spyware secure non installé mais pop up... Fermé

Question

Bonjour,

Le message d'installation de spyre ware secure ne cesse de s'ouvrir qand je navigue (IE). Je n'ai pas installé le logiciel cependant.

Je viens de lire certains messages postés sur le forum à ce sujet, j'ai lancé Navilog, dont je joins le rapport...

Je me rends compte que ma navigation sur IE n'est pas du tout sécurisée et que j'ai apparemment plusieurs programmes espions ou virus??!?

Jusqu'à présent je me contentais du parefeu de windows + avast antivirus + lavasoft ad aware version gratuite....

Pourriez vous me donner des conseils pour nettoyer tout cela...et être plus prudente??

Merci beaucoup par avance !!!!

Analyse NAVILOG1.EXE du 30 mars 2008 

earch Navipromo version 3.5.2 commencé le 30/03/2008 à 17:42:56,79

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Caro" 

Mise à jour le 29.03.2008 à 22h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***




*** Recherche dossiers dans "C:\Documents and Settings\Caro\applic~1" *** 



*** Recherche dossiers dans "C:\Documents and Settings\Caro\locals~1\applic~1" *** 



*** Recherche dossiers dans "C:\Documents and Settings\Caro\menudm~1\progra~1" *** 


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Fichier(s) caché(s) :

C:\Documents and Settings\Caro\Local Settings\Application Data\lkifgdaf.dat
C:\Documents and Settings\Caro\Local Settings\Application Data\lkifgdaf.exe
C:\Documents and Settings\Caro\Local Settings\Application Data\lkifgdaf_nav.dat
C:\Documents and Settings\Caro\Local Settings\Application Data\lkifgdaf_navps.dat



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans "C:\Documents and Settings\Caro\locals~1\applic~1" * 

Fichiers suspects :

lkifgdaf.exe trouvé ! 



*** Recherche fichiers *** 


C:\WINDOWS\system32
vs2.inf trouvé !


*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans C:\WINDOWS\system32 :


* Dans "C:\Documents and Settings\Caro\locals~1\applic~1" : 

lkifgdaf.dat trouvé !

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 30/03/2008 à 17:58:55,85 ***

martine03 · Answer

relance le et choisi l option2

ludsfa · Answer

bonjour,
Bien lance navilog et l'option 2 suppression envoi le rapport.
ensuite télécharge Hijackthis sur ton bureau et fais une analyse .
Pour cela une fois l'installation terminé double clic sur le raccourci du bureau et clic ensuite sur "do a system scan and save a logfile".
Le rapport va apparaitre sur ton bureau tu clic droit tu fais "sélectionner tout " ensuite tu copie /colle le rapport dans ta réponse.
à bientôt.

ludsfa · Answer

télécharge https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7crPW-mouMdBfVK6f3sPUapdg4hQngU7HgbyFsjR1dD3-TqtdVs0SMRrdcdNC7rmqax1GJa3lMBhw4WnFlfv3Pv6p78xJeLuL7OAVVlKBRcdJRu0uFv1MpM3um1jegyBBCiIlb-2vFxKwIF_rTHq9-XXVjySFdSH_F1Pj_BExu-b9p26-am8ve-dqiTUXvzYlXDAT5GWnSimZIPHtF77f1BE1nLOHA%3D%3D&attredirects=3

Double-clique dessus pour lancer l'installation 
Puis double-clique sur le raccourci Lop S&D présent sur ton bureau 
Séléctionne la langue souhaitée , puis choisis l'Option 1 ( Recherche ) 
Patiente jusqu'à la fin du scan 
Poste le rapport généré ( C:\lopR.txt ) 
(Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape

