Infection virus trojan downloader help please

Question

onjour, 
J'ai eu un problème sur mon ordi alors j'ai été voir sur les forum et suite a tout ce que j'ai lu j'ai fait un scan Ccleaner jusqu'a ce qu'il n'y ai plus rien puis SDFix (rapport en dessous) AVG antispyware dont le rapport est en dessous puis Bitdefendre en ligne (rapport en dessous) et enfin hijackthis 

Ne sachant pas du tout lire ce genre rapport j'implore votrre aideeeeeeeeee svp.
D'avance merci pour votrre rapidité 

SDFix 

[b]SDFix: Version 1.172 /b 
Run by Clara on 19/04/2008 at 20:44 

Microsoft Windows XP [version 5.1.2600] 
Running From: C:\DOCUME~1\Clara\Bureau\SDFix 

[b]Checking Services /b: 


Restoring Windows Registry Values 
Restoring Windows Default Hosts File 

Rebooting 


[b]Checking Files /b: 

Trojan Files Found: 

C:\WINDOWS\iTunesMusic.exe - Deleted 
C:\WINDOWS
pqtsrak.exe - Deleted 
C:\WINDOWS\pmsoarbf.dll - Deleted 
C:\WINDOWS\qtvglped.dll - Deleted 
C:\WINDOWStqmekwg.exe - Deleted 
C:\WINDOWS\Web\def.htm - Deleted 


Could Not Remove C:\WINDOWS\system32smp 



Removing Temp Files 

[b]ADS Check /b: 



[b]Final Check /b: 

catchme 0.3.1353.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net 
Rootkit scan 2008-04-19 21:02:55 
Windows 5.1.2600 Service Pack 2 NTFS 

scanning hidden processes ... 

scanning hidden services & system hive ... 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] 
"s1"=dword:2df9c43f 
"s2"=dword:110480d0 
"h0"=dword:00000001 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C­53EA4] 
"h0"=dword:00000000 
"khjeh"=hex:af,a8,f2,11,c0,7d,f9,6e,4e,6d,a7,62,cf,81,f1,41,7f,77,48,fe,3f,.. 
"p0"="C:\Program Files\DAEMON Tools\" 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C­53EA4\00000001] 
"khjeh"=hex:6a,0c,25,d2,d5,d8,a2,f8,f9,ca,4d,1b,e5,04,ad,bb,84,c8,57,6a,b5,.. 
"a0"=hex:20,01,00,00,af,65,fa,9a,d4,e1,cd,9c,c3,b5,c0,d3,51,54,fe,7a,31,.. 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C­53EA4\00000001\0Jf40] 
"khjeh"=hex:e1,7a,2f,ee,6c,1a,28,5d,e0,e5,e3,da,a5,5d,ce,fc,bf,b9,54,42,12,.. 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA­4] 
"h0"=dword:00000000 
"khjeh"=hex:af,a8,f2,11,c0,7d,f9,6e,4e,6d,a7,62,cf,81,f1,41,7f,77,48,fe,3f,.. 
"p0"="C:\Program Files\DAEMON Tools\" 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA­4\00000001] 
"khjeh"=hex:6a,0c,25,d2,d5,d8,a2,f8,f9,ca,4d,1b,e5,04,ad,bb,84,c8,57,6a,b5,.. 
"a0"=hex:20,01,00,00,af,65,fa,9a,d4,e1,cd,9c,c3,b5,c0,d3,51,54,fe,7a,31,.. 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA­4\00000001\0Jf40] 
"khjeh"=hex:e1,7a,2f,ee,6c,1a,28,5d,e0,e5,e3,da,a5,5d,ce,fc,bf,b9,54,42,12,.. 

scanning hidden registry entries ... 

scanning hidden files ... 

scan completed successfully 
hidden processes: 0 
hidden services: 0 
hidden files: 0 


[b]Remaining Services /b: 



Authorized Application Key Export: 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpoli­cy\standardprofile\authorizedapplications\list] 
"%ProgramFiles%\AOL 9.0\aol.exe"="%ProgramFiles%\AOL 9.0\aol.exe:*:Enabled:AOL" 
"%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA" 
"%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe:*:Enabled:PANDORA" 
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enable­d:@xpsp2res.dll,-22019" 
"C:\APPS\Inventime\my.exe"="C:\APPS\Inventime\my.exe:*:Enabled:INVENT­IME" 
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0" 
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" 
"C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe"="C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe:*:Enabled:VoipBuster" 
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire" 
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" 
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" 
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe" 
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" 
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe" 
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" 
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" 
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" 
"C:\apps\skype\Phone\Skype.exe"="C:\apps\skype\Phone\Skype.exe:*:En­abled:Skype" 
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpoli­cy\domainprofile\authorizedapplications\list] 
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enable­d:@xpsp2res.dll,-22019" 
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0" 
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" 
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" 
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" 

[b]Remaining Files /b: 

C:\WINDOWS\system32smp Found 

File Backups: - C:\DOCUME~1\Clara\Bureau\SDFix\backups\backups.zip 

[b]Files with Hidden Attributes /b: 

Tue 12 Sep 2006 215 A.SHR --- "C:\BOOT.BAK" 
Tue 31 May 2005 54,384 A..H. --- "C:\Program Files\AOL 9.0\aolphx.exe" 
Tue 31 May 2005 156,784 A..H. --- "C:\Program Files\AOL 9.0\aoltray.exe" 
Tue 31 May 2005 31,344 A..H. --- "C:\Program Files\AOL 9.0\RBM.exe" 
Fri 23 Nov 2007 32,256 A..H. --- "C:\Documents and Settings\Clara\Mes documents\~WRL0001.tmp" 
Tue 5 Jun 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\0a67b6c406b1d7e0f5c1e6f6d44a3f6e\BIT28F.tmp­" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\18b19374451d28a8fbaf1939cf31ff45\BIT292.tmp­" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\22fb973e059470cc1b5d76c4ae605351\BIT296.tmp­" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\26924cbc8132a10b438ce6e2b49d4652\BIT28E.tmp­" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\2769b111678c52099a3b3123b12f2325\BIT293.tmp­" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\30285791903730fbf957a83562db4ff4\BIT290.tmp­" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\9e870549834e2bceb796e44a1e3ac6f5\BIT295.tmp­" 
Fri 16 Nov 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\ad213d081e2675ef87a62c73b8abf209\BIT211.tmp­" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\cb8921d0c7830b2f33c00fa4c8a10d17\BIT291.tmp­" 
Sun 30 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\d77b9b5b8fed23dd91f50d167cce60d3\BIT294.tmp­" 
Mon 11 Jun 2007 93,184 A..H. --- "C:\Documents and Settings\Clara\Mes documents\2006-2007\CC. Montevideo\~WRL1459.tmp" 
Mon 11 Jun 2007 87,552 A..H. --- "C:\Documents and Settings\Clara\Mes documents\2006-2007\CC. Montevideo\~WRL3090.tmp" 
Mon 11 Jun 2007 98,304 A..H. --- "C:\Documents and Settings\Clara\Mes documents\2006-2007\CC. Montevideo\~WRL4042.tmp" 
Tue 31 May 2005 106,496 A..H. --- "C:\Program Files\Fichiers communs\aolshare\shell\fr\shellext.dll" 

