sur la touche Y (Yes) pour démarrer le scan
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp
++
Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
* Démarrer en mode sans echec
* Double cliquer combofix.exe.
* Appuyer sur la touche Y (Yes) pour démarrer le scan
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp
++
voila le rapport merci de votre aide,
ComboFix 08-03-07.3 - stan 2008-03-07 21:34:27.1 - NTFSx86 NETWORK
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.1645 [GMT 1:00]
Endroit: C:\Users\stan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VVRYO2K9\ComboFix[1].exe
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Windows\system32\koos.exe
C:\Windows\system32\kprof
C:\Windows\system32\poof
.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-07 to 2008-03-07 ))))))))))))))))))))))))))))))))))))
.
2008-03-07 21:23 . 2008-03-07 21:23 <REP> d-------- C:\ComboFix
2008-03-07 20:21 . 2008-03-07 20:21 <REP> d-------- C:\Program Files\Trend Micro
2008-03-04 16:12 . 2008-03-04 16:12 <REP> d-------- C:\Program Files\CDBurnerXP
2008-03-02 14:31 . 2008-03-07 20:33 <REP> d-------- C:\Users\All Users\Google Updater
2008-03-02 14:31 . 2008-03-07 20:33 <REP> d-------- C:\PROGRA~2\Google Updater
2008-03-02 13:38 . 2008-03-07 20:40 <REP> d-------- C:\Users\All Users\Kiwee Toolbar2
2008-03-02 13:38 . 2008-03-07 20:40 <REP> d-------- C:\PROGRA~2\Kiwee Toolbar2
2008-02-29 18:03 . 2008-03-01 03:23 <REP> d-------- C:\Program Files\AdVantage
2008-02-29 18:02 . 2008-02-29 18:03 <REP> d-------- C:\Program Files\DAEMON Tools Lite
2008-02-29 16:25 . 2008-02-29 16:25 <REP> d-------- C:\Users\stan\AppData\Roaming\Nero
2008-02-29 12:26 . 2008-02-29 16:50 <REP> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-02-29 12:26 . 2008-02-29 16:52 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-02-29 12:26 . 2008-02-29 16:50 <REP> d-------- C:\PROGRA~2\Spybot - Search & Destroy
2008-02-29 12:09 . 2008-02-29 12:09 <REP> d-------- C:\Program Files\CCleaner
2008-02-28 17:15 . 2008-02-28 17:15 <REP> d-------- C:\Users\stan\AppData\Roaming\Talkback
2008-02-28 17:14 . 2008-02-28 17:14 0 --a------ C:\Windows\nsreg.dat
2008-02-28 17:13 . 2008-02-28 17:24 <REP> d-------- C:\Program Files\Burn4Free Toolbar
2008-02-23 22:59 . 2008-02-23 22:59 0 --ah----- C:\Windows\System32\drivers\Msft_Kernel_xusb21_01005.Wdf
2008-02-23 13:21 . 2008-02-23 13:21 <REP> d-------- C:\Program Files\DivX
2008-02-23 11:37 . 2006-11-29 13:06 440,080 --a------ C:\Windows\System32\d3dx10.dll
2008-02-23 11:37 . 2007-01-24 15:27 255,848 --a------ C:\Windows\System32\xactengine2_6.dll
2008-02-23 11:37 . 2006-12-08 12:02 251,672 --a------ C:\Windows\System32\xactengine2_5.dll
2008-02-23 11:37 . 2006-09-28 16:05 237,848 --a------ C:\Windows\System32\xactengine2_4.dll
2008-02-23 11:25 . 2008-02-23 11:25 <REP> d-------- C:\Program Files\Sega
2008-02-21 13:17 . 2008-02-21 13:17 <REP> d-------- C:\Program Files\Common Files\Steam
2008-02-21 13:15 . 2008-02-28 16:33 <REP> d-------- C:\Program Files\Steam
2008-02-21 12:06 . 2008-02-21 12:07 <REP> d-------- C:\Program Files\Common Files\Adobe
2008-02-21 10:22 . 2008-02-21 10:22 <REP> d--h----- C:\Users\stan\InstallAnywhere
2008-02-21 10:22 . 2008-02-21 10:25 <REP> d--h----- C:\Program Files\Zero G Registry
2008-02-21 10:22 . 2008-02-21 10:22 <REP> d-------- C:\Program Files\Sports Interactive
2008-02-21 10:19 . 2008-02-21 10:38 <REP> d-------- C:\Users\stan\AppData\Roaming\Sports Interactive
2008-02-21 09:21 . 2008-02-29 16:43 <REP> d-------- C:\Users\stan\AppData\Roaming\DAEMON Tools
2008-02-21 09:18 . 2008-02-21 09:18 715,248 --a------ C:\Windows\System32\drivers\sptd.sys
2008-02-21 03:05 . 2008-02-21 03:05 1,044,480 --a------ C:\Windows\System32\libdivx.dll
2008-02-21 03:05 . 2008-02-21 03:05 200,704 --a------ C:\Windows\System32\ssldivx.dll
2008-02-20 18:28 . 2008-03-04 19:55 230,432 --a------ C:\SPC220NC.DAT
2008-02-19 09:14 . 2008-03-01 11:42 <REP> d-------- C:\Program Files\Windows Live Safety Center
2008-02-18 20:43 . 2008-02-18 20:43 <REP> d-------- C:\Program Files\Astonsoft
2008-02-16 06:50 . 2008-01-10 06:50 1,244,672 --a------ C:\Windows\System32\mcmde.dll
2008-02-15 17:40 . 2008-02-15 17:40 0 --a------ C:\Windows\Irremote.ini
2008-02-15 16:56 . 2008-02-29 17:56 <REP> d-------- C:\Program Files\Common Files\Nero
2008-02-15 04:51 . 2008-02-15 04:51 <REP> d-------- C:\Users\All Users\Tool Eggs Less City
2008-02-15 04:51 . 2008-02-15 04:51 <REP> d-------- C:\Program Files\HopeIsoMemo
2008-02-15 04:51 . 2008-02-15 04:51 <REP> d-------- C:\PROGRA~2\Tool Eggs Less City
2008-02-14 03:07 . 2008-02-14 03:07 194,560 --a------ C:\Windows\System32\WebClnt.dll
2008-02-14 03:07 . 2008-02-14 03:07 110,080 --a------ C:\Windows\System32\drivers\mrxdav.sys
2008-02-14 03:04 . 2008-02-14 03:04 3,504,696 --a------ C:\Windows\System32\ntkrnlpa.exe
2008-02-14 03:04 . 2008-02-14 03:04 3,470,392 --a------ C:\Windows\System32\ntoskrnl.exe