CaroCC · Answer

Merci

voici le rapprt de LOPsd



   -----------------------[  Lop S&D 4.1.0-3  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : Caro ] [ "C:\Lop SD" ]
   [ 30/03/2008 | 22:29:30,96 ] [ PC : CAROLINE ]
   [ MAJ : 29-03-2008 | 19:52 ]
 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [29/03/2008|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
   [29/03/2008|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
   [29/11/2005|23:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [13/10/2006|10:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [24/01/2008|11:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
   [27/06/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
   [17/03/2005|10:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [26/02/2006|20:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Global Software Publishing
   [20/09/2006|17:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [27/06/2007|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [21/03/2008|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
   [29/03/2008|19:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [29/03/2008|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [26/03/2008|00:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [17/03/2005|09:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [02/09/2005|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBT
   [27/06/2007|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
   [18/12/2006|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [02/09/2005|23:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
   [04/02/2006|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [26/03/2008|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks
   [08/08/2006|23:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [26/03/2008|21:54] C:\DOCUME~1\Caro\APPLIC~1\.
   [26/03/2008|21:54] C:\DOCUME~1\Caro\APPLIC~1\..
   [18/03/2005|09:11] C:\DOCUME~1\Caro\APPLIC~1\Adobe
   [29/11/2005|23:59] C:\DOCUME~1\Caro\APPLIC~1\AdobeUM
   [23/09/2005|22:01] C:\DOCUME~1\Caro\APPLIC~1\Apple Computer
   [27/06/2007|21:27] C:\DOCUME~1\Caro\APPLIC~1\ArcSoft
   [27/03/2008|01:52] C:\DOCUME~1\Caro\APPLIC~1\Azureus
   [26/03/2008|13:16] C:\DOCUME~1\Caro\APPLIC~1\Canon
   [28/01/2007|19:49] C:\DOCUME~1\Caro\APPLIC~1\ConvertTemp
   [15/04/2006|21:10] C:\DOCUME~1\Caro\APPLIC~1\Creative
   [17/03/2005|10:13] C:\DOCUME~1\Caro\APPLIC~1\desktop.ini
   [21/09/2006|01:02] C:\DOCUME~1\Caro\APPLIC~1\Google
   [03/09/2005|10:55] C:\DOCUME~1\Caro\APPLIC~1\Help
   [17/03/2005|10:03] C:\DOCUME~1\Caro\APPLIC~1\Identities
   [24/06/2007|16:42] C:\DOCUME~1\Caro\APPLIC~1\InstallShield
   [02/09/2005|21:18] C:\DOCUME~1\Caro\APPLIC~1\InterVideo
   [29/03/2008|19:21] C:\DOCUME~1\Caro\APPLIC~1\Lavasoft
   [24/02/2007|20:28] C:\DOCUME~1\Caro\APPLIC~1\Leadertech
   [13/01/2008|15:10] C:\DOCUME~1\Caro\APPLIC~1\LiteOn
   [19/09/2005|19:22] C:\DOCUME~1\Caro\APPLIC~1\Macromedia
   [24/06/2007|17:37] C:\DOCUME~1\Caro\APPLIC~1\Media Player Classic
   [30/05/2006|22:35] C:\DOCUME~1\Caro\APPLIC~1\Microsoft
   [02/09/2005|20:50] C:\DOCUME~1\Caro\APPLIC~1\Microsoft Web Folders
   [22/09/2005|21:46] C:\DOCUME~1\Caro\APPLIC~1\MSNInstaller
   [20/09/2005|22:53] C:\DOCUME~1\Caro\APPLIC~1\Real
   [07/01/2007|23:41] C:\DOCUME~1\Caro\APPLIC~1\Samsung
   [27/06/2007|19:35] C:\DOCUME~1\Caro\APPLIC~1\ScanSoft
   [06/03/2008|18:29] C:\DOCUME~1\Caro\APPLIC~1\Skype
   [23/02/2007|19:32] C:\DOCUME~1\Caro\APPLIC~1\Snapfish
   [18/03/2005|09:52] C:\DOCUME~1\Caro\APPLIC~1\Sonic
   [02/09/2005|23:19] C:\DOCUME~1\Caro\APPLIC~1\Sony Corporation
   [28/09/2005|22:17] C:\DOCUME~1\Caro\APPLIC~1\Sun
   [19/09/2005|19:16] C:\DOCUME~1\Caro\APPLIC~1\Symantec
   [07/11/2007|14:42] C:\DOCUME~1\Caro\APPLIC~1\Temporary
   [30/05/2006|22:42] C:\DOCUME~1\Caro\APPLIC~1	oshiba
   [21/03/2008|19:48] C:\DOCUME~1\Caro\APPLIC~1\TransRender
   [26/03/2008|21:55] C:\DOCUME~1\Caro\APPLIC~1\TVU networks
   [15/03/2008|01:21] C:\DOCUME~1\Caro\APPLIC~1\U3
   [21/01/2008|14:34] C:\DOCUME~1\Caro\APPLIC~1\vlc
   [17/09/2005|12:00] C:\DOCUME~1\Caro\APPLIC~1\wklnhst.dat