[b]Finished!/b 



--------------------------------------------------------- 
AVG Anti-Spyware - Rapport d'analyse 
--------------------------------------------------------- 

+ Créé à: 14:56:48 20/04/2008 

+ Résultat de l'analyse: 



C:\Documents and Settings\Clara\Cookies\clara@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@barcelohotels.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@himedia.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@hotelscom.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@karavel.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@microsoftwlmessengermkt.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@notrefamille.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@prisacom.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@shopping.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@solmeliahotels.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@4.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ads.addynamix[2].txt -> TrackingCookie.Addynamix : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@adrevolver[1].txt -> TrackingCookie.Adrevolver : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@media.adrevolver[3].txt -> TrackingCookie.Adrevolver : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@advertising[4].txt -> TrackingCookie.Advertising : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@adviva[1].txt -> TrackingCookie.Adviva : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@atdmt[3].txt -> TrackingCookie.Atdmt : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@atdmt[4].txt -> TrackingCookie.Atdmt : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@bfast[2].txt -> TrackingCookie.Bfast : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@bluestreak[3].txt -> TrackingCookie.Bluestreak : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@iv2.bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@citi.bridgetrack[2].txt -> TrackingCookie.Bridgetrack : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@casalemedia[2].txt -> TrackingCookie.Casalemedia : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@dealtime[1].txt -> TrackingCookie.Dealtime : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@stat.dealtime[3].txt -> TrackingCookie.Dealtime : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@doubleclick[3].txt -> TrackingCookie.Doubleclick : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@estat[1].txt -> TrackingCookie.Estat : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@fortunecity[1].txt -> TrackingCookie.Fortunecity : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@hit.gemius[1].txt -> TrackingCookie.Gemius : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ehg-adidas.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ehg-adidasus.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ehg-businesslab.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ehg-telecomitalia.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@w104.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[10].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[3].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[4].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[5].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[6].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[7].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[8].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ssl-hints.netflame[9].txt -> TrackingCookie.Netflame : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@overture[1].txt -> TrackingCookie.Overture : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@realmedia[1].txt -> TrackingCookie.Realmedia : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@realmedia[2].txt -> TrackingCookie.Realmedia : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@skype[2].txt -> TrackingCookie.Skype : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@tacoda[2].txt -> TrackingCookie.Tacoda : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@trafficmp[1].txt -> TrackingCookie.Trafficmp : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@argenius.solution.weborama[2].txt -> TrackingCookie.Weborama : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@samsung.solution.weborama[2].txt -> TrackingCookie.Weborama : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@ad.yieldmanager[4].txt -> TrackingCookie.Yieldmanager : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@c5.zedo[1].txt -> TrackingCookie.Zedo : Nettoyé. 
C:\Documents and Settings\Clara\Cookies\clara@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé. 


Fin du rapport 


BitDefender Online Scanner 



Scan report generated at: Sun, Apr 20, 2008 - 16:17:01 





Scan path: C:\;D:\;E:\; 







Statistics 

Time 
01:16:59 

Files 
341440 

Folders 
7885 

Boot Sectors 
3 

Archives 
9782 

Packed Files 
18178 




Results 

Identified Viruses 
1 

Infected Files 
1 

Suspect Files 
0 

Warnings 
0 

Disinfected 
0 

Deleted Files 
1 




Engines Info 

Virus Definitions 
1166665 

Engine build 
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36) 

Scan plugins 
16 

Archive plugins 
41 

Unpack plugins 
7 

E-mail plugins 
6 

System plugins 
5 




Scan Settings 

First Action 
Disinfect 

Second Action 
Delete 

Heuristics 
Yes 

Enable Warnings 
Yes 

Scanned Extensions 
*; 

Exclude Extensions 


Scan Emails 
Yes 

Scan Archives 
Yes 

Scan Packed 
Yes 

Scan Files 
Yes 

Scan Boot 
Yes 

et enfin hijack 


Logfile of Trend Micro HijackThis v2.0.2 
Scan saved at 17:40:16, on 20/04/2008 
Platform: Windows XP SP2 (WinNT 5.01.2600) 
MSIE: Internet Explorer v7.00 (7.00.6000.16640) 
Boot mode: Normal 

