"lol quelqu'un a mis ta tof sur ce site"
Fermé
Caro
-
29 mars 2008 à 11:53
Winry3 Messages postés 6 Date d'inscription dimanche 30 mars 2008 Statut Membre Dernière intervention 20 août 2009 - 5 avril 2008 à 19:09
Winry3 Messages postés 6 Date d'inscription dimanche 30 mars 2008 Statut Membre Dernière intervention 20 août 2009 - 5 avril 2008 à 19:09
A voir également:
- "lol quelqu'un a mis ta tof sur ce site"
- Site de telechargement - Guide
- Site comme coco - Guide
- Site inaccessible - Guide
- Site de vente entre particulier - Guide
- Il est en cours de transport vers votre site de livraison ✓ - Forum Consommation & Internet
11 réponses
Bon toujours pas de réponse alors en attendant j'ai fais une analyse avec hijackthis et voila le rapport :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:16:15, on 29/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\SMSC\Seticon.exe
C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.321Search.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\^^^^^.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SetIcon] \Program Files\SMSC\Seticon.exe
O4 - HKLM\..\Run: [Ouaps download software] C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: MutiKeyboard Driver.lnk = C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:16:15, on 29/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\SMSC\Seticon.exe
C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.321Search.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\^^^^^.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SetIcon] \Program Files\SMSC\Seticon.exe
O4 - HKLM\..\Run: [Ouaps download software] C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: MutiKeyboard Driver.lnk = C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
green day
Messages postés
26371
Date d'inscription
vendredi 30 septembre 2005
Statut
Modérateur, Contributeur sécurité
Dernière intervention
27 décembre 2019
2 162
30 mars 2008 à 16:30
30 mars 2008 à 16:30
Salut
Télécharge SDFix sur ton bureau
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.
Redémarre ton ordinateur en mode sans échec
Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.cmd pour lancer le script.
Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum stp
++
++
Télécharge SDFix sur ton bureau
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.
Redémarre ton ordinateur en mode sans échec
Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.cmd pour lancer le script.
Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum stp
++
++
Winry3
Messages postés
6
Date d'inscription
dimanche 30 mars 2008
Statut
Membre
Dernière intervention
20 août 2009
30 mars 2008 à 17:15
30 mars 2008 à 17:15
Merci pour ta réponse Green Day!
Voila le rapport :
[b]SDFix: Version 1.164 [/b]
Run by Caro on 30/03/2008 at 16:58
Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\Caro\Bureau\SDFix\SDFix
[b]Checking Services [/b]:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting
[b]Checking Files [/b]:
Trojan Files Found:
C:\Program Files\.autoreg - Deleted
C:\WINDOWS\system32\real.txt - Deleted
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-30 17:07:49
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
C:\WINDOWS\system32\^^^^^.exe [1940] 0x867329E0
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:57,82,c0,59,01,cf,27,72,d6,b0,bc,d9,d0,9d,e8,ea,c5,96,1d,4f,4d,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:c3,71,d3,2d,5e,ad,67,1e,f4,f6,6b,4f,f4,05,45,ba,5d,0e,7d,36,0b,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:c3,71,d3,2d,5e,ad,67,1e,f4,f6,6b,4f,f4,05,45,ba,5d,0e,7d,36,0b,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:57,82,c0,59,01,cf,27,72,d6,b0,bc,d9,d0,9d,e8,ea,c5,96,1d,4f,4d,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:57,82,c0,59,01,cf,27,72,d6,b0,bc,d9,d0,9d,e8,ea,c5,96,1d,4f,4d,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 1
hidden services: 0
hidden files: 57
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\DNA\\btdna.exe"="C:\\Program Files\\DNA\\btdna.exe:*:Enabled:DNA"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
"C:\\WINDOWS\\system32\\^^^^^.exe"="C:\\WINDOWS\\system32\\^^^^^.exe:*:Enabled:Flash Media"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
[b]Remaining Files [/b]:
File Backups: - C:\DOCUME~1\Caro\Bureau\SDFix\SDFix\backups\backups.zip