2008-02-14 03:04 . 2008-02-14 03:04 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys
2008-02-14 03:04 . 2008-02-14 03:04 109,624 --a------ C:\Windows\System32\drivers\ataport.sys
2008-02-14 03:04 . 2008-02-14 03:04 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys
2008-02-14 03:04 . 2008-02-14 03:04 21,560 --a------ C:\Windows\System32\drivers\atapi.sys
2008-02-14 03:04 . 2008-02-14 03:04 20,024 --a------ C:\Windows\System32\drivers\viaide.sys
2008-02-14 03:03 . 2008-02-14 03:03 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-02-14 03:03 . 2008-02-14 03:03 1,686,528 --a------ C:\Windows\System32\gameux.dll
2008-02-14 03:03 . 2008-02-14 03:03 803,328 --a------ C:\Windows\System32\drivers\tcpip.sys
2008-02-14 03:03 . 2008-02-14 03:03 216,632 --a------ C:\Windows\System32\drivers\netio.sys
2008-02-14 03:03 . 2008-02-14 03:03 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
2008-02-14 03:03 . 2008-02-14 03:03 24,064 --a------ C:\Windows\System32\netcfg.exe
2008-02-14 03:03 . 2008-02-14 03:03 22,016 --a------ C:\Windows\System32\netiougc.exe
2008-02-10 20:43 . 2008-02-10 20:43 244 --ah----- C:\sqmnoopt07.sqm
2008-02-10 20:43 . 2008-02-10 20:43 232 --ah----- C:\sqmdata07.sqm
2008-02-10 20:02 . 2008-02-10 20:02 <REP> d-------- C:\Users\stan\AppData\Roaming\ArcSoft
2008-02-10 19:33 . 2008-02-10 19:33 244 --ah----- C:\sqmnoopt06.sqm
2008-02-10 19:33 . 2008-02-10 19:33 232 --ah----- C:\sqmdata06.sqm
2008-02-10 17:46 . 2008-02-10 17:46 244 --ah----- C:\sqmnoopt05.sqm
2008-02-10 17:46 . 2008-02-10 17:46 232 --ah----- C:\sqmdata05.sqm
2008-02-10 17:10 . 2008-02-10 17:10 244 --ah----- C:\sqmnoopt04.sqm
2008-02-10 17:10 . 2008-02-10 17:10 232 --ah----- C:\sqmdata04.sqm
2008-02-10 15:50 . 2008-02-10 15:50 244 --ah----- C:\sqmnoopt03.sqm
2008-02-10 15:50 . 2008-02-10 15:50 232 --ah----- C:\sqmdata03.sqm
2008-02-10 15:34 . 2008-02-10 15:34 244 --ah----- C:\sqmnoopt02.sqm
2008-02-10 15:34 . 2008-02-10 15:34 232 --ah----- C:\sqmdata02.sqm
2008-02-08 18:09 . 2008-02-08 18:09 <REP> d-------- C:\Program Files\ArcSoft
2008-02-08 18:09 . 1995-08-01 04:44 212,480 --a------ C:\Windows\PCDLIB32.DLL
2008-02-08 18:08 . 2008-02-08 18:12 <REP> d-------- C:\Windows\Philips
2008-02-08 18:08 . 2008-02-08 18:08 <REP> d-------- C:\Program Files\Philips
2008-02-08 18:08 . 2007-01-09 17:59 507,136 --a------ C:\Windows\System32\drivers\SPC220NC.SYS
2008-02-08 18:08 . 2007-01-04 17:34 119,808 --a------ C:\Windows\System32\SPC220NC.AX
2008-02-08 18:08 . 2006-11-20 09:04 6,656 --a------ C:\Windows\System32\CoInst.dll
2008-02-08 18:08 . 2006-12-07 17:01 518 --a------ C:\Windows\System32\SPC220NC.INI
2008-02-08 14:14 . 2008-02-29 16:27 <REP> d-------- C:\Program Files\MiniCap
2008-02-08 10:13 . 2008-02-08 10:13 <REP> d-------- C:\FAUXVIRUS
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-07 18:33 --------- d-----w C:\Users\stan\AppData\Roaming\uTorrent
2008-03-07 18:07 --------- d-----w C:\Program Files\Java
2008-03-02 13:31 --------- d-----w C:\Program Files\Google
2008-03-02 13:25 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-02-29 16:56 --------- d-----w C:\PROGRA~2\Nero
2008-02-29 13:22 --------- d-----w C:\Users\stan\AppData\Roaming\Roxio
2008-02-29 12:21 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-28 17:19 --------- d-----w C:\Program Files\Codemasters
2008-02-28 08:22 --------- d-----w C:\Program Files\Windows Live
2008-02-23 19:15 22,328 ----a-w C:\Windows\system32\drivers\PnkBstrK.sys
2008-02-23 19:15 107,832 ----a-w C:\Windows\System32\PnkBstrB.exe
2008-02-15 17:04 --------- d-----w C:\PROGRA~2\Apple Computer
2008-02-14 02:03 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-02-14 02:03 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-02-14 02:03 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-02-14 02:03 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-02-14 02:01 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-02-14 02:01 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-14 02:01 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-14 02:01 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-02-05 12:03 --------- d-----w C:\PROGRA~2\Test Drive Unlimited
2008-02-05 11:32 107,888 ----a-w C:\Windows\System32\CmdLineExt.dll
2008-02-05 11:32 --------- d--h--r C:\Users\stan\AppData\Roaming\SecuROM
2008-02-05 11:11 --------- d-----w C:\Program Files\Atari
2008-02-04 10:56 --------- d-----w C:\Users\stan\AppData\Roaming\teamspeak2
2008-02-04 10:36 --------- d-----w C:\Program Files\uTorrent
2008-02-01 10:17 587,264 ----a-w C:\Windows\WLXPGSS.SCR
2008-01-26 18:31 --------- d-----w C:\Program Files\LimeWire
2008-01-26 18:16 --------- d-----w C:\Program Files\Common Files\Java
2008-01-26 08:45 66,872 ----a-w C:\Windows\System32\PnkBstrA.exe
2008-01-26 01:29 --------- d-----w C:\Program Files\EA GAMES
2008-01-25 20:55 --------- d-----w C:\Program Files\Nero
2008-01-24 20:53 --------- d-----w C:\Program Files\Xvid
2008-01-23 19:51 --------- d-----w C:\PROGRA~2\Messenger Plus!