Running processes: 
C:\WINDOWS\System32\smss.exe 
C:\WINDOWS\system32\csrss.exe 
C:\WINDOWS\system32\winlogon.exe 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\system32\Ati2evxx.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 
C:\Program Files\Alwil Software\Avast4\ashServ.exe 
C:\WINDOWS\system32\spoolsv.exe 
C:\Program Files\a-squared Free\a2service.exe 
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe 
C:\WINDOWS\system32\Ati2evxx.exe 
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe 
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe 
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe 
C:\Program Files\FreePOPs\freepopsservice.exe 
C:\Program Files\FreePOPs\freepopsd.exe 
C:\WINDOWS\system32\svchost.exe 
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe 
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe 
c:\APPS\Powercinema\Kernel\TV\CLSched.exe 
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 
C:\WINDOWS\System32\alg.exe 
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe 
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
C:\WINDOWS\SOUNDMAN.EXE 
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe 
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe 
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe 
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe 
C:\APPS\Powercinema\PCMService.exe 
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
C:\WINDOWS\system32\wscntfy.exe 
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe 
C:\Program Files\iTunes\iTunesHelper.exe 
C:\WINDOWS\system32undll32.exe 
C:\Program Files\iPod\bin\iPodService.exe 
C:\APPS\SMP\SmpSys.exe 
C:\WINDOWS\system32\ctfmon.exe 
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
C:\WINDOWS\system32\vovubodc.exe 
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe 
C:\Program Files\Internet Explorer\iexplore.exe 
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe 
C:\WINDOWS\explorer.exe 
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe 
C:\WINDOWS\system32\wbem\wmiprvse.exe 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/ 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxy-web.univ-paris4.fr/auto-proxy.pac 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll 
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC 
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName 
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE 
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" 
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe 
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup 
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start 
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe 
O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe" 
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime 
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" 
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized 
O4 - HKLM\..\Run: [543fd6d5] rundll32.exe "C:\WINDOWS\system32\mcesnwoy.dll",b 
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe 
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKCU\..\Run: [xujxthuy] C:\WINDOWS\system32\vovubodc.exe 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') 
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') 
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll 
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll 
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll 
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe 
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe 
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL 
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll 
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe 
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe 
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm 
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by133fd.bay133.hotmail.msn.com/resources/MsnPUpld.cab 
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab 
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL 
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe 
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe 
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe 
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe 
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe 
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe 
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe 
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe 
O23 - Service: FreePOPs - Unknown owner - C:\Program Files\FreePOPs\freepopsservice.exe 
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe 
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe 
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe 
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe 

End of file - 10736 bytes 


j'ai aussi, au lieu de mon fond d'écran habituel un joli bleu accompagné du texte suivant 

"Warning ! Spyware threat has been detected on your PC. 
Your computer has several fatal errors due to spyware activity. 
etc.." 

Régulièrement des bulles en anglais surgissent de la barre des tâches pour me dire que mon pc est infecté etc... Et quand je clique dessus, cela me renvoie à une page où je peux acheter des anti-spyware (top rated anti-spyware). 
et des fenetres s'ouvrent quand je suis sur IE et proposent des jeux en ligne aussi

jeremy · Answer

salut, telecharge Spyware terminator, fait un scan complet et reposte le rapport

voici le lien pour le telecharger

https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/41933.html

SteveF · Answer

voila le raport de spyware termnator....

Logfile of Spyware Terminator v2.2.0.411 (db:2.004.022.001)
Scan Time: 23/04/2008 00:09:37 length: 3029 s
Platform: WXP (5.1.0.2600)
User: Admin
Boot Mode: Normal
Scan type: Full_Virus__Spyware_Scan
Scanned Objects: 104174 (Critical:11)
Filter: No System items, No Safe items, No Invalid items

Running Processes
Ati2evxx.exe [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
aswUpdSv.exe [ALWIL Software] : C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
ashServ.exe [ALWIL Software] : C:\Program Files\Alwil Software\Avast4\ashServ.exe
Ati2evxx.exe [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
a2service.exe [Emsi Software GmbH] : C:\Program Files\a-squared Free\a2service.exe
AOLacsd.exe [America Online, Inc.] : C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
AppleMobileDeviceService.exe [Apple, Inc.] : C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
CLCapSvc.exe : C:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
CLMLServer.exe [Cyberlink] : C:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
freepopsservice.exe : C:\Program Files\FreePOPs\freepopsservice.exe
freepopsd.exe : C:\Program Files\FreePOPs\freepopsd.exe
ULCDRSvr.exe [Ulead Systems, Inc.] : C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
USBDeviceService.exe : C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
CLSched.exe : C:\APPS\Powercinema\Kernel\TV\CLSched.exe
DetectorApp.exe : C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
issch.exe [InstallShield Software Corporation] : C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
monitor.exe [Ulead Systems, Inc.] : C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
PCMService.exe [CyberLink Corp.] : C:\APPS\Powercinema\PCMService.exe
HPWuSchd2.exe [Hewlett-Packard Development Company, L.P.] : C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
avgas.exe [GRISOFT s.r.o.] : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
SmpSys.exe [Packard Bell BV] : C:\APPS\SMP\SmpSys.exe
GoogleToolbarNotifier.exe [Google Inc.] : C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
vovubodc.exe : C:\WINDOWS\system32\vovubodc.exe
iPodService.exe [Apple Inc.] : C:\Program Files\iPod\bin\iPodService.exe
WLLoginProxy.exe [Microsoft Corporation] : C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe

Internet Settings
R - HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
R - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain =
R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName =

BHO
02 - BHO: - {6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3} - : C:\WINDOWS\system32\byXQIApM.dll
02 - BHO: - {7D706C2D-A654-4388-8E00-B6512E5EECC1} - : C:\WINDOWS\system32\khfccYOf.dll
02 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - [Google Inc.] : C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll

StartUps
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SmpcSys : [Packard Bell BV] : C:\APPS\SMP\SmpSys.exe
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, swg : [Google Inc.] : C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xujxthuy : : C:\WINDOWS\system32\vovubodc.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DetectorApp : : C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ISUSPM Startup : [InstallShield Software Corporation] : C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ISUSScheduler : [InstallShield Software Corporation] : C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ulead AutoDetector v2 : [Ulead Systems, Inc.] : C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCMService : [CyberLink Corp.] : C:\APPS\Powercinema\PCMService.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HP Software Update : [Hewlett-Packard Development Company, L.P.] : C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Adobe Reader Speed Launcher : [Adobe Systems Incorporated] : C:\Program Files\ADOBE\READER 8.0\READER\READER_SL.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, !AVG Anti-Spyware : [GRISOFT s.r.o.] : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 543fd6d5 : : C:\WINDOWS\system32\rkwyqdvt.dll

Shell Extensions
- {2F603045-309F-11CF-9774-0020AFD0CFF6} - [Synaptics, Inc.] : C:\Program Files\Synaptics\SynTP\SynTPCpl.dll
Mes dossiers de partage - {FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D} - [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\fsshext.8.5.1302.1018.dll
avast - {472083B0-C522-11CF-8763-00608CC02F24} - [ALWIL Software] : C:\Program Files\Alwil Software\Avast4\ashShell.dll
WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} - : C:\Program Files\WinRAR\rarext.dll
- {06A2568A-CED6-4187-BB20-400B8C02BE5A} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe
Windows Live Photo Gallery Import Autoplay Shim - {00F33137-EE26-412F-8D71-F84E4C2C6625} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
Windows Live Photo Gallery Viewer Shim - {00F346CB-35A4-465B-8B8F-65A29DBAB1F6} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
Windows Live Photo Gallery Editor Shim - {00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
Windows Live Photo Gallery Viewer Autoplay Shim - {00F30F90-3E96-453B-AFCD-D71989ECC2C7} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
CLSID_WLMCMimeFilter - {0563DB41-F538-4B37-A92D-4659049B7766} - [Microsoft Corporation] : C:\Program Files\Windows Live\Mail\mailcomm.dll
iTunes - {B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} - [Apple Inc.] : C:\Program Files\iTunes\iTunesMiniPlayer.dll