[b]Files with Hidden Attributes [/b]:
Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Sat 29 Dec 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Thu 21 Feb 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sat 29 Dec 2007 4,348 ...H. --- "C:\Documents and Settings\Caro\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Sat 29 Dec 2007 20 A..H. --- "C:\Documents and Settings\Caro\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Sat 29 Dec 2007 312 ...H. --- "C:\Documents and Settings\Caro\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Sat 29 Dec 2007 1,536 A..H. --- "C:\Documents and Settings\Caro\Mes documents\Ma musique\Sauvegarde de la licence\drmv2lic.bak"
[b]Finished![/b]
Voila le rapport :
[b]SDFix: Version 1.164 [/b]
Run by Caro on 30/03/2008 at 16:58
Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\Caro\Bureau\SDFix\SDFix
[b]Checking Services [/b]:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting
[b]Checking Files [/b]:
Trojan Files Found:
C:\Program Files\.autoreg - Deleted
C:\WINDOWS\system32\real.txt - Deleted
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-30 17:07:49
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
C:\WINDOWS\system32\^^^^^.exe [1940] 0x867329E0
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:57,82,c0,59,01,cf,27,72,d6,b0,bc,d9,d0,9d,e8,ea,c5,96,1d,4f,4d,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:c3,71,d3,2d,5e,ad,67,1e,f4,f6,6b,4f,f4,05,45,ba,5d,0e,7d,36,0b,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:c3,71,d3,2d,5e,ad,67,1e,f4,f6,6b,4f,f4,05,45,ba,5d,0e,7d,36,0b,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:57,82,c0,59,01,cf,27,72,d6,b0,bc,d9,d0,9d,e8,ea,c5,96,1d,4f,4d,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:57,82,c0,59,01,cf,27,72,d6,b0,bc,d9,d0,9d,e8,ea,c5,96,1d,4f,4d,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 1
hidden services: 0
hidden files: 57
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\DNA\\btdna.exe"="C:\\Program Files\\DNA\\btdna.exe:*:Enabled:DNA"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
"C:\\WINDOWS\\system32\\^^^^^.exe"="C:\\WINDOWS\\system32\\^^^^^.exe:*:Enabled:Flash Media"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
[b]Remaining Files [/b]:
File Backups: - C:\DOCUME~1\Caro\Bureau\SDFix\SDFix\backups\backups.zip
[b]Files with Hidden Attributes [/b]:
Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Sat 29 Dec 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Thu 21 Feb 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sat 29 Dec 2007 4,348 ...H. --- "C:\Documents and Settings\Caro\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Sat 29 Dec 2007 20 A..H. --- "C:\Documents and Settings\Caro\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Sat 29 Dec 2007 312 ...H. --- "C:\Documents and Settings\Caro\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Sat 29 Dec 2007 1,536 A..H. --- "C:\Documents and Settings\Caro\Mes documents\Ma musique\Sauvegarde de la licence\drmv2lic.bak"
[b]Finished![/b]
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
green day
Messages postés
26371
Date d'inscription
vendredi 30 septembre 2005
Statut
Modérateur, Contributeur sécurité
Dernière intervention
27 décembre 2019
2 162
31 mars 2008 à 00:17
31 mars 2008 à 00:17
ok,
Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
* Démarrer en mode sans echec
* Double cliquer combofix.exe.
* Appuyer sur la touche Y (Yes) pour démarrer le scan
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp
++
Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
* Démarrer en mode sans echec
* Double cliquer combofix.exe.
* Appuyer sur la touche Y (Yes) pour démarrer le scan
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp
++
Winry3
Messages postés
6
Date d'inscription
dimanche 30 mars 2008
Statut
Membre
Dernière intervention
20 août 2009
31 mars 2008 à 10:08
31 mars 2008 à 10:08
Voila :
ComboFix 08-03-30.3 - Caro 2008-03-31 9:56:30.1 - NTFSx86 MINIMAL
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.822 [GMT 2:00]
Endroit: C:\Documents and Settings\Caro\Bureau\ComboFix.exe
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Caro\Application Data\inst.exe
C:\WINDOWS\system32\uninstall.exe
.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-02-28 to 2008-03-31 ))))))))))))))))))))))))))))))))))))
.