2008-01-18 17:35 --------- d-----w C:\Users\stan\AppData\Roaming\Apple Computer
2008-01-18 17:33 --------- d-----w C:\Program Files\QuickTime
2008-01-18 17:30 --------- d-----w C:\Program Files\Apple Software Update
2008-01-18 17:29 --------- d-----w C:\Program Files\Common Files\Apple
2008-01-18 17:29 --------- d-----w C:\PROGRA~2\Apple
2008-01-13 11:11 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-01-13 11:11 --------- d-----w C:\Program Files\Windows Live Favorites
2008-01-13 11:07 --------- d-----w C:\PROGRA~2\WLInstaller
2008-01-13 02:02 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-01-12 20:16 --------- d-----w C:\Program Files\Microsoft SQL Server Compact Edition
2008-01-12 15:02 --------- d-----w C:\Program Files\Common Files\muvee Technologies
2008-01-12 14:58 --------- d-----w C:\Program Files\OLYMPUS
2008-01-12 12:26 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-01-12 12:15 --------- d-----w C:\Users\stan\AppData\Roaming\Ace
2008-01-12 12:13 --------- d-----w C:\Program Files\THQ
2008-01-12 11:55 --------- d-----w C:\Program Files\EA Sports
2008-01-12 11:40 174 --sha-w C:\Program Files\desktop.ini
2008-01-12 11:37 --------- d-----w C:\Program Files\Windows Sidebar
2008-01-12 11:37 --------- d-----w C:\Program Files\Windows Mail
2008-01-12 11:37 --------- d-----w C:\Program Files\Windows Calendar
2008-01-12 11:31 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-01-12 11:31 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2008-01-12 11:31 542,720 ----a-w C:\Windows\System32\sysmain.dll
2008-01-12 11:31 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2008-01-12 11:31 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2008-01-12 11:31 297,984 ----a-w C:\Windows\System32\wlansec.dll
2008-01-12 11:31 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2008-01-12 11:31 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
2008-01-12 11:31 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2008-01-12 11:31 2,923,520 ----a-w C:\Windows\explorer.exe
2008-01-12 11:31 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2008-01-12 11:29 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
2008-01-12 11:29 7,680 ----a-w C:\Windows\System32\spwmp.dll
2008-01-12 11:29 4,096 ----a-w C:\Windows\System32\dxmasf.dll
2008-01-12 11:29 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
2008-01-12 11:28 1,191,936 ----a-w C:\Windows\System32\msxml3.dll
2008-01-12 11:27 8,704 ----a-w C:\Windows\System32\hcrstco.dll
2008-01-12 11:27 8,704 ----a-w C:\Windows\System32\hccoin.dll
2008-01-12 11:27 5,888 ----a-w C:\Windows\system32\drivers\usbd.sys
2008-01-12 11:27 38,400 ----a-w C:\Windows\system32\drivers\usbehci.sys
2008-01-12 11:27 23,040 ----a-w C:\Windows\system32\drivers\usbuhci.sys
2008-01-12 11:27 224,768 ----a-w C:\Windows\system32\drivers\usbport.sys
2008-01-12 11:27 192,000 ----a-w C:\Windows\system32\drivers\usbhub.sys
2008-01-12 11:27 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2008-01-12 11:26 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2008-01-12 11:26 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2008-01-12 11:26 1,335,296 ----a-w C:\Windows\System32\msxml6.dll
2008-01-12 11:24 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-01-12 11:23 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2008-01-12 11:23 788,992 ----a-w C:\Windows\System32\rpcrt4.dll
2008-01-12 11:23 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-01-12 11:23 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2008-01-12 11:23 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2008-01-12 11:21 750,080 ----a-w C:\Windows\System32\qmgr.dll
2008-01-12 11:21 --------- d-----w C:\Program Files\MSXML 4.0
2008-01-12 11:10 53,080 ----a-w C:\Windows\System32\wuauclt.exe
2008-01-12 11:10 43,352 ----a-w C:\Windows\System32\wups2.dll
2008-01-12 11:10 1,712,984 ----a-w C:\Windows\System32\wuaueng.dll
2008-01-12 11:10 1,524,224 ----a-w C:\Windows\System32\wucltux.dll
2008-01-12 11:09 80,896 ----a-w C:\Windows\System32\wudriver.dll
2008-01-12 11:09 549,720 ----a-w C:\Windows\System32\wuapi.dll
2008-01-12 11:09 33,624 ----a-w C:\Windows\System32\wups.dll
2008-01-12 11:09 31,232 ----a-w C:\Windows\System32\wuapp.exe
2008-01-12 11:09 163,000 ----a-w C:\Windows\System32\wuwebv.dll
2008-01-12 10:58 --------- d-----w C:\Program Files\Teamspeak2_RC2
2008-01-12 10:43 --------- d-----w C:\PROGRA~2\Sonic
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe" [2007-07-19 14:32 1120568]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" [ ]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2007-12-15 11:02 482760]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-02 14:31 68856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-09-13 16:56 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-03-01 15:38 4390912 C:\Windows\RtHDVCpl.exe]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-07-06 20:15 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-07-06 20:15 8466432]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-07-06 20:15 81920]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 10:40 232184]
"toolbar_eula_launcher"="C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 17:20 28672]
"ACTIVBOARD"="C:\Program Files\Packard Bell\FIJI\aboard.exe" [2007-01-18 13:03 79416]
"SystrayORAHSS"="C:\Program Files\OrangeHSS\Systray\SystrayApp.exe" [2006-12-12 19:16 90112]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"Monitor"="C:\Windows\Philips\SPC220NC\Monitor.exe" [2006-11-03 11:01 319488]
"Save Dupe"="C:\ProgramData\sixth sect sect.ilrjji7" [2008-02-15 18:08 155664]
"LESS CITY AMEN SETUP"="C:\ProgramData\Sixth Body Help.z6rat" [2008-02-15 04:51 393232]
"orahssStartup"="C:\Program Files\OrangeHSS\Launcher\Launcher.exe" [2006-12-12 19:11 462848]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\
Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2008-03-02 14:31:19 125624]
TrayMin220.lnk - C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe [2008-02-08 18:08:07 278528]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-10-18 11:34 5724184 C:\Program Files\Windows Live\Messenger\MsnMsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPService]
--a------ 2007-06-12 22:36 102400 C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
--a------ 2007-02-08 20:43 95800 C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{6864A86B-3175-448A-AA8E-31EDB7A6FA91}"= C:\Program Files\CyberLink\MagicSports\MagicSports.exe:CyberLink MagicSports|Desc=CyberLink MagicSports
"{CCF6260A-0FCF-4766-930E-0E268C47EC4A}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{B8E448F5-3316-4F16-B222-62B8972B8D4C}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{B6229119-C717-45BD-83E0-B2813B644DE3}"= UDP:C:\Program Files\Skype\Phone\Skype.exe:Skype
"{A3811144-E254-4CB7-BAE3-AB5CF0A5A2EC}"= TCP:C:\Program Files\Skype\Phone\Skype.exe:Skype
"{62A678F9-041E-4096-B59E-2ED36633EAB7}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{ADBCCB88-5EA1-4A25-94F0-05FCDF96DEA4}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{F6697505-DB41-486A-8473-4DEEEA1EDE9C}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
"{2F882312-24FE-4C38-ADBE-A667DF04B432}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
"{CC4DDBDF-E72C-45AC-83C4-74BDE4F34409}"= UDP:C:\Program Files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"{989DFCB9-439A-4F2B-AE8B-866F8FE75F6E}"= TCP:C:\Program Files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"TCP Query User{6417E22D-8BE7-412D-986A-F3F90FED5F39}C:\program files\atari\test drive unlimited\testdriveunlimited.exe"= UDP:C:\program files\atari\test drive unlimited\testdriveunlimited.exe:Test Drive Unlimited|Desc=Test Drive Unlimited
"UDP Query User{1B5A12F8-E492-4DEB-BCFE-4016CC656FFA}C:\program files\atari\test drive unlimited\testdriveunlimited.exe"= TCP:C:\program files\atari\test drive unlimited\testdriveunlimited.exe:Test Drive Unlimited|Desc=Test Drive Unlimited
"{365BF29B-3114-4AF4-83D9-E7C6CE2E3605}"= Disabled:UDP:C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
"{F91A137D-342B-40BC-9447-E84F1C6CD612}"= Disabled:TCP:C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe"= C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS
R0 pe3ah4nc;DiRT Environment Driver (pe3ah4nc);C:\Windows\system32\drivers\pe3ah4nc.sys [2007-05-18 20:53]
R0 ps6ah4nc;DiRT Synchronization Driver (ps6ah4nc);C:\Windows\system32\drivers\ps6ah4nc.sys [2007-05-18 20:52]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 15:52]
R2 NMSAccessU;NMSAccessU;C:\Program Files\CDBurnerXP\NMSAccessU.exe [2007-10-12 08:34]
R3 SPC220NC;Philips SPC220NC Webcam;C:\Windows\system32\DRIVERS\SPC220NC.SYS [2007-01-09 17:59]
S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc);C:\Windows\system32\pr2ah4nc.exe svc []
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCAMp50.sys [2006-11-28 21:46]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCASp50.sys [2006-11-28 21:46]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{73fb56b4-e6e7-11dc-8916-001c252e293d}]
\shell\AutoRun\command - I:\autorun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{73fb56ba-e6e7-11dc-8916-001c252e293d}]
\shell\AutoRun\command - J:\setup.exe
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 21:39:02
Windows 6.0.6000 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\[u]0/u\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Windows\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\[u]0/u\AlertModule.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-03-07 21:41:12 - machine was rebooted [stan]
ComboFix-quarantined-files.txt 2008-03-07 20:41:06
.