Shell Extecute Hooks
- {{6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3}} - : C:\WINDOWS\system32\byXQIApM.dll
CShellExecuteHookImpl Object - {{57B86673-276A-48B2-BAE7-C6DBB3020EB8}} - [GRISOFT s.r.o.] : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll

Protocol Handler
- {828030A1-22C1-4009-854F-8E305202313F} - [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
- {828030A1-22C1-4009-854F-8E305202313F} - [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
IEProtocolHandler Class - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - [Skype Technologies] : C:\Program Files\Fichiers communs\Skype\Skype4COM.dll
Windows Live Mail HTML Asynchronous Pluggable Protocol Handler - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - [Microsoft Corporation] : C:\Program Files\Windows Live\Mail\mailcomm.dll

Services
23 - [Emsi Software GmbH] : C:\Program Files\a-squared Free\a2service.exe
23 - [Realtek Semiconductor Corp.] : C:\WINDOWS\system32\drivers\ALCXWDM.SYS
23 - [America Online, Inc.] : C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
23 - [Apple, Inc.] : C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
23 - [ALWIL Software] : C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys
23 - [ALWIL Software] : C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
23 - [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
23 - [ALWIL Software] : C:\Program Files\Alwil Software\Avast4\ashServ.exe
23 - : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
23 - [GRISOFT, s.r.o.] : C:\WINDOWS\system32\DRIVERS\AvgAsCln.sys
23 - : C:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
23 - : C:\APPS\Powercinema\Kernel\TV\CLSched.exe
23 - [Cyberlink] : C:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
23 - : C:\Program Files\FreePOPs\freepopsservice.exe
23 - [GEAR Software Inc.] : C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSFHWALI.sys
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
23 - [Apple Inc.] : C:\Program Files\iPod\bin\iPodService.exe
23 - [Ralink Technology Inc.] : C:\WINDOWS\system32\DRIVERS\RT2500.sys
23 - : C:\WINDOWS\system32\Drivers\sptd.sys
23 - [Synaptics, Inc.] : C:\WINDOWS\system32\DRIVERS\SynTP.sys
23 - [Ulead Systems, Inc.] : C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
23 - [ULi Electronics Inc.] : C:\WINDOWS\system32\DRIVERS\ULILAN.SYS
23 - [Promise Technology, Inc.] : C:\WINDOWS\system32\DRIVERS\ultra.sys
23 - : C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
23 - [America Online, Inc.] : C:\WINDOWS\system32\DRIVERS\wanatw4.sys
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys

Winlogon Notify
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent, DLLName : [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.dll
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\byXQIApM, DLLName : : C:\WINDOWS\system32\byXQIApM.dll

Threat Files
<E-Worm.W32.NetSky.QFQ> : C:\WINDOWS\FVProtect.exe
<E-Worm.W32.NetSky.QFQ> : C:\WINDOWS\userconfig9x.dll