   [30/03/2005|09:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
   [30/03/2005|09:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
   [18/03/2005|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
   [18/03/2005|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AdobeUM
   [17/03/2005|10:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [17/03/2005|10:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [23/03/2005|11:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [18/03/2005|09:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
   [18/03/2005|10:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [17/03/2005|13:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1	oshiba

   [17/03/2005|09:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
   [17/03/2005|09:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
   [13/12/2006|19:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [17/03/2005|09:24] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
   [17/03/2005|09:24] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
   [04/12/2007|19:40] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [22/03/2008 12:23][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [30/03/2008 21:01][--a------] C:\WINDOWS	asks\Symantec NetDetect.job
   [30/03/2008 21:24][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 13:00][-r-h-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [30/03/2008|17:41] C:\Program Files\.
   [30/03/2008|17:41] C:\Program Files\..
   [29/11/2005|23:57] C:\Program Files\Adobe
   [14/02/2006|16:04] C:\Program Files\Alcohol Soft
   [04/02/2006|17:49] C:\Program Files\Alwil Software
   [17/03/2005|11:39] C:\Program Files\Apoint2K
   [24/03/2007|11:13] C:\Program Files\Apple Software Update
   [27/06/2007|19:32] C:\Program Files\ArcSoft
   [17/03/2005|12:02] C:\Program Files\Atheros
   [02/09/2005|19:03] C:\Program Files\ATI Technologies
   [07/03/2008|17:34] C:\Program Files\Azureus
   [15/02/2008|09:19] C:\Program Files\Business-in-a-Box
   [27/06/2007|19:39] C:\Program Files\Canon
   [27/06/2007|19:28] C:\Program Files\CanonBJ
   [24/06/2007|16:42] C:\Program Files\Common Files
   [17/03/2005|09:18] C:\Program Files\ComPlus Applications
   [15/04/2006|21:08] C:\Program Files\Creative
   [05/02/2008|18:32] C:\Program Files\DivX
   [24/02/2007|20:59] C:\Program Files\Documents To Go
   [29/03/2008|19:20] C:\Program Files\Fichiers communs
   [01/11/2007|12:31] C:\Program Files\Google
   [27/06/2007|19:32] C:\Program Files\InstallShield Installation Information
   [17/03/2005|11:32] C:\Program Files\Intel
   [14/02/2008|00:08] C:\Program Files\Internet Explorer
   [23/03/2005|11:35] C:\Program Files\InterVideo
   [24/03/2007|11:16] C:\Program Files\iPod
   [24/03/2007|11:16] C:\Program Files\iTunes
   [17/03/2005|09:30] C:\Program Files\Java
   [29/03/2008|19:21] C:\Program Files\Lavasoft
   [17/03/2005|11:56] C:\Program Files\ltmoh
   [24/06/2007|17:36] C:\Program Files\Media Player Classic
   [19/09/2005|20:01] C:\Program Files\Messenger
   [02/09/2005|21:03] C:\Program Files\microsoft frontpage
   [02/09/2005|21:05] C:\Program Files\Microsoft Office
   [30/03/2005|09:25] C:\Program Files\Microsoft Works
   [18/03/2005|10:58] C:\Program Files\Microsoft.NET