2008-03-30 16:53 . 2008-03-30 16:53 <REP> d-------- C:\WINDOWS\ERUNT
2008-03-30 15:15 . 2008-03-30 15:15 88 --a------ C:\WINDOWS\wininit.ini
2008-03-30 14:20 . 2008-03-30 14:20 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-30 14:20 . 2008-03-30 14:49 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-30 03:29 . 2008-03-30 03:29 244 --ah----- C:\sqmnoopt07.sqm
2008-03-30 03:29 . 2008-03-30 03:29 232 --ah----- C:\sqmdata07.sqm
2008-03-29 16:13 . 2008-03-29 16:13 <REP> d-------- C:\Trend Micro
2008-03-27 22:15 . 2008-03-27 22:15 827 --a------ C:\WINDOWS\system32\mpzzav.exe
2008-03-27 00:05 . 2008-03-27 00:05 0 --a------ C:\WINDOWS\system32\real.MSNFix
2008-03-25 23:10 . 2008-03-25 23:10 <REP> d-------- C:\Program Files\Avira
2008-03-25 23:10 . 2008-03-25 23:10 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-03-22 23:06 . 2008-03-30 23:01 <REP> d-------- C:\Documents and Settings\Caro\Application Data\BitTorrent
2008-03-22 23:05 . 2008-03-22 23:05 <REP> d-------- C:\Program Files\DNA
2008-03-22 23:05 . 2008-03-22 23:12 <REP> d-------- C:\Program Files\BitTorrent
2008-03-22 23:05 . 2008-03-31 09:52 <REP> d-------- C:\Documents and Settings\Caro\Application Data\DNA
2008-03-08 13:38 . 2008-03-08 17:12 <REP> d-------- C:\Program Files\Unlocker
2008-03-08 13:38 . 2008-03-08 13:38 <REP> d-------- C:\Documents and Settings\Caro\Application Data\Desktopicon
2008-03-08 00:13 . 2008-03-08 00:44 <REP> d-------- C:\Program Files\solarus
2008-02-29 22:39 . 2008-02-29 22:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\NannyMania
2008-02-29 20:18 . 2008-02-29 20:18 <REP> d-------- C:\WINDOWS\All Users
2008-02-29 20:18 . 2008-02-29 20:18 <REP> d-------- C:\Program Files\Ouaps
2008-02-29 20:18 . 2004-08-04 08:08 25,600 --a------ C:\WINDOWS\system32\drivers\usbser.sys
2008-02-29 20:18 . 2004-08-04 08:08 25,600 --a--c--- C:\WINDOWS\system32\dllcache\usbser.sys
2008-02-28 17:56 . 2008-02-28 17:56 <REP> d-------- C:\Program Files\GamesBar
2008-02-28 17:55 . 2008-02-28 17:55 <REP> d-------- C:\Program Files\orange
2008-02-28 17:55 . 2008-02-28 17:55 <REP> d-------- C:\Program Files\Fichiers communs\Oberon Media
2008-02-23 20:22 . 2008-02-23 20:22 <REP> d-------- C:\Documents and Settings\Caro\Application Data\Oberon Games
2008-02-23 19:09 . 2008-02-23 19:09 <REP> d-------- C:\WINDOWS\LooKeys
2008-02-23 19:09 . 2008-02-23 19:09 <REP> d-------- C:\Program Files\FTK
2008-02-23 19:09 . 2008-02-23 19:09 <REP> d-------- C:\Documents and Settings\Caro\Application Data\LooKeys
2008-02-23 19:09 . 2008-02-23 19:09 <REP> d-------- C:\Documents and Settings\All Users\Application Data\LooKeys
2008-02-23 19:09 . 2008-02-23 19:09 40 -r-h----- C:\WINDOWS\syslk32.fst
2008-02-23 16:16 . 2008-02-28 17:50 <REP> d-------- C:\Program Files\Alawar
2008-02-22 21:29 . 2008-02-22 21:29 <REP> d-------- C:\Program Files\ReflexiveArcade
2008-02-22 18:39 . 2008-03-07 18:12 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-02-22 18:39 . 2008-02-23 20:22 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Oberon Games
2008-02-22 18:33 . 2008-02-22 19:46 <REP> d-------- C:\Program Files\MSN Games
2008-02-21 19:18 . 2008-02-21 19:18 <REP> d-------- C:\Program Files\Windows Media Connect 2
2008-02-21 19:18 . 2006-10-04 16:06 1,197,294 -----c--- C:\WINDOWS\system32\dllcache\sysmain.sdb
2008-02-21 19:18 . 2006-10-04 16:06 764,868 -----c--- C:\WINDOWS\system32\dllcache\apph_sp.sdb
2008-02-21 19:18 . 2006-10-04 16:06 217,118 -----c--- C:\WINDOWS\system32\dllcache\apphelp.sdb
2008-02-21 19:16 . 2008-02-21 19:16 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-02-21 19:16 . 2008-02-21 19:17 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-02-12 11:10 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-02-12 11:10 . 2007-07-30 20:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-02-12 11:10 . 2007-07-30 20:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-02-11 16:22 . 2008-02-11 16:22 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-02-11 16:06 . 2008-02-11 16:20 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-02-11 16:06 . 2008-02-11 16:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-02-10 14:39 . 2007-08-13 19:54 33,792 --a--c--- C:\WINDOWS\system32\dllcache\custsat.dll