Advanced Files Report
%SYSDIR%\Ati2evxx.dll [ATI Technologies Inc.] [ATI External Event Utility for NT, W2K and W9X] MD5=A39DEF8014F0BD2CFAB17F2979F8F258 SIZE=46080
%SYSDIR%\Ati2evxx.exe [ATI Technologies Inc.] [ATI External Event Utility for WindowsNT and Windows9X] MD5=E80F594B19207B4594626839FDAFBBB5 SIZE=364544
%SYSDIR%\Ati2edxx.dll [ATI Technologies, Inc.] [ATI External Device Utility] MD5=56B092D35939958972EC17F322FE6C4E SIZE=39936
%PROGRAMFILES%\Alwil Software\Avast4\aswUpdSv.exe [ALWIL Software] [avast! Antivirus] MD5=3CA72CEA90DF8DA569D35CEC89676749 SIZE=17272
%PROGRAMFILES%\Alwil Software\Avast4\aswCmnS.dll [ALWIL Software] [avast! Antivirus] MD5=8E8CDBD061A3706A43DFC9167552446C SIZE=192512
%PROGRAMFILES%\Alwil Software\Avast4\aswCmnOS.dll [ALWIL Software] [avast! Antivirus] MD5=A8FECB2B0959ADB867BC9BB181A2692E SIZE=86016
%PROGRAMFILES%\Alwil Software\Avast4\aswCmnB.dll [ALWIL Software] [avast! Antivirus] MD5=94C24A7479241CF3A529B5CE2C041273 SIZE=126976
%PROGRAMFILES%\Alwil Software\Avast4\ashServ.exe [ALWIL Software] [avast! Antivirus] MD5=6A0A14F60654DF588F55160CB1B6DA8D SIZE=144760
%PROGRAMFILES%\Alwil Software\Avast4\aswAux.dll [ALWIL Software] [avast! Antivirus] MD5=F2C4C61959450FFDDC97FA7622C3B98F SIZE=659456
%PROGRAMFILES%\Alwil Software\Avast4\aswEngin.dll [ALWIL Software] [avast! Antivirus] MD5=FFF631E22CBB3476ABB55845472CCA16 SIZE=1224704
%PROGRAMFILES%\Alwil Software\Avast4\aswScan.dll [ALWIL Software] [avast! Antivirus] MD5=6EA6E65AF6E4E8EC917C6E59A148CC45 SIZE=81920
%PROGRAMFILES%\Alwil Software\Avast4\ashBase.dll [ALWIL Software] [avast! Antivirus] MD5=834BEB7644F95BF8C949AD4DCA0794A3 SIZE=225280
%PROGRAMFILES%\Alwil Software\Avast4\ashTask.dll [ALWIL Software] [avast! Antivirus] MD5=63E8362908FCDD99ED46D04E662968D8 SIZE=114688
%PROGRAMFILES%\Alwil Software\Avast4\aswInteg.dll [ALWIL Software] [avast! Antivirus] MD5=CD01CCBF9DAB74704FE7FCF7188B70B2 SIZE=22528
%PROGRAMFILES%\Alwil Software\Avast4\aswIdle.dll [ALWIL Software] [avast! Antivirus] MD5=4BDA42ABFBFB80592D063567E2D69074 SIZE=10104
%PROGRAMFILES%\Alwil Software\Avast4\Aavm4h.dll [ALWIL Software] [avast! Antivirus] MD5=AC64A27497266FDEA8D5C11D427FE932 SIZE=212992
%PROGRAMFILES%\Alwil Software\Avast4\French\Base.dll [ALWIL Software] [avast! Antivirus] MD5=04B6A8E4692086F58FF04844D946A707 SIZE=98304
%PROGRAMFILES%\Alwil Software\Avast4\AhResMai.dll [ALWIL Software] [avast! Antivirus] MD5=73E29E045C178783E1A70C5A5F199DC0 SIZE=35840
%PROGRAMFILES%\Alwil Software\Avast4\ahResMes.dll [ALWIL Software] [avast! Antivirus] MD5=4F6F570036B80CBA232D9690F05B9480 SIZE=32768
%PROGRAMFILES%\Alwil Software\Avast4\AhResNS.dll [ALWIL Software] [avast! Antivirus] MD5=20DC464DAF3E2BC3BC2DF53ECB910236 SIZE=31744
%PROGRAMFILES%\Alwil Software\Avast4\AhResOut.dll [ALWIL Software] [avast! Antivirus] MD5=67D9BA5625C581E5388CACD5CC21C6AB SIZE=29696
%PROGRAMFILES%\Alwil Software\Avast4\ahResP2P.dll [ALWIL Software] [avast! Antivirus] MD5=C1D1B4C9F5EE38824ACE8882BED255DB SIZE=32768
%PROGRAMFILES%\Alwil Software\Avast4\AhResStd.dll [ALWIL Software] [avast! Antivirus] MD5=81CBD442714E8EF04F90A5E39972D98F SIZE=43008
%PROGRAMFILES%\Alwil Software\Avast4\AhResWS.dll [ALWIL Software] [avast! Antivirus] MD5=2C224641FED631A4F9ACCD2D315C7166 SIZE=53248
%PROGRAMFILES%\Alwil Software\Avast4\ashSSqlt.dll [ALWIL Software] [avast! Antivirus] MD5=2CCA65B7B88839257B71F37B1B1C0352 SIZE=233472
%PROGRAMFILES%\Alwil Software\Avast4\aswRes.dll [ALWIL Software] [avast! Antivirus] MD5=652AAB7E654497D0D4A34C37D2EA97E5 SIZE=143360
%SYSDIR%\hpz3l054.dll [Hewlett-Packard Company] [Language Monitor] MD5=FDB859F93C8491F961C3B9168FA90F51 SIZE=38400
%PROGRAMFILES%\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [GRISOFT s.r.o.] [AVG Anti-Spyware] MD5=3FD0B984601D65C6DA8E891A0D5905D1 SIZE=79408
%SYSDIR%\SynTPFcs.dll [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=36BDA1F49B1D6CC88DEC908E48129300 SIZE=69724
%SYSDIR%\uyunstjl.dll MD5=1EC1070D8F3449FBFA8A6612D4E1C3DD SIZE=88128
%PROGRAMFILES%\a-squared Free\a2service.exe [Emsi Software GmbH] [a-squared] MD5=4F87E68E1F5B1C45F2EC10A2AFFB745E SIZE=369272
%COMMONFILES%\AOL\ACS\AOLacsd.exe [America Online, Inc.] [AOL Connectivity Service] MD5=E13406F701A9B2A7513CD6798A40CECB SIZE=1135728
%COMMONFILES%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [Apple, Inc.] [Apple Mobile Device Service] MD5=69DA2BB73AC426CDEEBDACC68438BA3D SIZE=110592
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\CLCapSvc.exe [CLCapSvc Module] MD5=620327CE4636AD2AEF30137EA66D8703 SIZE=266338
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\CLCapEngine.dll [CLCapEngine Dynamic Link Library] MD5=A849941473EE693F8858DFD8B819A84C SIZE=225384
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\PCMRRec4.dll [CyberLink Corp.] [CyberLink CLRec4.1] MD5=391A11C59FEA6DE8FCBBE3E2AEF2A850 SIZE=2867270
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\CLCapSvcps.dll MD5=04623A00619F4EE1A2246641F21748E2 SIZE=32768
%SystemDiskRoot%\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe [Cyberlink] [Cyberlink Media Library Server] MD5=1CFDCB99812C62E19C47896A5857D342 SIZE=1073152
%PROGRAMFILES%\FreePOPs\freepopsservice.exe MD5=C3A7DFA9D39B915161BABBF965EC02E9 SIZE=10752
%PROGRAMFILES%\FreePOPs\freepopsd.exe MD5=42F633FE1C5765A3CD2BD63FB0DC0589 SIZE=31232
%PROGRAMFILES%\FreePOPs\libcurl.dll MD5=A256E76C95940AB6CF23CA171943FD7E SIZE=156672
%PROGRAMFILES%\FreePOPs\libz.dll MD5=7B778C60BA70339DDCFA6BD1B682D2E3 SIZE=65536
%PROGRAMFILES%\FreePOPs\cryptoeay32.dll MD5=CDA838A8696E6E8A66B83F1DB81226DD SIZE=949248
%PROGRAMFILES%\FreePOPs\ssleay32.dll MD5=1E7A0A6267C49BB49F3210063EC02470 SIZE=176640
%PROGRAMFILES%\FreePOPs\libpthread.dll [Open Source Software community project] MD5=84DF8487B28183BB318CF0B42F574146 SIZE=35840
%PROGRAMFILES%\FreePOPs\libfp.dll MD5=69BB5668455536B439A864417356E045 SIZE=265728