   [17/03/2005|09:19] C:\Program Files\Movie Maker
   [22/09/2005|21:46] C:\Program Files\MSN
   [17/03/2005|09:17] C:\Program Files\MSN Gaming Zone
   [07/03/2007|22:23] C:\Program Files\MSN Messenger
   [19/11/2006|13:21] C:\Program Files\MSXML 4.0
   [30/03/2008|21:28] C:\Program Files\Navilog1
   [17/03/2005|09:19] C:\Program Files\NetMeeting
   [21/01/2008|14:33] C:\Program Files\Neuf
   [17/03/2005|09:18] C:\Program Files\Online Services
   [14/06/2007|14:13] C:\Program Files\Outlook Express
   [01/05/2007|15:55] C:\Program Files\Palm
   [24/03/2007|11:15] C:\Program Files\QuickTime
   [20/09/2005|22:49] C:\Program Files\Real
   [07/01/2007|23:37] C:\Program Files\Samsung
   [13/01/2008|15:08] C:\Program Files\Savvy TV
   [27/06/2007|19:34] C:\Program Files\ScanSoft
   [17/03/2005|09:19] C:\Program Files\Services en ligne
   [06/03/2008|18:30] C:\Program Files\Skype
   [02/09/2005|21:04] C:\Program Files\Snapshot Viewer
   [17/03/2005|13:52] C:\Program Files\Sonic
   [24/06/2007|16:43] C:\Program Files\Sony
   [02/09/2005|23:16] C:\Program Files\Sony Corporation
   [04/02/2006|17:47] C:\Program Files\Symantec
   [30/03/2005|09:22] C:\Program Files\TOSHIBA
   [23/03/2005|11:28] C:\Program Files\Uninstall Information
   [13/02/2008|22:35] C:\Program Files\Veoh Networks
   [24/02/2007|20:36] C:\Program Files\ViaMichelin
   [13/12/2006|17:54] C:\Program Files\Windows Media Connect 2
   [13/12/2006|17:59] C:\Program Files\Windows Media Player
   [17/03/2005|09:17] C:\Program Files\Windows NT
   [17/03/2005|09:19] C:\Program Files\WindowsUpdate
   [17/03/2005|09:21] C:\Program Files\xerox
   [29/11/2005|23:57] C:\Program Files\Yahoo!
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [29/03/2008|19:20] C:\Program Files\Fichiers communs\.
   [29/03/2008|19:20] C:\Program Files\Fichiers communs\..
   [18/03/2005|09:11] C:\Program Files\Fichiers communs\Adobe
   [02/09/2005|20:54] C:\Program Files\Fichiers communs\Designer
   [27/06/2007|19:35] C:\Program Files\Fichiers communs\InstallShield
   [17/03/2005|09:30] C:\Program Files\Fichiers communs\Java
   [07/03/2007|22:23] C:\Program Files\Fichiers communs\Microsoft Shared
   [17/03/2005|09:19] C:\Program Files\Fichiers communs\MSSoap
   [17/03/2005|10:13] C:\Program Files\Fichiers communs\ODBC
   [20/09/2005|22:50] C:\Program Files\Fichiers communs\Real
   [27/06/2007|19:35] C:\Program Files\Fichiers communs\ScanSoft Shared
   [17/03/2005|09:19] C:\Program Files\Fichiers communs\Services
   [24/06/2007|16:44] C:\Program Files\Fichiers communs\Sony Shared
   [17/03/2005|10:13] C:\Program Files\Fichiers communs\SpeechEngines
   [15/02/2007|20:28] C:\Program Files\Fichiers communs\SWF Studio
   [04/02/2006|17:47] C:\Program Files\Fichiers communs\Symantec Shared
   [14/06/2007|18:25] C:\Program Files\Fichiers communs\System
   [29/03/2008|19:20] C:\Program Files\Fichiers communs\Wise Installation Wizard
   [20/09/2005|22:50] C:\Program Files\Fichiers communs\xing shared

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-03-30 22:34:41
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden files ...
   scan completed successfully
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   Aucune autre infection trouvée  !