2008-02-10 14:32 . 2006-08-21 11:14 128,896 -----c--- C:\WINDOWS\system32\dllcache\fltmgr.sys
2008-02-10 14:32 . 2006-08-21 11:14 23,040 -----c--- C:\WINDOWS\system32\dllcache\fltmc.exe
2008-02-10 14:32 . 2006-08-21 14:26 16,896 -----c--- C:\WINDOWS\system32\dllcache\fltlib.dll
2008-02-10 14:30 . 2008-02-10 14:30 <REP> d-------- C:\Program Files\MSXML 4.0
2008-02-10 14:22 . 2007-07-09 15:11 584,192 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-02-09 13:50 . 2008-02-09 13:50 <REP> d-------- C:\WINDOWS\ServicePackFiles
2008-02-03 17:44 . 2008-02-03 17:44 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Aliasworlds
2008-02-01 12:17 . 2008-02-01 12:17 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-31 08:04 --------- d-----w C:\Program Files\eMule
2008-03-31 08:04 --------- d-----w C:\Documents and Settings\Caro\Application Data\OpenOffice.org2
2008-03-30 00:44 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-03-23 23:09 --------- d-----w C:\Program Files\OpenOffice.org 2.3
2008-03-21 22:05 --------- d-----w C:\Program Files\Delicious winter edition Deluxe English
2008-03-21 22:03 --------- d-----w C:\Program Files\Zylom Games
2008-03-18 19:43 --------- d-----w C:\Program Files\Codemasters
2008-03-06 15:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-29 18:17 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-02-27 21:43 --------- d-----w C:\Program Files\Windows Live
2008-02-06 10:37 --------- d-----w C:\Documents and Settings\Caro\Application Data\WinButler
2008-02-03 15:44 --------- d-----w C:\Documents and Settings\Caro\Application Data\Zylom
2008-02-03 12:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\HipSoft
2007-12-16 17:39 1,230,461 ----a-w C:\WINDOWS\linternaute03.scr
2007-10-07 15:33 87,958 ----a-w C:\Documents and Settings\Caro\Application Data\serial2.dat
2007-06-27 15:43 47,360 ----a-w C:\Documents and Settings\Caro\Application Data\pcouffin.sys
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]
"BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" [2008-03-27 09:50 288576]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
"eMuleAutoStart"="C:\Program Files\eMule\emule.exe" [2007-05-13 16:57 5308416]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2005-08-17 12:39 90112 C:\WINDOWS\SOUNDMAN.EXE]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00 132496]
"SetIcon"="\Program Files\SMSC\Seticon.exe" [2004-04-28 14:02 42496]
"Ouaps download software"="C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe" [2007-07-23 13:03 1608440]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [ ]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-03-25 23:11 249896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"MSNFix"="C:\Documents and Settings\Caro\Mes documents\MSNFix\MSNFix.bat /pass2" [ ]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli scecli
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\DNA\\btdna.exe"=
"C:\\Program Files\\BitTorrent\\bittorrent.exe"=
R3 Usbfilt;UsbFilt;C:\WINDOWS\SYSTEM32\DRIVERS\usbfilt.sys [2004-02-01 05:53]
S3 FXDRV;FXDRV;E:\Fxdrv.sys []
S3 PTV337;Mini DigitalTV USB;C:\WINDOWS\system32\DRIVERS\PTV337.SYS [2005-10-24 12:28]
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-31 10:04:08
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cach‚s ...
Balayage cach‚ autostart entries ...
Balayage des fichiers cach‚s ...
Scan termin‚ avec succŠs
Les fichiers cach‚s: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\SMSC\Seticon.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
.
**************************************************************************
.
Temps d'accomplissement: 2008-03-31 10:06:41 - machine was rebooted
ComboFix-quarantined-files.txt 2008-03-31 08:06:38
Pre-Run: 20,637,491,200 octets libres
Post-Run: 20,578,779,136 octets libres
.
2008-03-12 02:01:15 --- E O F ---
encore merci de ton aide
++
ComboFix 08-03-30.3 - Caro 2008-03-31 9:56:30.1 - NTFSx86 MINIMAL
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.822 [GMT 2:00]
Endroit: C:\Documents and Settings\Caro\Bureau\ComboFix.exe
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Caro\Application Data\inst.exe
C:\WINDOWS\system32\uninstall.exe
.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-02-28 to 2008-03-31 ))))))))))))))))))))))))))))))))))))
.