2008-03-05 11:49:28 --- E O F ---
ComboFix 08-03-07.3 - stan 2008-03-07 21:34:27.1 - NTFSx86 NETWORK
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.1645 [GMT 1:00]
Endroit: C:\Users\stan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VVRYO2K9\ComboFix[1].exe
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Windows\system32\koos.exe
C:\Windows\system32\kprof
C:\Windows\system32\poof
.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-07 to 2008-03-07 ))))))))))))))))))))))))))))))))))))
.
2008-03-07 21:23 . 2008-03-07 21:23 <REP> d-------- C:\ComboFix
2008-03-07 20:21 . 2008-03-07 20:21 <REP> d-------- C:\Program Files\Trend Micro
2008-03-04 16:12 . 2008-03-04 16:12 <REP> d-------- C:\Program Files\CDBurnerXP
2008-03-02 14:31 . 2008-03-07 20:33 <REP> d-------- C:\Users\All Users\Google Updater
2008-03-02 14:31 . 2008-03-07 20:33 <REP> d-------- C:\PROGRA~2\Google Updater
2008-03-02 13:38 . 2008-03-07 20:40 <REP> d-------- C:\Users\All Users\Kiwee Toolbar2
2008-03-02 13:38 . 2008-03-07 20:40 <REP> d-------- C:\PROGRA~2\Kiwee Toolbar2
2008-02-29 18:03 . 2008-03-01 03:23 <REP> d-------- C:\Program Files\AdVantage
2008-02-29 18:02 . 2008-02-29 18:03 <REP> d-------- C:\Program Files\DAEMON Tools Lite
2008-02-29 16:25 . 2008-02-29 16:25 <REP> d-------- C:\Users\stan\AppData\Roaming\Nero
2008-02-29 12:26 . 2008-02-29 16:50 <REP> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-02-29 12:26 . 2008-02-29 16:52 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-02-29 12:26 . 2008-02-29 16:50 <REP> d-------- C:\PROGRA~2\Spybot - Search & Destroy
2008-02-29 12:09 . 2008-02-29 12:09 <REP> d-------- C:\Program Files\CCleaner
2008-02-28 17:15 . 2008-02-28 17:15 <REP> d-------- C:\Users\stan\AppData\Roaming\Talkback
2008-02-28 17:14 . 2008-02-28 17:14 0 --a------ C:\Windows\nsreg.dat
2008-02-28 17:13 . 2008-02-28 17:24 <REP> d-------- C:\Program Files\Burn4Free Toolbar
2008-02-23 22:59 . 2008-02-23 22:59 0 --ah----- C:\Windows\System32\drivers\Msft_Kernel_xusb21_01005.Wdf
2008-02-23 13:21 . 2008-02-23 13:21 <REP> d-------- C:\Program Files\DivX
2008-02-23 11:37 . 2006-11-29 13:06 440,080 --a------ C:\Windows\System32\d3dx10.dll
2008-02-23 11:37 . 2007-01-24 15:27 255,848 --a------ C:\Windows\System32\xactengine2_6.dll
2008-02-23 11:37 . 2006-12-08 12:02 251,672 --a------ C:\Windows\System32\xactengine2_5.dll
2008-02-23 11:37 . 2006-09-28 16:05 237,848 --a------ C:\Windows\System32\xactengine2_4.dll
2008-02-23 11:25 . 2008-02-23 11:25 <REP> d-------- C:\Program Files\Sega
2008-02-21 13:17 . 2008-02-21 13:17 <REP> d-------- C:\Program Files\Common Files\Steam
2008-02-21 13:15 . 2008-02-28 16:33 <REP> d-------- C:\Program Files\Steam
2008-02-21 12:06 . 2008-02-21 12:07 <REP> d-------- C:\Program Files\Common Files\Adobe
2008-02-21 10:22 . 2008-02-21 10:22 <REP> d--h----- C:\Users\stan\InstallAnywhere
2008-02-21 10:22 . 2008-02-21 10:25 <REP> d--h----- C:\Program Files\Zero G Registry
2008-02-21 10:22 . 2008-02-21 10:22 <REP> d-------- C:\Program Files\Sports Interactive
2008-02-21 10:19 . 2008-02-21 10:38 <REP> d-------- C:\Users\stan\AppData\Roaming\Sports Interactive
2008-02-21 09:21 . 2008-02-29 16:43 <REP> d-------- C:\Users\stan\AppData\Roaming\DAEMON Tools
2008-02-21 09:18 . 2008-02-21 09:18 715,248 --a------ C:\Windows\System32\drivers\sptd.sys
2008-02-21 03:05 . 2008-02-21 03:05 1,044,480 --a------ C:\Windows\System32\libdivx.dll
2008-02-21 03:05 . 2008-02-21 03:05 200,704 --a------ C:\Windows\System32\ssldivx.dll
2008-02-20 18:28 . 2008-03-04 19:55 230,432 --a------ C:\SPC220NC.DAT
2008-02-19 09:14 . 2008-03-01 11:42 <REP> d-------- C:\Program Files\Windows Live Safety Center
2008-02-18 20:43 . 2008-02-18 20:43 <REP> d-------- C:\Program Files\Astonsoft
2008-02-16 06:50 . 2008-01-10 06:50 1,244,672 --a------ C:\Windows\System32\mcmde.dll
2008-02-15 17:40 . 2008-02-15 17:40 0 --a------ C:\Windows\Irremote.ini
2008-02-15 16:56 . 2008-02-29 17:56 <REP> d-------- C:\Program Files\Common Files\Nero
2008-02-15 04:51 . 2008-02-15 04:51 <REP> d-------- C:\Users\All Users\Tool Eggs Less City
2008-02-15 04:51 . 2008-02-15 04:51 <REP> d-------- C:\Program Files\HopeIsoMemo
2008-02-15 04:51 . 2008-02-15 04:51 <REP> d-------- C:\PROGRA~2\Tool Eggs Less City
2008-02-14 03:07 . 2008-02-14 03:07 194,560 --a------ C:\Windows\System32\WebClnt.dll
2008-02-14 03:07 . 2008-02-14 03:07 110,080 --a------ C:\Windows\System32\drivers\mrxdav.sys
2008-02-14 03:04 . 2008-02-14 03:04 3,504,696 --a------ C:\Windows\System32\ntkrnlpa.exe
2008-02-14 03:04 . 2008-02-14 03:04 3,470,392 --a------ C:\Windows\System32\ntoskrnl.exe
2008-02-14 03:04 . 2008-02-14 03:04 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys
2008-02-14 03:04 . 2008-02-14 03:04 109,624 --a------ C:\Windows\System32\drivers\ataport.sys