   /!\ [Fich:5][Doss:3] C:\DOCUME~1\Caro\LOCALS~1\Temp
   /!\ [Fich:1068][Doss:0] C:\DOCUME~1\Caro\Cookies
   /!\ [Fich:15946][Doss:22] C:\DOCUME~1\Caro\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 22:35:45,46  ]----------------------

ludsfa · Answer

Re, 
 
Relance Lop S&D 
                       
                      
Choisis cette fois ci l'Option 2 ( Suppression )  
                     
Ne ferme pas la fenêtre lors de la suppression ! 
                     
Poste le rapport généré ( C:\lopR.txt ) 
                      
                      (Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide) 


refait moi un log hijackthis aussi merci.

CaroCC · Answer

Haaaaaaaaaaaaaaaaa!!!!

j'ai oublié de préciser.....quand j'ai lancé le scan par lop sd, mon antivirus Avast a ouvert une fenêtre, infection virus: rgttbkxj.exe ........win 32: inject-EV[trj]

et j'ai mis en quarantaine pour que le scan se termine....

Là je viens de lancer l'option 2 de lop sd, et mon antivirus m'a ouvert le même message....j'ai mis en quarantaine à nouveau...

voici le rapport de nettoyage par lop sd, puis un second rapport hijack

merci beaucoup pour tes messages

Nettoyage Lop sd

   -----------------------[  Lop S&D 4.1.0-3  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : Caro ] [ "C:\Lop SD" ]
   [ 30/03/2008 | 22:50:03,93 ] [ PC : CAROLINE ]
   [ MAJ : 29-03-2008 | 19:52 ]

