Google ne marche plus, virus ?
Fermé
Bonjour,
Depuis hier, Google ne marche plus chez moi : la page s'affiche mais lorsque je fais une recherche, les résultats ne s'affichent pas. J'ai également remarqué que le site skyblog.com ne veut plus se charger, je ne sais pas si il y a un point commun entre les deux, mais c'est assez ennuyeux.
Il ne marche pas non plus sur internet explorer, et marche sur l'autre ordinateur que j'ai, j'ai donc pensé à un virus.
J'ai suivi la procédure de désinfection basique, je vous poste les logs, en vous remerciant sincèrement de regarder tout ça :
-Scan AVG Antispyware :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 14:57:34 14/04/2008
+ Résultat de l'analyse:
HKLM\SOFTWARE\Classes\WR -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-2220064538-3559207542-546451553-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Auron\Local Settings\Temp\removalfile.bat -> Not-A-Virus.Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
:mozilla.12:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.14:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.94:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.51:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.53:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.54:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.55:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.109:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@bfast[1].txt -> TrackingCookie.Bfast : Nettoyé.
:mozilla.23:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.42:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Auron\Cookies\auron@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.104:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.74:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.75:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.76:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.61:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.69:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Lop : Nettoyé.
:mozilla.24:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.60:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.17:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.36:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.37:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.38:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.39:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.40:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.112:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.11:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.12:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.13:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.14:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.15:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.83:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.96:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.97:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.58:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.59:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
Fin du rapport
-Scan BitDefender :
C:\Documents and Settings\pi\Bureau\spywarsecure-setup.exe
Detected with: Adware.Generic.10092
C:\Documents and Settings\pi\Bureau\spywarsecure-setup.exe
Deleted
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP737\A0139463.exe
Infected with: Trojan.Downloader.Agent.ZEX
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP737\A0139463.exe
Disinfection failed
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP737\A0139463.exe
Deleted
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP738\A0139803.exe
Detected with: Adware.Generic.10092
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP738\A0139803.exe
Deleted
C:\WINDOWS\mrofinu572.exe
Infected with: Trojan.Downloader.Agent.ZEX
C:\WINDOWS\mrofinu572.exe
Disinfection failed
C:\WINDOWS\mrofinu572.exe
Deleted
C:\WINDOWS\mrofinu572.exe.tmp
Infected with: Trojan.Downloader.Agent.ZEX
C:\WINDOWS\mrofinu572.exe.tmp
Disinfection failed
C:\WINDOWS\mrofinu572.exe.tmp
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0006
Detected with: Adware.NaviPromo.BYC
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0006
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)
Update failed
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
Detected with: Adware.NaviPromo.BYC
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)
Update failed
C:\WINDOWS\SYSTEM32\iifdbXNE.dll
Infected with: Trojan.Vundo.EGL
C:\WINDOWS\SYSTEM32\iifdbXNE.dll
Deleted
C:\WINDOWS\SYSTEM32\pac.txt
Infected with: Trojan.Downloader.VB.VPG
C:\WINDOWS\SYSTEM32\pac.txt
Deleted
C:\WINDOWS\SYSTEM32\wvUkJyYo.dll
Infected with: Trojan.Vundo.EGL
C:\WINDOWS\SYSTEM32\wvUkJyYo.dll
Disinfection failed
C:\WINDOWS\SYSTEM32\wvUkJyYo.dll
Delete failed
-Rapport HiJackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:44:44, on 14/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\UAService7.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mbxzayshkzbdqt.com//nKzoxJgnVVH1qj5Oa/tCE2V2DovWvJRchc1jvRDduOOwcNXnsVijDXOFky2C9Zz.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.huogmvktvcirox.net//nKzoxJgnVWT0f076eW77z3xumpsvnAGl9ZFSPDt38A.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.dell.com/en-ca
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.dell.com/en-ca
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: (no name) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [esvyzv] c:\windows\system32\esvyzv.exe esvyzv
O4 - HKLM\..\Run: [BM6bfbb98c] Rundll32.exe "C:\WINDOWS\system32\qpoadsvh.dll",s
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TVAgent WiFi] D:\Fr_wifi_main\tools\Agent_WiFi.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Pixoria\Konfabulator\YahooWidgetEngine.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Wireless Client Manager.lnk = ?
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.amaena.com
O15 - Trusted Zone: *.onerateld.com
O15 - Trusted Zone: *.amaena.com (HKLM)
O15 - Trusted Zone: *.onerateld.com (HKLM)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
Depuis hier, Google ne marche plus chez moi : la page s'affiche mais lorsque je fais une recherche, les résultats ne s'affichent pas. J'ai également remarqué que le site skyblog.com ne veut plus se charger, je ne sais pas si il y a un point commun entre les deux, mais c'est assez ennuyeux.