2008-03-30 16:53 . 2008-03-30 16:53 <REP> d-------- C:\WINDOWS\ERUNT
2008-03-30 15:15 . 2008-03-30 15:15 88 --a------ C:\WINDOWS\wininit.ini
2008-03-30 14:20 . 2008-03-30 14:20 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-30 14:20 . 2008-03-30 14:49 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-30 03:29 . 2008-03-30 03:29 244 --ah----- C:\sqmnoopt07.sqm
2008-03-30 03:29 . 2008-03-30 03:29 232 --ah----- C:\sqmdata07.sqm
2008-03-29 16:13 . 2008-03-29 16:13 <REP> d-------- C:\Trend Micro
2008-03-27 22:15 . 2008-03-27 22:15 827 --a------ C:\WINDOWS\system32\mpzzav.exe
2008-03-27 00:05 . 2008-03-27 00:05 0 --a------ C:\WINDOWS\system32\real.MSNFix
2008-03-25 23:10 . 2008-03-25 23:10 <REP> d-------- C:\Program Files\Avira
2008-03-25 23:10 . 2008-03-25 23:10 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-03-22 23:06 . 2008-03-30 23:01 <REP> d-------- C:\Documents and Settings\Caro\Application Data\BitTorrent
2008-03-22 23:05 . 2008-03-22 23:05 <REP> d-------- C:\Program Files\DNA
2008-03-22 23:05 . 2008-03-22 23:12 <REP> d-------- C:\Program Files\BitTorrent
2008-03-22 23:05 . 2008-03-31 09:52 <REP> d-------- C:\Documents and Settings\Caro\Application Data\DNA
2008-03-08 13:38 . 2008-03-08 17:12 <REP> d-------- C:\Program Files\Unlocker
2008-03-08 13:38 . 2008-03-08 13:38 <REP> d-------- C:\Documents and Settings\Caro\Application Data\Desktopicon
2008-03-08 00:13 . 2008-03-08 00:44 <REP> d-------- C:\Program Files\solarus
2008-02-29 22:39 . 2008-02-29 22:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\NannyMania
2008-02-29 20:18 . 2008-02-29 20:18 <REP> d-------- C:\WINDOWS\All Users
2008-02-29 20:18 . 2008-02-29 20:18 <REP> d-------- C:\Program Files\Ouaps
2008-02-29 20:18 . 2004-08-04 08:08 25,600 --a------ C:\WINDOWS\system32\drivers\usbser.sys
2008-02-29 20:18 . 2004-08-04 08:08 25,600 --a--c--- C:\WINDOWS\system32\dllcache\usbser.sys
2008-02-28 17:56 . 2008-02-28 17:56 <REP> d-------- C:\Program Files\GamesBar
2008-02-28 17:55 . 2008-02-28 17:55 <REP> d-------- C:\Program Files\orange
2008-02-28 17:55 . 2008-02-28 17:55 <REP> d-------- C:\Program Files\Fichiers communs\Oberon Media
2008-02-23 20:22 . 2008-02-23 20:22 <REP> d-------- C:\Documents and Settings\Caro\Application Data\Oberon Games
2008-02-23 19:09 . 2008-02-23 19:09 <REP> d-------- C:\WINDOWS\LooKeys
2008-02-23 19:09 . 2008-02-23 19:09 <REP> d-------- C:\Program Files\FTK
2008-02-23 19:09 . 2008-02-23 19:09 <REP> d-------- C:\Documents and Settings\Caro\Application Data\LooKeys
2008-02-23 19:09 . 2008-02-23 19:09 <REP> d-------- C:\Documents and Settings\All Users\Application Data\LooKeys
2008-02-23 19:09 . 2008-02-23 19:09 40 -r-h----- C:\WINDOWS\syslk32.fst
2008-02-23 16:16 . 2008-02-28 17:50 <REP> d-------- C:\Program Files\Alawar
2008-02-22 21:29 . 2008-02-22 21:29 <REP> d-------- C:\Program Files\ReflexiveArcade
2008-02-22 18:39 . 2008-03-07 18:12 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-02-22 18:39 . 2008-02-23 20:22 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Oberon Games
2008-02-22 18:33 . 2008-02-22 19:46 <REP> d-------- C:\Program Files\MSN Games
2008-02-21 19:18 . 2008-02-21 19:18 <REP> d-------- C:\Program Files\Windows Media Connect 2
2008-02-21 19:18 . 2006-10-04 16:06 1,197,294 -----c--- C:\WINDOWS\system32\dllcache\sysmain.sdb
2008-02-21 19:18 . 2006-10-04 16:06 764,868 -----c--- C:\WINDOWS\system32\dllcache\apph_sp.sdb
2008-02-21 19:18 . 2006-10-04 16:06 217,118 -----c--- C:\WINDOWS\system32\dllcache\apphelp.sdb
2008-02-21 19:16 . 2008-02-21 19:16 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-02-21 19:16 . 2008-02-21 19:17 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-02-12 11:10 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-02-12 11:10 . 2007-07-30 20:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-02-12 11:10 . 2007-07-30 20:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-02-11 16:22 . 2008-02-11 16:22 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-02-11 16:06 . 2008-02-11 16:20 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-02-11 16:06 . 2008-02-11 16:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-02-10 14:39 . 2007-08-13 19:54 33,792 --a--c--- C:\WINDOWS\system32\dllcache\custsat.dll
