Virus
Résolu
axelaxel
Messages postés
11
Statut
Membre
-
cedric241 Messages postés 3380 Statut Membre -
cedric241 Messages postés 3380 Statut Membre -
Bonjour,
j'ai des virus sur mon ordinateur mais je narivent pas a les enlever comment faire
j'ai des virus sur mon ordinateur mais je narivent pas a les enlever comment faire
A voir également:
- Virus
- Virus mcafee - Accueil - Piratage
- Virus facebook demande d'amis - Accueil - Facebook
- Virus informatique - Guide
- Panda anti virus gratuit - Télécharger - Antivirus & Antimalwares
- Undisclosed-recipients virus - Guide
8 réponses
saliut fais ceci stp :
Télécharge HijackThis ici :
-> https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
Tutoriel d´instalation : (Merci a Balltrap34 pour cette réalisation)
-> http://pageperso.aol.fr/balltrap34/Hijenr.gif
Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)
-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm
Post le rapport généré ici stp...
Télécharge HijackThis ici :
-> https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
Tutoriel d´instalation : (Merci a Balltrap34 pour cette réalisation)
-> http://pageperso.aol.fr/balltrap34/Hijenr.gif
Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)
-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm
Post le rapport généré ici stp...
ouvre hijackthis
clic sur do a system scan and save a logfile
puis copiie colle le rapport du bloc note dans ta prochaine réponse
clic sur do a system scan and save a logfile
puis copiie colle le rapport du bloc note dans ta prochaine réponse
telecharge et instal btfix sur ce lien :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/40698.html
puis lance la recherche et supprime
poste moi le rapport s il te plait
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/40698.html
puis lance la recherche et supprime
poste moi le rapport s il te plait
oui mais c est pas fini
poste moi le rapport btfix stp
poste moi le rapport btfix stp
BTFix 1.098 (par bibi26) - 21/04/2008 14:45:50 - Nettoyage - Mode normal
Lancé depuis C:\Documents and Settings\el abidi samira\Bureau\BTFix\BTFix\BTFix.exe
---> Fichiers/dossiers supprimés (Première passe)
- Fichiers temporaires effacés
- [Spécial : AdRotator] C:\WINDOWS\system32\bitsprx4.dll
- C:\WINDOWS\msbb.exe
- C:\Program Files\Hotbar\bin\10.0.412.0\firefox\extensions\components\
- C:\Program Files\Hotbar\bin\10.0.412.0\firefox\extensions\plugins\
- C:\Program Files\Hotbar\bin\10.0.412.0\firefox\extensions\
- C:\Program Files\Hotbar\bin\10.0.412.0\firefox\
- C:\Program Files\Hotbar\bin\10.0.412.0\
- C:\Program Files\Hotbar\bin\
- C:\Program Files\Hotbar\
- C:\Program Files\GamesBar\
- C:\Program Files\Mozilla Firefox\components\npclntax.xpt
- C:\Program Files\Mozilla Firefox\plugins\npclntax_HotbarSA.dll
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\eskin\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\IESkins\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\dynamic\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\static\1\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\static\2\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\static\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\dynamic\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\static\1\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\static\2\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\static\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostWD\static\1\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostWD\static\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostWD\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\dynamic\344stat\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\dynamic\ustat\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\dynamic\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\static\1\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\static\2\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\static\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar_Icons\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\Weather\WeatherDPA\Weather_XML\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\Weather\WeatherDPA\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\Weather\Weather_XML\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\Weather\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\
- C:\Documents and Settings\All Users\Application Data\HotbarSA\
- C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65\
- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Hotbar\
---> Nettoyage terminé le 21/04/2008 14:48:15
Lancé depuis C:\Documents and Settings\el abidi samira\Bureau\BTFix\BTFix\BTFix.exe
---> Fichiers/dossiers supprimés (Première passe)
- Fichiers temporaires effacés
- [Spécial : AdRotator] C:\WINDOWS\system32\bitsprx4.dll
- C:\WINDOWS\msbb.exe
- C:\Program Files\Hotbar\bin\10.0.412.0\firefox\extensions\components\
- C:\Program Files\Hotbar\bin\10.0.412.0\firefox\extensions\plugins\
- C:\Program Files\Hotbar\bin\10.0.412.0\firefox\extensions\
- C:\Program Files\Hotbar\bin\10.0.412.0\firefox\
- C:\Program Files\Hotbar\bin\10.0.412.0\
- C:\Program Files\Hotbar\bin\
- C:\Program Files\Hotbar\
- C:\Program Files\GamesBar\
- C:\Program Files\Mozilla Firefox\components\npclntax.xpt
- C:\Program Files\Mozilla Firefox\plugins\npclntax_HotbarSA.dll