2008-02-14 03:04 . 2008-02-14 03:04 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys
2008-02-14 03:04 . 2008-02-14 03:04 21,560 --a------ C:\Windows\System32\drivers\atapi.sys
2008-02-14 03:04 . 2008-02-14 03:04 20,024 --a------ C:\Windows\System32\drivers\viaide.sys
2008-02-14 03:03 . 2008-02-14 03:03 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-02-14 03:03 . 2008-02-14 03:03 1,686,528 --a------ C:\Windows\System32\gameux.dll
2008-02-14 03:03 . 2008-02-14 03:03 803,328 --a------ C:\Windows\System32\drivers\tcpip.sys
2008-02-14 03:03 . 2008-02-14 03:03 216,632 --a------ C:\Windows\System32\drivers\netio.sys
2008-02-14 03:03 . 2008-02-14 03:03 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
2008-02-14 03:03 . 2008-02-14 03:03 24,064 --a------ C:\Windows\System32\netcfg.exe
2008-02-14 03:03 . 2008-02-14 03:03 22,016 --a------ C:\Windows\System32\netiougc.exe
2008-02-10 20:43 . 2008-02-10 20:43 244 --ah----- C:\sqmnoopt07.sqm
2008-02-10 20:43 . 2008-02-10 20:43 232 --ah----- C:\sqmdata07.sqm
2008-02-10 20:02 . 2008-02-10 20:02 <REP> d-------- C:\Users\stan\AppData\Roaming\ArcSoft
2008-02-10 19:33 . 2008-02-10 19:33 244 --ah----- C:\sqmnoopt06.sqm
2008-02-10 19:33 . 2008-02-10 19:33 232 --ah----- C:\sqmdata06.sqm
2008-02-10 17:46 . 2008-02-10 17:46 244 --ah----- C:\sqmnoopt05.sqm
2008-02-10 17:46 . 2008-02-10 17:46 232 --ah----- C:\sqmdata05.sqm
2008-02-10 17:10 . 2008-02-10 17:10 244 --ah----- C:\sqmnoopt04.sqm
2008-02-10 17:10 . 2008-02-10 17:10 232 --ah----- C:\sqmdata04.sqm
2008-02-10 15:50 . 2008-02-10 15:50 244 --ah----- C:\sqmnoopt03.sqm
2008-02-10 15:50 . 2008-02-10 15:50 232 --ah----- C:\sqmdata03.sqm
2008-02-10 15:34 . 2008-02-10 15:34 244 --ah----- C:\sqmnoopt02.sqm
2008-02-10 15:34 . 2008-02-10 15:34 232 --ah----- C:\sqmdata02.sqm
2008-02-08 18:09 . 2008-02-08 18:09 <REP> d-------- C:\Program Files\ArcSoft
2008-02-08 18:09 . 1995-08-01 04:44 212,480 --a------ C:\Windows\PCDLIB32.DLL
2008-02-08 18:08 . 2008-02-08 18:12 <REP> d-------- C:\Windows\Philips
2008-02-08 18:08 . 2008-02-08 18:08 <REP> d-------- C:\Program Files\Philips
2008-02-08 18:08 . 2007-01-09 17:59 507,136 --a------ C:\Windows\System32\drivers\SPC220NC.SYS
2008-02-08 18:08 . 2007-01-04 17:34 119,808 --a------ C:\Windows\System32\SPC220NC.AX
2008-02-08 18:08 . 2006-11-20 09:04 6,656 --a------ C:\Windows\System32\CoInst.dll
2008-02-08 18:08 . 2006-12-07 17:01 518 --a------ C:\Windows\System32\SPC220NC.INI
2008-02-08 14:14 . 2008-02-29 16:27 <REP> d-------- C:\Program Files\MiniCap
2008-02-08 10:13 . 2008-02-08 10:13 <REP> d-------- C:\FAUXVIRUS
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-07 18:33 --------- d-----w C:\Users\stan\AppData\Roaming\uTorrent
2008-03-07 18:07 --------- d-----w C:\Program Files\Java
2008-03-02 13:31 --------- d-----w C:\Program Files\Google
2008-03-02 13:25 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-02-29 16:56 --------- d-----w C:\PROGRA~2\Nero
2008-02-29 13:22 --------- d-----w C:\Users\stan\AppData\Roaming\Roxio
2008-02-29 12:21 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-28 17:19 --------- d-----w C:\Program Files\Codemasters
2008-02-28 08:22 --------- d-----w C:\Program Files\Windows Live
2008-02-23 19:15 22,328 ----a-w C:\Windows\system32\drivers\PnkBstrK.sys
2008-02-23 19:15 107,832 ----a-w C:\Windows\System32\PnkBstrB.exe
2008-02-15 17:04 --------- d-----w C:\PROGRA~2\Apple Computer
2008-02-14 02:03 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-02-14 02:03 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-02-14 02:03 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-02-14 02:03 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-02-14 02:01 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-02-14 02:01 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-14 02:01 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-14 02:01 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-02-05 12:03 --------- d-----w C:\PROGRA~2\Test Drive Unlimited
2008-02-05 11:32 107,888 ----a-w C:\Windows\System32\CmdLineExt.dll
2008-02-05 11:32 --------- d--h--r C:\Users\stan\AppData\Roaming\SecuROM
2008-02-05 11:11 --------- d-----w C:\Program Files\Atari
2008-02-04 10:56 --------- d-----w C:\Users\stan\AppData\Roaming\teamspeak2
2008-02-04 10:36 --------- d-----w C:\Program Files\uTorrent
2008-02-01 10:17 587,264 ----a-w C:\Windows\WLXPGSS.SCR
2008-01-26 18:31 --------- d-----w C:\Program Files\LimeWire
2008-01-26 18:16 --------- d-----w C:\Program Files\Common Files\Java
2008-01-26 08:45 66,872 ----a-w C:\Windows\System32\PnkBstrA.exe
2008-01-26 01:29 --------- d-----w C:\Program Files\EA GAMES
2008-01-25 20:55 --------- d-----w C:\Program Files\Nero
2008-01-24 20:53 --------- d-----w C:\Program Files\Xvid
2008-01-23 19:51 --------- d-----w C:\PROGRA~2\Messenger Plus!