2008-02-10 14:32 . 2006-08-21 11:14 128,896 -----c--- C:\WINDOWS\system32\dllcache\fltmgr.sys
2008-02-10 14:32 . 2006-08-21 11:14 23,040 -----c--- C:\WINDOWS\system32\dllcache\fltmc.exe
2008-02-10 14:32 . 2006-08-21 14:26 16,896 -----c--- C:\WINDOWS\system32\dllcache\fltlib.dll
2008-02-10 14:30 . 2008-02-10 14:30 <REP> d-------- C:\Program Files\MSXML 4.0
2008-02-10 14:22 . 2007-07-09 15:11 584,192 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-02-09 13:50 . 2008-02-09 13:50 <REP> d-------- C:\WINDOWS\ServicePackFiles
2008-02-03 17:44 . 2008-02-03 17:44 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Aliasworlds
2008-02-01 12:17 . 2008-02-01 12:17 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-31 08:04 --------- d-----w C:\Program Files\eMule
2008-03-31 08:04 --------- d-----w C:\Documents and Settings\Caro\Application Data\OpenOffice.org2
2008-03-30 00:44 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-03-23 23:09 --------- d-----w C:\Program Files\OpenOffice.org 2.3
2008-03-21 22:05 --------- d-----w C:\Program Files\Delicious winter edition Deluxe English
2008-03-21 22:03 --------- d-----w C:\Program Files\Zylom Games
2008-03-18 19:43 --------- d-----w C:\Program Files\Codemasters
2008-03-06 15:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-29 18:17 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-02-27 21:43 --------- d-----w C:\Program Files\Windows Live
2008-02-06 10:37 --------- d-----w C:\Documents and Settings\Caro\Application Data\WinButler
2008-02-03 15:44 --------- d-----w C:\Documents and Settings\Caro\Application Data\Zylom
2008-02-03 12:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\HipSoft
2007-12-16 17:39 1,230,461 ----a-w C:\WINDOWS\linternaute03.scr
2007-10-07 15:33 87,958 ----a-w C:\Documents and Settings\Caro\Application Data\serial2.dat
2007-06-27 15:43 47,360 ----a-w C:\Documents and Settings\Caro\Application Data\pcouffin.sys
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]
"BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" [2008-03-27 09:50 288576]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
"eMuleAutoStart"="C:\Program Files\eMule\emule.exe" [2007-05-13 16:57 5308416]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2005-08-17 12:39 90112 C:\WINDOWS\SOUNDMAN.EXE]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00 132496]
"SetIcon"="\Program Files\SMSC\Seticon.exe" [2004-04-28 14:02 42496]
"Ouaps download software"="C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe" [2007-07-23 13:03 1608440]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [ ]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-03-25 23:11 249896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"MSNFix"="C:\Documents and Settings\Caro\Mes documents\MSNFix\MSNFix.bat /pass2" [ ]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli scecli
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\DNA\\btdna.exe"=
"C:\\Program Files\\BitTorrent\\bittorrent.exe"=
R3 Usbfilt;UsbFilt;C:\WINDOWS\SYSTEM32\DRIVERS\usbfilt.sys [2004-02-01 05:53]
S3 FXDRV;FXDRV;E:\Fxdrv.sys []
S3 PTV337;Mini DigitalTV USB;C:\WINDOWS\system32\DRIVERS\PTV337.SYS [2005-10-24 12:28]
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-31 10:04:08
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cach‚s ...
Balayage cach‚ autostart entries ...
Balayage des fichiers cach‚s ...
Scan termin‚ avec succŠs
Les fichiers cach‚s: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\SMSC\Seticon.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
.
**************************************************************************
.
Temps d'accomplissement: 2008-03-31 10:06:41 - machine was rebooted
ComboFix-quarantined-files.txt 2008-03-31 08:06:38
Pre-Run: 20,637,491,200 octets libres
Post-Run: 20,578,779,136 octets libres
.