%PROGRAMFILES%\FreePOPs\libexpat.dll MD5=14A620268AFB4DF23FD4F4645EA8B84F SIZE=106496
%COMMONFILES%\Ulead Systems\DVD\ULCDRSvr.exe [Ulead Systems, Inc.] [Ulead Systems ULCDRSvr] MD5=CA90D2C55EB3BB90687677BEA3DB0B59 SIZE=49152
%PROGRAMFILES%\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe [USBDeviceService Module] MD5=B9FE1F943508953C0683AB7F1602E643 SIZE=90112
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\CLSched.exe [CLSched Module] MD5=A71B3E951285C17D93A80F55A6D29066 SIZE=114784
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\CLSchMgr.dll [CLSchMgr Dynamic Link Library] MD5=5817373B98F0847531F836F210B25193 SIZE=65634
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\CLSchedps.dll MD5=B36B74D55348CBDC99101826535778D4 SIZE=24576
%PROGRAMFILES%\Alwil Software\Avast4\French\Lang.dll [ALWIL Software] [avast! Antivirus] MD5=48CEC5D615FCAAE0CC554D0777854D17 SIZE=2564096
%PROGRAMFILES%\Alwil Software\Avast4\French\langmai.dll [ALWIL Software] [avast! Antivirus] MD5=948F40920BABDA01A1ED2214B14CDDC2 SIZE=61440
%PROGRAMFILES%\Alwil Software\Avast4\ashWsFtr.dll [ALWIL Software] [avast! Antivirus] MD5=DE190D08E6416AD4708A63BD53755F51 SIZE=61440
%SYSDIR%\SynCOM.dll [Synaptics, Inc.] [COM SDK] MD5=CF390286E84519B82C6B0BC361BFD2CD SIZE=82015
%SYSDIR%\SynTPAPI.dll [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=4D74A30D6021567DC12D2BAED538DEA4 SIZE=90204
%PROGRAMFILES%\ATI Technologies\ATI Control Panel\atipdsxx.dll [ATI Technologies, Inc.] [ATI Desktop Component] MD5=54BB2C971022CCA07FEC016140CE9096 SIZE=262144
%PROGRAMFILES%\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.FRA [ATI Technologies, Inc.] [ATI Desktop Component] MD5=5DE261C1712F87F2EFAC83ADFEC1846F SIZE=159744
%PROGRAMFILES%\ATI Technologies\ATI Control Panel\atipdxxx.dll [ATI Technologies, Inc.] [ATI Desktop Component] MD5=0D3AB6AD69289F1BDB2A41861AA39AE3 SIZE=73728
%SYSDIR%\PX.dll [Sonic Solutions] [Px] MD5=6D36A8BDAE179F72332D6C8873CA842D SIZE=409600
%PROGRAMFILES%\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorRes_FRA.DLL [DetectorApp Module] MD5=AEBF8A341ADC49958A87007BBB988C2B SIZE=49152
%SYSDIR%\PXDRV.DLL [Sonic Solutions] [Px] MD5=9DCFB47CD02478155CCE19232492C4F1 SIZE=477944
%SYSDIR%\PXMAS.DLL [Sonic Solutions] [Px Mastering Engine] MD5=5BD486BFAD5AC500DD1CE03821925BA5 SIZE=172032
%SYSDIR%\PXSFS.DLL [Sonic Solutions] [Px Streaming Mastering Engine] MD5=2C3B6E56E73666740D268F1C5265068E SIZE=1077248
%SYSDIR%\PXWAVE.DLL [Sonic Solutions] [PxWave] MD5=54D5B3053AFA92B9E04321AEF2B38BBF SIZE=339968
%SYSDIR%\VXBLOCK.DLL [Sonic Solutions] MD5=349DAFDCA38BFD84D992F11A3E949347 SIZE=28672
%COMMONFILES%\Ulead Systems\AutoDetector\u32Comm.dll [Ulead Systems, Inc.] [Ulead PhotoImpact] MD5=10827420088371C5E61FA15D04CE9707 SIZE=131072
%COMMONFILES%\Ulead Systems\AutoDetector\DetMethod.dll [DetMethod Dynamic Link Library] MD5=8589642CE8603B6111F11FD38496F6FC SIZE=28672
%COMMONFILES%\Ulead Systems\AutoDetector\Monitor_Res.dll [Ulead Systems, Inc.] [Ulead AutoDetector] MD5=41051F47CEF3E1D56AE063646CEEFCA6 SIZE=36864
%SystemDiskRoot%\APPS\Powercinema\Kernel\common\CLRCEngine3.dll [CyberLink Corp.] [Cyberlink PowerCinema] MD5=01FFBC88DD30A39A965A00240802874F SIZE=69632
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\CLCapX.dll [Cyberlink] [Cyberlink CLCapX] MD5=D56A6ABFABB0C3370E7D59C292430F2F SIZE=229470
%SystemDiskRoot%\APPS\Powercinema\Kernel\TV\CLAuMixer.dll [CyberLink Corp.] [CyberLink CLAuMixer] MD5=FAB83163023C3B2749CFEC0C52129DEB SIZE=53311
%PROGRAMFILES%\Alwil Software\Avast4\AavmRpch.dll [ALWIL Software] [avast! Antivirus] MD5=48D8145FD48471F5007BC16AE335B8B7 SIZE=20480
%PROGRAMFILES%\alwil software\avast4\ahruimai.dll [ALWIL Software] [avast! Antivirus] MD5=18A94EF6221B9CC1B9EA275F4AF3774B SIZE=65536
%PROGRAMFILES%\Alwil Software\Avast4\ashUInt.dll [ALWIL Software] [avast! Antivirus] MD5=79D96D53F3258505515BB49CDCE33A7A SIZE=315392
%PROGRAMFILES%\Alwil Software\Avast4\XT1922.dll [Codejock Software] [XTToolkit Dynamic Link Library] MD5=1B407E7D97D1F6C5F0EA81CDF9887D30 SIZE=917504
%PROGRAMFILES%\alwil software\avast4\ahruimes.dll [ALWIL Software] [avast! Antivirus] MD5=E87D46A761D30BF0194D5A856C2FC81C SIZE=36864
%PROGRAMFILES%\alwil software\avast4\ahruins.dll [ALWIL Software] [avast! Antivirus] MD5=120FF0CC0EC3079F80DF752DF86272A1 SIZE=36864
%PROGRAMFILES%\alwil software\avast4\ahruiout.dll [ALWIL Software] [avast! Antivirus] MD5=9F3D7133C08BA4359D97EAC948A0178F SIZE=90112
%PROGRAMFILES%\alwil software\avast4\ahruip2p.dll [ALWIL Software] [avast! Antivirus] MD5=6C4B6BF2B6F3B589ACCF224FDE2CA335 SIZE=22016
%PROGRAMFILES%\alwil software\avast4\ahruistd.dll [ALWIL Software] [avast! Antivirus] MD5=F9A39F156D3222BB73426EDB249C584D SIZE=57344
%PROGRAMFILES%\alwil software\avast4\ahruiws.dll [ALWIL Software] [avast! Antivirus] MD5=51A49FD7EEBAB2A3D65459525C7CBF86 SIZE=49152
%PROGRAMFILES%\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.DLL [Apple Inc.] [iTunes] MD5=17365B8D355C062A826D45789C82733A SIZE=43520
%PROGRAMFILES%\iTunes\iTunesHelper.Resources\iTunesHelper.DLL [Apple Inc.] [iTunes] MD5=907F93073C1ADD94A7C6BC4CB1C8129E SIZE=42496
%PROGRAMFILES%\QuickTime\QTSystem\QuickTime.qts [Apple Inc.] [QuickTime] MD5=8FDDED9036E5848FB9DFDB013B6BA763 SIZE=16994304
%COMMONFILES%\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll [Apple Inc.] [iTunesMobileDevice] MD5=2A2920D0EF665A6CCE0DA9C9AAC85777 SIZE=1110016
%PROGRAMFILES%\Google\GoogleToolbarNotifier\2.1.1119.1736\gtn.dll [Google Inc.] [GoogleToolbarNotifier] MD5=6FB97E345D387673D28B9D01BDC49248 SIZE=127472
%SYSDIR%\Macromed\Flash\Flash9e.ocx [Adobe Systems, Inc.] [Shockwave Flash] MD5=D3C50535C26190FEAD7785A03499C0AC SIZE=2987392
%PROGRAMFILES%\iPod\bin\iPodService.exe [Apple Inc.] [iTunes] MD5=1CB96E83FD76EB5580451CEF29E24303 SIZE=504104