2008-01-18 17:35 --------- d-----w C:\Users\stan\AppData\Roaming\Apple Computer
2008-01-18 17:33 --------- d-----w C:\Program Files\QuickTime
2008-01-18 17:30 --------- d-----w C:\Program Files\Apple Software Update
2008-01-18 17:29 --------- d-----w C:\Program Files\Common Files\Apple
2008-01-18 17:29 --------- d-----w C:\PROGRA~2\Apple
2008-01-13 11:11 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-01-13 11:11 --------- d-----w C:\Program Files\Windows Live Favorites
2008-01-13 11:07 --------- d-----w C:\PROGRA~2\WLInstaller
2008-01-13 02:02 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-01-12 20:16 --------- d-----w C:\Program Files\Microsoft SQL Server Compact Edition
2008-01-12 15:02 --------- d-----w C:\Program Files\Common Files\muvee Technologies
2008-01-12 14:58 --------- d-----w C:\Program Files\OLYMPUS
2008-01-12 12:26 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-01-12 12:15 --------- d-----w C:\Users\stan\AppData\Roaming\Ace
2008-01-12 12:13 --------- d-----w C:\Program Files\THQ
2008-01-12 11:55 --------- d-----w C:\Program Files\EA Sports
2008-01-12 11:40 174 --sha-w C:\Program Files\desktop.ini
2008-01-12 11:37 --------- d-----w C:\Program Files\Windows Sidebar
2008-01-12 11:37 --------- d-----w C:\Program Files\Windows Mail
2008-01-12 11:37 --------- d-----w C:\Program Files\Windows Calendar
2008-01-12 11:31 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-01-12 11:31 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2008-01-12 11:31 542,720 ----a-w C:\Windows\System32\sysmain.dll
2008-01-12 11:31 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2008-01-12 11:31 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2008-01-12 11:31 297,984 ----a-w C:\Windows\System32\wlansec.dll
2008-01-12 11:31 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2008-01-12 11:31 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
2008-01-12 11:31 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2008-01-12 11:31 2,923,520 ----a-w C:\Windows\explorer.exe
2008-01-12 11:31 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2008-01-12 11:29 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
2008-01-12 11:29 7,680 ----a-w C:\Windows\System32\spwmp.dll
2008-01-12 11:29 4,096 ----a-w C:\Windows\System32\dxmasf.dll
2008-01-12 11:29 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
2008-01-12 11:28 1,191,936 ----a-w C:\Windows\System32\msxml3.dll
2008-01-12 11:27 8,704 ----a-w C:\Windows\System32\hcrstco.dll
2008-01-12 11:27 8,704 ----a-w C:\Windows\System32\hccoin.dll
2008-01-12 11:27 5,888 ----a-w C:\Windows\system32\drivers\usbd.sys
2008-01-12 11:27 38,400 ----a-w C:\Windows\system32\drivers\usbehci.sys
2008-01-12 11:27 23,040 ----a-w C:\Windows\system32\drivers\usbuhci.sys
2008-01-12 11:27 224,768 ----a-w C:\Windows\system32\drivers\usbport.sys
2008-01-12 11:27 192,000 ----a-w C:\Windows\system32\drivers\usbhub.sys
2008-01-12 11:27 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2008-01-12 11:26 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2008-01-12 11:26 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2008-01-12 11:26 1,335,296 ----a-w C:\Windows\System32\msxml6.dll
2008-01-12 11:24 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-01-12 11:23 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2008-01-12 11:23 788,992 ----a-w C:\Windows\System32\rpcrt4.dll
2008-01-12 11:23 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-01-12 11:23 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2008-01-12 11:23 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2008-01-12 11:21 750,080 ----a-w C:\Windows\System32\qmgr.dll
2008-01-12 11:21 --------- d-----w C:\Program Files\MSXML 4.0
2008-01-12 11:10 53,080 ----a-w C:\Windows\System32\wuauclt.exe
2008-01-12 11:10 43,352 ----a-w C:\Windows\System32\wups2.dll
2008-01-12 11:10 1,712,984 ----a-w C:\Windows\System32\wuaueng.dll
2008-01-12 11:10 1,524,224 ----a-w C:\Windows\System32\wucltux.dll
2008-01-12 11:09 80,896 ----a-w C:\Windows\System32\wudriver.dll
2008-01-12 11:09 549,720 ----a-w C:\Windows\System32\wuapi.dll
2008-01-12 11:09 33,624 ----a-w C:\Windows\System32\wups.dll
2008-01-12 11:09 31,232 ----a-w C:\Windows\System32\wuapp.exe
2008-01-12 11:09 163,000 ----a-w C:\Windows\System32\wuwebv.dll
2008-01-12 10:58 --------- d-----w C:\Program Files\Teamspeak2_RC2
2008-01-12 10:43 --------- d-----w C:\PROGRA~2\Sonic
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe" [2007-07-19 14:32 1120568]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" [ ]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2007-12-15 11:02 482760]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-02 14:31 68856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-09-13 16:56 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-03-01 15:38 4390912 C:\Windows\RtHDVCpl.exe]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-07-06 20:15 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-07-06 20:15 8466432]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-07-06 20:15 81920]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 10:40 232184]
"toolbar_eula_launcher"="C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 17:20 28672]
"ACTIVBOARD"="C:\Program Files\Packard Bell\FIJI\aboard.exe" [2007-01-18 13:03 79416]
"SystrayORAHSS"="C:\Program Files\OrangeHSS\Systray\SystrayApp.exe" [2006-12-12 19:16 90112]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"Monitor"="C:\Windows\Philips\SPC220NC\Monitor.exe" [2006-11-03 11:01 319488]
"Save Dupe"="C:\ProgramData\sixth sect sect.ilrjji7" [2008-02-15 18:08 155664]
"LESS CITY AMEN SETUP"="C:\ProgramData\Sixth Body Help.z6rat" [2008-02-15 04:51 393232]
"orahssStartup"="C:\Program Files\OrangeHSS\Launcher\Launcher.exe" [2006-12-12 19:11 462848]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\
Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2008-03-02 14:31:19 125624]
TrayMin220.lnk - C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe [2008-02-08 18:08:07 278528]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-10-18 11:34 5724184 C:\Program Files\Windows Live\Messenger\MsnMsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPService]
--a------ 2007-06-12 22:36 102400 C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
--a------ 2007-02-08 20:43 95800 C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{6864A86B-3175-448A-AA8E-31EDB7A6FA91}"= C:\Program Files\CyberLink\MagicSports\MagicSports.exe:CyberLink MagicSports|Desc=CyberLink MagicSports