2008-03-12 02:01:15 --- E O F ---
encore merci de ton aide
++
green day
Messages postés
26371
Date d'inscription
vendredi 30 septembre 2005
Statut
Modérateur, Contributeur sécurité
Dernière intervention
27 décembre 2019
2 162
31 mars 2008 à 21:22
31 mars 2008 à 21:22
Salut
ok,
* Faire un clic droit sur ce lien : http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip
* Enregistrez la cible (du lien) sous... et enregistrez-le sur le bureau.
* Faire un clic droit sur navilog1.zip et choisir "tout extraire"
* Double-cliquez sur navilog1.exe
* Arriver au menu principal, choisir l'option 1 et valider.
* Patientez jusqu'au message : Analyse Termine le ...
* Le rapport sera en outre sauvegardé à la racine du disque (fixnavi.txt)
++
ok,
* Faire un clic droit sur ce lien : http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip
* Enregistrez la cible (du lien) sous... et enregistrez-le sur le bureau.
* Faire un clic droit sur navilog1.zip et choisir "tout extraire"
* Double-cliquez sur navilog1.exe
* Arriver au menu principal, choisir l'option 1 et valider.
* Patientez jusqu'au message : Analyse Termine le ...
* Le rapport sera en outre sauvegardé à la racine du disque (fixnavi.txt)
++
Winry3
Messages postés
6
Date d'inscription
dimanche 30 mars 2008
Statut
Membre
Dernière intervention
20 août 2009
31 mars 2008 à 21:37
31 mars 2008 à 21:37
Et un rapport de plus ^^
Search Navipromo version 3.5.2 commencé le 31/03/2008 à 21:29:57,31
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!
Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Caro"
Mise à jour le 29.03.2008 à 22h00 par IL-MAFIOSO
Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13
Système de fichiers : NTFS
Executé en mode normal
*** Recherche Programmes installés ***
*** Recherche dossiers dans C:\WINDOWS ***
*** Recherche dossiers dans C:\Program Files ***
*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***
*** Recherche dossiers dans "C:\Documents and Settings\Caro\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\Caro\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\Caro\menudm~1\progra~1" ***
*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***
*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net
Aucun Fichier trouvé
*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!
* Recherche dans C:\WINDOWS\system32 *
* Recherche dans "C:\Documents and Settings\Caro\locals~1\applic~1" *
* Recherche dans "C:\DOCUME~1\Elodie\locals~1\applic~1" *
*** Recherche fichiers ***
*** Recherche clés spécifiques dans le Registre ***
*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Recherche nouveaux fichiers Instant Access :
2)Recherche Heuristique :
* Dans C:\WINDOWS\system32 :
* Dans "C:\Documents and Settings\Caro\locals~1\applic~1" :
* Dans "C:\DOCUME~1\Elodie\locals~1\applic~1" :
3)Recherche Certificats :
Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !
4)Recherche fichiers connus :
*** Analyse terminée le 31/03/2008 à 21:33:55,75 ***
Je sais pas comment tu fais pour déchiffrer tout ça mais c'est vraiment sympa de le faire pour aider les autres, merci :D
++
Search Navipromo version 3.5.2 commencé le 31/03/2008 à 21:29:57,31
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!
Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Caro"
Mise à jour le 29.03.2008 à 22h00 par IL-MAFIOSO
Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13
Système de fichiers : NTFS
Executé en mode normal
*** Recherche Programmes installés ***
*** Recherche dossiers dans C:\WINDOWS ***
*** Recherche dossiers dans C:\Program Files ***
*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***
*** Recherche dossiers dans "C:\Documents and Settings\Caro\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\Caro\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\Caro\menudm~1\progra~1" ***
*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***
*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net
Aucun Fichier trouvé
*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!
* Recherche dans C:\WINDOWS\system32 *
* Recherche dans "C:\Documents and Settings\Caro\locals~1\applic~1" *
* Recherche dans "C:\DOCUME~1\Elodie\locals~1\applic~1" *
*** Recherche fichiers ***
*** Recherche clés spécifiques dans le Registre ***
*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Recherche nouveaux fichiers Instant Access :
2)Recherche Heuristique :
* Dans C:\WINDOWS\system32 :
* Dans "C:\Documents and Settings\Caro\locals~1\applic~1" :
* Dans "C:\DOCUME~1\Elodie\locals~1\applic~1" :
3)Recherche Certificats :
Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !
4)Recherche fichiers connus :
*** Analyse terminée le 31/03/2008 à 21:33:55,75 ***
Je sais pas comment tu fais pour déchiffrer tout ça mais c'est vraiment sympa de le faire pour aider les autres, merci :D
++
Winry3
Messages postés
6
Date d'inscription
dimanche 30 mars 2008
Statut
Membre
Dernière intervention
20 août 2009
4 avril 2008 à 20:17
4 avril 2008 à 20:17
Tout a l'air d'être rentré dans l'ordre mais j'attends quand même une confirmation pour mettre le "problème résolu"
Merci encore Green Day :D
Merci encore Green Day :D
green day
Messages postés
26371
Date d'inscription
vendredi 30 septembre 2005
Statut
Modérateur, Contributeur sécurité
Dernière intervention
27 décembre 2019
2 162
5 avril 2008 à 00:15
5 avril 2008 à 00:15
Salut
le denier rapport est bon !
fais ce qui est indiqué ici stp :
http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr
++
le denier rapport est bon !
fais ce qui est indiqué ici stp :
http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr
++
Winry3
Messages postés
6
Date d'inscription
dimanche 30 mars 2008
Statut
Membre
Dernière intervention
20 août 2009
5 avril 2008 à 19:09
5 avril 2008 à 19:09
Salut!
Le rapport avg anti-spyware :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 17:05:49 05/04/2008
+ Résultat de l'analyse:
:mozilla.6:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.121:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.170:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.57:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.7:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.12:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.13:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.14:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.15:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.16:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.17:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.18:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.19:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.32:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.227:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.228:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.229:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.81:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.257:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@ehg-danieljouvance.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@ehg-franceloisirs.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.96:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.97:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.244:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Information : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.140:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.153:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.157:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.10:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.11:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.12:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.13:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.14:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.165:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.166:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.167:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.168:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.169:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.34:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.8:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.9:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.172:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.173:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.174:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.275:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.276:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.277:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.183:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.184:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.185:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.203:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.235:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.211:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.212:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
Fin du rapport
BitDefender Online Scanner
Scan report generated at: Sat, Apr 05, 2008 - 19:00:19
Scan path: A:\;C:\;D:\;E:\;F:\;
Statistics
Time
01:29:16
Files
338347
Folders
8575
Boot Sectors
3
Archives
2029
Packed Files
9915
Results
Identified Viruses
0
Infected Files
0
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
0
Engines Info
Virus Definitions
1128784
Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins
16
Archive plugins
41
Unpack plugins
7
E-mail plugins
6
System plugins
5
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
No virus found.
Rapport Hijackthisfile :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:05:56, on 05/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\SMSC\Seticon.exe
C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Java\jre1.6.0_02\bin\jucheck.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.321Search.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SetIcon] \Program Files\SMSC\Seticon.exe
O4 - HKLM\..\Run: [Ouaps download software] C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: MutiKeyboard Driver.lnk = C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
Le rapport avg anti-spyware :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 17:05:49 05/04/2008
+ Résultat de l'analyse:
:mozilla.6:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.121:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.170:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.57:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.7:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.12:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.13:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.14:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.15:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.16:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.17:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.18:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.19:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.32:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.227:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.228:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.229:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.81:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.257:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@ehg-danieljouvance.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@ehg-franceloisirs.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.96:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.97:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.244:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Information : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.140:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.153:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.157:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.10:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.11:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.12:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.13:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.14:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.165:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.166:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.167:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.168:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.169:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.34:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.8:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.9:C:\Documents and Settings\Caro\Application Data\Mozilla\Firefox\Profiles\n1vupc4x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.172:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.173:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.174:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.275:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.276:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.277:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.183:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.184:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.185:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.203:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.235:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.211:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.212:C:\Documents and Settings\Elodie\Application Data\Mozilla\Firefox\Profiles\a5ghl88y.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Elodie\Cookies\elodie@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
Fin du rapport
BitDefender Online Scanner
Scan report generated at: Sat, Apr 05, 2008 - 19:00:19
Scan path: A:\;C:\;D:\;E:\;F:\;
Statistics
Time
01:29:16
Files
338347
Folders
8575
Boot Sectors
3
Archives
2029
Packed Files
9915
Results
Identified Viruses
0
Infected Files
0
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
0
Engines Info
Virus Definitions
1128784
Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins
16
Archive plugins
41
Unpack plugins
7
E-mail plugins
6
System plugins
5
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
No virus found.
Rapport Hijackthisfile :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:05:56, on 05/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\SMSC\Seticon.exe
C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Java\jre1.6.0_02\bin\jucheck.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.321Search.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SetIcon] \Program Files\SMSC\Seticon.exe
O4 - HKLM\..\Run: [Ouaps download software] C:\Program Files\Ouaps\I Logiciel\Ouaps LogTL.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: MutiKeyboard Driver.lnk = C:\Program Files\MultiKeyboard Driver\KbdDrv.exe
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