%PROGRAMFILES%\iPod\bin\iPodService.Resources\fr.lproj\iPodServiceLocalized.DLL [Apple Inc.] [iTunes] MD5=DD357E4AFDA26FA1B2304D7692E4414B SIZE=43520
%PROGRAMFILES%\iPod\bin\iPodService.Resources\iPodService.DLL [Apple Inc.] [iTunes] MD5=EA1A04BB39E2C7503D29A6E664EAC656 SIZE=42496
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqtra08.rsc [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=C424694DFDE8016EE0F7450C18788406 SIZE=65536
%PROGRAMFILES%\HP\Digital Imaging\bin\hpotra08.dll [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=133601A55D03031BD16DC6732D8EF1D1 SIZE=212992
%PROGRAMFILES%\HP\Digital Imaging\bin\hpotra08.rsc [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=F2D66DFB0C74047993DE0AC80859608C SIZE=28672
%PROGRAMFILES%\HP\Digital Imaging\Unload\hpnkhTA.dll [Hewlett-Packard] [TrayAppPlugin Module] MD5=8E89B72CB355EA260936B3A59B5071A9 SIZE=77824
%SYSDIR%\hpzipr12.dll [HP] [HP PmlRtl] MD5=7AED5B18F7AA64E30BDE6891FCE182B4 SIZE=204800
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqusg.dll [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=A6D7DA27D1DA6337A2C7C97A65ADC460 SIZE=348160
%SYSDIR%\hpzidr12.dll [HP] [HP Dot4Rtl] MD5=2B979217737801C557CA0319621147DD SIZE=282680
%COMMONFILES%\Microsoft Shared\Windows Live\WLLoginProxy.exe [Microsoft Corporation] [Microsoft® Windows Live Login Helper] MD5=7FA0AA2F3DABA5BEB2C4AC1EEC054EFA SIZE=118336
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqSTE08.rsc [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=09ECAF4E40372A014D1A5446983C2148 SIZE=176128
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqstp08.dll [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=63418EB433D986C728982446C6AA3CBA SIZE=139264
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqsem08.rsc [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=86AE256871B8F18DE9E3C49AE3798905 SIZE=696320
%PROGRAMFILES%\HP\Digital Imaging\bin\crm\xmlparse.dll [xmlparse Dynamic Link Library] MD5=A7A0371C6C7F0A02B5668A0F504A23CB SIZE=65536
%PROGRAMFILES%\HP\Digital Imaging\bin\crm\xmltok.dll [xmltok Dynamic Link Library] MD5=6906658F82DE4C3F9538B189D93597C2 SIZE=77824
deskpan.dll
%PROGRAMFILES%\Synaptics\SynTP\SynTPCpl.dll [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=3B5154DF01387C8E6D09B96CB784F89F SIZE=5947484
%PROGRAMFILES%\Windows Live\Messenger\fsshext.8.5.1302.1018.dll [Microsoft Corporation] [Messenger] MD5=8BDE1F61DFBAAE7A2916170E8B75FE0F SIZE=329240
%PROGRAMFILES%\Alwil Software\Avast4\ashShell.dll [ALWIL Software] [avast! Antivirus] MD5=9870BD3840E3A6FF53F62C166E6F4755 SIZE=75128
%PROGRAMFILES%\WinRAR\rarext.dll MD5=023707D932BA31314210E6844D33D500 SIZE=129024
%PROGRAMFILES%\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe [Microsoft Corporation] [Windows Live Photo Gallery] MD5=86C67242AC4ADA2C20D0748157E3ED8C SIZE=227456
%PROGRAMFILES%\Windows Live\Photo Gallery\PhotoViewerShim.dll [Microsoft Corporation] [Windows Live Photo Gallery] MD5=024F4D95154039B2292F4B856A52AB7D SIZE=46112
%SYSDIR%\rundll32.exe "%PROGRAMFILES%\Windows Live\Photo Gallery\WLXPhotoViewer.dll",PhotoViewerComServer {2BE99FD4-A181-4996-BFA9-58C5FFD11F6C}
%SYSDIR%\rundll32.exe "%PROGRAMFILES%\Windows Live\Photo Gallery\WLXPhotoViewer.dll",PhotoViewerComServer {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C}
%SYSDIR%\rundll32.exe "%PROGRAMFILES%\Windows Live\Photo Gallery\WLXPhotoViewer.dll",PhotoViewerComServer {00F374B7-B390-4884-B372-2FC349F2172B}
%PROGRAMFILES%\Windows Live\Mail\mailcomm.dll [Microsoft Corporation] [Messenger] MD5=6A69BEDDD514F21B8A216B85EAF330B5 SIZE=858136
%PROGRAMFILES%\iTunes\iTunesMiniPlayer.dll [Apple Inc.] [iTunes] MD5=CB77693D6E94DA5DF7AA007B0671D42C SIZE=132392
%SYSDIR%\drivers\ALCXWDM.SYS [Realtek Semiconductor Corp.] [Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab)] MD5=9A8AA4DF3999BD7C60B90A4E799B1CD0 SIZE=2310272
%SYSDIR%\DRIVERS\aswFsBlk.sys [ALWIL Software] [avast! Antivirus System] MD5=838255D6EF1CA0A4F6B076F6D3425850 SIZE=20560
%SYSDIR%\svchost.exe -k netsvcs
%PROGRAMFILES%\Grisoft\AVG Anti-Spyware 7.5\guard.sys MD5=D6F4C1450699901048818B0C3AAF7A17 SIZE=11000
%SYSDIR%\DRIVERS\AvgAsCln.sys [GRISOFT, s.r.o.] [AVG7 Clean Driver] MD5=856B0CEE009946BF2D327E6B24FE7E3F SIZE=10872
%SYSDIR%\svchost -k DcomLaunch
%SYSDIR%\svchost.exe -k NetworkService
%SYSDIR%\Drivers\GEARAspiWDM.sys [GEAR Software Inc.] [CD DVD Filter] MD5=5DC17164F66380CBFEFD895C18467773 SIZE=16168
%SYSDIR%\DRIVERS\HSFHWALI.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=4C3B1A18AB9171FC80AEEDE79813015B SIZE=245376
%SYSDIR%\DRIVERS\HSF_DPV.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=6F2249232B55A7FDF0CBD9B2739C0EC5 SIZE=995712
%SYSDIR%\svchost.exe -k LocalService
%SYSDIR%\svchost -k rpcss
%SYSDIR%\DRIVERS\RT2500.sys [Ralink Technology Inc.] [RT2500 802.11g Wireless Adapters] MD5=1B8DA1A14F7E0253D2A4F1A0163A4A37 SIZE=228992
%SYSDIR%\Drivers\sptd.sys SIZE=685816
%SYSDIR%\svchost.exe -k imgsvc
%SYSDIR%\DRIVERS\SynTP.sys [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=1DBC86DA355B5DB35174F862C110FD09 SIZE=191456
%SYSDIR%\DRIVERS\ULILAN.SYS [ULi Electronics Inc.] [ULi PCI Fast Ethernet Controller] MD5=564F1F82FB5C0249BE0CFEE4C826BE95 SIZE=28160
%SYSDIR%\DRIVERS\ultra.sys [Promise Technology, Inc.] [Gestionnaire de miniport ULTRA66 de Promise pour Windows NT] MD5=1B698A51CD528D8DA4FFAED66DFC51B9 SIZE=36736
%SYSDIR%\DRIVERS\wanatw4.sys [America Online, Inc.] [Wan Miniport (ATW)] MD5=0A716C08CB13C3A8F4F51E882DBF7416 SIZE=33588
%SYSDIR%\DRIVERS\HSF_CNXT.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=573736CC867F1CF10E0EB676CD590DD8 SIZE=726400
%PROGRAMFILES%\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll [Microsoft Corporation] [Messenger] MD5=56319E6B4D190A2DEB4463A9CE4D4F74 SIZE=66072
%COMMONFILES%\Skype\Skype4COM.dll [Skype Technologies] [Skype4COM] MD5=B608D23E4BC4DF3CB42EE2D69C24C8D1 SIZE=1934672