Il ne marche pas non plus sur internet explorer, et marche sur l'autre ordinateur que j'ai, j'ai donc pensé à un virus.
J'ai suivi la procédure de désinfection basique, je vous poste les logs, en vous remerciant sincèrement de regarder tout ça :
-Scan AVG Antispyware :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 14:57:34 14/04/2008
+ Résultat de l'analyse:
HKLM\SOFTWARE\Classes\WR -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-2220064538-3559207542-546451553-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Auron\Local Settings\Temp\removalfile.bat -> Not-A-Virus.Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
:mozilla.12:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.14:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.94:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.51:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.53:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.54:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.55:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.109:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@bfast[1].txt -> TrackingCookie.Bfast : Nettoyé.
:mozilla.23:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.42:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Auron\Cookies\auron@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.104:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.74:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.75:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.76:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.61:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.69:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Lop : Nettoyé.
:mozilla.24:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.60:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.17:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.36:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.37:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.38:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.39:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.40:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.112:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.11:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.12:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.13:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.14:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.15:C:\Documents and Settings\Auron\Application Data\Mozilla\Firefox\Profiles\mbfr7h2s.default\cookies.txt -> TrackingCookie.Trafficmp : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.83:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\pi\Cookies\pi@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.96:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.97:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.58:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.59:C:\Documents and Settings\pi\Application Data\Mozilla\Firefox\Profiles\73rlp3ow.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
Fin du rapport
-Scan BitDefender :
C:\Documents and Settings\pi\Bureau\spywarsecure-setup.exe
Detected with: Adware.Generic.10092
C:\Documents and Settings\pi\Bureau\spywarsecure-setup.exe
Deleted
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP737\A0139463.exe
Infected with: Trojan.Downloader.Agent.ZEX
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP737\A0139463.exe
Disinfection failed
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP737\A0139463.exe
Deleted
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP738\A0139803.exe
Detected with: Adware.Generic.10092
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP738\A0139803.exe
Deleted
C:\WINDOWS\mrofinu572.exe
Infected with: Trojan.Downloader.Agent.ZEX
C:\WINDOWS\mrofinu572.exe
Disinfection failed
C:\WINDOWS\mrofinu572.exe
Deleted
C:\WINDOWS\mrofinu572.exe.tmp
Infected with: Trojan.Downloader.Agent.ZEX
C:\WINDOWS\mrofinu572.exe.tmp
Disinfection failed
C:\WINDOWS\mrofinu572.exe.tmp
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0006
Detected with: Adware.NaviPromo.BYC
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0006
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)
Update failed
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
Detected with: Adware.NaviPromo.BYC
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)
Update failed
C:\WINDOWS\SYSTEM32\iifdbXNE.dll
Infected with: Trojan.Vundo.EGL
C:\WINDOWS\SYSTEM32\iifdbXNE.dll
Deleted
C:\WINDOWS\SYSTEM32\pac.txt
Infected with: Trojan.Downloader.VB.VPG
C:\WINDOWS\SYSTEM32\pac.txt
Deleted
C:\WINDOWS\SYSTEM32\wvUkJyYo.dll
Infected with: Trojan.Vundo.EGL
C:\WINDOWS\SYSTEM32\wvUkJyYo.dll
Disinfection failed
C:\WINDOWS\SYSTEM32\wvUkJyYo.dll
Delete failed
-Rapport HiJackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:44:44, on 14/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\UAService7.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mbxzayshkzbdqt.com//nKzoxJgnVVH1qj5Oa/tCE2V2DovWvJRchc1jvRDduOOwcNXnsVijDXOFky2C9Zz.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.huogmvktvcirox.net//nKzoxJgnVWT0f076eW77z3xumpsvnAGl9ZFSPDt38A.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.dell.com/en-ca
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.dell.com/en-ca
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: (no name) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [esvyzv] c:\windows\system32\esvyzv.exe esvyzv
O4 - HKLM\..\Run: [BM6bfbb98c] Rundll32.exe "C:\WINDOWS\system32\qpoadsvh.dll",s
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TVAgent WiFi] D:\Fr_wifi_main\tools\Agent_WiFi.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Pixoria\Konfabulator\YahooWidgetEngine.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Wireless Client Manager.lnk = ?
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.amaena.com
O15 - Trusted Zone: *.onerateld.com
O15 - Trusted Zone: *.amaena.com (HKLM)
O15 - Trusted Zone: *.onerateld.com (HKLM)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
A voir également:
- Google ne marche plus, virus ?
- Google maps satellite - Guide
- Dns google - Guide
- Google earth - Télécharger - 3D
- Google - Guide
- Créer un compte google - Guide