"{CCF6260A-0FCF-4766-930E-0E268C47EC4A}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{B8E448F5-3316-4F16-B222-62B8972B8D4C}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{B6229119-C717-45BD-83E0-B2813B644DE3}"= UDP:C:\Program Files\Skype\Phone\Skype.exe:Skype
"{A3811144-E254-4CB7-BAE3-AB5CF0A5A2EC}"= TCP:C:\Program Files\Skype\Phone\Skype.exe:Skype
"{62A678F9-041E-4096-B59E-2ED36633EAB7}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{ADBCCB88-5EA1-4A25-94F0-05FCDF96DEA4}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{F6697505-DB41-486A-8473-4DEEEA1EDE9C}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
"{2F882312-24FE-4C38-ADBE-A667DF04B432}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
"{CC4DDBDF-E72C-45AC-83C4-74BDE4F34409}"= UDP:C:\Program Files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"{989DFCB9-439A-4F2B-AE8B-866F8FE75F6E}"= TCP:C:\Program Files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"TCP Query User{6417E22D-8BE7-412D-986A-F3F90FED5F39}C:\program files\atari\test drive unlimited\testdriveunlimited.exe"= UDP:C:\program files\atari\test drive unlimited\testdriveunlimited.exe:Test Drive Unlimited|Desc=Test Drive Unlimited
"UDP Query User{1B5A12F8-E492-4DEB-BCFE-4016CC656FFA}C:\program files\atari\test drive unlimited\testdriveunlimited.exe"= TCP:C:\program files\atari\test drive unlimited\testdriveunlimited.exe:Test Drive Unlimited|Desc=Test Drive Unlimited
"{365BF29B-3114-4AF4-83D9-E7C6CE2E3605}"= Disabled:UDP:C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
"{F91A137D-342B-40BC-9447-E84F1C6CD612}"= Disabled:TCP:C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe"= C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS
R0 pe3ah4nc;DiRT Environment Driver (pe3ah4nc);C:\Windows\system32\drivers\pe3ah4nc.sys [2007-05-18 20:53]
R0 ps6ah4nc;DiRT Synchronization Driver (ps6ah4nc);C:\Windows\system32\drivers\ps6ah4nc.sys [2007-05-18 20:52]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 15:52]
R2 NMSAccessU;NMSAccessU;C:\Program Files\CDBurnerXP\NMSAccessU.exe [2007-10-12 08:34]
R3 SPC220NC;Philips SPC220NC Webcam;C:\Windows\system32\DRIVERS\SPC220NC.SYS [2007-01-09 17:59]
S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc);C:\Windows\system32\pr2ah4nc.exe svc []
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCAMp50.sys [2006-11-28 21:46]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCASp50.sys [2006-11-28 21:46]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{73fb56b4-e6e7-11dc-8916-001c252e293d}]
\shell\AutoRun\command - I:\autorun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{73fb56ba-e6e7-11dc-8916-001c252e293d}]
\shell\AutoRun\command - J:\setup.exe
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 21:39:02
Windows 6.0.6000 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\[u]0/u\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Windows\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\[u]0/u\AlertModule.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-03-07 21:41:12 - machine was rebooted [stan]
ComboFix-quarantined-files.txt 2008-03-07 20:41:06
.
2008-03-05 11:49:28 --- E O F ---
ok
télécharge OTMoveIt (de Old_Timer) sur ton Bureau :
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
C:\ProgramData\sixth sect sect.ilrjji7
C:\ProgramData\Sixth Body Help.z6rat
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre Results.
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Yes.
ensuite :
Télécharge MSNFix.zip (de !aur3n7) http://sosvirus.changelog.fr/MSNFix.zip et décompresse-le sur le Bureau.
Lance le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
Exécute l'option R.
Si l'infection est détectée, un message apparaitra
Pour lancer le nettoyage, il suffit d'appuyer sur n'importe quelle lettre du clavier puis valider par Entrée
Sauvegarde ce rapport sur ton bureau.
Poste moi ce rapport dans ta prochaine réponse
++
télécharge OTMoveIt (de Old_Timer) sur ton Bureau :
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
C:\ProgramData\sixth sect sect.ilrjji7
C:\ProgramData\Sixth Body Help.z6rat
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre Results.
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Yes.
ensuite :
Télécharge MSNFix.zip (de !aur3n7) http://sosvirus.changelog.fr/MSNFix.zip et décompresse-le sur le Bureau.
Lance le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
Exécute l'option R.
Si l'infection est détectée, un message apparaitra
Pour lancer le nettoyage, il suffit d'appuyer sur n'importe quelle lettre du clavier puis valider par Entrée
Sauvegarde ce rapport sur ton bureau.
Poste moi ce rapport dans ta prochaine réponse
++
Voici le rapport de _OTMoveIt :
File move failed. C:\ProgramData\sixth sect sect.ilrjji7 scheduled to be moved on reboot.
File move failed. C:\ProgramData\Sixth Body Help.z6rat scheduled to be moved on reboot.
OTMoveIt2 v1.0.20 log created on 03072008_215827
Je m'occupe de MSNFix et te me le rapport au message suivant
File move failed. C:\ProgramData\sixth sect sect.ilrjji7 scheduled to be moved on reboot.
File move failed. C:\ProgramData\Sixth Body Help.z6rat scheduled to be moved on reboot.
OTMoveIt2 v1.0.20 log created on 03072008_215827
Je m'occupe de MSNFix et te me le rapport au message suivant
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Je n' est aucun message apparu et visiblement je n' est plus les publicité CID j' espère ne pas parler trop vite mais si c' est le cas un grand MERCI.
Amicalement, je te souhaite bon vent ^^
Amicalement, je te souhaite bon vent ^^
Pas d'quoi ! :-)
je te conseil quand même de faire ce qui est indiqué ici pour supprimer les "restes" :
http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr
@+
je te conseil quand même de faire ce qui est indiqué ici pour supprimer les "restes" :
http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr
@+
slt moi cet calbra jai u un gros probleme kan je me conecter sur internet des page cid souvreet me meter des page de pub et porno jai trouver la soulution aler dans suprimer ajoute desinstaler le cid maintenant pu probleme de se cote la
Salut
Télécharge ceci :
Lien : http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis
Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm
Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.
++
Télécharge ceci :
Lien : http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis
Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm
Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.