End of Report

Utilisateur anonyme · Answer

salut

tu n'as pas de parefeu , mets kério ici:
http://www.commentcamarche.net/telecharger/telecharger 206 kerio


aussi relance hijack clic sur do a scan only et coches ces lignes: 


-C:\WINDOWS\system32\vovubodc.exe
-O4 - HKLM\..\Run: [543fd6d5] rundll32.exe "C:\WINDOWS\system32\mcesnwoy.dll",b
-O4 - HKCU\..\Run: [xujxthuy] C:\WINDOWS\system32\vovubodc.exe



clic sur fix ensuite

bises

SteveF · Answer

mp???

SteveF · Answer

je n'ai rien nul part??? snif

Utilisateur anonyme · Answer

regarde la copie d'écran:
 http://www.cijoint.fr/cjlink.php?file=cj200804/cijg3KOtoj.bmp.

SteveF · Answer

alors en fait j'ai fait ce truc je reposte un hijack
pour checker car tjs tres lent au demarrage et meme apres un peu

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:10:57, on 25/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\FreePOPs\freepopsservice.exe
C:\Program Files\FreePOPs\freepopsd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\APPS\SMP\SmpSys.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxy-web.univ-paris4.fr/auto-proxy.pac 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3} - C:\WINDOWS\system32\byXQIApM.dll
O2 - BHO: (no name) - {6FF16126-BE80-4442-8FB7-0051CD21FC3C} - C:\WINDOWS\system32\khfccYOf.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by133fd.bay133.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: byXQIApM - C:\WINDOWS\SYSTEM32\byXQIApM.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: FreePOPs - Unknown owner - C:\Program Files\FreePOPs\freepopsservice.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

SteveF · Answer

je ne paie pas avast et j'ai refait un hijack je n'arrive pas a degager ce que tu m'as dit que puis faire?
voila le hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:57:56, on 25/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\FreePOPs\freepopsservice.exe
C:\Program Files\FreePOPs\freepopsd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\APPS\SMP\SmpSys.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxy-web.univ-paris4.fr/auto-proxy.pac 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {050C9493-A241-45F0-BCF1-5DE7A0098F55} - C:\WINDOWS\system32\khfccYOf.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3} - C:\WINDOWS\system32\byXQIApM.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by133fd.bay133.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: byXQIApM - C:\WINDOWS\SYSTEM32\byXQIApM.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: FreePOPs - Unknown owner - C:\Program Files\FreePOPs\freepopsservice.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

SteveF · Answer

alors nouveau topo... ;o)
J'ai telecharger Kaspersky viré avast 
que dois je faire maintenant...?!
en tout cas encore une fois merci pour ton aide (meme si le pb n'est pas encore resolu lol)

Infection virus trojan downloader help please

9 réponses

Votre réponse

Discussions similaires

Newsletters