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\eskin\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\IESkins\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\dynamic\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\static\1\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\static\2\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\static\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOI\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\dynamic\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\static\1\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\static\2\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\static\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostOL\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostWD\static\1\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostWD\static\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\HostWD\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\dynamic\344stat\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\dynamic\ustat\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\dynamic\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\static\1\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\static\2\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\static\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\Hotbar\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\v3.0\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar\
- C:\Documents and Settings\el abidi samira\Application Data\Hotbar_Icons\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\Weather\WeatherDPA\Weather_XML\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\Weather\WeatherDPA\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\Weather\Weather_XML\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\Weather\
- C:\Documents and Settings\el abidi samira\Application Data\WeatherDPA\
- C:\Documents and Settings\All Users\Application Data\HotbarSA\
- C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65\
- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Hotbar\
---> Nettoyage terminé le 21/04/2008 14:48:15
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
ok il a rien trouvé
fais ça :
Fais un scan avec cet antispyware :
Telecharge malwarebytes + tutoriel :
-> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Tu l´instale; le programme va se mettre automatiquement a jour.
Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".
Click maintenant sur l´onglet recherche et coche la case : "executer un examun complet".
Puis click sur "rechercher".
Laisse le scanner le pc...
Si des elements on ete trouvés > click sur supprimer la selection.
si il t´es demandé de redemarrer > click sur "yes".
A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
Copie et colle le rapport stp.
fais ça :
Fais un scan avec cet antispyware :
Telecharge malwarebytes + tutoriel :
-> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Tu l´instale; le programme va se mettre automatiquement a jour.
Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".
Click maintenant sur l´onglet recherche et coche la case : "executer un examun complet".
Puis click sur "rechercher".
Laisse le scanner le pc...
Si des elements on ete trouvés > click sur supprimer la selection.
si il t´es demandé de redemarrer > click sur "yes".
A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
Copie et colle le rapport stp.
Scan saved at 14:40:20, on 21/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Plus\Dancer\Dancer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\MessengerSkinner\MessengerSkinner.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\UberIcon\UberIcon Manager.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.BIN
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
c:\documents and settings\el abidi samira\local settings\application data\pmybshtyt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hotbar\bin\10.0.412.0\Srv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Documents and Settings\el abidi samira\Bureau\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://resultsmaster.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Hacked by Godzilla
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Hotbar /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B9499803B2A2303766A - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Hotbar\bin\10.0.412.0\HostIE.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Hotbar - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Hotbar\bin\10.0.412.0\HostIE.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [Spyware-Secure] C:\Program Files\Spyware-Secure\Spyware-Secure_trial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Dancer] "C:\Program Files\Windows Plus\Dancer\Dancer.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [messengerskinner] C:\Program Files\MessengerSkinner\MessengerSkinner.exe
O4 - HKCU\..\Run: [fimmne] c:\documents and settings\el abidi samira\local settings\application data\fimmne.exe fimmne
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [UberIcon] "C:\Program Files\UberIcon\UberIcon Manager.exe"
O4 - HKCU\..\Run: [pmybshtyt] c:\documents and settings\el abidi samira\local settings\application data\pmybshtyt.exe pmybshtyt
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: BoontyBox BoontyGames.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Startup: StarOffice 8.lnk = C:\Program Files\Sun\StarOffice 8\program\quickstart.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
O16 - DPF: {1F831FA7-42FC-11D4-95A6-0080AD30DCE1} (InstaFred) - file://C:\Program Files\AutoCAD 2002 Fra\InstFred.ocx
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {AE563727-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002 Fra\InstBanr.ocx
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/crusher-kiwen.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game05.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://msnfr.oberon-media.com/online2/MSN_INTL_FRANCE/zuma/oberongamesloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} - file://C:\Program Files\AutoCAD 2002 Fra\AcPreview.ocx
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\deskscapes.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Google Desktop Manager 5.7.801.1629 (GoogleDesktopManager-010108-205858) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2