 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [29/03/2008|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
   [29/03/2008|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
   [29/11/2005|23:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [13/10/2006|10:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [24/01/2008|11:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
   [27/06/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
   [17/03/2005|10:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [26/02/2006|20:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Global Software Publishing
   [20/09/2006|17:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [27/06/2007|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [21/03/2008|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
   [29/03/2008|19:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [29/03/2008|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [26/03/2008|00:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [17/03/2005|09:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [02/09/2005|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBT
   [27/06/2007|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
   [18/12/2006|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [02/09/2005|23:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
   [04/02/2006|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [26/03/2008|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks
   [08/08/2006|23:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [26/03/2008|21:54] C:\DOCUME~1\Caro\APPLIC~1\.
   [26/03/2008|21:54] C:\DOCUME~1\Caro\APPLIC~1\..
   [18/03/2005|09:11] C:\DOCUME~1\Caro\APPLIC~1\Adobe
   [29/11/2005|23:59] C:\DOCUME~1\Caro\APPLIC~1\AdobeUM
   [23/09/2005|22:01] C:\DOCUME~1\Caro\APPLIC~1\Apple Computer
   [27/06/2007|21:27] C:\DOCUME~1\Caro\APPLIC~1\ArcSoft
   [27/03/2008|01:52] C:\DOCUME~1\Caro\APPLIC~1\Azureus
   [26/03/2008|13:16] C:\DOCUME~1\Caro\APPLIC~1\Canon
   [28/01/2007|19:49] C:\DOCUME~1\Caro\APPLIC~1\ConvertTemp
   [15/04/2006|21:10] C:\DOCUME~1\Caro\APPLIC~1\Creative
   [17/03/2005|10:13] C:\DOCUME~1\Caro\APPLIC~1\desktop.ini
   [21/09/2006|01:02] C:\DOCUME~1\Caro\APPLIC~1\Google
   [03/09/2005|10:55] C:\DOCUME~1\Caro\APPLIC~1\Help
   [17/03/2005|10:03] C:\DOCUME~1\Caro\APPLIC~1\Identities
   [24/06/2007|16:42] C:\DOCUME~1\Caro\APPLIC~1\InstallShield
   [02/09/2005|21:18] C:\DOCUME~1\Caro\APPLIC~1\InterVideo
   [29/03/2008|19:21] C:\DOCUME~1\Caro\APPLIC~1\Lavasoft
   [24/02/2007|20:28] C:\DOCUME~1\Caro\APPLIC~1\Leadertech
   [13/01/2008|15:10] C:\DOCUME~1\Caro\APPLIC~1\LiteOn
   [19/09/2005|19:22] C:\DOCUME~1\Caro\APPLIC~1\Macromedia
   [24/06/2007|17:37] C:\DOCUME~1\Caro\APPLIC~1\Media Player Classic
   [30/05/2006|22:35] C:\DOCUME~1\Caro\APPLIC~1\Microsoft
   [02/09/2005|20:50] C:\DOCUME~1\Caro\APPLIC~1\Microsoft Web Folders
   [22/09/2005|21:46] C:\DOCUME~1\Caro\APPLIC~1\MSNInstaller
   [20/09/2005|22:53] C:\DOCUME~1\Caro\APPLIC~1\Real
   [07/01/2007|23:41] C:\DOCUME~1\Caro\APPLIC~1\Samsung
   [27/06/2007|19:35] C:\DOCUME~1\Caro\APPLIC~1\ScanSoft
   [06/03/2008|18:29] C:\DOCUME~1\Caro\APPLIC~1\Skype
   [23/02/2007|19:32] C:\DOCUME~1\Caro\APPLIC~1\Snapfish
   [18/03/2005|09:52] C:\DOCUME~1\Caro\APPLIC~1\Sonic
   [02/09/2005|23:19] C:\DOCUME~1\Caro\APPLIC~1\Sony Corporation
   [28/09/2005|22:17] C:\DOCUME~1\Caro\APPLIC~1\Sun
   [19/09/2005|19:16] C:\DOCUME~1\Caro\APPLIC~1\Symantec
   [07/11/2007|14:42] C:\DOCUME~1\Caro\APPLIC~1\Temporary
   [30/05/2006|22:42] C:\DOCUME~1\Caro\APPLIC~1	oshiba
   [21/03/2008|19:48] C:\DOCUME~1\Caro\APPLIC~1\TransRender
   [26/03/2008|21:55] C:\DOCUME~1\Caro\APPLIC~1\TVU networks
   [15/03/2008|01:21] C:\DOCUME~1\Caro\APPLIC~1\U3
   [21/01/2008|14:34] C:\DOCUME~1\Caro\APPLIC~1\vlc
   [17/09/2005|12:00] C:\DOCUME~1\Caro\APPLIC~1\wklnhst.dat

   [30/03/2005|09:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
   [30/03/2005|09:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
   [18/03/2005|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
   [18/03/2005|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AdobeUM
   [17/03/2005|10:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [17/03/2005|10:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [23/03/2005|11:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [18/03/2005|09:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
   [18/03/2005|10:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [17/03/2005|13:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1	oshiba