++
pour les pub ki sorte cid il faut aler dans ajouter et suprimer les programe apres desinstaler cid voila moi je les fait et sa fonctione jai pu de probleme de se coter la san rien telecharger
desoler green day j' ai parler trop vite et j' ai toujours ces pub merci si tu pouvait reprendre la suite de mon probleme ce serait cool ^^
Salut
fais ce qui est indiqué au poste 11
++
fais ce qui est indiqué au poste 11
++
Bonjours green day,
Voici le rapport de AVG anti-spyware :
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 15:11:59 13/03/2008
+ Résultat de l'analyse:
C:\FAUXVIRUS\CMouse.exe -> Backdoor.Hupigon : Aucune action entreprise.
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip/Bloqueur.exe -> Not-A-Virus.BadJoke.Win32.Agent.f : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@ehg-telecomitalia.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
Fin du rapport
Voici le rapport de AVG anti-spyware :
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 15:11:59 13/03/2008
+ Résultat de l'analyse:
C:\FAUXVIRUS\CMouse.exe -> Backdoor.Hupigon : Aucune action entreprise.
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip/Bloqueur.exe -> Not-A-Virus.BadJoke.Win32.Agent.f : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@ehg-telecomitalia.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Users\stan\AppData\Roaming\Microsoft\Windows\Cookies\stan@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
Fin du rapport
Voici le rapport de BitDefender :
Scanned File
Status
C:\FAUXVIRUS\CMouseR.exe
Detected with: Application.Joke.Crazymouse.A
C:\FAUXVIRUS\CMouseR.exe
Disinfection failed
C:\FAUXVIRUS\CMouseR.exe
Deleted
C:\Program Files\AdVantage\TR.dll
Detected with: Application.Memedia.B
C:\Program Files\AdVantage\TR.dll
Disinfection failed
C:\Program Files\AdVantage\TR.dll
Deleted
C:\Users\stan\AppData\Local\PunkBuster\BF2\pb\PnkBstrK.sys
Infected with: Trojan.Peed.Gen
C:\Users\stan\AppData\Local\PunkBuster\BF2\pb\PnkBstrK.sys
Disinfection failed
C:\Users\stan\AppData\Local\PunkBuster\BF2\pb\PnkBstrK.sys
Deleted
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip=>Bloqueur.exe
Detected with: Application.Pup.G
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip=>Bloqueur.exe
Disinfection failed
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip=>Bloqueur.exe
Deleted
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip
Updated
C:\Users\stan\Desktop\diapos ressus\mouloud.zip=>MOULOUD.EXE
Infected with: Trojan.Moulard.A
C:\Users\stan\Desktop\diapos ressus\mouloud.zip=>MOULOUD.EXE
Deleted
C:\Users\stan\Desktop\diapos ressus\mouloud.zip
Updated
C:\Windows\System32\drivers\PnkBstrK.sys
Infected with: Trojan.Peed.Gen
C:\Windows\System32\drivers\PnkBstrK.sys
Disinfection failed
C:\Windows\System32\drivers\PnkBstrK.sys
Deleted
Scanned File
Status
C:\FAUXVIRUS\CMouseR.exe
Detected with: Application.Joke.Crazymouse.A
C:\FAUXVIRUS\CMouseR.exe
Disinfection failed
C:\FAUXVIRUS\CMouseR.exe
Deleted
C:\Program Files\AdVantage\TR.dll
Detected with: Application.Memedia.B
C:\Program Files\AdVantage\TR.dll
Disinfection failed
C:\Program Files\AdVantage\TR.dll
Deleted
C:\Users\stan\AppData\Local\PunkBuster\BF2\pb\PnkBstrK.sys
Infected with: Trojan.Peed.Gen
C:\Users\stan\AppData\Local\PunkBuster\BF2\pb\PnkBstrK.sys
Disinfection failed
C:\Users\stan\AppData\Local\PunkBuster\BF2\pb\PnkBstrK.sys
Deleted
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip=>Bloqueur.exe
Detected with: Application.Pup.G
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip=>Bloqueur.exe
Disinfection failed
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip=>Bloqueur.exe
Deleted
C:\Users\stan\Desktop\diapos ressus\bloqueur.zip
Updated
C:\Users\stan\Desktop\diapos ressus\mouloud.zip=>MOULOUD.EXE
Infected with: Trojan.Moulard.A
C:\Users\stan\Desktop\diapos ressus\mouloud.zip=>MOULOUD.EXE
Deleted
C:\Users\stan\Desktop\diapos ressus\mouloud.zip
Updated
C:\Windows\System32\drivers\PnkBstrK.sys
Infected with: Trojan.Peed.Gen
C:\Windows\System32\drivers\PnkBstrK.sys
Disinfection failed
C:\Windows\System32\drivers\PnkBstrK.sys
Deleted
Et pour finir un nouveaux rapport HijackThis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:42:41, on 13/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Packard Bell\FIJI\ABoard.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\Philips\SPC220NC\Monitor.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Users\stan\AppData\Local\Temp\Rar$EX00.614\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\aboard.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\Windows\Philips\SPC220NC\Monitor.exe
O4 - HKLM\..\Run: [Save Dupe] "C:\ProgramData\sixth sect sect.ilrjji7"
O4 - HKLM\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\Sixth Body Help.z6rat"
O4 - HKLM\..\Run: [orahssStartup] "C:\Program Files\OrangeHSS\Launcher\Launcher.exe" -appid connectivityapp
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Save Dupe] "C:\ProgramData\sixth sect sect.xcxebo"
O4 - HKCU\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\site grey software.omuxnfs"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin220.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\Windows\system32\pr2ah4nc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:42:41, on 13/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Packard Bell\FIJI\ABoard.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\Philips\SPC220NC\Monitor.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Users\stan\AppData\Local\Temp\Rar$EX00.614\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\aboard.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\Windows\Philips\SPC220NC\Monitor.exe
O4 - HKLM\..\Run: [Save Dupe] "C:\ProgramData\sixth sect sect.ilrjji7"
O4 - HKLM\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\Sixth Body Help.z6rat"
O4 - HKLM\..\Run: [orahssStartup] "C:\Program Files\OrangeHSS\Launcher\Launcher.exe" -appid connectivityapp
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Save Dupe] "C:\ProgramData\sixth sect sect.xcxebo"
O4 - HKCU\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\site grey software.omuxnfs"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin220.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\Windows\system32\pr2ah4nc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
Salut
ok,
télécharge OTMoveIt (de Old_Timer) sur ton Bureau :
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
C:\ProgramData\sixth sect sect.ilrjji7
C:\ProgramData\Sixth Body Help.z6rat
C:\ProgramData\sixth sect sect.xcxebo
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre Results.
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Yes.
@+
ok,
télécharge OTMoveIt (de Old_Timer) sur ton Bureau :
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
C:\ProgramData\sixth sect sect.ilrjji7
C:\ProgramData\Sixth Body Help.z6rat
C:\ProgramData\sixth sect sect.xcxebo
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre Results.
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Yes.
@+