   [17/03/2005|09:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
   [17/03/2005|09:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
   [13/12/2006|19:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [17/03/2005|09:24] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
   [17/03/2005|09:24] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
   [04/12/2007|19:40] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [22/03/2008 12:23][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [30/03/2008 21:01][--a------] C:\WINDOWS	asks\Symantec NetDetect.job
   [30/03/2008 21:24][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 13:00][-r-h-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [30/03/2008|17:41] C:\Program Files\.
   [30/03/2008|17:41] C:\Program Files\..
   [29/11/2005|23:57] C:\Program Files\Adobe
   [14/02/2006|16:04] C:\Program Files\Alcohol Soft
   [04/02/2006|17:49] C:\Program Files\Alwil Software
   [17/03/2005|11:39] C:\Program Files\Apoint2K
   [24/03/2007|11:13] C:\Program Files\Apple Software Update
   [27/06/2007|19:32] C:\Program Files\ArcSoft
   [17/03/2005|12:02] C:\Program Files\Atheros
   [02/09/2005|19:03] C:\Program Files\ATI Technologies
   [07/03/2008|17:34] C:\Program Files\Azureus
   [15/02/2008|09:19] C:\Program Files\Business-in-a-Box
   [27/06/2007|19:39] C:\Program Files\Canon
   [27/06/2007|19:28] C:\Program Files\CanonBJ
   [24/06/2007|16:42] C:\Program Files\Common Files
   [17/03/2005|09:18] C:\Program Files\ComPlus Applications
   [15/04/2006|21:08] C:\Program Files\Creative
   [05/02/2008|18:32] C:\Program Files\DivX
   [24/02/2007|20:59] C:\Program Files\Documents To Go
   [29/03/2008|19:20] C:\Program Files\Fichiers communs
   [01/11/2007|12:31] C:\Program Files\Google
   [27/06/2007|19:32] C:\Program Files\InstallShield Installation Information
   [17/03/2005|11:32] C:\Program Files\Intel
   [14/02/2008|00:08] C:\Program Files\Internet Explorer
   [23/03/2005|11:35] C:\Program Files\InterVideo
   [24/03/2007|11:16] C:\Program Files\iPod
   [24/03/2007|11:16] C:\Program Files\iTunes
   [17/03/2005|09:30] C:\Program Files\Java
   [29/03/2008|19:21] C:\Program Files\Lavasoft
   [17/03/2005|11:56] C:\Program Files\ltmoh
   [24/06/2007|17:36] C:\Program Files\Media Player Classic
   [19/09/2005|20:01] C:\Program Files\Messenger
   [02/09/2005|21:03] C:\Program Files\microsoft frontpage
   [02/09/2005|21:05] C:\Program Files\Microsoft Office
   [30/03/2005|09:25] C:\Program Files\Microsoft Works
   [18/03/2005|10:58] C:\Program Files\Microsoft.NET
   [17/03/2005|09:19] C:\Program Files\Movie Maker
   [22/09/2005|21:46] C:\Program Files\MSN
   [17/03/2005|09:17] C:\Program Files\MSN Gaming Zone
   [07/03/2007|22:23] C:\Program Files\MSN Messenger
   [19/11/2006|13:21] C:\Program Files\MSXML 4.0
   [30/03/2008|21:28] C:\Program Files\Navilog1
   [17/03/2005|09:19] C:\Program Files\NetMeeting
   [21/01/2008|14:33] C:\Program Files\Neuf
   [17/03/2005|09:18] C:\Program Files\Online Services
   [14/06/2007|14:13] C:\Program Files\Outlook Express
   [01/05/2007|15:55] C:\Program Files\Palm
   [24/03/2007|11:15] C:\Program Files\QuickTime
   [20/09/2005|22:49] C:\Program Files\Real
   [07/01/2007|23:37] C:\Program Files\Samsung
   [13/01/2008|15:08] C:\Program Files\Savvy TV
   [27/06/2007|19:34] C:\Program Files\ScanSoft
   [17/03/2005|09:19] C:\Program Files\Services en ligne
   [06/03/2008|18:30] C:\Program Files\Skype
   [02/09/2005|21:04] C:\Program Files\Snapshot Viewer
   [17/03/2005|13:52] C:\Program Files\Sonic
   [24/06/2007|16:43] C:\Program Files\Sony
   [02/09/2005|23:16] C:\Program Files\Sony Corporation
   [04/02/2006|17:47] C:\Program Files\Symantec
   [30/03/2005|09:22] C:\Program Files\TOSHIBA
   [23/03/2005|11:28] C:\Program Files\Uninstall Information
   [13/02/2008|22:35] C:\Program Files\Veoh Networks
   [24/02/2007|20:36] C:\Program Files\ViaMichelin
   [13/12/2006|17:54] C:\Program Files\Windows Media Connect 2
   [13/12/2006|17:59] C:\Program Files\Windows Media Player
   [17/03/2005|09:17] C:\Program Files\Windows NT
   [17/03/2005|09:19] C:\Program Files\WindowsUpdate
   [17/03/2005|09:21] C:\Program Files\xerox
   [29/11/2005|23:57] C:\Program Files\Yahoo!
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [29/03/2008|19:20] C:\Program Files\Fichiers communs\.
   [29/03/2008|19:20] C:\Program Files\Fichiers communs\..
   [18/03/2005|09:11] C:\Program Files\Fichiers communs\Adobe
   [02/09/2005|20:54] C:\Program Files\Fichiers communs\Designer
   [27/06/2007|19:35] C:\Program Files\Fichiers communs\InstallShield
   [17/03/2005|09:30] C:\Program Files\Fichiers communs\Java
   [07/03/2007|22:23] C:\Program Files\Fichiers communs\Microsoft Shared
   [17/03/2005|09:19] C:\Program Files\Fichiers communs\MSSoap
   [17/03/2005|10:13] C:\Program Files\Fichiers communs\ODBC
   [20/09/2005|22:50] C:\Program Files\Fichiers communs\Real
   [27/06/2007|19:35] C:\Program Files\Fichiers communs\ScanSoft Shared
   [17/03/2005|09:19] C:\Program Files\Fichiers communs\Services
   [24/06/2007|16:44] C:\Program Files\Fichiers communs\Sony Shared
   [17/03/2005|10:13] C:\Program Files\Fichiers communs\SpeechEngines
   [15/02/2007|20:28] C:\Program Files\Fichiers communs\SWF Studio
   [04/02/2006|17:47] C:\Program Files\Fichiers communs\Symantec Shared
   [14/06/2007|18:25] C:\Program Files\Fichiers communs\System
   [29/03/2008|19:20] C:\Program Files\Fichiers communs\Wise Installation Wizard
   [20/09/2005|22:50] C:\Program Files\Fichiers communs\xing shared

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-03-30 22:55:57
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden files ...
   scan completed successfully
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   Aucune autre infection trouvée  !

   /!\ [Fich:5][Doss:3] C:\DOCUME~1\Caro\LOCALS~1\Temp
   /!\ [Fich:1068][Doss:0] C:\DOCUME~1\Caro\Cookies
   /!\ [Fich:16016][Doss:22] C:\DOCUME~1\Caro\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 22:56:24,84  ]----------------------











Scan Hijack this numéro 2

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:59:35, on 30/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Sony\WALKMAN Launcher\WMAAD.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Savvy TV\DTV Service.exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\WINDOWS\DvzCommon\DvzMsgr.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\msagent\AgentSvr.exe
C:\Documents and Settings\Caro\Mes documents\ANTIVI\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WMAAD] C:\Program Files\Sony\WALKMAN Launcher\WMAAD.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [Savvy DTV Service] C:\Program Files\Savvy TV\DTV Service.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Startup: WkCalRem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: DataViz Messenger.lnk = C:\WINDOWS\DvzCommon\DvzMsgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Transfert par Image Converter 3 - C:\PROGRAM FILES\SONY\IMAGE CONVERTER 3\menu.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://carolinecran.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www4.photoweb.fr/telechargement/Photoweb_uploader.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/fr/fr/importer/ImageUploader4.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\ICScsiSV.exe
O23 - Service: IcVzMonLauncher - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMonLauncher.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMon.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

ludsfa · Answer

ok ,
ce n'est rien avast réagit vis à vis du logiciel mais ce n'est rien donc pas de soucis.
as tu d'autre problème?
si tu veux tu peux télécharger CCleaner pour nettoyer ta base de registre et tes cookies d'internet.
Ce logiciel est très intéressant je te le conseille.
Sinon pas de prob ton hijack est propre.

Spyware secure non installé mais pop up...

7 réponses

Discussions similaires